NEWS 49 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882
  1. This file documents the major additions and syntax changes between releases.
  2. 2.5.13 2024-10-07
  3. FIXES
  4. check_ssh: Fixed issue where the remote-protocol flag was not functioning correctly
  5. 2.4.12 2024-08-20
  6. FIXES
  7. check_snmp: Handle snmp IpAddress responses (#759)
  8. check_icmp: Uncheck return values of set*id() family functions (#746)
  9. 2.4.11 2024-08-01
  10. FIXES
  11. check_dig: Fixed issue where exact matching broke backwards compatability, and added new option to enforce exact matching (#777)
  12. check_swap: Allow the plugin to run without warning/critical thresholds (#747)
  13. 2.4.10 2024-04-30
  14. FIXES
  15. check_mailq: Add config directory option and update pattern matching for exim mailservers (#754)
  16. check_icmp: Very minor change to plugin output
  17. TESTS
  18. Update majority of the test suite to working condition
  19. 2.4.9 2024-03-21
  20. FIXES
  21. check_snmp: Robustly fixes incorrect integer return value parsing (#749)
  22. 2.4.8 2023-12-7
  23. FIXES
  24. check_snmp: Fixed issue where Timeticks would incorrectly show "No valid data returned" (#743)
  25. 2.4.7 2023-11-16
  26. FIXES
  27. check_ntp.pl: Fix warning/critical threshold information missing from performance data output (#735)
  28. check_ntp.pl: Fix issues when NTP server has a positive time offset (#734)
  29. check_snmp: Fixed issue where plugin returned OK for missing OID (#679)
  30. check_snmp: Fixed issue where OID name with numeric data was misinterpreted as OID value (#720)
  31. 2.4.6 2023-08-01
  32. FIXES
  33. check_log: Fixed issue where /tmp directory would fill with unnecessary information (#724)
  34. check_mailq: Correctly handle "Mail queue is empty" when monitoring Postfix over SSMTP (#611)
  35. check_oracle: Reduce false positives when looking for "OK" messages (#723)
  36. utils: Fix compiler warnings (#583, #637)
  37. 2.4.5 2023-06-01
  38. FIXES
  39. check_dns: Fix buffer overflow on Ubuntu 22.04 (#699)
  40. check_sensors: Use grep instead of deprecated egrep (#697)
  41. check_tcp: Add --sni as an alias to -N (#701)
  42. check_by_ssh: Prevent users from using ProxyCommand/LocalCommand/PermitLocalCommand (./configure --with-unrestricted-ssh-options=yes to re-enable)
  43. build: fix bug when using VPATH builds (#700)
  44. 2.4.4 2023-04-14
  45. FIXES
  46. check_log: improve file readability test to accommodate CAP_DAC_READ_SEARCH and similar (#604)
  47. check_mrtgtraf: fix incorrect out_pct performance data metric (#600)
  48. check_ping: handle "bad checksum" warning from ping output (#616)
  49. 2.4.3 2023-01-17
  50. FIXES
  51. check_dig: Improve matching logic when using -a (#652)
  52. check_mailq: Fix garbled output when checking postfix (#663)
  53. 2.4.2 2022-11-08
  54. FIXES
  55. check_ntp/check_ntp_time: Fix calculation bug introduced in 2.4.1 (#677)
  56. 2.4.1 2022-10-25
  57. FIXES
  58. check_ntp_time: Ensure -W/-C (stratum warning/critical thresholds) are available as short options (#661)
  59. check_icmp: Fix "Invalid Argument" errors on FreeBSD 13.1 (#659)
  60. check_icmp: Fix address binding in ipv6 (#666)
  61. check_ntp/check_ntp_time: Fixed errors when compiling with strict aliasing (#665)
  62. check_ifstatus: Fixed issue where OID 1.3.6.1.4.1.9.2.2.1.1.28 was queried on systems that didn't support it (#650)
  63. check_smtp: Fix regression when using STARTTLS (#649, #648, #651)
  64. check_log.sh: Use temporary files to fix diffing for high-throughput logs (#566)
  65. Fixed several compile errors for upcoming clang-16 (#670)
  66. 2.4.0 2021-11-18
  67. ENHANCEMENTS
  68. check_http: Add -o option (Append page body as performance data) (#615) (Tobias Leich)
  69. check_icmp: Add -f and -F perfdata options (#567)
  70. check_ifstatus: Add -d option (exclude interfaces by description regexp) (#548) (Alexandre Anriot)
  71. check_smtp: Add support for SMTP over TLS (#565) (Franz Schwartau)
  72. check_snmp: Add -M to multiply results by a given factor (#559) (Scott Baker)
  73. FIXES
  74. lib: _np_state_calculate_location_prefix() should return non-void when running under suid (Kris Shannon)
  75. pst3.c: Fix build issue on Solaris (#537)
  76. check_by_ssh: Fix return code when ssh or the shell itself fails (#618) (Guillaume Rousse)
  77. check_disk: Fix false DISK CRITICAL alerts on btrfs systems (#569) (George Hansper)
  78. check_log: Fix error message for systems that don't use bash (#539)
  79. check_log: Fix linebreaks in documentation (#621) (Matt Capra)
  80. check_mysql_query: Fix use-after-free (#602) (Simon F)
  81. negate: Errors are now printed directly to stderr instead of being redirected to stdout (#571) (Geert Hendrickx)
  82. 2.3.3 2020-03-11
  83. FIXES
  84. check_http: Fix several issues related to page length calculation (#535, #533, #536)
  85. check_icmp: fix issues when not running in debug mode (#530)
  86. 2.3.2 2020-02-20
  87. FIXES
  88. build: Fix broken builds on some systems, including Homebrew (#508)
  89. check_disk: Change unit calculations to always use binary units for backward compatibility (#518)
  90. check_dns: Improve error messaging for "connection timed out" and "connected refused" cases (#503) (Barak Shohat)
  91. check_http: Fix host:port syntax when using -H (#514) (Isaac White)
  92. check_icmp: All performance data tags should show when packet loss is 100% (#510)
  93. check_icmp: Fix incorrect status when run against multiple hosts (#520)
  94. check_mailq: Fix nullmailer regular expression to recognize minutes and seconds properly (#522)
  95. check_ntp_peer: Fixed improper performance data by setting LC_NUMERIC to 'C' (#526)
  96. check_ntp_time: Fixed improper performance data by setting LC_NUMERIC to 'C' (#526)
  97. check_ping: Fixed inconsistent timeout behavior (#323, #419) (Barak Shohat)
  98. perl dependencies: updated the included Module::Build to work with newer versions of perl (#505)
  99. 2.3.1 2019-12-09
  100. FIXES
  101. check_icmp: Fixed backward-compatibility issue with performance data (#480)
  102. 2.3.0 2019-12-04
  103. Note: nagios-plugins 2.3.0 introduced a backward-compatibility issue for performance data graphs produced by check_icmp.
