File nagios.changes of Package nagios

Mon May 10 14:53:04 UTC 2021 - - 4.4.6

- new nagios-exec-start-post script to fix bsc#1003362

Mon May 10 11:24:02 UTC 2021 - - 4.4.6

- fix writing to log file in user controlled 
  directory (bsc#1182398). The script writes the 
  logfile directly below /var/log/ 

Wed Jun  3 14:41:41 UTC 2020 - Stefan Botter <>

- 4.4.6
* Fixed Map display in Internet Explorer 11 (#714)
* Fixed duplicate properties appearing in statusjson.cgi (#718)
* Fixed NERD not building when enabled in ./configure (#723)
* Fixed build process when using GCC 10 (#721)
* Fixed postauth vulnerabilities in histogram.js, map.js, trends.js 
  (CVE-2020-13977, bsc#1172794)
* When using systemd, configuration will be verified before
  reloading (#715)
* Fixed HARD OK states triggering on the maximum check attempt (#757)

Mon Apr  6 15:55:26 UTC 2020 - - 4.4.5

- fix boo#1156309, CVE-2019-3698 : Symbolic Link (Symlink) following 
  vulnerability in the cronjob allows local attackers to cause cause 
  DoS or potentially escalate privileges by winning a race.
- enhance systemd service: check nagios config before reloading
- enable build for SLE11 by excluding some special macros and 
  directories via 'sles_version != 11' condition
- add nagios-archive.service and nagios-archive.timer as replacement 
  for the script in cron.weekly: no need for cron on systemd systems
- run set_permissions and verifyscript for /etc/cron.weekly on those
  distributions that need it
- enhance rpmlint: ignore empty htpasswd file
- enable php apache module and not php5 on newer distributions
- try to harden the rcnagios script

Mon Feb  3 15:07:25 UTC 2020 - Dominique Leuenberger <>

- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.

Fri Dec 20 12:51:27 UTC 2019 - Stefan Botter <>

- 4.4.5
* Reverted changes related to #625 due to CPU load issues
* Partially reverted changes for #647 due to CPU load issues
* Fixed "Quick Search" so that leading/trailing whitespace doesn't affect output (#681) (Sebastian Wolf)
* Fixed build issues on non-RPM-based platforms (#617) (T.J. Yang)

- 4.4.4 
* Fixed log rotation logic to not repeatedly schedule rotation on a DST change (#610, #626) (Jaroslav Jindrak & Sebastian Wolf)
* Fixed $SERVICEPROBLEMID$ to be reset after service recovery (#621) (Sebastian Wolf)
* Fixed defunct worker processes appearing after nagios was reloaded (#441, #620) (Sebastian Wolf)
* Fixed main nagios thread to release nagios.qh on a closed connection (#635) (Sebastian Wolf)
* Fixed semicolon escaping to remove prepended backslash (\) (#643) (Sebastian Wolf)
* Fixed 'Checks of this host have been disabled' message showing on passive-only hosts (#632) (Vojtěch Širůček & Sebastian Wolf)
* Fixed last_hard_state showing the current hard state when service status is brokered (#633) (Sebastian Wolf)
* Fixed long plugin output (>8KB) occasionally getting truncated (#625) (Sebastian Wolf)
* Fixed check scheduling for objects with large check_intervals and small timeperiods (#647) (Sebastian Wolf)
* Fixed SOFT recoveries sending when services had HARD recovery some time after host recovery (#651) (Sebastian Wolf)
* Fixed incorrect permissions on debugging builds of FreeBSD (#420) (Sebastian Wolf)
* Fixed NEB callback lists being partially orphaned when multiple modules subscribe to one callback (#590) (Sebastian Wolf)
* Fixed memory leaks in run_async_service_check(), run_async_host_check() when checks are brokered (#664) (Sebastian Wolf)
* Fixed potential XSS in main.php, map.php (#671, #672) (Jak Gibb)
* Removed NEB brokering for nagios daemonization, since daemonization occurs before NEB initialization (#591) (Sebastian Wolf)

Wed Nov 13 08:28:43 UTC 2019 - Ansgar Esztermann <>

- compile with -ffat-lto-objects to prevent build failure 

Tue Aug 20 11:54:43 CEST 2019 -

- Add /etc/cron.weekly to filelist, as this is now part of cron,
  which we don't want to require

Sat Apr 20 06:25:38 UTC 2019 - Stefan <>

- revert setting of sbindir back to nagios_cgidir 

Sun Jan 20 08:48:24 UTC 2019 - - 4.4.3

- update to 4.4.3
* Fixed services sending recovery emails when they recover if host in
  down state (#572) (Scott Wilkerson)
* Fixed a make error when building on the aarch64 architecture (#598)
  (Gareth Randall)
* Fixed --with-cgibindir and --with-webdir to actually set values given
  (#585) (lawsontyler)
* Fixed soft recovery states for services (#575) (Jake Omann)
* Fixed XSS vulnerability in Alert Summary report (CVE-2018-18245, boo#1119832)
  (Jake Omann)
* Fixed services in soft states sometimes not switching into hard states
  (#576) (Jake Omann)
* Fixed last_state_change to update when a state goes from soft -> hard
  state (#592) (Jake Omann)
* Fixed Map link always being set to undefined host and don't show link
  for Nagios Process root note (#539) (Jake Omann)
* Fixed notifications sending when services went into hard state on a
  down or unreachable host (#584) (Jake Omann)
* Fixed log_host_retries not logging the host soft state checks (#599)
  (Jake Omann)
* Fixed stalking_options N option to properly log only when a
  notification is actually sent (#604) (Jake Omann)
* Fixed issue with service status totals being zero when
  servicegroup=all on servicegroup status page (#579) (Jake Omann)
* Fixed escalation notifications logic and recovery notifications not
  going out (#582) (Jake Omann)
* Fixed not finding child index causing duplicate hosts showing in the
  Map (#471) (Jake Omann)
* Fixed Map configuration popup checkboxes not working and Root Node
  not populating (#543) (Jake Omann)
* Fixed cleanup and deinit of neb modules on reload (#573) (Jake Omann)

