The nagios package has been patched to fix the following issues:
Improper sanitization of RSS feed input enables unauthenticated remote read and write of arbitrary files (CVE-2016-9565).
Unsafe logfile handling allows unprivileged users to escalate their privileges to root (CVE-2016-9566).