  104. Anyone upgrading from an older version of nagios-plugins should upgrade directly to >=2.3.1.
  105. ENHANCEMENTS
  106. Added a plugin "remove_perfdata" to remove perfdata from another plugin's output
  107. Added a plugin "check_ssl_validity" which verifies a certificate through CRL or OCSP
  108. Added directory plugins-python containing three Python plugins
  109. check_apt: Add --only-critical switch
  110. check_apt: Add --packages-warning (Marc Sánchez)
  111. check_disk: Add --combined-thresholds to alert on a percentage AND raw units.
  112. check_disk: Add --inode-perfdata to get extra performance data from inode statistics
  113. check_disk: Add support for base-10 units kB, MB, GB, TB; rename base-2 units to KiB, MiB, GiB, TiB
  114. check_disk_smb: Add configfile feature
  115. check_disk_smb: Added additional smb support
  116. check_disk_smb: Allow non-latin characters in names (Konstantin Shalygin)
  117. check_file_age: Use extended plugin output to show one file per line
  118. check_http: New parameter `--verify-host` will check if -H hostname matches the SSL certificate
  119. check_icmp: Add Jitter, MOS, Score (Alessandro Ren)
  120. check_ldap: Add support for checking LDAP cert age (Guillaume Rousse)
  121. check_mailq: Add mailq -C option for config dir or config file
  122. check_mailq: Add option for opensmtpd (brigriffin)
  123. check_mailq: Add support for opensmtpd
  124. check_mysql_query: Add --character-set flag
  125. check_ntp: Add --delay flag to circumvent DOS detection
  126. check_ntp: Add --allow-zero-stratum flag
  127. check_ntp_time: Add --delay flag to circumvent DOS detection
  128. check_ntp_time: Add support for monitoring stratum of timesources
  129. check_oracle: Add support for Oracle XE databases (Peter Athaks)
  130. check_ping: plugin output will now include hostname and IP address
  131. check_pgsql: Add --print-query flag
  132. check_procs: Add FreeBSD jail support (Mathieu Arnold)
  133. check_procs: Allow process to be excluded from check_procs (Marcel Klein)
  134. check_procs: Additional performance data metrics (azthec)
  135. check_radius: Add calling-station-id (cejkar)
  136. check_smtp: Add --proxy flag for PROXY protocol (Patrick Uiterwijk)
  137. check_smtp: Add support for --sni (Arkadiusz Miśkiewicz)
  138. check_snmp: Add --strict flag to ensure returned OID matches -o.
  139. check_swap: Add --no-swap flag (Mario Trangoni)
  140. check_ups: Add check for battery runtime left (gino0631)
  141. lib: Added warning_string/critical_string to struct thresholds for storing originally parsed strings
  142. ssl_utils: Added certificate expiry data in OK status (check_http, check_smtp, check_tcp) (Matt Capra)
  143. FIXES
  144. build: Fix ax_with_python not crashing on Python3 (Michael Orlitzky)
  145. build: fix configure.ac for FreeBSD SWAPFORMAT
  146. build: Fix rpmbuild errors (Josh Coughlan)
  147. check_disk: autofs being mounted despite '-l'. Fixed, and also excluded some system "fake" mountpoints
  148. check_disk: Add missing timeout logic
  149. check_dns: Fix for Bind 9.11.x AAAA records being reported with A record format (Troy Lea)
  150. check_dns: reverse (PTR) check is now case insensitive
  151. check_file_age: For multiple files, use the "worst" status instead of the "last" one
  152. check_file_age: perfdata labels when using multiple files
  153. check_file_age: For multiple files, don't exit immediately on first file not found
  154. check_http: Additional header/status checking
  155. check_http: Fix --no-body
  156. check_http: When checking certificate, don't check content/status unless specified by --continue-after-certificate
  157. check_load: Fixed for operating systems which don't have commas in their load averages (like Mac OSX)
  158. check_log does not check for "-O oldlog"
  159. check_log lost ability to use regexes for query (-q) in 2.1.4
  160. check_mysql_query & mysql_query: extra-opts causes crash
  161. check_ntp/ntp_time/ntp_peer: Fix how thresholds are displayed in performance data
  162. check_ntp_time calls `write` on a UDP socket without a successful call to `connect`
  163. check_ntp_time: Periodically returns "Socket timeout" when one of several ntp server doesn't respond
  164. check_ntp.pl: Fixed crash due to references to undefined variables
  165. check_ping: FreeBSD ping working natively
  166. check_procs: Prevent buffer overflow/crash on Solaris
  167. check_radius: Fix for null pointer dereference (Vít Heřman)
  168. check_sensors: Fix fault test with --ignore-fault
  169. check_snmp: Fix --authpasswd option
  170. check_snmp: Fix perfdata not adhering to plugin dev guidelines
  171. check_snmp: warning/critical perfdata is returned properly
  172. check_ups: Change performance data units to match spec. (Temperature and voltage units can be accessed via -e)
  173. check_wave: produces lots of errors if required arguments are not provided
  174. 2.2.1 2017-04-19
  175. FIXES
  176. check_users: not accepting zero as the threshold
  177. check_http: reports warning where it should report ok with -e
  178. check_snmp: does not work with -6 --ipv6 flags
  179. check_swap: threshold calculation in bytes requires subtracting 65
  180. check_uptime: fixed backward help text for thresholds
  181. check_http: Don’t prematurely report success when checking HTTP TLS cert validity
  182. check_http: fix parsing the last header
  183. check_mailq: Fix for Postfix and better Sudo Checking
  184. configure.ac: Fix spelling error
  185. check_ntp_peer: requires newline when there is a socket timeout (fix in netutils.c)
  186. check_users: segmentation fault if both thresholds are not provided
  187. check_dns: DNS CRITICAL - expected ‘{hostname}.’ but got 'name = {hostname}.'
  188. check_mailq: Nullmailer Regex is not working for Ubuntu 16.04
  189. check_swap: Downstream Fedora patch: Prevent check_swap from returning OK, if no swap activated
  190. Building RPMs on Amazon Linux - Add 'install-root' on line 165 of spec file
  191. check_http: Memory allocation error
  192. 2.2.0 2017-01-19
  193. ENHANCEMENTS
  194. check_flexlm: if `-F <license file>` is not specified, will use `LM_LICENSE_FILE` environment var
  195. check_load: Added per cpu load average message
  196. check_smtp: add -L flag to support LMTP (LHLO instead of HELO/EHLO)
  197. FIXES
  198. check_http: -e breaks -f
  199. check_mrtg: Add state to status output
  200. check_ping: ping runs 30 times when host is down
  201. check_icmp: does not have the -p argument in the help
  202. check_dns: Segfaulting with timeout > 26 sec
  203. check_disk: missing -lrt on Solaris
  204. check_http: segmentation fault
  205. check_http: help text update for virtual hosts
  206. check_snmp: Thresholds were being shown twice
  207. check_hpjd: some jd 610 cards have a false flag that printer is offline
  208. check_http: Handle reference redirect like //www.site.org/test
  209. check_disk: alerts issued too soon
  210. fix: Allocator sizeof operand mismatch
  211. fix: Dead assignment
  212. Shellcheck: fix most of the shellcheck warnings.
  213. check_ntp: touch ntp servers at most once every seconds
  214. check_dns: authoritative test (-A) is broken
  215. check_dns: reports TXT records incorrectly
  216. check_file_age: does not handle filenames WITHOUT space!