- rebase nagios-4.2.2-enable-ppc64le.patch (allow ppc64le builds in
  contrib Makefile) to: 

Mon Oct 15 08:38:12 UTC 2018 -

- install /var/spool/nagios setgid nagcmd so external applications
  like the webinterface can issue commands to nagios (boo#1028975)

Mon Oct 15 07:55:03 UTC 2018 - - 4.4.2

- update to 4.4.2
* Fix comment data being duplicated after a `service nagios reload`
  or similar (#549) (Bryan Heden)
* Fix check_interval and retry_interval not changing at the 
  appropriate times (#551) (Scott Wilkerson)
* Fixed passive checks sending recovery email when host was 
  previously UP (#552) (Scott Wilkerson)
* Fixed flapping comments duplication on nagios reload (#554) 
  (Christian Jung)
* Fix for CVE-2018-13441, CVE-2018-13458, CVE-2018-13457 null 
  pointer dereference (Trevor McDonald) (boo#1101293, boo#1101289, boo#1101290)
* Fixed syntax error in file: (#558) (Christian Zettel)
* Reset current notification number and state flags when the host recovers, 
  reset all service variables when they recover fixes (#557) (Scott Wilkerson)
* Fixed wrong counting of service status totals when showing 
  servicegroup details (#548) (Christian Zettel, Bryan Heden)
* Fixed avail.cgi not printing CSV output when checkbox is checked 
  (for any type: host/service/hostgroup/servicegroup) (#570) (Bryan Heden)
* Fixed nagios not logging SOFT state changes after 1 (Scott Wilkerson)

4.4.1 - 2018-06-25
* Revert some macro->kvvec changes causing problems when 
  `enable_environment_macros` was enabled (Bryan Heden)
* Adjust `process_macro_r` function logic so that it handles 
  macros properly (Bryan Heden)
* Fix spec file for systemd (Karsten Weiss, Fr3dY, Bryan Heden)
* Fix bug where `ssize_t` typedef to int on some systems (Bryan Heden)

4.4.0 - 2018-06-19
* new status for check dependencies (John Frickson)
* Allow more flexible requirements for comments (John Frickson)
* Add a `statusCRITICALACK` class for the status column (John Frickson)
* CSV output based on groups (all options) (John Frickson)
* New Macro(s) to generate URL for host / service object to be 
  used in notifications (John Frickson)
* New Macro(s) to determine if host/service notifications are 
  enabled (#419) (Bryan Heden)
* New Macro(s) for obtaining the host/service notification 
  periods (#350) (Bryan Heden)
* enable_page_tour interface option (Bryan Heden)
* Code cleanups in important sections (Workers, Handling Results) (Bryan Heden)
* Automatic mail program detection (with same /bin/mail failback) (Bryan Heden)
* Incorporated [autoconf-macros]( 
  into Core (Bryan Heden)
* Lots of enhancements/additions to configure/make process. (Bryan Heden)
  + Moved all files to startup/
  + Added upstart job
* Added system limit detection (RLIMIT_NPROC) to check for anticipated 
  fork() failures (#434) (Bryan Heden)
* Added stalking on notifications (`N` or `notifications` option when 
  specifying `stalking_options`) (#342) (Bryan Heden)
* Added automatic `systemctl daemon-reload` and `initctl reload-configuration` 
  where applicable on `make install-init` (Bryan Heden)
* Added case-insentive command submission. (#373) (Bryan Heden)
* Enabled `check_external_commands` by default (Bryan Heden)
* Command line macro detection skips potential macros with no ending 
  dollar sign (Bryan Heden, Jake Omann)
* Fixed a lockup condition sometimes encountered on shutdown or restart (Aaron Beck)
* Fixed negative time offset calculations computing incorrectly sometimes (bbeutel)
* Fixed reloads causing defunct (zombie) processes (#441) (Bryan Heden)
* Fixed wait3(), wait4() implementations (replaced with waitpid()) (#326) (Bryan Heden)
* Fixed additive inheritance not testing for duplicates in 
  hosts/services/(+escalations) (#392) (Bryan Heden)
* Fixed very very (around 600k chars or greater) large plugin 
  output crashing Nagios (#432) (Bryan Heden)
* Fixed first_notification_delay not beeing calculated from 
  last_hard_state_change (#425) (Christian Zettel)
* Fixed duplicate downtime ID occuring from downtimes in retention 
  file (#506) (Franz [feisenko])
* Fixed segfault when navbarsearch was used in status.cgi for something 
  other than a host (#489) (Bryan Heden)
* Fixed some miscellaneous ./configure issues on Solaris (Bryan Heden, Troy Lea)
* Fixed "Locate host on map" link (#496) (Troy Lea)
* Fixed service groups defined with unknown service members 
  (that aren't first in the list) not erroring out (#500) (Bryan Heden)
* Fixed tac.cgi to have consistent behavior with the other cgis (#481) 
  (Bryan Heden, Matt Capra)
* Fixed clear_host/service_flapping command logic to broker/notify 
  properly (#525) (Bryan Heden, Karsten Weiss)

