Changelog for monit-5.34.0-150400.1.1.x86_64.rpm :

* Thu Aug 15 2024 marecAATTdetebe.org- Update to version 5.34.0 New:
* Added the timeout option to the exec action. It can be set either globally (in the set limit statement using the execTimeout option) or locally (using the timeout seconds in the exec action). The default timeout is 0 (no limit), to keep the original behaviour. Thanks to Lutz Mader.
* Issue #1074: Added a hardlink test to file, directory and fifo checks. Thanks to Lutz Mader. Example: check directory upload with path /data/upload if hardlink > 32000 then alert
* Issue #1070: Added the system boot time and uptime to the XML interface. Thanks to Lutz Mader.
* Added support to add Monit to M/Monit hostgroup (requires M/Monit 4.2.2 or later). Example: set mmonit https://monit:mypasswordAATTmmonit.foo.bar:8443/collector with hostgroups [ Oslo, \"Mail servers\" ]
* Add support for checking the output of a program for changes. This can be used to alert on changes of system properties, e.g. ip route or udisksctl status. Thanks to Christian Goettsche. Example: check program myscript with path /usr/local/bin/myscript.sh if content changed then alert if content not changed then alert else ignore
* Implemented ignore functionality within the test success action, enabling the suppression of alerts when the check returns to a successful state. Thanks to Christian Goettsche.
* Set the header X-Content-Type-Options to prevent MIME type sniffing. Thanks to Christian Goettsche.
* Added support for debugging TLS/SSL connections with Wireshark. It is now possible to set the SSLKEYLOGFILE= environment variable when starting Monit, to log the master secret to a file, which can be used by Wireshark in \"Settings -> Protocols -> TLS -> (Pre)-Master-Secret log filename\". Note: The SSLKEYLOGFILE functionality is enabled only in the monit debug mode (when monit was started with the -v option). Fixed:
* Issue #1082: Wrong error message for the uptime test. Thanks to Lutz Mader.
* Disable SSL session renegotiation in the Monit HTTP interface (CVE-2011-1473).
* Monit reported wrong number of CPUs in the VMWare virtual host in Debian 12.x
* Issue #1086: The HTTP protocol test may return false error HTTP error: invalid chunk size if the HTTP response contained header with more then 511 bytes. We have increased the limit to 8192 bytes per header and will report response header exceeded maximum size error if the HTTP response contains longer header.
* When the monit ID is generated in first start and the system is shut down before the file was stored to the filesystem, an empty monitid file may be created. Thanks to Alexander Dahl for fix.
* The SSL connection can be sporadically interrupted.
* Issue #1101: Updated configuration examples for PAM in the Monit manual. Thanks to Lutz Mader.
* The network test was failing on WSL (Windows subsystem for Linux).
* Make network interface speed statistics optional (monit used to report link failure when statistics were not available) and do not report/check if statistics are not available.
* Wed Sep 06 2023 marecAATTdetebe.org- Update to version 5.33.0 New:
* Added click-jacking protection headers to Monit HTTP GUI (the SAMEORIGIN iframe is allowed). Fixed:
* Issue #1035: If the start, stop or restart program statement contains the equal sign, which is not followed by a space character, the configuration is not parsed correctly.
* Issue #1047: If the MariaDB server doesn\'t allow access to the host, from which Monit test is running, Monit reported: Invalid handshake packet sequence id -- not MySQL protocol.
* Add the missing responsetime option to the ping test.
* Tue Apr 26 2022 michaelAATTstroeder.com- Update to version 5.32.0 (too many changes to be listed here, see https://mmonit.com/monit/changes/)
* Sun Oct 25 2020 mardnhAATTgmx.de- Update to version 5.27.1 Fixed:
* Require that the program in a \'check program\' statement exist on Monit startup.
* Linux: Monit procmatch failed to show all matching processes if a non-root user ran Monit.
* The CAP_SYS_RESOURCE capability was needed to be able to monitor filedescriptors usage of other processes if Monit was not started as root.
* Remove trailing white space from collected process name
* Fixed a race condition in Monit\'s HTTP interface on reload when SIGHUP were sent many times to the Monit process.