  217. de,fr.po: fix syntax errors end-of-line within string
  218. lib/parse_ini.c: fix gcc warning: implicit declaration of function ‘idpriv_temp_drop’ and ‘idpriv_temp_restore’
  219. add openssl 1.1 support
  220. 2.1.4 2016-11-17
  221. FIXES
  222. check_http: Don't include default Accept header if one is provided
  223. check_disk: added "fuse.gvfsd-fuse" to list of fs types to ignore
  224. check_http: Fixed non-text chunked-encoded decoding
  225. check_http: segmentation fault (FreeBSD)
  226. check_dns: Update IF_RECORD to not erase query_found
  227. check_http: SSL Certificate check returns 12:00:00AM <local timezone>
  228. check_http: -u is misleading. Changed help text
  229. check_file_age: does not handle filenames with space
  230. check_snmp: units label option outputs the label in the incorrect location
  231. plugins-root/check_dhcp.c: fix a potential segfault
  232. check_users: not correctly detecting thresholds
  233. 2.1.3 2016-09-12
  234. ENHANCEMENTS
  235. SNI support in check_tcp (ddbilik)
  236. check_disk_smb.pl: add support for -k for kerberos authentication
  237. check_file_age.c: allow wildcard matching
  238. FIXES
  239. check_tcp.c: tools/build_perl_modules hardcodes the perl used
  240. check_game.c: reports ping as number of players (Jason Rivers)
  241. fix some gcc5 warnings (Mario Trangoni)
  242. check_cluster.c: Update wording in comments (Troy Lea)
  243. check_nagios.c: could not locate a running nagios process
  244. check_swap.c: does not accept threshold of zero
  245. check_swap.c: uses inconsistent checks on negative thresholds
  246. check_snmp.c: --offset does not appear to do anything (Troy Lea)
  247. sslutils.c: output has first line of "SSL Version: xxxxxx"
  248. effects anything using sslutils including check_http, check_dhcp
  249. and others
  250. utils_cmd.c: when using ssh (or check-by-ssh) with ControlMaster/ControlPersist,
  251. nagios times out the first time and one gets zombie processes (Gordon Messmer)
  252. 2.1.2 2016-08-01
  253. SECURITY FIXES
  254. ENHANCEMENTS
  255. check_snmp's performance data now also includes warning/critical
  256. thresholds
  257. New check_snmp "-N" option to specify SNMPv3 context name
  258. New check_nt "-l" parameters: seconds|minutes|hours|days
  259. New check_mailq -s option which tells the plugin to use sudo(8)
  260. New -W/-C option for check_ldap to check number of entries (Gerhard Lausser)
  261. The check_http -S/--ssl option now accepts the arguments "1.1" and "1.2"
  262. to force TLSv1.1 and TLSv1.2 connections, respectively
  263. The check_http -S/--ssl option now allows for specifying the desired
  264. protocol with a "+" suffix to also accept newer versions
  265. New check_disk "-v" option to show troubled partition in verbose mode
  266. check_log.sh: Added a parameter -w (--max_warning) defining upper value to return a warning code
  267. check_ldap: Add support for LDAP URIs.
  268. check_file_age: Provide performance data
  269. check_by_ssh: added --hostname support
  270. check_ifstatus.pl: Add check_ifstatus option to ignore interfaces by name
  271. check_snmp: Introduce support for SNMPv3 context using "-N" option
  272. check_snmp.c: Added IPv6 support
  273. check_http: Added support for checking SSL-Websites through Proxies
  274. FIXES
  275. check_dig can now also use "drill" instead of "dig"
  276. check_dig honor the -4 and -6 switches
  277. check_ntp_peer: do not use uninitialized results for max state
  278. check_log.sh, check_oracle.sh, check_sensors.sh: Setting PATH at first
  279. check_log.sh: dropping path from basename while evaluating PROGNAME
  280. check_tcp: Fix check_jabber to work with Openfire servers
  281. check_ifstatus.pl: Fix "-n" and "-u" options to ignore if either is set, not just both
  282. check_mrtgtraf: Fix perfdata to comply with perfdata UOM definition
  283. check_real, check_ntp: fix null termination
  284. check_apt: fix memset
  285. check_ssh: change warning to critical for protocol/version errors
  286. utils_cmd.c: avoid a segfault, if ulimit is set to unlimited
  287. utils_cmd.c: make constants from maxfd values
  288. configure.ac: Added particular ps command for HP-UX
  289. check_disk: Fix pthread start routine type
  290. check_http: Make header_value() and chunked-encoding decoding more robust
  291. check_http: fix Host header if explicitly set with -k
  292. sslutils.c: Forcing further restriction of ciphers for current security concerns
  293. check_nagios, check_procs: Enable check_proc to monitor processes in PID name-spaced environments.
  294. check_dhcp.c: use /dev/urandom if available
  295. check_http.c: Don't decode page if it's not there
  296. check_disk.c: Prevent large tide values from truncation
  297. pst3.c: Fix for unclosed filehandle in pst3 on Solaris
  298. check_snmp: Timeticks are not being parsed correctly before performance data
  299. multiple *.h files: standardized header include fences
  300. multiple plugins/*.c files: fix unsafe signal handling
  301. sslutils.c: Fix compilation with GnuTLS which doesn't provide SSL_CTX_check_private_key()
  302. check_mailq.pl: fixed mailer names
  303. check_swap.c: Improving output when swap space has zero size
  304. check_icmp.c: Use kernel reception time on ICMP packets to compute rtt.
  305. check_icmp.c: make use of MSG_CONFIRM optional
  306. check_ldap.c: add counting of entries to check_ldap
  307. utils.c: add sperfdata() function which can handle threshold ranges
  308. sslutils.c: Check if OpenSSL supports SSLv3.
  309. check_dhcp.c: Fixes segfaults when running via monitoring worker (off-by-one)
  310. check_fping.c: autodetect ipv6 addresses
  311. sslutils.c: optimize output if certificate expires in less then 24h
  312. check_smtp.c: Let "-D" option imply "-S". Also QUIT SMTP connection when "-D" is used
  313. check_smtp.c: modified SSL check for use with -e
  314. check_tcp.c: Validate sent data size
  315. check_dns.c: conditional assignment
  316. check_dns.c: macro querytypes and auto cnames
  317. utils_cmd.c, utils_base.c: Multiple resource leaks
  318. check_http.c: Increase MAX_RE_SIZE from 256 to 2048
  319. check_procs.c: Changed the ps command args from axwo to axwwo allowing for longer output
  320. check_http.c: Allow a server to reply using only 'HTTP/1.x 200 OK' and a
  321. body, with no headers
  322. check_nt.c: check_nt does not correctly report a DNS entry it cannot resolve
  323. check_dhcp.c: check_dhcp broken on BSD
  324. TESTS
  325. check_procs.t: Add delay after forking in test to avoid race condition
  326. test.pl.in: Use "C" locale when running test suite
  327. check_http.t: Adjust date strings to the now-localized output
  328. check_dns.t - Fix Perl Warning. perl doesn't understand /d within "".
