openSUSE Recommended Update: nagios: Update to 3.5.0 and several fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0530-1 Rating: low References: #809180 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for nagios: - bnc#809180: - adapt static html pages to reflect the current version - update to 3.5.0: + The "configuration" page of the webui doesn't use entity encoding when displaying the "command expansion" item + Nagios Core 3.4.4 seg fault (core dump) on restart after removing config for running service + Updated CGI utility functions to support UTF-8 characters + Fixed bug where selecting Command Expansion from Configuration CGI page would display commands instead + status.cgi crashes with segfault when there are german ulauts (äöüß) in the hostname or the servicename + Scheduled Downtime Notifications Resent On Nagios Restart/reload - provide 'monitoring_daemon' in the init script to allow other init scripts to depend on it - update to 3.4.4: + service checks get duplicated on reload + Added NULL pointer checks to CGI code. + Fixed buffer overflow vulnerability in CGI code. - refreshed patches - added new subpackage nagios-www-dch (don't call home): + add plain html pages to allow users to disable PHP and loading of external references + re-added documentation (no external link any more) - use new rpm macros for basic user-/groupadd commands: %%nagios_user_group_add, %%nagios_command_user_group_add - update to 3.4.3: + Applied fix for pagination and sorting on status.cgi + Fixed issue where deleting a downtime could cause Nagios to crash + Corrected logic so that end times for flexible downtimes are calculated from the downtime start rather than the current time in the case where Nagios is restarted + Fixed issue introduced by fix for bug #124 where flexible downtimes are not taken into account on Nagios restart. + If a service reports no performance data, the perfdata log file has no line indicating the test. + Fixed link for unhandled unreachable host problems on tactical overview page + Fixed bug #345 with wild card searches not paging properly on status.cgi + Fixed bug #343 on status.cgi where Service Group Summary can potentially show wrong totals + Fixed memory leaks on SIGHUP - refreshed patches - just require php not php5 to allow a switch to php53 - do not compress logfiles per default to allow searching via webinterface - init script now uses daemonchk.cgi to check for status (if present) - Use usermod instead of groupmod when suse_version > 1220 due to pwdutils/shadow switch. - Fix useradd invocation: -o is useless without -u and newer versions of pwdutils/shadowutils fail on this now. - add virtual provides 'monitoring_daemon' and 'monitoring_webfrontend' to allow 3rd party packages to run also with compatible solutions like icinga Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-249 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): nagios-3.5.0-2.15.1 nagios-debuginfo-3.5.0-2.15.1 nagios-debugsource-3.5.0-2.15.1 nagios-devel-3.5.0-2.15.1 nagios-www-3.5.0-2.15.1 nagios-www-dch-3.5.0-2.15.1 nagios-www-debuginfo-3.5.0-2.15.1 - openSUSE 12.2 (noarch): nagios-rpm-macros-0.06-2.8.1 References: https://bugzilla.novell.com/809180