* Monit could crash when sending heartbeat status to M/Monit.
* If SSL certificate verification failed and certificate valid days test was enabled, Monit could report the following false positive: certificate expiry in 0 days matches check limit. Changed:
* Use ISO 8601 format timestamp in log files.
* Tue Jun 30 2020 mardnhAATTgmx.de- Update to version 5.27.0 New features:
* The SSL version: auto now defaults to TLSv1.2 and TLSv1.3 only.
* Support for MySQL TLS encryption.
* Support for MySQL 8.x default authentication method, caching_sha2_password.
* The username in the mysql protocol test was limited to 16 bytes, this limit was removed.
* Linux: Support for monitoring a process\'s filedescriptor usage.
* Linux, OpenBSD, FreeBSD, DragonflyBSD, MacOS: Added support for monitoring of system-wide filedescriptors usage.
* You can now set a list of allowed TLS protocol
* Optionally split certificate chain and key for the Monit HTTPS interface.
* Linux: Enable monitoring of per-process disk read and write I/O operations.
* Linux: Added generic per-process I/O activity monitoring
* Linux: monitor detailed CPU statistics for nice, hardirq, softirq, steal, guest, guestnice.
* FreeBSD, OpenBSD, NetBSD, DragonflyBSD MacOS: Added CPU nice and interrupt usage statistics.
* Linux: Added support for VxFS filesystem statistics.
* Added year to the timestamp when monit logs to its own log file
* Add STARTTLS support to the IMAPS protocol test on port 143. Fixes:
* Issue #519: Monit could crash if a file check with restart on content match was used and this file had dependant services.
* Issue #867: If Monit was linked with musl libc, it could crash when executing programs. Thanks to Rich Felker for report.
* Monit incorrectly added CPU wait% to system CPU usage (the CPU is idle when it\'s in the wait state, waiting for the I/O to complete).
* The per-process I/O statistics on Linux, AIX, DragonflyBSD, NetBSD and Solaris always displayed 0 activity.
* Issue #843: Linux: Monit reported wrong memory usage in LXC container if the ZFS filesystem was used. Monit now use MemAvailable on Linux when calculating memory usage for more accurate statistics. Thanks to Joe LeVeque for patch.
* Issue #831: The HTTP protocol test returned unknown transfer encoding HTTP error if either the content or checksum test was used and the HTTP server didn\'t set the Content-Length header nor used chunked transfer encoding.
* Issue #880: If Monit was linked with AddresSanitizer, it could crash when it generates an MD5 hash.
* Issue #879: The HTML interface didn\'t escape strings that are part of Monit\'s configuration file.
* Issue #872: Monit\'s procmatch table can now display pids with up to 8 digits. Previously, pids where truncated after 5 digist
* Issue #891: The repeat option to an action was limited to 256 cycles.
* Issue #851: Linux and AIX: The length of the string that describes the process name and its arguments was limited to 4kB, so monit procmatch might not find the process if the string was longer and unique after 4Kb. This limit has been removed on Linux and raised on AIX to 8kB.
* Issue #840: Network check: superfluous alerts if link is down.
* Issue #886: Monit\'s command-line options are now position independent.
* If Monit is linked with AddresSanitizer and a custom configuration file was passed via the -c option, monit could crash.
* MQTT protocol test.
* Issue #907: The onreboot nostart had no effect when a service was newly added to Monit\'s configuration or the statefile was removed.
* The PostgreSQL test was flapping with the following error if connection via unix socket was used: PGSQL: connection terminator write error -- Broken pipe- Update patch:
* monit-better_default_monitrc.patch
* Thu Aug 08 2019 mardnhAATTgmx.de- Introduce monit-bash-completion subpackage- Update to version 5.26.0 New features:
* Allow any characters including space in a service name if the name is enclosed in quotes.
* The load average test has a new option; per core to test load average per CPU core. That is, loadavg/cores. Fixes:
* Wrong free value (-1) on filesystem with missing free inodes statistics (such as CEPH).
* Start delay is now in effect just on first Monit start after machine reboot.