- removed upstreamed patches:
  + nagios-fix_spurious_dollar_signs_added_to_command_lines.patch
  + nagios-4.3.4-fix_memleak_4.3.3.diff
- refreshed patches:
  + nagios-4.0.6-remove-date-time.patch
  + nagios-4.1.0-add_KOHANNA.conf
  + nagios-4.2.2-enable-ppc64le.patch
  + nagios-disable_phone_home.patch
  + nagios-fix_encoding_trends.cgi.patch
  + nagios-output-length.patch
  + nagios-random_data.patch

Tue Jun  5 23:42:39 UTC 2018 -

- fix setting default values in nagios-exec-start-pre 

Thu Mar  8 20:54:38 UTC 2018 -

- remove unused xorg-x11-devel BuildRequires 

Tue Jan 30 09:16:07 UTC 2018 -

- fix upstream issue #455, memleak introduced with 4.3.3

Fri Dec  1 23:39:38 UTC 2017 -

- update to 4.1.0 fixed boo#939829 already, mentioned here just 
  for reference

Fri Dec  1 22:19:07 UTC 2017 -

- fix a possible symlink attack for files/dirs created by root
  fixes CVE-2016-8641 (bsc#1011630 and bsc#1018047)
- remove the pre-configured administrative account with fixed 
  password from the htpasswd file and provide an empty one instead
  (fixes boo#961115 - CVE-2016-0726)

Thu Nov 23 13:50:57 UTC 2017 -

- Replace references to /var/adm/fillup-templates with new 
  %_fillupdir macro (boo#1069468)

Thu Oct 12 14:45:16 CEST 2017 -

- Do not introduce new RPM group just for nagios-contrib.
  Use established Development/Tools/Other instead.

Wed Sep 13 07:59:39 UTC 2017 -

- update to 4.3.4
  * Improved config file parsing (Mark Felder)
  * Fixed configure script to check for existence of /run for lock
    file (in regards to CVE-2017-12847, Bryan Heden)
  * Use absolute paths when deleting check results files (Emmanuel Dreyfus)
  * Add sanity checking in reassign_worker (sq5bpf)
  * xodtemplate.c wrong option-deprecation code warning (alex2grad / John Frickson)
  * On-demand host check always use cached host state (John Frickson)
  * 'á' causes Serivce Status Information to not be displayed (John Frickson)
  * New Macro(s) to generate URL for host / service object (John Frickson)
  * Fix minor map issues (Troy Lea)
  * Fix lockfile issues (Bryan Heden)
  * Switch order of daemon_init and drop_priveleges (CVE-2017-12847, Bryan Heden)
  * Add an OpenRC init script (Michael Orlitzky)
- only require insserv on older SUSE distributions

Wed Jun  7 10:14:20 UTC 2017 -

- update to 4.3.2
  * Every 15sec /var/log/messages is flooded with 
    "nagios: set_environment_var" (John Frickson)
  * Changed release date to ISO format (yyyy-mm-dd) (John Frickson)
  * `make all` fails if unzip is not installed (John Frickson)
  * Quick Search no longer allows search by Alias (John Frickson)
  * flexible downtime on a service immediately turns off notifications
    (John Frickson)
  * Fix to allow url_encode to be called twice (Z. Liu)
  * Update (spelling) (Parth Laxmikant Kolekar)
  * Spelling fixes (Josh Soref)
  * Vent command pipe before remove to avoid deadlocks on 
    writing end (Kai Kunstmann)
  * CGI utility cgiutil.c does not process relative config file 
    path names properly (John Frickson)
  * xdata/xodtemplate.c bug in option-deprecation code (John Frickson)
  * Wildcard searching causes service status links to not work properly
    (John Frickson)
  * Quick search with no hits shows a permission denied error (John Frickson)
  * Setting a service as its own parent is not caught by the sanity 
    checker (-v) and causes a segfault (John Frickson)
- removed nagios-4.3.1-remove-flooding-messages.patch (fixed upstream) 

Mon Mar  6 13:20:18 UTC 2017 -

- fix upstream issue #337: remove debugging messages:

Fri Feb 24 08:12:54 UTC 2017 -

- Update to 4.3.1
  * Fix for CVE-2016-6209 (bsc#989759) - The "corewindow" parameter (as in
    http://localhost/nagios? has been disabled by
    default. See the UPGRADING document for how to enable it. (John Frickson)
  * Service hard state generation and host hard or soft down status (John Frickson)
  * Comments are duplicated through Nagios reload (John Frickson)
  * host hourly value is incorrectly dumped as json boolean (John Frickson)
  * Bug - Quick Search no longer allows search by IP (John Frickson)
  * Config: status_update_interval can not be set to 1 (John Frickson)
  * Check attempts not increasing if nagios is reloaded (John Frickson)
  * nagios hangs on reload while sending external command to cmd file (John Frickson)
  * Feature Request: return code xxx out of bounds - include message as well (John Frickson)
  * Fix early event scheduling (pmalek / John Frickson)
  * on-demand host checks triggered by service checks cause attempt number increments (fredericve)
  * Service notification not being send when host is in soft down state (John Frickson)
  * configure does not error if no perl installed on CentOS 7 (John Frickson)
  * failed passive requests leave .ok files in checkresults dir (caronc)
  * Services don't show in status.cgi if "noheader" specified (John Frickson)
  * Standardized check interval config file names (John Frickson)
  * "Event Log" (showlog.cgi) could not open log file (John Frickson)
  * "nagios_check_command" has been deprecated since v3.0. Last vestiges 
    removed (John Frickson)
  * Added new flag to cgi.cfg: tac_cgi_hard_only to show only HARD 
    states (John Frickson)
  * Add broker-event for the end of a timed event (NEBTYPE_TIMEDEVENT_END) (John Frickson)
  * There is no Macro to retrieve addresses of hostgroup members 
    (now $HOSTGROUPMEMBERADDRESSES$) (John Frickson)
  * Add "Page Tour" videos to several of the core web pages (John Frickson)
  * Added a login page, and a `Logoff` links (John Frickson)
  * On the status map, the host name will be colored if services are 
    not all OK. (John Frickson)
  * Added "Clear flapping state" command on host and services 
    detail pages. (John Frickson)
  * User-entered comment now displays below generated comment for 
    downtime (John Frickson)
- refreshed patches

