Changelog for nagios-www-dch-3.5.0-2.19.1.x86_64.rpm :

* Fri Jun 28 2013 larsAATTlinux-schulserver.de- added nagios-CVE-2013-2214.patch fixing unauthorized host/service views displayed in servicegroup view (bnc#827020)
* Sun Mar 17 2013 larsAATTlinux-schulserver.de- adapt static html pages to reflect the current version
* Sat Mar 16 2013 schneemannAATTb1-systems.de- update to 3.5.0: + Fixed bug #403: The \"configuration\" page of the webui doesn\'t use entity encoding when displaying the \"command expansion\" item (Eric Stanley, Phil Randal) + Fixed bug #424: Nagios Core 3.4.4 seg fault (core dump) on restart after removing config for running service (Eric Stanley) + Updated CGI utility functions to support UTF-8 characters (Eric Stanley) + Fixed bug where selecting Command Expansion from Configuration CGI page would display commands instead (Eric Stanley) + Fixed bug #369: status.cgi crashes with segfault when there are german ulauts (äöüß) in the hostname or the servicename (Eric Stanley) + Fixed bug #418: Scheduled Downtime Notifications Resent On Nagios Restart/reload (Eric Stanley
* Wed Mar 13 2013 larsAATTlinux-schulserver.de- general update for 12.1, 12.2 and 12.3 for bnc#809180
* Thu Feb 14 2013 larsAATTlinux-schulserver.de- provide \'monitoring_daemon\' in the init script to allow other init scripts to depend on it
* Sat Jan 12 2013 larsAATTlinux-schulserver.de- update to 3.4.4: + Fixed bug #408: service checks get duplicated on reload (Eric Stanley) + Added NULL pointer checks to CGI code. (Eric Stanley) + Fixed buffer overflow vulnerability in CGI code. Thanks to Neohapsis for finding this. (Eric Stanley)- refreshed patches
* Wed Jan 09 2013 larsAATTlinux-schulserver.de- added new subpackage nagios-www-dch (don\'t call home): + add plain html pages to allow users to disable PHP and loading of external references + re-added documentation (no external link any more)
* Tue Jan 01 2013 larsAATTlinux-schulserver.de- use new rpm macros for basic user-/groupadd commands: %%nagios_user_group_add %%nagios_command_user_group_add
* Mon Dec 17 2012 larsAATTlinux-schulserver.de- update to 3.4.3:
* Applied fix for pagination and sorting on status.cgi #381 (Phil Randal)
* Fixed issue where deleting a downtime could cause Nagios to crash (Eric Stanley)
* Corrected logic so that end times for flexible downtimes are calculated from the downtime start rather than the current time in the case where Nagios is restarted (Eric Stanley)
* Fixed issue introduced by fix for bug #124 where flexible downtimes are not taken into account on Nagios restart. (Scott Wilkerson, Eric Stanley)
* Fixed bug #247: If a service reports no performance data, the perfdata log file has no line indicating the test. (omnikronAATTfree.fr)
* Fixed link for unhandled unreachable host problems on tactical overview page (Rudolf Cejka)
* Fixed bug #345 with wild card searches not paging properly on status.cgi (Phil Randal)
* Fixed bug #343 on status.cgi where Service Group Summary can potentially show wrong totals (Mark Ziesemer)
* Fixed memory leaks on SIGHUP (Carlos Velasco)- refreshed patches- just require php not php5 to allow a switch to php53- do not compress logfiles per default to allow searching via webinterface- init script now uses daemonchk.cgi to check for status (if present)
* Mon Nov 26 2012 aeszterAATTgwdg.de- Use usermod instead of groupmod when suse_version > 1220 due to pwdutils/shadow switch.
* Tue Nov 20 2012 dimstarAATTopensuse.org- Fix useradd invocation: -o is useless without -u and newer versions of pwdutils/shadowutils fail on this now.