* TLSv1.3 support detection during compile time- Update to version 5.25.3 Fixes:
* The HTTP protocol test may log SSL read errors and the content/checksum test may fail when the server sends chunked encoded response.
* $HOST doesn\'t work in the \"name\" part of the \"from:\" in mail-format message.
* The \"stop\" action for \"check program\" had no effect if the \"every\" statement was used to skip monitoring in some cycles.
* if the ping test target is a hostname which resolves to multiple IPs, Monit didn\'t try the next IP if the first one failed and returned error.
* Monit may crash if \"unmonitor\" or \"stop\" action was triggered by some test
* Monit CLI status command doesn\'t work if only read-only credentials is present in the \'set httpd\' statement.
* Radius protocol test regression from 5.25.2.
* check process: The exec action\'s environment contains invalid value for MONIT_PROCESS_
* variables.
* The CPU user/system/wait statistics may show negative value if the system counter jumps back or wraps.
* XSS vulnerabilitty: HTML escape the log file content when viewed via Monit GUI. Thanks to Zack Flack for report.
* Buffer over-read vulnerability in URL decoding for specially crafted URLs.- Update to version 5.25.2 New features:
* Added a bash completion script for monit command-line. Fixes:
* If the space usage test was used with an absolute value and the monitored filesystem was not mounted on boot, monit would stop with an error during configuration parsing.
* Slow Monit reload when triggered in the middle of a poll cycle.
* If a process is terminated when Monit collects process information, calculation of resource usage could become incorrect.
* Collect system statistics even if process statistics failed (independent).
* Reduce the state file related overhead
* Thu Dec 14 2017 chrisAATTcomputersalat.de- remove double Req of %insserv_prereq
* Wed Dec 13 2017 chrisAATTcomputersalat.de- fix for boo#1072692
* monit: unable to start
* add systemd monit.service file
* still support SysVinit (SLE_11)- update to 5.25.1
* https://mmonit.com/monit/changes/- rebase patches
* monit-better_default_monitrc.patch
* monit-rundir.patch- format specfile- more use of macros
* Thu Nov 23 2017 rbrownAATTsuse.com- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)
* Fri Apr 21 2017 liedkeAATTrz.uni-mannheim.de- update to 5.22: + New: Linux: Added support for monitoring ZFS disk activity. + New: Added option to explicit specify if the HTTP method HEAD or GET should be used in a HTTP protocol test. If not specified, HEAD will be used unless a content or a checksum test is also specified, in which case GET is used instead. The default is normally what you want, but now you have the option to specificially use GET instead of HEAD. + New: File, Directory, Fifo checks: Added support for explicit testing access, change and modification time properties. If the type is not specified, the original timestamp test is performed, which checks the latest of ctime and mtime. It is also possible to use newer and older operators in the test now. + New: Renamed the statement, set logfile to set log . + Fixed: Linux: If the monitored filesystem was not found in /proc/diskstat, Monit could leak filedescriptors. + Fixed: Solaris on SPARC: Monit didn\'t trigger an event if a protocol test failed. + Fixed: Systemd template for Monit: Added StandardOutput=null option to prevent systemd to duplicate Monit log output. + Fixed: Monit cross-compilation + Fixed: configure --without-zlib + Fixed: If the connection test required STARTTLS, the certificate valid days test was broken. + Fixed: Compile on MacOSX 10.6.x - 10.9.x. + Fixed: HTTP protocol test: Allow using a request string in addition to path, to monitor e.g. a HTTP proxy. + Fixed: If connection or ping test repetition is set, log partial failures with warning priority instead of error. + Fixed: Linux: Support rootfs ramdisk. + Fixed: Connection retry was broken and performed the test only once with no retry on error. + Fixed: Linux: Subtract ZFS ARC size from the system memory usage. + Fixed: SSL certificate validity test and checksum test didn\'t work for self-signed certificates.