Sun Dec 11 11:53:10 UTC 2016 -

- update to 4.2.4
  * Fixed another root privilege escalation (CVE-2016-9566) Thanks for
    bringing this to our attention go to Dawid Golunski (bsc#1014637)

Tue Nov 29 08:04:23 UTC 2016 -

- update to 4.2.3
  * Fixed a root privilege escalation (CVE-2016-8641) (John Frickson)
  * external command during reload doesn't work (John Frickson)
  * Nagios provides no error condition as to why it fails on the 
    verify for serviceescalation (John Frickson)
  * No root group in FreeBSD and Apple OS X (John Frickson)
  * jsonquery.html doesn't display scheduled_time_ok correctly (John Frickson)
  * daemon_dumps_core=1 has no effect on Linux when Nagios 
    started as root (John Frickson)
  * Configuration check in hostgroup - misspelled hostname does 
    not error (John Frickson)
  * contacts or contact_groups directive with no value should not
    be allowed (John Frickson)
  * Compile 64-bit on SPARC produces LD error (John Frickson)
  * HOSTSTATEID returns 0 even if host does not exist (John Frickson)
  * Submitting UNREACHABLE passive result for host sets it as DOWN 
    if the host has no parents (John Frickson)
  * nagios: job XX (pid=YY): read() returned error 11 (changed from 
    LOG_ERR to LOG_NOTICE) (John Frickson)
  * Fix for quick search not showing services if wildcard used
    (John Frickson)

Wed Nov  9 11:01:28 UTC 2016 -

- use faster find variants

Tue Nov  8 03:31:44 UTC 2016 -

- allow ppc64le builds in contrib Makefile:

Tue Oct 25 16:30:17 UTC 2016 -

- update to 4.2.2
  + There was a fix to vulnerability CVE-2008-4796 in the 4.2.0 release 
    on August 1, 2016. The fix was apparently incomplete, as there was 
    still a problem. However, we are now getting all RSS feeds using AJAX 
    calls instead of the (outdated) MagpieRSS package. Thanks for bringing 
    this to our attention go to Dawid Golunski (
  + Update status.c to display passive check icon for hosts when 
    passive checks are enabled and actives disabled
  + Fix permissions for Host Groups reports (status.cgi)
  + Service Parents does not appear to be functioning as intended
  + Availability report mixes up scheduled and unscheduled warning percentages
  + Invalid values for saved_stamp in comput_subject_downtime_times()
  + Remove deprecated “framespacing”
  + The nagios tarball contains two identical jquery copies
  + extinfo.cgi does not set content-type (most cgi’s don’t)
  + Timeperiods are corrupted by external command CHANGE_SVC_CHECK_TIMEPERIOD
  + Quick search doesn’t show hosts without services (service status detail page)
  + In host/services details view, if exactly 100 entries would not show last one
  + nagios host URL parameter for NEW map doesn`t work – Network Map for All Hosts
  + next_problem_id is improperly initialized
  + Passive problems not showing as “unhandled”
  + September reported as Sept instead of Sep
  + Notifications are not sent for active alerts after scheduled downtime ends
  + Nagios 4.2.0 not working on Solaris
  + install-exfoliation and install-classicui don’t work FreeBSD and Mac OS X
  + Updated makefile to delete some no-longer-needed files

Tue Sep  6 16:03:11 UTC 2016 -

- update to 4.2.1
  + Fix undefined variable php error (John Frickson)
  + Links on the sidebar menu under 'Problems' are indented too far 
  + Using $ARGn$ Macros in perfdata (John Frickson)
  + using a wildcard in search returns service status total all zero's
  + read_only does not take priority (deppy)
  + Running nagios -v on 4.2.0 takes 90+ seconds (John Frickson)
  + Missing Image for Host and Service State Trends in Availability Report
  + Maintain non-persistent comments through reload (John Frickson)
  + Servicegroup availability report ignores includesoftstates in
    service report links (PriceChild)
  + error: format not a string literal and no format arguments (Karsten Weiss)
- ignore rpmlint warnings about tmpfile creating/listing: this is 
  handled, but not properly detected by rpmlnt

Fri Sep  2 14:37:03 UTC 2016 -

- update to 4.2.0
  + Fixed vulnerability CVE-2008-4796 (John Frickson)
  + Fixed vulnerability CVE-2013-4214 (John Frickson)
  + web interface vulnerable to Cross-Site Request Forgery attacks

  + Increase socket queue length for listen()
  + Added host name to the website page title (leres / John Frickson)
  + Added additional icons for NetBSD and SuSE (John Frickson)
  + The new Status Map will now use cgi.cfg options (John Frickson)
    default_statusmap_layout will default to "6" for the new map
  + The new Status Map will now show some valid values in the 
    popup for "Nagios Process" (John Frickson)