  329. check_snmp.t: skip extended snmp tests if snmpd has no perl support
  330. check_snmp.t: fix snmp test for included threshold
  331. check_http.t: fix tests for certificates expire date with seconds
  332. check_http.t: add faketime based tests for check_http
  333. LOCALIZATION
  334. 2.1.0 30th July 2015
  335. SECURITY FIXES
  336. ssl_utils.c - Disable SSLv3 & SSLv2 autonegotiation by default to limit poodle and other weak cipher attacks (sreinhardt)
  337. ENHANCEMENTS
  338. Timeout States Implemented - Plugins that support a timeout state will now also support specifying the exit state in case of timeout with the syntax -t <timeout>:<state> (abrist)
  339. Perl plugins now use FindBin for path discovery, obsoleting the nasty AWK script (evgeni, abrist)
  340. check_http.c - Added support for chunked transfer-encoding (koenwtje, dermoth, sreinhardt)
  341. check_radius.c - Added support for the FreeRADIUS Client library (weiss)
  342. check_snmp.c - Added thresholds to performance data (seemuellera)
  343. check_snmp.c - Added new option (-N) for SNMPv3 context (Johannes Engel)
  344. check_snmp.c - Added IPv6 support (abrist)
  345. check_ldap.c - Added a new option (-U) for LDAP URI support (qris)
  346. check_ifstatus.pl - Added new option (-n) to exclude interfaces (peelman, weiss)
  347. check_file_age.pl - Performance data output added (hggh)
  348. check_mailq.pl - Now supports sudo (Christopher Schultz, weiss)
  349. check_log.sh - Added a new option (-w) defining upper value to return a warning code (arvanus)
  350. FIXES
  351. check_by_ssh.c - Added --hostname support (sni)
  352. check_dbi.c - Spelling corrections (sreinhardt)
  353. check_dig.c - Fixed to work with dig/drill tools and ip version switch is now respected (abgandar)
  354. check_disk.c - Fix for hanging filesystems (Gerhard Lausser)
  355. check_disk.c - Partitions in problem state now reported in verbose mode (waja)
  356. check_disk.c - Prevent large tide values from truncation (JesperForsberg)
  357. check_dns.c - Server specific fixes and other cleanup (sreinhardt)
  358. check_http.c - Some small changes for readability (koenwtje)
  359. check_mrtgtraf.c - Added verbose output (sreinhardt)
  360. check_mrtgtraf.c - Perfdata now complies with UOM definition (Bobzikwick)
  361. check_ntp_peer.c - No longer uses uninitialized results for max state (sni)
  362. check_procs.c - Rare race condition fixed (Mikael Falkvidd)
  363. check_ssh.c - Now exits with CRITICAL when version/protocol string check fails to match (sni)
  364. check_tcp.c - Help description of escape characters now correct (Sebastian Herbszt)
  365. check_tcp.c - Fix to support Openfire servers with check_jabber (weiss)
  366. check_ups.c - Spelling corrections (sreinhardt)
  367. pst3.c - Fix for unclosed file handle in pst3 on Solaris (jwinkle01)
  368. plugins-scripts/*.sh - Trusted path fixes (waja)
  369. netutils.h - Decreased max path to 104 bytes to compensate for BSD paths (sreinhardt)
  370. configure.ac - Fix for HP-UX ps command (Tontonitch)
  371. lib/utils_cmd.c - Fix for potential segfault when ulimits are set to unlimited (nafets)
  372. lib/parse_ini.c - Many small fixes from coverity scans and the community (sreinhardt, weiss)
  373. lib/util_base.c - Code cleanup (sreinhardt)
  374. lib/utils_base.c - Add EIUD to state retention path for multi-user permissions support (sreinhardt)
  375. po/* - Spelling corrections (sreinhardt)
  376. Multiple resource leaks fixed (sreinhardt)
  377. Many other small fixes and cleanup caught by coverity (multiple contributors)
  378. TESTS
  379. Many small fixes to tests (multiple contributors)
  380. LOCALIZATION
  381. Many small fixes for locales and localizations (multiple contributors)
  382. 2.0.3 26th June 2014
  383. SECURITY FIXES
  384. parse_ini.c - Additional fixes for the SUID plugins vulnerabilities (sreinhardt)
  385. Added Gnulib module idpriv-droptemp (weiss)
  386. FIXES
  387. check_dns.c - Resolved issues with reverse lookup (sreinhardt)
  388. check_dns.c - Changed query types from ALL to ANY (sreinhardt)
  389. common.h - Include fixes for esoteric AIX compile issues (emislivec)
  390. negate.c - Small fixes from coverity (66479) (66480) (sreinhardt)
  391. check_dhcp.c - Small fix from coverity (66488) (sreinhardt)
  392. check_http.c - Potential memory leak and overflow fixed from coverity (66514) (sreinhardt)
  393. check_ntp.c - Small fix from coverity (66524) (sreinhardt)
  394. utils_cmd.c - Small file descriptor fix from coverity (66502) (sreinhardt)
  395. check_apt.c - Small fix for from coverity (66531) (sreinhardt)
  396. REVERTS
  397. check_mailq - Reverted autodetection commits to avoid awk parsing issues. Autodetection will return in version 2.1.0 as part of the changes in the FindBin branch (abrist)
  398. 2.0.2 20th May 2014
  399. SECURITY FIXES
  400. Fixed file access vulnerability with SUID binaries (check_icmp, check_dhcp) and extra-opts. Fixes were applied globally, so the new resrictions on fopen should apply to all plugins. Special thanks to Dawid Golunski for the submission. More information: http://www.exploit-db.com/exploits/33387/ (sreinhardt) (emislivec)
  401. ENHANCEMENTS
  402. check_disk - Now compiles in cygwin on windows (Gunnar Beutner)
  403. check_ping - Now compiles in cygwin on windows (Gunnar Beutner)
  404. check_users - Now compiles in cygwin on windows (Gunnar Beutner)
  405. netutils.c - Connection error verbosity increased. C plugins will now differentiate file socket errors from connection errors (Davide Madrisan)
  406. FIXES
  407. check_nt.c - Changed 'Mb' to 'MB' in MEMUSE output for clarity (abrist)
  408. 2.0.1 15th April 2014
  409. ENHANCEMENTS
  410. check_snmp.c - Added thresholds to performance data (jccomputing)
  411. check_http.c - Added */* MIME support (Alex Gottschalk)
  412. check_mailq.pl - Added autodetection for mailq implementation (evgeni)
  413. check_mailq.pl - Added autodetected version to output (evgeni)
  414. FIXES
  415. check_dns.c - Record type corrections for default check (sreinhardt)
  416. utils.c - Changed comment type - now supported by AIX and should no longer fail compile (hkpatv)
  417. check_uptime.c - Fixed timeout option (abrist)
  418. check_uptime.c - Fixed help output and updated verbose usage (abrist)
  419. check_uptime.c - Removed executable permissions on check_uptime.c (abrist)
  420. check_uptime.c - Removed old code (Davide Madrisan)
  421. check_pgsql.c - Fixed help output (weiss)
  422. lib/Makefile.am - Avoid deprecated includes (Davide Madrisan)
  423. lib/tests/Makefile.am - Avoid deprecated includes (Davide Madrisan)
  424. plugins/Makefile.am - Avoid deprecated includes (Davide Madrisan)
  425. check_apt.c - Removed the verbose flag suggestion (skottler)
  426. check_oracle.c - Changed regex to compensate for tns string match edge cases (waja)
  427. check_snmp.c - Always privides the security name when noAuthPriv is specified (catharsis)
  428. 2.0 4th March 2014
  429. ADDITIONS
  430. check_uptime - New plugin (only supports linux due to dependency on clock.gettime(). More supported platforms to follow.
