Fedora alert FEDORA-2014-5897 (nrpe)
From: | updates@fedoraproject.org | |
To: | package-announce@lists.fedoraproject.org | |
Subject: | [SECURITY] Fedora 20 Update: nrpe-2.15-2.fc20 | |
Date: | Wed, 19 Nov 2014 15:56:59 +0000 | |
Message-ID: | <20141119155706.076FA60C4500@bastion01.phx2.fedoraproject.org> |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2014-5897 2014-05-01 21:43:46 -------------------------------------------------------------------------------- Name : nrpe Product : Fedora 20 Version : 2.15 Release : 2.fc20 URL : http://www.nagios.org Summary : Host/service/network monitoring agent for Nagios Description : Nrpe is a system daemon that will execute various Nagios plugins locally on behalf of a remote (monitoring) host that uses the check_nrpe plugin. Various plugins that can be executed by the daemon are available at: http://sourceforge.net/projects/nagiosplug This package provides the core agent. -------------------------------------------------------------------------------- Update Information: Add patch to mitigate CVE-2014-2913 -------------------------------------------------------------------------------- ChangeLog: * Thu May 1 2014 Sam Kottler <skottler@fedoraproject.org> - 2.15.2 - Add patch to mitigate CVE-2014-2913 * Mon Jan 27 2014 Sam Kottler <skottler@fedoraproject.org> - 2.15.1 - Update to 2.15 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1089878 - CVE-2014-2913 nrpe: remote command execution when command arguments are enabled https://bugzilla.redhat.com/show_bug.cgi?id=1089878 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update nrpe' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-...