  + Network outage view without access to all hosts (John Frickson)
  + Core workers looping (John Frickson)
  + service query returns duplicate host_name and description
    fields in the returned data (John Frickson)
  + HTML output of plug-ins is parsed in wrong way => webgui 
    unusable (John Frickson)
  + Command worker fails to handle SIGPIPE
  + "View Status" links under "Map" broken in Nagios Core 
    Version 4.1.1 (John Frickson)
  + Can't send big buffer - wproc: Core Worker seems to be choked
  + Too big CPU load on FreeBSD and other systems using poll() interface
  + Flexible downtime recorded as unscheduled downtime (John Frickson)
  + Service Flexible downtimes produce 1 notification before entering 
  + Once you "set flap_detection_enabled 0" it should remove flapping
    state from the host/services page (John Frickson)
  + New map doesn't finish loading if a logo image is not found
  + Extraneous Div end tag in map.html (Scott Wilkerson)
  + Issue with "Problems" section (John Frickson)
  + Status Map icons and online/offline status dots disappear in IE11 
  + New network map overlays the nagios process with objects
  + Added Default-Start and Default-Stop to the init script 
  + Compile / logging issues with BSD 6
  + Related to above, Fixed a lot of incorrectly handled 
    time_t's in *printf's
  + New map not working for RU locale (actually, most locales)
  + Replaced all instances of signal() with sigaction() + blockig
  + UTF-8 characters like german ä are not processed properly by 
    function url_encode (John Frickson)
  + nagios worker processes can hog CPU (huxley / John Frickson)
  + custom time periods that include special characters were not
    being handled in reports (John Frickson)
  + Fixed init script to wait up to 90 seconds then kill the
    nagios process (John Frickson)
  + No Host Groups results in wrong error message (John Frickson)
  + Setup Nagios users to view specific host is not working in the
    new network map (John Frickson)
  + statusjson.cgi fails glibc realloc truncate response output (John Frickson)
  + Report Time Period does not work if an @ character is in
    the timeperiod name (John Frickson)
  + State History does not use actual plugin long_output (John Frickson)
  + Time period corruption (xoubih)
  + Tactical Overview - Disabled Flap Detection Link (John Frickson)
- add /var/run/nagios as ghost directory

Fri Oct 16 15:54:34 UTC 2015 -

- Fix nagios-www: keep nagios-www-dch from owning html files shipped with
- Remove unused NAGIOSDCH apache flag.

Mon Sep 21 19:46:44 UTC 2015 -

- Update to 4.1.1
  * CGI Could not read object configuration data (broken by error in 4.1.0)
  * exclude (!) not working (broken by mis-applied fix for 4.1.0)
- Dropped patch nagios-issue_71.patch (included in sources)

Wed Sep  2 15:27:54 UTC 2015 -

- Add nagios-issue_71.patch
  * Fixes "CGI Could not read object configuration data" (boo#944102)

Thu Aug 20 13:05:14 UTC 2015 -

- add nagios-4.1.0-add_KOHANNA.conf patch to allow using kohanna2
  if available

Wed Aug 19 15:59:49 UTC 2015 -

- update to 4.1.0:
  * Promoted JSON CGIs to released status
  * New graphical CGI displays: statusmap, trends, histogram
  * Make sticky status for acks and comments configurable enhancement #20 
  * Add host_down_disable_service_checks directive to nagios.cfg #44
  * httpd.conf doesn't support Apache versions > 2.3
  * Fix for not all service dependencies created (John Frickson)
  * Fix SIGSEGV with empty custom variable (orbis / John Frickson)
  * Fix contact macros in environment variables (dvoryanchikov)
  * Fixed host's current attempt goes to 1 after going to hard state
  * Fixed two bugs/problems: Replace use of %zd in base/utils.c & 
    incorrect va_start() in cgi/jsonutils.c (Peter Eriksson)
  * Fixed: Let remove_specialized actually remove all workers (Phil Mayers)
  * Fixed log file spam caused when using perfdata command directives in nagios.cfg
  * Fixed off-by-one error in bounds check leads to segfault (Phil Mayers)
  * Added links for legacy graphical displays (Eric Stanley)
  * Update embedded URL's to https versions of Nagios websites 
  * Fixed doxygen comments to work with latest doxygen #30
  * Fixed makefile target "html" to PHONY to fix GitHub issue #28
  * Fixed typo as per GitHub issue #27 (Trevor McDonald)
  * Fixed jsonquery.php 404 not found error, and disabled Send Query 
    button until form populates #43
  * Fixed linking in Tactical Overview for several of the Host entries 
    in Featured section #48
  * Fixed passing limit and sort options to pagination and sort links #42
  * Added form field for icon URL and clean-up when it changes in CGI Status Map.
  * Added options to cgi.cfg to uncheck sticky and send when acknowledging a problem 
  * Low impact changes to automate the generation of RPMs from nagios.spec file.
  * Update index.php (Trevor McDonald)
  * Fixed escaping of corewindow parameter to account for possible XSS injection
  * Typo correction (T.J. Yang)
  * Make getCoreStatus respect cgi_base_url (Moritz Schlarb)
  * Adjusted map layout to work within frames (Eric Stanley)
  * Fixed map displays are now the full size of browser window (Eric Stanley)
  * Fixed labels and icons on circular markup no longer scale on zoom
  * Got all maps except circular markup working with icons (Eric Stanley)
  * Fixes to make legacy CGIs work again. (Eric Stanley)
  * Fixes to make all/html target tolerant of being run multiple times
  * For user-supplied maps, converted node group to have transform
  * Fixed issue transitioning from circular markup map to other maps
  * Fix displayForm to trigger on the buttom press (Scott Wilkerson)
  * Fix fo getBBox crash on Firefox (Eric Stanley)
  * Fixed map now resets zoom when form apply()'d (Eric Stanley)
  * Fixed so close box on dialogs actually closes dialog (Eric Stanley)
  * Corrected directive in trends display (Eric Stanley)
  * Fixed minor issue with link in trends linkes (Eric Stanley)
  * Fixed issue with map displaying on Firefox (Eric Stanley)
  * Added exclusions for ctags generation (Eric Stanley)
  * Update map-popup.html (Scott Wilkerson)
  * Initial commit of new graphical CGIs (Eric Stanley)
  * Fixed Github bug #18 - archivejson.cgi returns wrong host for state 
    change query (Eric Stanley)
  * Status JSON: Added next_check to service details (Eric Stanley)
  * Fixed escaping of keys for scalar values in JSON CGIs (Eric Stanley)
  * build: Include <sys/loadavg.h> if it exists. (Eric J. Mislivec)
  * lib-tests: test-io{cache|broker} need -lsocket to link. (Eric J. Mislivec)
  * lib-tests: test-runcmd assumes GNU echo. (Eric J. Mislivec)
  * lib-tests: Signal handlers don't return int on most platforms, and using 
    a cast was the wrong way to resolve this. (Eric J. Mislivec)
  * Fix some type/format mismatch warnings for pid_t. (Eric J. Mislivec)
  * Fix build on Solaris. (Eric J. Mislivec)
  * runcmd: Fix build when we don't HAVE_SETENV. (Eric J. Mislivec)
  * Fixed checkresult output processing (Eric Mislivec)
  * Corrected escaping of long output macros (Eric Mislivec)
  * Fixed null pointer dereferences in archive JSON (Eric Stanley)
  * Fixed memory overwrite issue in JSON string escaping (Eric Stanley)
  * JSON CGI: Now escaping object and array keys (Eric Stanley)
  * New map does not account for multiple parents, leaving "legacy" 
    map as an option in the menu
- removed upstreamed patches:
  + nagios-bogus_warnings.patch
  + nagios-apache24.patch
- refreshed all other patches

