Hello community,
here is the log from the commit of package nagios for openSUSE:Factory checked in at 2014-04-15 11:46:47
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/nagios (Old)
and /work/SRC/openSUSE:Factory/.nagios.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "nagios"
Changes:
--------
--- /work/SRC/openSUSE:Factory/nagios/nagios.changes 2014-03-30 12:19:37.000000000 +0200
+++ /work/SRC/openSUSE:Factory/.nagios.new/nagios.changes 2014-04-15 11:46:48.000000000 +0200
@@ -1,0 +2,11 @@
+Sat Apr 12 14:04:27 UTC 2014 - lars@linux-schulserver.de
+
+- update to 4.0.5:
+ + Fixed bug #595: Nagios 4 security fix
+ + Fixed bug #594: Nagios 4 fix contactgroups parsing
+ + Fixed bug #577: Nagios 4 checks stalled when write to socket failed
+ + Fixed bug #580: Nagios 4 memory leak
+ + Fixed bug where audio alerts wouldn't work with a 0 height and
+ width - http://support.nagios.com/forum/viewtopic.php?t=26387
+
+-------------------------------------------------------------------
Old:
----
nagios-4.0.4.tar.bz2
New:
----
nagios-4.0.5.tar.bz2
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ nagios.spec ++++++
--- /var/tmp/diff_new_pack.wOf4rK/_old 2014-04-15 11:46:49.000000000 +0200
+++ /var/tmp/diff_new_pack.wOf4rK/_new 2014-04-15 11:46:49.000000000 +0200
@@ -17,7 +17,7 @@
Name: nagios
-Version: 4.0.4
+Version: 4.0.5
Release: 0
Summary: The Nagios Network Monitor
License: GPL-2.0+
++++++ nagios-4.0.4.tar.bz2 -> nagios-4.0.5.tar.bz2 ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/nagios-4.0.4/Changelog new/nagios-4.0.5/Changelog
--- old/nagios-4.0.4/Changelog 2014-03-14 18:24:57.000000000 +0100
+++ new/nagios-4.0.5/Changelog 2014-04-11 20:37:42.000000000 +0200
@@ -2,6 +2,17 @@
Nagios Core 4 Change Log
########################
+4.0.5 - 04/11/2014
+------------------
+* Fixed bug #595: Nagios 4 security fix (Alexey Dvoryanchikov, Eric Stanley)
+* Fixed bug #594: Nagios 4 fix contactgroups parsing (Alexey Dvoryanchikov, Eric Stanley)
+* Fixed bug #577: Nagios 4 checks stalled when write to socket failed (Alexey Dvoryanchikov)
+* Fixed bug #580: Nagios 4 memory leak (Eric Stanley)
+* Fixed init script to remove the switching of users when performing configuration verification which was causing failures if nagios user was set to nologin (Scott Wilkerson)
+* Fixed auto creation of RAMDISK via environment variables in init script to properly check existence using $RAMDISK_DIR environment variable. (Scott Wilkerson)
+* Fixed unreferenced variable NagiosVarDir in daemon-init (Eric Mislivec)
+* Fixed bug where audio alerts wouldn't work with a 0 height and width - http://support.nagios.com/forum/viewtopic.php?t=26387 (Scott Wilkerson)
+
4.0.4 - 03/14/2014
------------------
ENHANCEMENTS
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/nagios-4.0.4/base/checks.c new/nagios-4.0.5/base/checks.c
--- old/nagios-4.0.4/base/checks.c 2014-03-14 18:24:57.000000000 +0100
+++ new/nagios-4.0.5/base/checks.c 2014-04-11 20:37:42.000000000 +0200
@@ -308,7 +308,7 @@
my_free(processed_command);
clear_volatile_macros_r(&mac);
- return OK;
+ return runchk_result;
}
@@ -2107,7 +2107,7 @@
clear_volatile_macros_r(&mac);
my_free(processed_command);
- return OK;
+ return runchk_result;
}
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/nagios-4.0.4/base/notifications.c new/nagios-4.0.5/base/notifications.c
--- old/nagios-4.0.4/base/notifications.c 2014-03-14 18:24:57.000000000 +0100
+++ new/nagios-4.0.5/base/notifications.c 2014-04-11 20:37:42.000000000 +0200
@@ -259,9 +259,13 @@
*/
clear_summary_macros_r(&mac);
clear_contact_macros_r(&mac);
+ clear_contactgroup_macros_r(&mac);
clear_argv_macros_r(&mac);
clear_host_macros_r(&mac);
+ clear_hostgroup_macros_r(&mac);
clear_service_macros_r(&mac);
+ clear_servicegroup_macros_r(&mac);
+ clear_datetime_macros_r(&mac);
if(type == NOTIFICATION_NORMAL) {
@@ -1202,8 +1206,11 @@
*/
clear_summary_macros_r(&mac);
clear_contact_macros_r(&mac);
+ clear_contactgroup_macros_r(&mac);
clear_argv_macros_r(&mac);
clear_host_macros_r(&mac);
+ clear_hostgroup_macros_r(&mac);
+ clear_datetime_macros_r(&mac);
if(type == NOTIFICATION_NORMAL) {
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/nagios-4.0.4/base/workers.c new/nagios-4.0.5/base/workers.c
--- old/nagios-4.0.4/base/workers.c 2014-03-14 18:24:57.000000000 +0100
+++ new/nagios-4.0.5/base/workers.c 2014-04-11 20:37:42.000000000 +0200
@@ -683,7 +683,11 @@
if (error_reason) {
logit(NSLOG_RUNTIME_ERROR, TRUE, "wproc: %s job %d from worker %s %s",
wpjob_type_name(job->type), job->id, wp->name, error_reason);
+#ifdef DEBUG
+ /* The log below could leak sensitive information, such as
+ passwords, so only enable it if you neally need it */
logit(NSLOG_RUNTIME_ERROR, TRUE, "wproc: command: %s\n", job->command);
+#endif
if (job->type != WPJOB_CHECK && oj) {
logit(NSLOG_RUNTIME_ERROR, TRUE, "wproc: host=%s; service=%s; contact=%s\n",
oj->host_name ? oj->host_name : "(none)",
@@ -999,7 +1003,8 @@
kvvec_destroy(env_kvvp, KVVEC_FREE_KEYS);
}
else {
- kvvec_addkv(&kvv, "env", env_kvvb->buf);
+ kvvec_addkv_wlen(&kvv, "env", strlen("env"), env_kvvb->buf,
+ env_kvvb->buflen);
}
}
}
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/nagios-4.0.4/cgi/status.c new/nagios-4.0.5/cgi/status.c
--- old/nagios-4.0.4/cgi/status.c 2014-03-14 18:24:57.000000000 +0100
+++ new/nagios-4.0.5/cgi/status.c 2014-04-11 20:37:42.000000000 +0200
@@ -440,7 +440,7 @@
else if(problem_services_unknown == 0 && problem_services_warning == 0 && problem_services_critical == 0 && problem_hosts_down == 0 && problem_hosts_unreachable == 0 && normal_sound != NULL)
sound = normal_sound;
if(sound != NULL) {
- printf("