* Fri Mar 17 2017 liedkeAATTrz.uni-mannheim.de- update to 5.21: + New: We have added a set of new tests that you can use to monitor and check the performance of your file-systems and disks. Disk i/o metrics are also displayed in the Monit GUI and CLI. M/Monit 3.7.0 can be used to view statistics and charts. + New: We have also added disk i/o tests and metrics for each process. Available metrics depends on the platform. + New: You can now use NFS/CIFS/SSHFS/etc. connection strings as path for filesystem checks. + New: Report filesystem type in status output + New: Extended existence test to not only test if an object does not exist, but also the inverse, to test if an object does exist. + New: You can now set the SSL/TLS version to be used by the Monit HTTP interface. The syntax follows the general SSL/TLS options settings, which was introduced in Monit 5.15. + New: It is now possible to set the SSL/TLS ciphers Monit\'s HTTP server should use. + New: The certificate minimum valid days test now triggers the timestamp event instead of connection event. + New: M/Monit: show MacOS version instead of Darwin kernel version. + New: Show textual representation of filesystem flags instead of numeric. + Fixed: A lot of bugs.
* Wed Mar 15 2017 dimstarAATTopensuse.org- PreReq %insserv_prereq: we install legacy SyS-V init scripts and need to handle them. It\'s our own duty to ensure the legacy toolchain is present.
* Fri Nov 04 2016 liedkeAATTrz.uni-mannheim.de- update to 5.20: + New: Added gzip compression support to the HTTP GUI. + New: Added gzip compression when communicating with M/Monit. + New: Added global set onreboot statement which allows to set a default service startup policy (the default is onreboot start). + New: Added new timeout options to the set limits statement: + New: The cpu, memory, swap, inode and space tests now allows using decimal values when testing percent usage. + New: Set the HOME environment variable when executing program as other user. + Fixed: CSRF vulnerability (CVE-2016-7067). (boo#1007455) + Fixed: A lot of bugs.- update to 5.19: + New: Monit HTTP: support for IPv6 added. + New: Monit HTTP GUI: it is now possible to listen on both TCP and unix sockets. + New: apache-status protocol test: + New: Added Basic Authentication support to the HTTP protocol test. + Fixed: A lot of bugs.
* Mon Jun 27 2016 liedkeAATTrz.uni-mannheim.de- update to 5.18: + New: Monit console commands now output text in tables and in colors. Your terminal must support UTF-8 and colors. For best rendering of tables, we recommend using a fixed width font in your terminal such as Menlo for non-ascii fonts. Please see this FAQ entry to learn how to setup your console to support UTF-8 character encoding. + New: A new CLI command was added for succinct reporting and to make it easy to query Monit from scripts: monit report [options]. Without option, prints a short overview of the state of all services managed by Monit. + New: Environment variable MONIT_SERVICE was added to check program scripts. The variable contains the name of the service (from monitrc) for which the program is executed. + New: A new onreboot statement was added for controlling service startup on reboot. + New: The old mode statement is reduced to active and passive. Where active mode provides automatic restart of service on error, while passive does not, and only provide alerts. Active mode is the default mode. The third mode, manual, is deprecated and replaced by onreboot laststate. The manual mode is still supported for backward compatibility. + New: Test for checking system uptime. Can be used to test the uptime of the system (boot time) and perform an action. + New: Added >= and <= as operators for use in comparison tests. + New: All errors will be listed if a service has multiple errors. Previously, Monit displayed only the last error. + Fixed: A lot of bugfixes...
