Changelog for icinga-www-1.14.2-150500.2.49.x86_64.rpm :

* Wed Jun 05 2019 lruppAATTsuse.de - 1.14.2- recommend monitoring-plugins instead of nagios-plugins (bsc#1114483)- added icinga-1.14.2_-_improve_error_handling.patch: + Fix crashes when some external APIs fail GH#1608- added icinga-1.14.2_-_fix_duration_after_passing_from_soft_to_hard.patch: + fix duration after passing from soft to hard GH#1609
* Wed Dec 20 2017 thardeckAATTsuse.com- update to upstream version 1.14.2
* Again, this only affects source installations. Packages are safe.
* Don\'t change ownership of STATEDIR
* Change --with-tmp-{file,path} to default to $localstatedir instead of /tmp
* Tue Dec 19 2017 thardeckAATTsuse.com- update to upstream version 1.14.1
* #1601 & #1604: CVE-2017-16882: Fix source installation permissions (packages are not affected)
* #8 & #1578 Remove \"are stale\" log entries
* #1603 Fix SOFT recovery for services
* #7 Feature/initd run with precache
* #1599 & #1600 No host alerts included in alert summary report of type \"Most Recent Alert\"
* #1595 Fix database upgrade to 1.13.0 with old schema- the package was never affected by CVE-2017-16882 - bsc#1068870
* Fri Dec 01 2017 larsAATTlinux-schulserver.de- fix a possible symlink attack for files/dirs created by root fixes CVE-2016-8641 (bsc#1011630 and bsc#1018047)- the update to 1.14.0 also fixed boo#952777- remove the pre-configured administrative account with fixed password for the WebUI - CVE-2016-0726 (boo#961115)
* Thu Nov 23 2017 rbrownAATTsuse.com- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)
* Fri Feb 03 2017 thardeckAATTsuse.com- remove dedicated systemd scripts and use the default init scripts again because of issues with the implementation. Ido2db crashed when the icinga service was restarted (bnc#1023400)- remove obsolete icinga-fix-systemd-services.patch- remove RHEL readme
* Mon Jan 09 2017 thardeckAATTsuse.com- update to upstream version 1.14.0
* Classic UI: Remove attribute based authorization (cgiauth.cfg is not parsed anymore)
* IDO: Remove deprecated config options
* Feature #3175: Add command \"Acknowledge problem for this host and its services\"
* Feature #10684: Help Icinga2 User to use command expansion in Classic-UI
* Bug #13709: CVE-2016-9566: Root priviledge escalation during log file opening
* Bug #10453: Icinga Classic-UI 1.13.3 and older are vulnerable to XSS - CVE-2015-8010
* Bug #882: trends.cgi segfaults
* Bug #6831: Remove broken attribute-based authorization
* Bug #9157: Only timestamp and \"Return code of 255 is out of bounds\" in icinga.log
* Bug #9409: Add sources for jquery-ui and install minified versions only
* Bug #9750: Classic UI is showing inaccurate value to retry_interval
* Bug #9847: max filename length reached for config file paths
* Bug #10453: Icinga Classic-UI 1.13.3 and older are vulnerable to XSS - CVE-2015-8010
* Bug #10633: status.cgi doesn\'t honor host/servicegroup filter once allproblems option is set
* Bug #11044: configure tries to process obsolete .in file
* Bug #11048: cgi/cgiutils.c NULL value with segfault in
* Bug #11221: trends.cgi segfault while reading log files
* Bug #11732: Classic UI hides menu items (JQuery 1.11, Debian/Ubuntu)
* Bug #11929: config.cgi notification_period link has a typo
* Bug #12007: Fix icinga2 Host state notification entries in compat log to interpret states properly
* Bug #13709: CVE-2016-9566: Root priviledge escalation during log file opening
* Bug #13745: Spelling errors
* Bug #13747: make fullinstall doesn\'t call install-webconf-auth
* Bug #13749: Update README for icinga.com- fix icinga source url
* Fri Jun 24 2016 larsAATTlinux-schulserver.de- package all README files to avoid broken symlink from README to README.md
* Wed Jul 15 2015 thardeckAATTsuse.com- update to upstream version 1.13.3
* Bug #7337: Only use SCHEDULE_HOST_DOWNTIME command for Icinga 2.x
* Bug #8130: Wrong values for percent_
* when using hostgroup in availability report
* Bug #9020: Solaris package behaves badly upon uninstall
* Bug #9106: Icinga no longer sending acknowledgement notifications
* Bug #9240: invalid JSON for flapping threshold configuration
* Tue May 26 2015 thardeckAATTsuse.com- prevent changing of tmp_path permissions (bnc#923928)- update to upstream version 1.13.2
* Bug #9010: icinga.spec: broken path to downtimes scripts and not packaged config files
* Tue Apr 07 2015 thardeckAATTsuse.com- update to upstream version 1.13.1