* Thu Oct 11 2012 larsAATTlinux-schulserver.de- add virtual provides \'monitoring_daemon\' and \'monitoring_webfrontend\' to allow 3rd party packages to run also with compatible solutions like icinga
* Sun Jun 10 2012 larsAATTlinux-schulserver.de- remove checks.c-declare-temp_buffer.patch again as this is fixed with the latest version- added manpages for {new,}mini_epn and convertcfg
* Sun Jun 03 2012 roAATTsuse.de- update to 3.4.1
* Double quotes in check_command definition break functionality (#332, reverts #86)
* Wed May 23 2012 larsAATTlinux-schulserver.de- run config check first before restart (init script)- ignore subsys-unsupported rpmlint check as the init script just removes it
* Mon May 07 2012 schneemannAATTb1-systems.de- update to 3.4.0
* Use execv() to execute active check commands (#86 - Ton Voon, dnsmichi)
* Added service_check_timeout_state configuration variable (Bill McGonigle)
* Permanently remove sleep on run_event == FALSE in main loop (Max )
* Reduce notification load by moving notification viability check into notification list creation (Opsview Team)
* Added code to apply allow_empty_hostgroup_assignment flag to host and service dependencies (Daniel Wittenberg)
* Users can now see hostgroups and servicegroups that contain at least one host or service they are authorized for, instead of having to be authorized for them all (Ethan Galstad)
* RSS feed boxes fallback if an error occurs (Ethan Galstad)
* RSS feeds no longer block main page load (Mike Guthrie) FIXES
* Fix $NOTIFICATIONRECIPIENTS$ macro to contain all contacts assigned to host|service, not only notified contacts (Bug #98 Matt Harrington)
* Scheduled Downtime Notifications Resent On Nagios Restart/reload (Bug [#124] - ricardo)
* NOTIFICATIONTYPE MACRO never became CUSTOM (Bug #168 - Alexey Dvoryanchikov)
* Plugged minor memory leaks in notification logic
* Wed Dec 07 2011 chrisAATTcomputersalat.de- fix p1.pl
* remove \"^M\" (antidos ;))
* Tue Nov 01 2011 larsAATTlinux-schulserver.de- skip fdupes call and ignore that we might save 4k on the disk => fixes bnc #721346- fix file permissions in docudir- use nagios-rpm-macros
* Fri Oct 07 2011 larsAATTlinux-schulserver.de- also check (and fix) the ownership of the directory where $status_file lives - Nagios uses this directory for temporary files
* Mon Aug 01 2011 schneemannAATTb1-systems.de- update to 3.3.1 FIXES
* Fixes status.cgi when called with no parameters, where host should be set to all if none specified (Michael Friedrich)
* Fixes possible validation error with empty hostgroups/servicegroups (Sven-Göran Bergh)
* Performance-data handling and checking is now thread-safe so long as embedded perl is not used.
* Children should no longer hang on mutex locks held in parent for localtime() (and similar) calls.
* Debug logging is now properly serialized, using soft-locking with a timeout of 150 milliseconds to avoid multiple threads competing for the privilege to write debug info.
* Fixed extraneous alerts for services when host is down
* Fixed incorrect parsing of multi-line host check results (Jochen Bern)
* Fixed bug with passive host checks being incorrectly sent to event brokers as active checks
* Fixed bug where passive host check status updates were not being propagated to event brokers
* Tue Jul 26 2011 andrea.turriniAATTgmail.com- fixed typos in nagios.spec
* Fri Jul 08 2011 larsAATTlinux-schulserver.de- removed setuid bit from /var/spool/nagios - configure the right permissions on service start instead- use the right STDERR in the cron script- cleanup files section
* Tue Jul 05 2011 larsAATTlinux-schulserver.de- integrated cron script from Daniel Kozar (bnc#701208)
* Mon Jul 04 2011 larsAATTlinux-schulserver.de- fixes in init script if check_external_commands are enabled- added nagios-3.2.3-CVE-2011-1523.patch to fix CVE-2011-1523 (bnc#682966)
* Sun Mar 13 2011 larsAATTlinux-schulserver.de- install /var/spool/nagios with setgroup bit set, so all new files in this directory belong to the command group (maybe we should use a permissions file for this?)