  431. ENHANCEMENTS
  432. check_mysql_query - Added performance data (sreinhardt)
  433. check_file_age - New option -i/--ignore-missing which returns OK if file is missing (waja)
  434. check_nt - Added performance data to UPTIME -l seconds|minutes|hours|days (abrist)
  435. check_hpjd - New -p option for port specification (abrist)
  436. check_disk - new -n option for multi-line output (tmcnag)
  437. check_mysql_query - New -f/-g options for reading for mysql options file (awiddersheim)
  438. check_mailq - New -M option for nullmailer support in the mailserver (Luca Corti)
  439. check_dig - New -r option for specifying number of retries (abrist)
  440. check_ntp_peer - Added state output for each checked metric (abrist)
  441. check_dns - Warning and critical thresholds added to perfdata (jccomputing) (abrist)
  442. check_dns - New -q options for several query types (AAAA,TXT,SRV,MX) (sreinhardt)
  443. check_tcp - Status output now includes hostname when host_specified is set (madrisan)
  444. check_mysql - New -n/--ignore_auth option to ignore authentication failure (Julius Kriukas)
  445. check_ssh - New -P/--remote-protocol option to monitor the ssh protocol version (monitoring-user)
  446. check_ntp - New -o/--time-offset option to compensate for the ntp server's offset relative to the local server (monitoring-user)
  447. configure.ac - Added support for --disable-maintainer-mode (weiss)
  448. FIXES
  449. check_http - The -C option no longer resets SSL version if e.g. -S 1 -C 5 is specified
  450. check_ide_smart - Now defaults to nagios-compatible output (sreinhardt)
  451. Fixed misleading timeout message for non-network plugins (sreinhardt)
  452. check_swap - Now fails with 100% usage and a new status output when swap is disabled or missing (abrist)
  453. check_ifstatus - Removed commas from perfdata - should now output valid perfdata in nagios format (waja)
  454. check_ping - Now gracefully handle the "time of day goes back" error. This issue is rare, most will not notice the change (waja)
  455. check_disk - Help output was clarified that it supports mount paths or partitions instead of just paths and partitions (waja)
  456. check_ide_smart - Fixed attribute comparison (waja)
  457. check_ntp_time - Fixed average time calculation (larsi)
  458. NPTest.cache - Empty or Missing file no longer blocks writing to the file (dermoth)
  459. parse.ini - Fixed newlines in output (dermoth)
  460. check_dig - Fixed wrong IPv6 arguments order (Stéphane Bortzmeyer)
  461. check_dig - Now honors timeout value specified by switch -t (Jethro Carr) (abrist)
  462. configure.in - Renamed to configure.ac to avoid deprecation warning (abrist)
  463. configure.ac - The option --enable-extra-opts is now enabled by default (dermoth)
  464. check_snmp - Now handles negative values properly (Stephane Lapie)
  465. WARNINGS
  466. check_procs - Now ignores its parent process to avoid unexpected results when invoked via certain shells
  467. utils.sh - No longer defines ECHO (weiss)
  468. check_ide_smart now default to nagios output, -n kept for legacy support (sreinhardt)
  469. check_ntp_peer - Status output changed, now includes individual state for offset, truechimers, stratum, and jitter (abrist)
  470. check_tcp - Status output has changed, now includes hostname (madrisan)
  471. TESTS
  472. check_procs - Performance data tests added (dermoth)
  473. check_snmp - Added tests for negative thresholds (dermoth)
  474. check_hpjd - Added tests for port options (abrist)
  475. check_dns - Added new tests for query types (abrist)
  476. check_pop - Added option to enable ssl for the test (abrist)
  477. check_jabber - Fixed status output tests to account for hostname (abrist)
  478. check_procs - Tests no longer fail if uid 501 is not present (sni)
  479. check_mysql - Test prompts clarified (dermoth)
  480. check_file_age - Added tests for --ignore-missing (waja)
  481. OTHER
  482. Numerous small typos fixed.
  483. Help output has been changed in many places for clarity and verbosity.
  484. 1.5 2nd October 2013
  485. ENHANCEMENTS
  486. New check_dbi plugin for checking an (SQL) database using DBI
  487. Let OpenSSL load its configuration file (see the OPENSSL_config(3) man page)
  488. Add performance data to check_apt
  489. Add performance data to check_procs
  490. Added -4/-6 options to check_dig (Ville Mattila)
  491. New check_oracle --connect option to perform real login
  492. New check_nagios -t option to override the default timeout
  493. New check_disk -f/--freespace-ignore-reserved option to ignore space reserved for root
  494. New check_disk -N/--include-type option to limit the filesystem types to check
  495. Allow for building the plugins in parallel
  496. Add --without-{dbi,ldap,radius} options to ./configure
  497. Made Verbose output of check_sensors compliant (Gabriele Tozzi)
  498. New switch -E/--extended-perfdata for check_http to print additional performance data (Sebastian Nohn)
  499. New check_http -d option to specify a string to expect within the response headers
  500. New check_http -J/-K options for client certificate authentication support
  501. Add support for executing queries to check_pgsql
  502. Let check_pgsql accept a UNIX socket directory as hostname
  503. New check_pgsql -o option to specify additional connection parameters
  504. New check_fping -S option to specify the source IP address
  505. New check_fping -I option to specify the interface to bind to
  506. Let check_fping support IPv6
  507. New check_procs -k option to ignore kernel threads (on Linux)
  508. Let check_procs use /proc/<PID>/exe (if available) instead of getpid(2), unless -T is specified
  509. Let check_mysql support SSL
  510. Let check_mysql add performance metrics for all checks
  511. New check_mysql -f option to specify a client options file
  512. New check_mysql -g option to specify a client options group
  513. New check_snmp --offset option to allow for adding/subtracting an offset value to sensor data
  514. Let check_snmp support an arbitrary number of OIDs
  515. Let check_ide_smart support NetBSD
  516. FIXES
  517. Change the MAIL FROM command generated by check_smtp to be RFC compliant
  518. Fix compilation of check_http without SSL support
  519. Fix check_snmp reversed threshold ranges (backward-compatibility)
  520. Fix check_snmp memory violation when using more than 8 oids (Robin Sonefors)
  521. Fix check_apt security regular expression (Alex Bradley)
  522. Fix check_http handling extra header (-k) containing semicolons (Richard Leitner)
  523. Fix check_apt handling unknown exit codes from apt-get (Richard Leitner)
  524. Fix deprecated imports of check_nmap.py (Fabio Rueda)
  525. WARNINGS
  526. check_http behaviour of -k/--header changed since it does not separate multiple headers by semicolons anymore. Use multiple -k switches instead.