* Mon Apr 11 2016 liedkeAATTrz.uni-mannheim.de- update to 5.17.1: + Fixed: Monit crashed when trying to deliver alert by mail if monit set alert was configured, but the set mail-format statement was missing (regression in Monit 5.17).- update to 5.17: + New: Extended the SMTP protocol test to support STARTTLS in addition to SMTPS. Thanks to Robert Nelson for initial patch. + New: The SMTP protocol test can now, optionally, perform authentication during testing. Just add username and password if you want to test that authentication also works. We recommend using smtps if authentication is to be performed to encrypt the communication. + New: Support extended e-mail format when specyfing from and reply-to addresses. That is, instead of just the email address you can also specify the name of the user. + New: A new environment variable MONIT_PROGRAM_STATUS was added to check program to allow scripts called from exec to access the check programs last exit status. + Fixed: The include statement now check if a file has already been included to prevent circular or recursive inclusion of files. + Fixed: Reinitialize supplementary user groups in an exec action when executing as a different user. + Fixed: The value in if changed checksum and if changed timestamp has been made persistent across Monit restart/reload. If the value changes while Monit is stopped, Monit will now notice. + Fixed: Related to Issue #316 above, we now also save file size, filesystem flags, file/directory/fifo/filesystem permissions, network link speed so the last known values will be persistent and if changed tests will work as expected across a Monit restart/reload. + Fixed: favicon did not display properly in the Browser when Monit was behind a reverse HTTP proxy. + Fixed: Monit CLI actions like monit monitor all could fail if you had more than ~ 50 services in your config file. + Fixed: The send/expect protocol test returned error if the target server sent more data than the buffer limit. + Fixed: On 32-bit platforms with more then 4GB of RAM, Monit reported incorrect system and swap memory values (regression in Monit 5.16). + Fixed: Save state on exit when monit is executed in non-deamon mode.
* Fri Mar 18 2016 jgleissnerAATTsuse.com- monit-rundir.patch: use /run/monit for pid file (bnc#971647)- updated monit-better_default_monitrc.patch to set pid file correctly in /etc/monitrc
* Tue Feb 09 2016 liedkeAATTrz.uni-mannheim.de- update to 5.16: + New: Added a new statement for overriding default limits used by Monit. + New: Issue #276: Allow specific source address for port and ping tests. + New: Issue #205: Enhanced process check with a new thread counts test. + New: Issue #280: Timestamp tests now reports both the old and the new (changed) timestamp in alerts. + New: Issue #299: Show the last output of the program check when running monit status from the console. + New: Issue #275: monit --version now shows the compile-time features that were enabled at build time. + New: Issue #282: Added support for setting a custom URL path with apache-status protocol test. + New: Changed responsetime for port and unixsocket tests to microseconds precision. + New: Added support for DragonFly BSD. Thanks to Daniel Bilik. + Fixed: A lot of bugfixes
* Mon Jan 25 2016 liedkeAATTrz.uni-mannheim.de- update to 5.15: + New: Added a statement for setting global or local SSL/TLS options. + New: Added option to verify SSL server certificates. + New: Support SSL client certificate authentication for SSL connections. + New: To just connect using SSL/TLS without specifying a protocol, you can now use SSL instead of the former type TCPSSL statement (which is deprecated). + New: SSL certificate expiration test. + New: Extended SSL certificate fingerprint (checksum) test with the SHA1 hash type in addition to the existing MD5 test. + New: Extended the ping test to optionally allow setting a packet size (default is 64 bytes) + New: The ping tests now report network response time in milliseconds rather than in seconds. + New: PAM and SSL support are now optional when building Monit RPM. + Fixed: The File content match test will move the read-cursor to the end of the file the first time a file is added to Monit. + Fixed: Support for OpenSSL 0.9.8 + Fixed: Abbreviated file permission error message (otherwise the message, which was rather long, could get truncated in logs and become unintelligible). + Fixed: Only add the User-Agent HTTP header if it is not already set. Also allow single quotes in addition to double quotes around header values. + Fixed: If a check host statement contains no if-tests, emit a more comprehensible error message. + Fixed: Do not log \"Error reading pid from ...\" for non-process checks on stop/restart. + Fixed: Monit could freeze for a period when performing a ping test. + Fixed: Do not cascade start action to dependant services if only parent start was requested. + Fixed: Implement hard dependency between services. If a service depends on another service, it will not start until the parent service check returns no errors. For example, if Apache depends on MySQL, Monit will not start Apache until MySQL is confirmed up and running and passes all its tests. Previously, Monit would start MySQL, but not wait for MySQL to be confirmed up and running before it started Apache. + Fixed: The HTTP protocol test paused Monit for a few seconds if a content match test was used and the server sent a response using chunked encoding. + Fixed: Monit no longer exit if it fails to fork. This is debatable, but for Monit\'s use-case we think it is better to try and continue. + Fixed: Monit leaked file