Fri Jul 31 05:12:51 UTC 2015 -

- use new syntax for apache 2.4
  + nagios-apache24.patch

Fri Feb 27 19:47:04 UTC 2015 -

- patch so nagios does not truncate performace data 

Tue Feb 17 21:06:34 UTC 2015 -

- fix alias definition in systemd file

Mon Feb 16 15:26:14 UTC 2015 -

- ignore errors during *post* of nagios-theme-exfoliation caused 
  by the script trying to restart apache during build (bnc#911755)
- ignore suse-missing-rclink rpmlint warning, as we use a wrapper
  script to provide backward compatible features (check)

Wed Jan 28 17:23:44 UTC 2015 -

- add Alias=monitoring_daemon.service to systemd file to have a 
  similar virtual provides like in the old times

Thu Dec  4 16:08:31 UTC 2014 -

- package a shell script in /usr/sbin/rcnagios providing the 
  check commands as in the old sysvinit days (and redirect anything
  else directly to systemctl)

Fri Aug 15 13:00:36 UTC 2014 -

- update to 4.0.8:
  * Removed 8 kB string size limitation in JSON CGIs (Eric Stanley)
  * Re-implemented auto-rescheduling of checks (Eric Mislivec)
  * Avoid bunching of checks delayed due to timeperiod constraints
  * Limit the number of autocalculated core workers to not spawn 
    too many on large systems (Eric Mislivec, Janice Singh)
  * Removed quotes from numeric duration values in JSON CGIs
  * Fixed escaping in JSON CGIs so all required characters are 
    escaped, and in the correct order (Eric Stanley)
  * Fixed segfault in archive JSON CGI when plugin output was empty
  * Fixed several possibilities for buffer overflow
  * Fixed Tracker #582, #626: Handle VAR=VAL assignments at the start
    of simple commands (Eric Mislivec, Phil Randal)
  * Fixed Tracker #630: Recognize '<' and '>' as redirection operators
  * Corrected worker communication protocol documentation
  * Fixed Tracker #361: Downtime notifications not displayed properly
- removed nagios-CVE-2014-1878.patch (fixed upstream)
- refreshed all patches

Wed Jul 23 13:40:28 UTC 2014 -

- include special handling for the temp_path variable in the 
  nagios-exec-start-pre script to avoid setting wrong permissions
  (bnc #887904)

Wed Jun 25 13:38:56 UTC 2014 -

- Patch away bogus warnings "Unknown jobtype: 10" flooding log files
  if service_perfdata_command is used. 
  This patch implements the fix of the upstream bugreport #534
  See for details.
  => bogus_warnings.patch

Thu Jun  5 16:00:00 UTC 2014 -

- use systemctl on newer distributions (bnc #881289)

Tue Jun  3 17:56:51 UTC 2014 -

- update to 4.0.7:
  * Added value of custom variables to Object JSON output for hosts, 
    services and contacts (Eric Stanley)
  * Fixed bug #616: Unescape plugin output read from checkresult files, 
    fix multiline perf data concatenation, and avoid extra memory 
    allocation and copies. (Eric Mislivec)
  * Fixed bug #609: Image on home page doesn't have correct image 
    path prefix. (Derek Brewer)
  * Fixed bug #608: Extra newline in service check timeout 
    output string. (Mauno Pihelgas)
  * Fixed bug #596: Crashes checking contact authorization for host 
    escalations. (Alexey Dvoryanchikov - duplicates #590, #586)
  * Fixed bug #496: Syntax error in exfoliation's common.css. 
    (Karsten Weiss)

Sat May  3 18:27:45 UTC 2014 -

- update to 4.0.6:
  * Added name of authenticated user to JSON CGI results object
  * Added Nagios Core version to the Status JSON CGI programstatus query
  * Added daemon status to main page
  * Fixed bug #600: Service Check Timeout State always returns OK (0) status
  * Fixed bug #583: Status Check Output of (No output on stdout) stderr
  * Fixed bug #573: Service checks returns (No output on stdout) stderr
  * Fixed bug #438: Reloads during downtime causes wrong availability
  * Fixed feed updates when daemon can not access external networks
  * Archive JSON: Fixed bugs calculating availability
  * Archive JSON: Allow missing logs to be skipped 
- refreshed patches to apply with latest source

