Back Linuxsecurity

Fedora 43 nagios-plugins Heap Overflow Security Advisory 2026

Linuxsecurity •LinuxSecurity Advisories • September 12, 2026

Share: View original

Keep your Linux systems secure and up to date with practical patching guidance. Review Linux Patching Best Practices ×

Nagios is a program that will monitor hosts and services on your

network, and to email or page you when a problem arises or is

resolved. Nagios runs on a Unix server as a background or daemon

process, intermittently running checks on various services that you

specify. The actual service checks are performed by separate "plugin"

programs which return the status of the checks to Nagios. This package

contains those plugins.

Update to upstream (bz#2453492). check_icmp: host-count overflow leads to heap buffer overflow (bz#2513957) Update 0012-fix-perl-ntp-ipv6.patch to allow uppercase hostnames (bz#2500542) Added perl-Math-BigInt as dependency for nagios-plugins-ssl_validity (bz#2439960)

* Mon Aug 24 2026 Ján ONDREJ (SAL) - 2.5-2 - Added perl-Math-BigInt as dependency for nagios-plugins-ssl_validity (bz#2439960) - Update 0012-fix-perl-ntp-ipv6.patch to allow uppercase hostnames (bz#2500542) * Mon Aug 24 2026 Ján ONDREJ (SAL) - 2.5-1 - Update to upstream (bz#2453492) - Fix check_icmp: host-count overflow leads to heap buffer overflow in setuid-root binary (bz#2513957) - Remove RHEL7- support - Add dependency on openssl3-devel for fedora-45+ (bz#2504361) * Thu Jul 16 2026 Fedora Release Engineering - 2.4.12-6 - Rebuilt for * Fri Jun 12 2026 Yaakov Selkowitz - 2.4.12-5 - Rebuilt for openssl 4.0

[ 1 ] Bug #2439960 - nagios-plugins-ssl_validity should require perl-Math-BigInt [ 2 ] Bug #2453492 - nagios-plugins-2.5 is available [ 3 ] Bug #2500542 - check_ntp.pl: hostname regex missing case-insensitive flag after IPv6 refactor [ 4 ] Bug #2513957 - check_icmp: host-count overflow leads to heap buffer overflow in setuid-root binary

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-7ac5fb031f' at the command line. For more information, refer to the dnf documentation available at

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Heap Overflow Vulnerability in Fedora Nagios Plugins A heap overflow vulnerability has been identified in the Nagios plugins for Fedora 43 and 44, affecting systems running these versions. The vulnerability arises from a host-count overflow in the check_icmp plugin, which can lead to a heap buffer overflow in a setuid-root binary. This issue has been documented under bug reports bz#2513957 and bz#2453492. Users are advised to update their systems to mitigate this risk. The vulnerability has been confirmed and patches are available for installation via the 'dnf' update program. The affected versions are Fedora 43 and 44, with specific updates released on August 24, 2026. The advisory emphasizes the importance of keeping systems up to date to prevent exploitation. As of now, there is no indication of active exploitation in the wild. 2 sources 46

Extracted Entities

Fedora 43 nagios-plugins Heap Overflow Security Advisory 2026

The full story

Extracted Entities

CWE Weaknesses (1)

Platforms (2)

Tools (1)