{"affected":[{"ecosystem_specific":{"binaries":[{"icinga":"1.13.3-12.3.1","icinga-devel":"1.13.3-12.3.1","icinga-doc":"1.13.3-12.3.1","icinga-idoutils":"1.13.3-12.3.1","icinga-idoutils-mysql":"1.13.3-12.3.1","icinga-idoutils-oracle":"1.13.3-12.3.1","icinga-idoutils-pgsql":"1.13.3-12.3.1","icinga-plugins-downtimes":"1.13.3-12.3.1","icinga-plugins-eventhandlers":"1.13.3-12.3.1","icinga-www":"1.13.3-12.3.1","icinga-www-config":"1.13.3-12.3.1","monitoring-tools":"1.13.3-12.3.1"}]},"package":{"ecosystem":"SUSE:Manager Client Tools 12","name":"icinga","purl":"pkg:rpm/suse/icinga&distro=SUSE%20Manager%20Client%20Tools%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.13.3-12.3.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"icinga":"1.13.3-12.3.1"}]},"package":{"ecosystem":"SUSE:Enterprise Storage 4","name":"icinga","purl":"pkg:rpm/suse/icinga&distro=SUSE%20Enterprise%20Storage%204"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.13.3-12.3.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for icinga fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2015-8010: Fixed XSS in the icinga classic UI (boo#952777)\n- CVE-2016-8641 / CVE-2016-10089: fixed a possible symlink attack for files/dirs created by root (boo#1011630 and boo#1018047)\n\n","id":"SUSE-SU-2018:3620-1","modified":"2018-11-05T16:57:03Z","published":"2018-11-05T16:57:03Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183620-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1011630"},{"type":"REPORT","url":"https://bugzilla.suse.com/1018047"},{"type":"REPORT","url":"https://bugzilla.suse.com/952777"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-8010"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-10089"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-8641"}],"related":["CVE-2015-8010","CVE-2016-10089","CVE-2016-8641"],"summary":"Security update for icinga","upstream":["CVE-2015-8010","CVE-2016-10089","CVE-2016-8641"]}