* Wed Oct 06 2010 larsAATTlinux-schulserver.de- update to 3.2.3: + Fixes problem where disabling all active hosts/services was not taking effect + Fixes for compiler warnings (code cleanup by Stephen Gran) + Fixes for format errors in event handler logging (Guillaume Rousse) + Fixed incorrect info in sample nagios.cfg file for state_retention_file (Michael Friedrich) + Fixed broker_event_handler() to return ERR if data is NULL (Michael Friedrich)- rebased all patches- adapted nagios-disable_phone_home.patch
* Mon Sep 20 2010 schneemannAATTb1-systems.de- removed unneeded filter \"permissions-directory-setuid-bit\" from nagios-rpmlintrc
* Tue Sep 07 2010 schneemannAATTb1-systems.de- cleaned spec and sources, removed unused patches from source
* Wed Sep 01 2010 schneemannAATTb1-systems.de- reworked phone-home patch
* Wed Sep 01 2010 schneemannAATTb1-systems.de- Update to nagios 3.2.2, excerpt from changelog: FIXES
* Fix for choosing next valid time on day of DST change when clocks go one hour backwards
* Fix for nagios now erroring when \"Error: Could not find any contactgroup matching...\" displayed
* Fix tap tests for Solaris 10 and newer versions of Test::Harness
* Fix for notifications not being sent out when scheduled downtime is cancelled (Daniel Pouzzner)
* Fix for first notification delay being calculated incorrectly, and notifications potentially going out early (Pawel Malachowski)
* Fix for text of scheduling downtime of all services on a host (Holger Weiss)
* Fix for services inheriting notification period from hosts if not defined (Gordon Messmer)
* Fix for incorrect service states on host failures (bug #130 Petya Kohts)
* Fix for incorrect service state attributes being set on host failures (bug #128 Petya Kohts)
* Fix for non-scheduled hosts and services not being updated in NDOUtils
* Fix for incorrect host state counts in status CGI when viewing servicegroups (bug #72)
* Fix for new Splunk integration query parameters (bug #136)
* Fix for extra field header in availability CSV export (bug #113)
* Fix for macro processing code modifying input string (Jochen Bern)
* Fix for event execution loop re-scheduling host checks instead of executing them if service checks are disabled (bug #152)
* Fix for segfaults on Solaris (Torsten Huebler)
* Fix for incorrect comment expiration times being passed to event broker (Mattieu Kermagot)
* Thu Jul 15 2010 larsAATTlinux-schulserver.de- back to the old file permissions (once again for clean nagios support)- readded nonsense stuff again- create/fix check_result_path if needed
* Fri Jul 09 2010 chrisAATTcomputersalat.de- fix file/dir perms o once again for centreon support- spec mods o sort TAGS o added lost Authors (description) o macros o remove nonsense stuff
* Thu Jun 24 2010 larsAATTlinux-schulserver.de- rebase phone-home patch
* Tue Jun 22 2010 larsAATTlinux-schulserver.de- recommend nagios-plugins only to avoid buildcycles
* Fri Jun 18 2010 larsAATTlinux-schulserver.de- fix init script: touch files if they do not exist-
* Fri May 28 2010 larsAATTlinux-schulserver.de- disable patch8 - needs rebasing- install PIDDIR if it\'s not /var/run to avoid owner problems during start- always change ownership of standard files to the right values
* Mon May 24 2010 larsAATTlinux-schulserver.de- fix \'Schedule downtime for this host and all services\' behavior (http://tracker.nagios.org/view.php?id=133)- fix typos resulting in non used style declarations (http://tracker.nagios.org/view.php?id=150)- fix deleting comments from the hashlist (http://tracker.nagios.org/view.php?id=80)- rebase nagios-p1.pl-location.patch- fix a handful compiler warnings- do not allow nagios to phone home: disable online_update_checks- fix command-group- BuildRequire net-tools for enabling WAP
* Fri May 14 2010 larsAATTlinux-schulserver.de- check_verbose now always prints the resulting logfile - this allows to see the warnings
* Tue May 11 2010 larsAATTlinux-schulserver.de- ghost the pid directory
* Wed May 05 2010 larsAATTlinux-schulserver.de- fix broken files section- init skript now handles /var/run on tmpfs- small adaptions of init skript- default pidfile now /var/run/nagios/nagios.pid- add manpages from Debian package- add Debian patches: + nagios-fix_forced_servicechecks.patch + nagios-fix_encoding_trends.cgi.patch + nagios-fix_spurious_dollar_signs_added_to_command_lines.patch
* Tue Apr 06 2010 chrisAATTcomputersalat.de- cleanup source o removed nagios-3.2.0
* Wed Mar 10 2010 larsAATTlinux-schulserver.de- update to 3.2.1: Enhancements: + Link to allow scheduling downtime for all services on a host + Speedup to CGIs when lots of comments or downtimes in status.dat file + Patch for new_mini_epn to allow for any command line length without breaking extra trailing or leading whitespace Fixes: + Fix for incorrect scheduling when time has gone back an hour (partial fix for 24x7) + Fix for logging test, which was not timezone aware (bug #0000077 - Allan Clark) + Fix for CSS validation of padding: X + Fix for documentation re: case-insensitive nature of custom variables (Marc Powell) + Fix for template configurations which use negated wildcards (Tim Wilde)