Sat Apr 12 14:04:27 UTC 2014 -

- update to 4.0.5:
  + Fixed bug #595: Nagios 4 security fix
  + Fixed bug #594: Nagios 4 fix contactgroups parsing
  + Fixed bug #577: Nagios 4 checks stalled when write to socket failed 
  + Fixed bug #580: Nagios 4 memory leak 
  + Fixed bug where audio alerts wouldn't work with a 0 height and 
    width -

Fri Mar 28 21:01:21 UTC 2014 -

- fix stack-based buffer overflow in the cmd_submitf function 
  in cgi/cmd.c - CVE-2014-1878 (bnc#864843)

Mon Mar 17 19:20:30 UTC 2014 -

- add nagios-4.0.4-remove-date-time.patch to prevent unneccessary
  rebuilds due to __DATE__ and __TIME__ macros

Sun Mar 16 18:05:24 UTC 2014 -

- update to 4.0.4:
  * JSON CGIs moved to beta status (Eric Stanley)
  * Fixed bug #491,#553: Rebuilt the daemon-init scripts back to
    something that should work on all systems (Scott Wilkerson)

Sat Mar  1 17:55:49 UTC 2014 -

- update to 4.0.3
  * Aliased hourly_value to importance and minimum_value to
    minimum_importance and deprecated the former (Eric Stanley)
  * Added host and service importance macros (Eric Stanley)
  * Added notifications on flexible downtime expiration (Dan Wittenberg)
  * Bug #548: Temporary fix that rejects all external command during
    restart to prevent Core from crashing (Eric Stanley)
  * Corrected calculation of host importance and importance defaults (Eric
  * Fixed bug #498: Nagios 4 enable_environment_macros=1 not working (Eric
    Stanley, Alexey Dvoryanchikov)
  * No longer checks whether logs can be written when verifying
    configuration (Eric Stanley)
  * Fixed CGI bug where the CGI could read past the end of the list of CGI
    variables, potentially crashing the CGI (Scott Wilkerson)
  * Fixed inheritance of hourly_value from host and service templates
    (Scott Wilkerson)
  * Fixed bug #502: 4.0.0: Configuration -> Service Escalations =
    incomplete list (Eric Stanley)
  * Fixed bug #523: quotes and double quotes in plugin message are
    converted to HTML escapes in Nagios 4.0 (duplicate of bug #524)
  * Fixed bug #524: URLs returned in plugin check results are not
    correctly displayed (Eric Stanley)
  * Fixed bug where passive service checks would return "Service check
    timed out after 0.00 seconds" (Scott Wilkerson)
- print recommendation to run the upgrade_nagios script in case 
  of an update (via logger command)
- added man page for nagios_upgrade

Thu Jan 24 21:14:34 UTC 2014 -

- update to 4.0.2
  * Fixed 528: Nagios 4.0.1: Logrotation: Only current host- and 
    servicestates saved in rotated logfiles (duplicate of 507)
  * Fixed 507: Nagios 4.0.0 - Problem during log rotate (Stefano Ghelfi)
  * Fixed 530: RPM spec file sets wrong permissions on plugins 
    directory (duplicate of bug 494)
  * Fixed 494: nagios.spec fixes (with patch) (Karsten Weiss)
  * Fixed 515: Segsegv after starting up nagios (duplicate of bug 526)
  * Fixed 513: Crash while entering downtime for service 
    (duplicate of bug 526)
  * Fixed 529: Core Worker failed to reap child in 4.0.1 Description
  * Fixed 514: scheduled downtime not showing in web interface 
    (Eric Stanley)
  * Fixed 526: sort_downtime() corrupts scheduled_downtime_list 
    causing segfault (Adam James)
  * Fixed 492: Nagios 4 fails to remove/add checks upon reload 
    (Eric Stanley)
  * Fixed 484: Beta4.0.0b4 service checks returning (No output 
    on stdout) (Eric Stanley)
  * Fixed 470: statusmap doesn't display info (Cameron Moore)
  * Fixed 499: Security issue in, function 
    check_config (Tómas Edwardsson) 

Thu Jan 23 12:01:00 UTC 2014 -

- update to 4.0.1
  * Added compiler flags in RPM spec file to reduce compiler noise 
    (Dan Wittenberg)
  * Added logging of failure in dlclose() call (Anton Lofgren)
  * Added a simple query handler interface, nagios-qh.rb 
    (Dan Wittenberg)
  * Multiple code simplifications, additional error handling in 
    downtime code (Andreas Ericsson)
  * Reverted commit f99a9a7b which set check_interval to 1 if 
    it was configured as zero.
  * Corrected order of arguments when logging unknown hosts/services 
    (Scott Wilkerson)
  * Downtime initialized before retention data read (Eric Stanley)
  * Patches to make RPM build again (Dan Wittenberg)
  * Ensure that scheduled_downtime_depth never drops below zero 
    (Andreas Ericsson)

For a complete list of changes for the new Nagios Core 4 version, 

- removed upstreamed patches:
  + nagios-CVE-2013-2214.patch
  + nagios-disable_phone_home.patch
- added nagios-random_data.patch 

Wed Jan 22 16:53:49 UTC 2014 -

- bring package back to compiling state after introducing
  incompatible changes in nagios.spec with submit from
  Dec 27th (spec file changes obviously already for nagios 4.0,
  whereas we are still at 3.5.1). 

