Changelog for nagios-www-3.5.1-48.3.x86_64.rpm :

* Fri Mar 28 2014 larsAATTlinux-schulserver.de- fix stack-based buffer overflow in the cmd_submitf function in cgi/cmd.c - CVE-2014-1878 (bnc#864843) nagios-CVE-2014-1878.patch
* Fri Dec 27 2013 lruppAATTsuse.de- Fix possible denial of service in CGI executables:
* nagios-CVE-2013-7108.patch (bnc#856837)
* Tue Sep 24 2013 larsAATTlinux-schulserver.de- cleanup file list
* Wed Sep 11 2013 larsAATTlinux-schulserver.de- Recommend monitoring-tools package for those who want to convert their (real old) nagios configuration (using the subpackage from icinga)
* Thu Sep 05 2013 mlsAATTsuse.de- add libperl_requires, as we link against libperl and thus need a specific version of perl
* Fri Aug 30 2013 schneemannAATTb1-systems.de- update to 3.5.1: + Added handler for SIGXFSZ signal (Eric Stanley) + Fixed bug #444: Nagios 3.5.0 problem with macro $ADMINEMAIL$ : AATT is converted to %40 after 2 nagios reload (Duplicate of bug #407) + Fixed bug #407: Reloading nagios config causes spaces in notifications to become plus signs (Alexey Dvoryanchikov) + Fixed bug #445: Adding triggered downtime for child hosts causes a SIGSEGV on restart/reload (Eric Stanley) + Fixed bug #375: Freshness expiration never reached and bug #427: freshness threshold doesn\'t work if it is set long (Scott Wilkerson, Eric Stanley) + Fixed bug #432: Downtime scheduled as \"Nagios Process\" and not the Users name (Sam Lansing, Eric Stanley)
* Fri Jul 26 2013 thardeckAATTsuse.com- added icinga-monitoring-tools as recommend and removed the duplicated nagios files
* Fri Jun 28 2013 larsAATTlinux-schulserver.de- added nagios-CVE-2013-2214.patch fixing unauthorized host/service views displayed in servicegroup view (bnc#827020)
* Thu Jun 27 2013 larsAATTlinux-schulserver.de- fix permission problem on /usr/lib/nagios/plugins introduced with one of the latest updates
* Sun Mar 17 2013 larsAATTlinux-schulserver.de- adapt static html pages to reflect the current version