* Mon Nov 23 2009 cschneemannAATTsuse.de- changed path to send_nsca in the eventhandler script according to the path given in the nagios-nsca package. BNC #486937
* Fri Nov 06 2009 chrisAATTcomputersalat.de- added lost changes o Jun 24 2009 o Jun 23 2009- spec mods o removed changelog o added LEGAL to doc o simplify install of extra SOURCES- added support for centreon o centreon is frontend GUI for nagios o changed perms/ownership in files section
* Fri Aug 21 2009 chrisAATTcomputersalat.de- cleanup spec o fixed header o sorted TAGS- fixed deps o added missing Req nagios-plugins
* Fri Aug 14 2009 cschneemannAATTsuse.de- added Requires php and mod_php_any
* Thu Aug 13 2009 cschneemannAATTsuse.de- added ndo2db to Should-Start/Should-Stop in rcnagios changed permission of resource.cfg (needed by centreon) (Changes by chrisAATTcomputersalat.de)
* Wed Aug 12 2009 cschneemannAATTsuse.de- update to 3.2.0:
* Fix for read-only permissions bug in CGIs that caused problems viewing comments (bug #0000029)
* Fix for incorrect CGI reports (availability, trends, etc.) when reporting period spans Daylight Savings Time (bug #0000046)
* Fix for detection of truecolor support in GD library (Lars Hecking)
* Reverted to use --datadir configure script option instead of the more recently introduced --datarootdir option
* Status and retention files are now flushed/synced to disk to prevent incomplete information being displayed in CGIs
* Fix for incorrect next service check time calculation when Nagios is reloaded with different timeperiod ranges
* Updated Fedora quickstart guide to indicate PHP requirements
* Known issue: Service checks that are defined with timeperiods that contain \"exclude\" directives are incorrectly re-scheduled. Don\'t use these for now - we\'ll get this fixed for 3.4
* Wed Jun 24 2009 cschneemannAATTsuse.de- update to 3.1.2 - fixes bug in host/service schduling logic that caused excessive CPU usage introduced with 3.1.0
* Tue Jun 23 2009 cschneemannAATTsuse.de- update to 3.1.1
* New \"important check command\" flag for use in service templates, to aid configuration in distributed environments
* Fix for nagios validation error when no services defined
* Fix for stylesheet link
* Fix for extinfo.cgi error message when cgi.cfg doesn\'t exist
* Fix for notifications.cgi where Update button on right didn\'t retain host information when no host= was in query parameters
* Fix for potential bug where a contactgroup with no members could cause parsing errors
* Fix for W3 validation for history.cgi
* Fix for W3 validation for extinfo.cgi
* Fix for nagiostats to return non-zero with failures in MRTG mode
* Added t/ directory for tests. Use make test to run. Requires perl on development server
* Fix for duplicate event_id attributes in status and retention data
* Fix for duplicate unlink() during check processing
* Added missing check period column to host config display (CGI)
* Fix for embedded Perl initialization under FreeBSD
* Fix for incorrect re-initialization of mutext after program restart
* Fix for incorrect weighting in host flap detection logic
* Added libtap to distribution. Use ./configure --enable-libtap to compile
* nagios.log permissions are now kept after log rotation
* Fix for \"Max concurrent service checks (X) has been reached\" messages - will now push services 5 + random(10) seconds ahead for retry
* Fix for removing old HTML files for web frontend that are now replaced with PHP equivalents (in dex/main/side.html)
* Fix for incorrect service history link text in CGIs
* Fix for useless code loop in netutils.c
* Fix for potential divide by zero in event scheduling code
* Fix for trailing backslash in plugin output causing memory corruption in CGIs
* Fix for bug that could affect host/service scheduling during clock time skew or changes to time perod definitions between restarts
* Leading whitespace from continuation lines in configuration files is now stripped out
* Fix for bug where pipe (used by IPC) file descriptors get inherited by child processed (e.g. event handlers) (bug #0000026)
* Fix for failure to daemonize - Nagios now bails (bug #0000011)
* Fix for notifications about flapping starting not processed properly by retention data
* Patch to add transparency to statusmap icons for truecolor images
* Patch to add read-only permissions to extinfo CGI
* Security fix for statuswml.cgi where arbitrary shell injection was possible
* Fri Mar 27 2009 cschneemannAATTsuse.de- added check_verbose to rcnagios to print the error messages directly instead of pointing to the error_log BNC #486912
* Tue Mar 03 2009 cschneemannAATTsuse.de- changed rcnagios to delete control characters from values BNC #480747