Debian Security Advisory 1883-2 - The previous nagios2 update introduced a regression, which caused status.cgi to segfault when used directly without specifying the 'host' variable. This update fixes the problem.
aea50dbf0f0cc940482bdf833e1a6968c13cf817e8c311dd451e904dd17e6204
Debian Security Advisory 1883-1 - Several vulnerabilities have been found in nagios2, ahost/service/network monitoring and management system.
6e440b48d4c410923ccd6b7ef36e82228cf34cf35e1d2b938e5ae5944fed419e
Mandriva Linux Security Advisory 2009-054 - Cross-site scripting (XSS) vulnerability in Nagios allows remote attackers to inject arbitrary web script or HTML via unknown vectors. The updated packages have been upgraded to the latest version of nagios to prevent this.
544c4685dc0a733c59dfbcf1a766af69dc7f1253439bcb798e1e8d1ca4292635