group.of.nepali.translators team mailing list archive

[Launchpad Bug Tracker <1690380@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package nagios3 - 3.5.1.dfsg-2.1ubuntu5.2

---------------
nagios3 (3.5.1.dfsg-2.1ubuntu5.2) zesty-security; urgency=medium

  * SECURITY REGRESSION: event log cannot open log file (LP: #1690380)
    - debian/patches/CVE-2016-9566-regression.patch: relax permissions on
      log files in base/logging.c.
    - debian/nagios3-common.postinst: fix permissions on existing log file.

 -- Marc Deslauriers <marc.deslauriers@xxxxxxxxxx>  Tue, 06 Jun 2017
07:28:33 -0400

** Changed in: nagios3 (Ubuntu Zesty)
       Status: In Progress => Fix Released

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2016-9566

** Changed in: nagios3 (Ubuntu Xenial)
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1690380

Title:
  "Cannot open log file '/var/log/nagios3/nagios.log' for reading" error
  from nagios web UI when view alert history etc.

Status in nagios3 package in Ubuntu:
  In Progress
Status in nagios3 source package in Trusty:
  In Progress
Status in nagios3 source package in Xenial:
  Fix Released
Status in nagios3 source package in Yakkety:
  In Progress
Status in nagios3 source package in Zesty:
  Fix Released
Status in nagios3 source package in Artful:
  In Progress

Bug description:
  Ubuntu 16.04.2 LTS
  nagios3 and nagios3-cgi 3.5.1.dfsg-2.1ubuntu1.1

  If install nagios3 package and then view Alert History, Notification
  History or Events pages (and maybe others), e.g.:

  http://localhost/cgi-bin/nagios3/history.cgi?host=localhost

  Then get the following error in place of the information that should
  be there:

  Error: Cannot open log file '/var/log/nagios3/nagios.log' for reading!

  This issue:

  https://github.com/NagiosEnterprises/nagioscore/issues/303

  ...suggests that this is caused by the fix for CVE-2016-9566:

  https://github.com/NagiosEnterprises/nagioscore/commit/ff22fd0de4938781edcbd48512d2494ca3c9c41a

  ...which has been back ported to 3.5.1.dfsg-2.1ubuntu1.1 according to:

  https://launchpad.net/ubuntu/xenial/+source/nagios3/+changelog

  The permissions and ownership of nagios.log are:

  $ ls -l /var/log/nagios3/nagios.log
  -rw------- 1 nagios adm 189 May 12 13:45 /var/log/nagios3/nagios.log

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nagios3/+bug/1690380/+subscriptions