Changelog for
nagios-theme-exfoliation-4.4.7-2.27.noarch.rpm :
* Thu Sep 15 2022 Lars Vogdt
- do not change ownership of resource_file (/etc/nagios/resource.cfg) during (re-)start: nagios does not have enough permissions to do it anyway. Fixes bsc#1192316 - thanks to Kai Lappalainen
* Fri May 13 2022 Andre Klaerner - 4.4.7 - 2022-04-14 FIXES
* Fixed checkboxes in jsonquery.html (#778) (Rfferrao87)
* Added SSL support for version update check (Sebastian Wolf)
* Note: NEB modules using the priority/scheduling queues in libnagios may need to update headers due to symbol conflicts with OpenSSL.
* Fixed XSS in homepage when displaying update check results (Sebastian Wolf)
* Fixed allocation error in getcgi.c (#820) (Ariadne Conill)
* Fixed Error: NULL variable for lines of spaces in resource.cfg (#814) (Ralf Herrmann)
* Fixed crash when handling large check output (#825, #828) (Kilvador)
* Update packaging instructions for RPM/EPEL (#850) (T.J. Yang)
* Include packaging instructions for DEB (#842) (Catfriend1)
* Fixed CGI object processing when names end in \\ (#819) (Sebastian Wolf)
* $SERVICEPROBLEMID$ now accessible when notifications are sent (#688) (Sebastian Wolf)
* Fri Oct 15 2021 Johannes Segitz - Added hardening to systemd service(s) (bsc#1181400). Modified:
* nagios-archive.service
* nagios.service
* Mon May 10 2021 larsAATTlinux-schulserver.de - 4.4.6- new nagios-exec-start-post script to fix bsc#1003362
* Mon May 10 2021 larsAATTlinux-schulserver.de - 4.4.6- fix nagios_upgrade.sh writing to log file in user controlled directory (bsc#1182398). The nagios_upgrade.sh script writes the logfile directly below /var/log/
* Wed Jun 03 2020 Stefan Botter - 4.4.6
* Fixed Map display in Internet Explorer 11 (#714)
* Fixed duplicate properties appearing in statusjson.cgi (#718)
* Fixed NERD not building when enabled in ./configure (#723)
* Fixed build process when using GCC 10 (#721)
* Fixed postauth vulnerabilities in histogram.js, map.js, trends.js (CVE-2020-13977, bsc#1172794)
* When using systemd, configuration will be verified before reloading (#715)
* Fixed HARD OK states triggering on the maximum check attempt (#757)
* Mon Apr 06 2020 larsAATTlinux-schulserver.de - 4.4.5- fix boo#1156309, CVE-2019-3698 : Symbolic Link (Symlink) following vulnerability in the cronjob allows local attackers to cause cause DoS or potentially escalate privileges by winning a race.- enhance systemd service: check nagios config before reloading- enable build for SLE11 by excluding some special macros and directories via \'sles_version != 11\' condition- add nagios-archive.service and nagios-archive.timer as replacement for the script in cron.weekly: no need for cron on systemd systems- run set_permissions and verifyscript for /etc/cron.weekly on those distributions that need it- enhance rpmlint: ignore empty htpasswd file- enable php apache module and not php5 on newer distributions- try to harden the rcnagios script
* Mon Feb 03 2020 Dominique Leuenberger - BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to shortcut through the -mini flavors.
* Fri Dec 20 2019 Stefan Botter - 4.4.5
* Reverted changes related to #625 due to CPU load issues
* Partially reverted changes for #647 due to CPU load issues
* Fixed \"Quick Search\" so that leading/trailing whitespace doesn\'t affect output (#681) (Sebastian Wolf)
* Fixed build issues on non-RPM-based platforms (#617) (T.J. Yang)- 4.4.4
* Fixed log rotation logic to not repeatedly schedule rotation on a DST change (#610, #626) (Jaroslav Jindrak & Sebastian Wolf)
* Fixed $SERVICEPROBLEMID$ to be reset after service recovery (#621) (Sebastian Wolf)
* Fixed defunct worker processes appearing after nagios was reloaded (#441, #620) (Sebastian Wolf)
* Fixed main nagios thread to release nagios.qh on a closed connection (#635) (Sebastian Wolf)
* Fixed semicolon escaping to remove prepended backslash (\\) (#643) (Sebastian Wolf)
* Fixed \'Checks of this host have been disabled\' message showing on passive-only hosts (#632) (Vojtěch Širůček & Sebastian Wolf)
* Fixed last_hard_state showing the current hard state when service status is brokered (#633) (Sebastian Wolf)
* Fixed long plugin output (>8KB) occasionally getting truncated (#625) (Sebastian Wolf)
* Fixed check scheduling for objects with large check_intervals and small timeperiods (#647) (Sebastian Wolf)
* Fixed SOFT recoveries sending when services had HARD recovery some time after host recovery (#651) (Sebastian Wolf)
* Fixed incorrect permissions on debugging builds of FreeBSD (#420) (Sebastian Wolf)
* Fixed NEB callback lists being partially orphaned when multiple modules subscribe to one callback (#590) (Sebastian Wolf)
* Fixed memory leaks in run_async_service_check(), run_async_host_check() when checks are brokered (#664) (Sebastian Wolf)
* Fixed potential XSS in main.php, map.php (#671, #672) (Jak Gibb)
* Removed NEB brokering for nagios daemonization, since daemonization occurs before NEB initialization (#591) (Sebastian Wolf)
* Wed Nov 13 2019 Ansgar Esztermann - compile with -ffat-lto-objects to prevent build failure