  527. check_http's --proxy_authorization option is now called --proxy-authorization (it was always documented this way)
  528. The contrib directory has been removed from this distribution
  529. 1.4.16 27th June 2012
  530. ENHANCEMENTS
  531. check_nt UPTIME accepts warning/critical thresholds (Ryan Kelly)
  532. check_disk_smb now allows spaces in share names (#990948, #1370031, Debian #601699)
  533. check_http now uses standard threshold functions (enables floating point and ranges)
  534. check_http now checks for and prints the certificate cn (hostname) in SSL certificate checks (Stéphane Urbanovski)
  535. check_http now supports an optional -S/--ssl value to choose the SSL protocol version (#3066166 - Jason Lunn)
  536. Add perfdata to check_ssh (#3244097 - Marco Beck)
  537. New option to check_smtp to ignore failures when sending QUIT (#3358348 - Duncan Ferguson)
  538. New check_by_ssh -F option which allows for specifying an alternative ssh_config(5) file (#2895334 - Sven Nierlein)
  539. check_sensors now detects faulty sensors unless --ignore-fault is specified (Jan Wagner)
  540. utils.sh now provides a check_range function (Alex Griffin)
  541. Improved the performance of check_users (Marc Remy)
  542. Add perfdata to check_disk_smb (Debian #654259 - Charles-Henri Larose)
  543. Updated Nagios::Plugin perl module
  544. Add warning threshold to certificate expiration checks of check_tcp/http/smtp (William Leibzon)
  545. Add --perf-oids option for check_snmp (Jochen Bern)
  546. FIXES
  547. Fix check_disk free space calculation if blocksizes differ within a disk group (Bekar - #2973603)
  548. check_disk_smb now handles NT_STATUS_ACCESS_DENIED properly (Debian #601696)
  549. Make check_snmp work more like v1.4.14 with regard to using special values (Timeticks, STRING) as numeric thresholds
  550. Fix check_ldap overriding the port when --ssl was specified after -p
  551. Fix check_procs where regex input of '|' would get displayed in output - now replaced with ','
  552. Fix segfault in check_host when hostname returns multiple IP addresses (Sebastian Harl)
  553. Fix check_smtp and check_tcp where duplicate messages were displayed for certificate errors
  554. Fix check_ping's parsing of ping6(1) output (#1894850, Debian #514588, Debian #662638 - Matej Vela)
  555. Fix a check_dhcp bug which was triggered by checking Windows 2003 DHCP servers (#3503921)
  556. Disable RFC4507 support, to work around SSL negotiation issues with (at least) some Tomcat versions
  557. Fix performance data label containing spaces in check_snmp (Jochen Bern)
  558. 1.4.15 27th July 2010
  559. ENHANCEMENTS
  560. New check_ntp_peer -m and -n options to check the number of usable time sources ("truechimers")
  561. New check_disk_smb -a option which allows for specifying the IP address of the remote server
  562. New check_radius -N option which allows for specifying the value of the NAS-IP-Address attribute
  563. New check_snmp --rate option to store differences between invocations. Saves state in PREFIX/var/{plugin}
  564. check_snmp -l label option now also changes the perfdata label. See WARNINGS
  565. check_snmp has an --invert-search option which reverses status of the string and regexp searches
  566. check_http now displays the missing search string and the URL in the output when failed (Duncan Ferguson - #2999924)
  567. Updated Nagios::Plugin perl module
  568. Updated gnulib to June 2010
  569. FIXES
  570. Fix check_ircd binding to wrong interface (#668778)
  571. Add proxy-authorization option to check_http (Marcel Kuiper - #1323230, Bryan Irvine - #2863925)
  572. check_icmp now increment the sequence counter in each packet
  573. Fix usage of repeated -o options in check_snmp
  574. Try to detect arguments passed via --with-ping[6]-command and set options accordingly (#2908236)
  575. Fix memory leak in check_http for large pages (Jimmy Bergman - #2957455)
  576. Fix compilation with GCC 2.96 (Konstantin Khomoutov - #2977105)
  577. Fix regression introduced in #1867716 where partially valid performance strings would not be printed anymore
  578. Fix regression in check_http ssl checks on some servers - make SNI an option
  579. Fix guest mode support in check_disk_smb
  580. Fix check_disk_smb and check_ircd failures when run via ePN
  581. check_ldap now allows for specifying an empty LDAP base
  582. Fix compilation error of pst3 in Solaris 8
  583. Fix check_radius returning OK on unexpected results (Craig Leres - #2911752)
  584. Fix translations when extra-opts aren't enabled (Jan Wagner - #2832884)
  585. Fix parsing of multi-line strings in check_snmp (broken in 1.4.14) and enhance output in such case (#2832451)
  586. Fix detection of pst3 64-bit compile flags with Sun CC
  587. Fix cmd_run overwriting the environment, which would break some commands that needed it
  588. Allow check_ifstatus to accept version=2c - used to only allow version=2 (Brian Landers)
  589. Fix examples in check_disk, where it implied was possible to suffix unit values to warn/crit parameters
  590. WARNINGS
  591. Updated developer documentation to say that performance labels should not have an equals sign or
  592. single quote in the label
  593. check_http 1.4.14 introduced SSL SNI support - you now have to enable it explicitly with "--sni"
  594. check_snmp -l label option is also used for the performance label. This could change history from previous uses
  595. 1.4.14 16th September 2009
  596. check_http has options to specify the HTTP method (#2155152)
  597. check_users thresholds were not working exactly as documented (>= rather than >)
  598. Updated tinderbox_build script to point to new tinderbox server
  599. check_ifoperstatus -n flag now works as expected (sf.net #1569488)
  600. check_ifoperstatus now supports ifType based lookup for ifIndex
  601. check_ups now sends a LOGOUT string (debian bug #387001)
  602. Extra-opts (C plugins) now allows both '#' and ';' for comments (like N::P)
  603. Extra-opts (C plugins) does not allow trailing comments anymore (like N::P)
  604. Fixed dependency issue on libtap when ./configure --enable-libtap used. Warning: will install libtap
  605. Fixed segfault in extra-opts under some circumstance when reading multiple sections
  606. Fix long options parsing in check_disk, check_dns, check_mrtg, check_mrtgtraf and check_tcp
  607. Add missing long options for check_nt (for use with extra-opts)
  608. check_icmp now reports min and max round trip time perfdata (Steve Rader)
  609. Fixed check_http bug where additional headers with redirection caused a segfault (Dieter Van de Walle - 2089159)
  610. check_disk: make autofs mount paths specified with -p before we determine the mount list (Erik Welch)
  611. Fixed buffer overflow in check_ntp/check_ntp_peer (#1999319, Ubuntu #291265)
  612. Re-bundled libtap as a built-in library (--enable-libtap): detects system library as pre-1.4.13 and does not install the built-in library anymore
  613. Fixed check_mrtg returning UNKNOWN instead of OK (bug #2378068)
  614. Fixed check_http behaviour: all check are now performed as long as a valid response is returned (sf.net #1460312)
  615. check_http --onredirect=sticky follows using the same IP address (sf.net #2550208)
  616. check_http --onredirect=stickyport also follows the same port
  617. Fixed coredump from check_nt when invalid drive is specified (#2179754 - Olli Hauer)
  618. Fixed crash from check_nt when -H unspecified or given multiple times (sf.net #2731755, debian #521097)
  619. Fixed passing of quotes in OID for check_snmp (#1985230 - Jan Wagner, patch by John Barbuto)
  620. Fixed check_http sending HTTP/1.0 with v1.1 headers (#2638765)
  621. Fixed check_http not timing-out on redirects
  622. Fixed negate not printing the real timeout in ALRM handler when left to default
  623. negate timeout result is now configurable
  624. Fixed segfault in check_mysql with old slaves (#2696823 - Oskar Ahner)
  625. check_nt can return UNKNOWN on timeouts (-u)
  626. Fixed typos for check_disk (Chris Pepper)
  627. Fixed check_mysql* not using password set in my.cnf (#2531905 - Ben Timby) - Specify an empty password explicitly if you need to override it.