* Bug #8986: wrong fd initilization preventing checks using file descriptors
* Tue Mar 31 2015 thardeckAATTsuse.com- update to upstream version 1.13
* Remove deprecated event_profiling_enabled from icinga.cfg
* Remove deprecated broker_module from icinga.cfg (use module object configuration instead)
* Add module config examples in modules/ directory (livestatus, mod_gearman, pnp4nagios, flapjack)
* Move contrib/downtimes to tools/downtimes and add \'make install-downtimes\'
* Feature #1867: Recurring Downtimes
* Feature #6353: deprecate icinga.cfg:broker_module; add more module examples
* Feature #8007: Implement an option to disable transactions
* Feature #8139: Add functions for registering file descriptors closed on fork()
* Feature #8140: Add Check Result List Mutex for NEB modules
* Feature #8426: Remove constraint from
*dependencies tables
* Feature #8440: Enhance idomod logging
* Bug #6263: Race condition in init.d scripts\' stop
* Bug #6762: Icinga crashes when \"args\" attribute is not specified for modules
* Bug #7004: GET form param has no effect on cmd.cgi acks (again)
* Bug #8202: Cool tip text for refresh of hosts and services says \"I\'m so lonely up here. Where should I go?\"
* Bug #8441: require the \'config_file\' argument in idomod modules configuration
* Bug #8445: cmd.cgi use_ack_end_time param does not enable tickbox in form
* Bug #3305: Duplicate service definitions are not generating a config validation error
* Thu Feb 19 2015 thardeckAATTsuse.com- update to upstream version 1.12.2
* Bug #3305: Duplicate service definitions are not generating a config validation error
* Docs - Bug #7801: Add a minified js library for the html docs
* Tue Feb 17 2015 larsAATTlinux-schulserver.de- fix systemd service alias
* Thu Jan 29 2015 thardeckAATTsuse.com-update to upstream version 1.12.0
* core/idoutils: Populate long_output column on notification history neb events #7362 - MF
* classic ui: start with unhandled problems view instead of TAC #4817 - MF
* classic ui: Adding alias to title in host/service overview #5900 - WN
* classic ui: Add display of extra icons in status overview of hosts and services #6829 - RD/RB
* classic ui: Add config option to set Sticky Acknowledgment checkbox default #6237 - CF
* classic ui: Add config option to sort status data by default #5965 - RB
* classic ui: Add sorting of comments and downtimes #5339 - RB
* classic ui: Add link to online documentation #6606 - RB
* idoutils: Add program_version column to programstatus table #7390 - MF
* idoutils: Extend size of column \'alias\' for MySQL tables hosts & contacts #6382 - MF
* idoutils: Import \'is_json\' for custom vars into schema (Icinga 2) #7568 - MF
* classic ui: Fix grammatical errors in popup text #7451 - CF
* classic ui: Fix order of hosts and service checks in tac.cgi #6965 - RB
* idoutils: check for undersized data-packets and ignore them to eliminate null transactions to the database #4221 - CF
* initscript: Correct bash-specific syntax in startup script #7450 - CF
* spec: Use versioned dependencies in the RPM spec file #7017 - GB
* core/idoutils: Populate long_output column on notification history neb events #7362
* idoutils: Add program_version column to programstatus table #7390
*
* required for Icinga Web 2 and Icinga 2
* idoutils: \'alias\' column is now TEXT in MySQL #6382
* idoutils: Import \'is_json\' for custom vars into schema (Icinga 2) #7568
* Wed Jan 28 2015 larsAATTlinux-schulserver.de- add Alias=monitoring_daemon.service to systemd file to have a similar virtual provides like in the old times- rebased icinga-1.11.7-fix-bashisms.patch
* Sat Dec 20 2014 ledestAATTgmail.com- fix bashism in scripts- add patches:
* icinga-1.11.7-fix-bashisms.patch
* Sat Dec 13 2014 ledestAATTgmail.com- fix bashisms in post scripts
* Thu Dec 04 2014 larsAATTlinux-schulserver.de- use a bash script for rcicinga to integrate some additional options from old sysvinit script (check, check_verbose)
* Thu Nov 27 2014 thardeckAATTsuse.com- remove patch source condition
* Thu Nov 20 2014 thardeckAATTsuse.com- restrict apache conf patch only to openSUSE 13.1 since it seems to be the only affected version- renamed icinga-fix-apache-issues-by-using-old-conf.patch to icinga-workaround-131-apache-conf-issue.patch
* Fri Nov 14 2014 thardeckAATTsuse.com- use icinga-fix-apache-issues-by-using-old-conf.patch only for openSUSE 13.1 and older versions