Lucene search

K
suseSuseOPENSUSE-SU-2017:0146-1
HistoryJan 16, 2017 - 7:14 p.m.

Security update for icinga (important)

2017-01-1619:14:55
lists.opensuse.org
35

0.929 High

EPSS

Percentile

99.0%

This update for icinga includes various upstream fixes and the following
security security fixes:

 - icinga was updated to version 1.14.0
 - the classic-UI was vulnerable to a cross site scripting attack
   (CVE-2015-8010, boo#952777)
 - A user with nagios privileges could have gained root privileges by
   placing a symbolic link at the logfile location (CVE-2016-9566,
   boo#1014637)