  628. Fixed awk subst.in/subst script path error (#2722832 - Martin Foster)
  629. check_http: Add SSL/TLS hostname extension support (SNI) - (#1939022 - Joe Presbrey)
  630. Fixed wrong perfdata label for output traffic in check_mrtgtraf (#2654308 - Gavin Williams)
  631. Fixed check_by_ssh interpretation of quotes in -C parameter (#1985246, #2268675)
  632. check_snmp now supports standard threshold ranges and doubles (floating numbers) in thresholds
  633. check_fping now supports passing target timeout and interval to fping (#2347686 - Martin Foster)
  634. Fixed SNMPv3 behaviour of check_ifoperstatus and check_ifstatus. Added -P to define privprotocol (#2343438 - Robin Schroeder)
  635. check_ifoperstatus and check_ifstatus are now more user-friendly in case of missing arguments
  636. pst3 compile fix for Sun Studio Compiler (Grant Byers)
  637. 1.4.13 25th Sept 2008
  638. Fix Debian bug #460097: check_http --max-age broken (Hilko Bengen)
  639. Optimised pst3 for systems with large number of processes (Duncan Ferguson)
  640. Updated Nagios::Plugin to 0.27
  641. Fix Debian bug #479013: check_dig's -l is mandatory now (sf.net #1986306)
  642. check_dig now returns CRITICAL instead of WARNING when no answer section is found
  643. check_procs now captures stderr in external command and adds to plugin output
  644. check_snmp now only prints perfdata for non numeric values (#1867716)
  645. check_icmp now supports packet size modification
  646. check_http -e now accepts a comma-delimited list of expected status codes (Sven Nierlein)
  647. libtap now included with this distribution for easier testing. Run ./configure with --enable-libtap
  648. check_ntp_peer/check_ntp_time used to show port in --help but ignored the argument - now implemented
  649. Fix possible segfault in check_ntp_peer with deliberately invalid packets
  650. 1.4.12 27th May 2008
  651. Added ./check_nt -v INSTANCES to count number of instances (Alessandro Ren)
  652. New check_icmp -s option to specify the source IP address
  653. check_dns now sorts addresses for testing results for more than one returned IP (Matthias Urlichs)
  654. Fix segfault in check_ntp_time and (deprecated) check_ntp (Bug #1862300)
  655. check_disk should now work with large file systems (2TB+) on all archs that supports it
  656. Fixed check_disk disk usage calculation when using --group=NAME (related to bug #1348746)
  657. Fix help text of check_ntp* (Bug #1880095)
  658. Fix bugs and flaws in best offset server selection of check_ntp_time and (deprecated) check_ntp
  659. check_ntp_peer now checks for the LI_ALARM flag
  660. Sync to latest Gnulib (includes new floorf function)
  661. check_pgsql now successfully builds with postgres lib v8.3 (Bug #1878972)
  662. check_procs now accepts --ereg-argument-array for a regular expression match to the argument array
  663. Reverted back to using pst3 for Solaris systems. Fixed issues re: -m64 needed to compile on 64bit systems
  664. If applicable, Gettext linked dynamically instead of statically
  665. check_dig can now pass arguments to dig by using -A/--dig-arguments (#1874041/#1889453)
  666. check_ntp and check_ntp_peer now show proper jitter/stratum thresholds longopts in --help
  667. check_dns now allow to repeat -a to match multiple possibly returned address (common with load balancers)
  668. check_mysql and check_radius now try clearing password in processlist just like check_mysql_query
  669. check_mysql and check_mysql_query now support sockets explicitly (-s, --socket)
  670. negate now has the ability to replace the status text as well (-s, --substitute)
  671. Added performance data to check_ping (Christian Schneemann)
  672. Added support for --extra-opts in all C plugins (disabled by default, see configure --help)
  673. Fixed passive option in check_by_ssh
  674. On non-skipped stderr, check_by_ssh now returns UNKNOWN or worse (result from command) instead of always UNKNOWN.
  675. Fix linking against OpenSSL where libdl is required
  676. 1.4.11 13th December 2007
  677. Fixed check_http regression in 1.4.10 where following redirects to
  678. relative URLs on virtual hosts failed if both "-H" and "-I" were used
  679. Merged two new checks that deprecates check_ntp: check_ntp_peer and check_ntp_time.
  680. You should read the --help output so see which one is suitable for you. check_ntp_peer
  681. implement stratum thresholds support (feature request #1703823).
  682. check_ntp now returns UNKNOWN instead of WARNING if jitter is unavailable (jitter=-1.000000)
  683. as long as the thresholds range include -1. If no offset threshold is specified
  684. and the offset is unavailable, will return UNKNOWN as well.
  685. NOTE: If jitter thresholds are specified as integers it will return CRITICAL if jitter
  686. is "-1" as the default range starts at 0. See Examples in --help output.