descriptors if program execution failed. Don\'t forget the shebang #! at the beginning of your script + Fixed: Monit stopped on reload if the control file did not end with an empty newline. + Fixed: With OS X El Capitan, Apple introduced a new System Integrity Protection policy (SIP) which, among other things, block the system call, task_for_pid.We now check to see if SIP is enabled and if it is, we do not call task_for_pid so as not to unnecessary fill system logs with errors. This also means that Monit, on El Capitan, can no longer check a process memory and CPU usage as task_for_pid was needed to get this information. + Fixed: Executing a command with a timeout larger than 2147 seconds would fail on 32-bit systems. + Fixed: Mask out SSLv3_client_method() in case SSLv3 support is not available + Fixed: SSL SNI is optional, so do not log as error if not supported by server + Fixed: SSL client certificate authentication with Monit\'s HTTP interface + Fixed: Access to resources via secondary group membership when executing a program with a different UID + Fixed: Slow start/stop/restart/monitor/unmonitor actions on FreeBSD- update to 5.14: + New: Enable HTTP Strict Transport Security (HSTS), ECDH ciphers and disable IDEA ciphers on Monit HTTP interface if TLS/SSL is used. + New: Simpler system-wide cpu usage test (total of user%, system%, wait%). + New: Added options for the command-line commands monit status and monit summary to only print status for a named service or a named service group. + New: Log client address in case of HTTP request errors + New: Report Monit version in the start/stop (instance) message + Fixed: MySQL test might produce \"HOST blocked because of too many connection errors\".- update to 5.13: + New: Added support for free space and free inodes monitoring as an inverse alternative to current space/inodes consumption monitoring. Both forms, with absolute number of bytes and with percent are supported. + New: Added support for Server Name Indication to support testing connection to name based virtual SSL servers. + Security: SSL/TLS compression has been disabled, as well as RC4 and DES ciphers. + Fixed: Monit will no longer try to check hostnames on start-up to start faster, in case DNS is not available at start time. + Fixed: Filesystem uid, gid and permission as reported by monit status command. + Fixed: If the monit CLI command failed, the error description could contain HTML in addition to plaintext. + Fixed: RPM will now preserve an existing monitrc configuration file on update. + Fixed: OS X system memory usage statistics included wrongly inactive memory (i.e. memory that is available for reuse). + Fixed: FreeBSD, OpenBSD, NetBSD: System memory usage statistics did not include the wired part (kernel memory).- update to 5.12.2: + Fixed: Monit could freeze if an error occurred during SSL read or write. + Fixed: If Monit was started with the HTTP interface disabled, the CLI could crashed when executing a command. + Fixed: Network check: support for IP alias [Linux and Solaris]- update to 5.12.1: + New: Allow selecting IPv4 or IPv6 explicit for port and ping tests. + Fixed: The Upstart script needed to stop Monit earlier in the shutdown sequence when the system stops to prevent a possible race conditions + Fixed: Monit may crash if the hostname of the system failed to resolve. + Fixed: UDP connection test could fail on a dual-stack host (IPv4 and IPv6) if the UDP service listens on IPv4 only. + Fixed: Only show first line of program output in the Monit dashboard. + Fixed: Monit skipped the connection test if no start program was specified.- update to 5.12: + New: Support for IPv6 hosts testing. + New: Monit HTTP interface now supports Unix Socket as an alternative to TCP port for easier deployment on virtualization platforms which share the IP address for containers, such as Docker. Thanks to Alberto Miorin for suggesting this feature. + New: The space usage test now ignore reserved blocks. Previously, Monit excluded reserved blocks from the free space, so it reported 100% usage as soon as all non-super user accessible blocks were allocated, whereas the filesystem may still have some space available for root user (usually 1-5%). The space usage test value will now match the output of utilities like df. + New: File permission change test added. Thanks to Ulrich Windl for suggesting this feature. + New: Support for multiple existence tests (in process, file, directory and fifo check contexts) + New: Support for multiple fsflag tests (in filesystem check context): + New: Monit\'s HTTP interface now provides even more details about failed HTTP requests + Fixed: Fix speed monitoring for 10Gb/s+ interfaces [Linux] + Fixed: Network total upload and download values could be invalid for certain time frames.- update to 5.11: + New: Monit now supports monitoring of network interfaces. + New: Sieve protocol test implemented. + New: The PID and PPID change tests are no longer implicit and automatically executed. + New: Multiple PID and PPID tests can now be used. + Fixed: The CLI/GUI reported port timeout value in milliseconds instead of seconds. + Fixed: Changed memory kilobytes total title to memory total as the unit is dynamic since Monit 5.9. + Fixed: OpenBSD: don\'t narrow the 64-bit time_t on 32-bit build (Y2038 problem). + Fixed: If the the test is on hold due to the every option schedule, display last status instead of Waiting. + Fixed: If ping is not allowed (insufficient permissions), display value as N/A instead of negative response time. + Fixed: If the not every option matched, the test was skipped only once per minute.
