Running 'monit restart all' on command line gives an error 'Invalid action “action=restart”' Ubuntu 16.04.4

[Former user]

https://bugs.launchpad.net/ubuntu/+source/monit/+bug/1786910

(Is this fixed in a later version that hasn't been released for

Running 'monit restart all' on command line was working yesterday 13.8.2018 but after latest security patch was installed it gives an error 'Invalid action “action=restart”' Ubuntu 16.04.4 LTS monit: Installed: 1:5.16-2ubuntu0.1

One person commented in this thread:

I think all the problem is in the latest CVE-2016-7067.patch which features this change like this:

• "%s",
• "securitytoken=%s&action=%s",
• token,

the %s comes from a var which already has an "action=" in it

[Tildeslash]

It's a 3rd party bug - it seems either debian or ubuntu maintainer tried to backport the CSRF fix from monit 5.20.0 to their monit package base (5.16.0) and introduced this problem - the official monit release doesn't suffer with this problem.

The Ubuntu package maintainer should fix their patch or upgrade the monit to 5.21.0 or later.

[Tildeslash]

3rd party bug