  687. Fixed broken usage2 in check_snmp and check_cluster
  688. check_cluster now accepts all valid characters in its thresholds ("-", "@", "~")
  689. Fixed check_disk reporting OK if disk usage grows over 100% (bug #1348746).
  690. The problem happens to be in Gnulib but a workaround have been implemented in check_disk.c
  691. Fixed check_load argument handling when not passing triplets (bug #1831890)
  692. Fixed buffer overflow in check_snmp (CVE-2007-5623)
  693. Tinderbox builds now runs tests in a verbose mode
  694. Updated Nagios::Plugin to 0.22
  695. VPATH problem fixed for compiling plugins-root
  696. 1.4.10 28th September 2007
  697. Fix check_http buffer overflow vulnerability when following HTTP redirects (CVE-2007-5198)
  698. check_http now explicitly asks HTTP/1.1 servers to close the connection
  699. after completion of the response
  700. Check_ldaps' guessing which secure method to use (starttls vs. ssl on connect)
  701. is now deprecated. See --help for further information.
  702. Check_disk now calls stat() on all filesystems to check. (Old: only the ones selected using -p)
  703. A meaningful error message (eg "Stale NFS Handle") is printed if stat fails.
  704. New check_disk option -L: Only check local filesystems, but call stat() on remote ones, too.
  705. Thus accessibility of remote filesystems can be checked without any threshold comparison.
  706. Check_disk's --help now prints some examples for the new features introduced in 1.4.8
  707. New check_disk -i/-I option to ignore paths/partitions based on regular expressions
  708. New check_disk -A option to select all filesystems explicitly
  709. WARNING: check_disk's -E option must now be passed before -p or -r/-R arguments
  710. Passing -E after -p or -r results in UNKNOWN state, now
  711. This is needed due to the new ignore feature
  712. Fix check_disk bug when mixing case sensitive and case insensitive regex arguments
  713. New check_dhcp -u/--unicast option for emulating a DHCP relay in order
  714. to check DHCP servers on remote networks
  715. New check_dhcp -m/--mac option which allows for specifying the MAC
  716. address to use in the DHCP request
  717. The check_dhcp -r and -s options now accept host names, too
  718. Fix possible check_icmp bus errors on some (non-x86/AMD64) platforms
  719. Fix check_smtp's handling of multiple-packet server responses
  720. WARNING: Fix for negate which may break existing commands:
  721. - stop evaluating command line options through shell twice
  722. - enforce a full path for the command to run
  723. The "negate" utility can now remap custom states
  724. Check_radius now supports radiusclient-ng
  725. The (undocumented) positional parameter parsing which check_radius used
  726. instead of getopt(3) if 8 arguments were given is no longer available
  727. Check_by_ssh now supports multiline output
  728. IPv6 support can now be disabled using ./configure --without-ipv6
  729. Fix check_ntp now honor ntp flags
  730. 1.4.9 4th June 2007
  731. Inclusion of contrib/check_cluster2 as check_cluster with some improvements
  732. New/improved -E/--skip-stderr and -S/--skip-stdout options for check_by_ssh
  733. check_snmp now supports Counter64
  734. Fix compilation of check_ldap, check_radius and check_pgsql
  735. check_load can optionally divide by number of cpus
  736. Fix check_time returning wrong OK when time is before the epoch on some arch
  737. Make check_http output more consistent
  738. Fix possible check_http segfaults when following HTTP redirects
  739. check_snmp don't warn anymore if something is printed on stderr
  740. Fix check_tcp segfault when multiple expect strings are given
  741. New option for check_tcp: -A/--all to test if all given expect strings match
  742. 1.4.8 11th April 2007
  743. Respects --without-world-permissions for setuid plugins
  744. check_disk extra options for regex matching of filesystems and grouping of filesystems
  745. for collective thresholds
  746. Better configure test for mysqlclient availability
  747. Various check_ntp fixes
  748. 1.4.7 29th March 2007
  749. check_procs uses /usr/ucb/ps if available - fixes pst3 problems on Solaris
  750. Fixed MKINSTALLDIRS problem in po/
  751. ./configure now detects if possible to compile check_mysql
  752. Fixed broken HELO in check_smtp
  753. check_icmp now allows to set a minimum number of hosts required for successs (-m)
  754. check_icmp fix for *BSD when running for long time
  755. check_ping times out 1 second quicker if host is unreachable
  756. Root plugins installed with world executable
  757. check_sybase from contrib now maintained in NagiosExchange
  758. --with-nagios-user/group reinstated ./configure option
  759. New --without-world-permissions ./configure option
  760. 1.4.6 5th February 2007
  761. Reduced number of DNS lookups in check_ping and netutils.c for IPv6 configurations
  762. Fixed compile problems with *BSD re: alloca.h
  763. Fixed Solaris problems with check_swap (tested on Solaris 9)
  764. Fixed check_swap for HP/UX where swapinfo command was incorrect
  765. Fixed check_disk inode threshold checks, regressed at r1.4.4.
  766. Fixed crit/warn for check_disk perf data
  767. Fixed buffer overflow in check_procs
  768. Fixed error handling for UNIX sockets in netutils.c
  769. New -q and -o options for check_by_ssh which are handed over to ssh(1) as is
  770. Synced with latest GNUlib
  771. Fixed check_jabber always returns warning
  772. 1.4.5
  773. Fixed bug in perl's is_hostname routine
  774. 1.4.4
  775. New C based check_ntp. The perl version is now deprecated.
  776. New check_apt plugin
  777. Notice: plugins in contrib/ will start to be removed from this distribution.
  778. Please check at http://www.nagiosexchange.org for contributed plugins
  779. Major bug fixes to check_disk where values were incorrectly calculated and alerted on.
  780. check_udp2 removed. check_udp is now linked to check_tcp.c
  781. check_mailq now errors if the sub-program run returns non-zero return code. This would appear
  782. as if mailqs were okay when the nagios user could not query the mail-queues
  783. Compile problems with check_snmp fixed
  784. 1.4.3
  785. Setuid plugins (check_dhcp, check_icmp) separated into plugins-root/. Run make install as root to install
  786. SSL plugins work with gnutls as well as OpenSSL
  787. check_mysql_query added to run arbitrary SQL commands, with threshold checking
  788. libtool now required for development systems
  789. Notice: check_udp (compiled from check_udp.c) will be deprecated in the next release.
  790. check_udp2 should be used instead and will be renamed to check_udp
  791. 1.4.2
  792. Fix for Redhat ES4 for check_dns and check_dig
  793. 1.4
  794. IPv6 support in check_ping, check_by_ssh, check_http, check_ldap, check_smtp, check_tcp
  795. Internationalisation support
  796. Performance data added to most plugins
  797. check_disk now using GNU coreutils code
  798. New plugins - check_dhcp, check_icmp
  799. contrib/check_citrix has been replaced by contrib/check_ica* (requires packet_utils.pm in libexec)
  800. check_http --min changed to --pagesize, added max so min:max in check
  801. check_vsz and check_rss deprecated - functionality moved into check_procs
  802. check_swap % thresholds changed to measure amount free, instead of amount used
  803. check_disk syntax changes for -p, -m/-M, defaults to MB instead of kB
  804. check_procs -C expects no path for the command name