* Deleted: monit-dirs.patch
* Updated: monit.spec
* Sat Nov 29 2014 lmuelleAATTsuse.com- update to 5.10: + New: Redis protocol test added. + New: MongoDB protocol test added. + New: Changes due to vulnerabilities in SSLv2 and SSLv3. See CVE-2014-3566 aka \"POODLE\". + Fixed: Issue #101: Manual-mode monitored services state may not be restored if the monitoring state was changed by user right before the system died. + Fixed: Issue #104: Keep umask Monit was started with when executing start/stop/restart programs, check programs and creating files. + Fixed: Issue #107: Support multi-line response in the LMTP protocol test. + Fixed: Support TLSv1.1 and TLSv1.2 when FIPS is enabled.- update to 5.9: + New: Output from your check program script is now displayed in Monit’s UI. + New: Aggregate and use human friendly units for memory, swap and space usage values in the User Interface. + New: Support monitoring of filesystems by generic device strings such as sshfs on Linux or ZFS filesystems on Solaris. + New: You can now send HTTP headers with the HTTP protocol test. + New: Program check now supports exit status change monitoring. + New: Added option to run check program as a different user and/or group. + New: Changed name of ICMP ECHO statement to Ping which is the more common name used for a network ping. + New: Simplified HTTP and SMTP protocol test with SSL. + Fixed: Issue #59, Issue #88: Some systems with upstart (e.g. RHEL/CentOS) had problems with Monit\'s restart action which consists of a stop/start sequence. + Fixed: Issue #54: MySQL protocol test. + Fixed: Issue #64: Resets counter once a service has successfully restarted + New: Issue #84. You can now test for \'\\0\' in an expect string. + Fixed: Issue #55: Only run cron style checks once per minute. + Fixed: Issue #78: Include open slots in Apache status check calculations + Fixed: Issue #57: Inode usage check and space usage check now show correct result for large filesystems on 32-bit platforms. + Fixed: Issue #70: Removed newline in Monit\'s $ENV strings + Fixed: Issue #72: Monit no longer requires a start, stop or restart program defined for a check. + Fixed: P.R. #17: Bug fix, missing \"check file\" target files result in error \"Invalid checksum\" sha1 has a string length of 40. + Fixed: P.R. #18: Add missing space in the timeout text in UI. + Fixed: Issue #71: Subtract SLAB reclaimable memory from the system memory usage on Linux + Fixed: Support TLSv1.1 and TLSv1.2 in \"set mailserver\" + Fixed: Sporadic \"PPID changed from 0 to ...\" alert after process restart + Fixed: PID/PPID changed events were sometimes triggered after program restart + Fixed: Linux: filesystem space usage on some network based filesystems such as sshfs + Fixed: Automatically reload Monit if ID was reset using --resetid CLI option. + Fixed: Improved speed of send/expect protocol test + Fixed: Fixed SMTP protocol test to check the response code
* Sat Nov 29 2014 lmuelleAATTsuse.com- Remove /var from path in rpmlintrc of the .monit.id file.- Package /run only on post-11.1 systems.
* Sat Nov 29 2014 lmuelleAATTsuse.com- Modify shebang to point to bash where bash is required in vendor-files/tools/monit-modifyinittab.tmpl- Align used SUSE trade name in the vendor-files.