Fri Dec 27 14:49:18 UTC 2013 -

- Fix possible denial of service in CGI executables:
  * nagios-CVE-2013-7108.patch (bnc#856837)

Tue Sep 24 16:30:12 UTC 2013 -

- cleanup file list

Wed Sep 11 14:32:17 UTC 2013 -

- Recommend monitoring-tools package for those who want to convert
  their (real old) nagios configuration (using the subpackage from 

Thu Sep  5 18:03:39 CEST 2013 -

- add libperl_requires, as we link against libperl and thus
  need a specific version of perl

Fri Aug 30 23:14:55 UTC 2013 -

- update to 3.5.1:
  + Added handler for SIGXFSZ signal (Eric Stanley)
  + Fixed bug #444: Nagios 3.5.0 problem with macro $ADMINEMAIL$ : 
    @ is converted to %40 after 2 nagios reload (Duplicate of bug #407)
  + Fixed bug #407: Reloading nagios config causes spaces in notifications 
    to become plus signs (Alexey Dvoryanchikov)
  + Fixed bug #445: Adding triggered downtime for child hosts causes a 
    SIGSEGV on restart/reload (Eric Stanley)
  + Fixed bug #375: Freshness expiration never reached and bug #427: 
    freshness threshold doesn't work if it is set long 
    (Scott Wilkerson, Eric Stanley)
  + Fixed bug #432: Downtime scheduled as "Nagios Process" and not 
    the Users name (Sam Lansing, Eric Stanley)

Fri Jul 26 09:50:38 UTC 2013 -

- added icinga-monitoring-tools as recommend and removed the duplicated nagios files 

Fri Jun 28 08:27:25 UTC 2013 -

- added nagios-CVE-2013-2214.patch fixing unauthorized host/service 
  views displayed in servicegroup view (bnc#827020)

Thu Jun 27 15:47:56 UTC 2013 -

- fix permission problem on /usr/lib/nagios/plugins introduced with 
  one of the latest updates

Sun Mar 17 21:22:07 UTC 2013 -

- adapt static html pages to reflect the current version

Sat Mar 16 15:37:12 UTC 2013 -

- update to 3.5.0:
  + Fixed bug #403: The "configuration" page of the webui doesn't use 
    entity encoding when displaying the "command expansion" item (Eric 
    Stanley, Phil Randal)
  + Fixed bug #424: Nagios Core 3.4.4 seg fault (core dump) on restart 
    after removing config for running service (Eric Stanley)
  + Updated CGI utility functions to support UTF-8 characters (Eric Stanley)
  + Fixed bug where selecting Command Expansion from Configuration CGI 
    page would display commands instead (Eric Stanley)
  + Fixed bug #369: status.cgi crashes with segfault when there are german 
    ulauts (äöüß) in the hostname or the servicename (Eric Stanley)
  + Fixed bug #418: Scheduled Downtime Notifications Resent On Nagios 
    Restart/reload (Eric Stanley 

Wed Mar 13 15:51:51 UTC 2013 -

- general update for 12.1, 12.2 and 12.3 for bnc#809180

Thu Feb 14 09:50:37 UTC 2013 -

- provide 'monitoring_daemon' in the init script to allow other 
  init scripts to depend on it

Sat Jan 12 18:25:49 UTC 2013 -

- update to 3.4.4:
  + Fixed bug #408: service checks get duplicated on reload (Eric Stanley)
  + Added NULL pointer checks to CGI code. (Eric Stanley)
  + Fixed buffer overflow vulnerability in CGI code. Thanks to Neohapsis 
    for finding this. (Eric Stanley)
- refreshed patches

Wed Jan  9 11:10:21 CET 2013 -

- added new subpackage nagios-www-dch (don't call home):
  + add plain html pages to allow users to disable PHP and 
    loading of external references
  + re-added documentation (no external link any more)

Tue Jan  1 15:02:49 UTC 2013 -

- use new rpm macros for basic user-/groupadd commands:

Mon Dec 17 10:29:13 UTC 2012 -

- update to 3.4.3:
  * Applied fix for pagination and sorting on status.cgi #381 
    (Phil Randal)
  * Fixed issue where deleting a downtime could cause Nagios to crash 
    (Eric Stanley)
  * Corrected logic so that end times for flexible downtimes are 
    calculated from the downtime start rather than the current time 
    in the case where Nagios is restarted (Eric Stanley)
  * Fixed issue introduced by fix for bug #124 where flexible 
    downtimes are not taken into account on Nagios restart. 
    (Scott Wilkerson, Eric Stanley)
  * Fixed bug #247: If a service reports no performance data, the 
    perfdata log file has no line indicating the test.
  * Fixed link for unhandled unreachable host problems on tactical 
    overview page (Rudolf Cejka)
  * Fixed bug #345 with wild card searches not paging properly 
    on status.cgi (Phil Randal)
  * Fixed bug #343 on status.cgi where Service Group Summary can 
    potentially show wrong totals (Mark Ziesemer)
  * Fixed memory leaks on SIGHUP (Carlos Velasco)
- refreshed patches
- just require php not php5 to allow a switch to php53
- do not compress logfiles per default to allow searching via 
- init script now uses daemonchk.cgi to check for status (if present)

Mon Nov 26 11:35:24 UTC 2012 -

- Use usermod instead of groupmod when suse_version > 1220 due to
  pwdutils/shadow switch.

Tue Nov 20 07:53:48 UTC 2012 -

- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.

Thu Oct 11 12:24:39 UTC 2012 -

- add virtual provides 'monitoring_daemon' and 
  'monitoring_webfrontend' to allow 3rd party packages to run also 
  with compatible solutions like icinga

Sun Jun 10 16:09:54 UTC 2012 -

- remove checks.c-declare-temp_buffer.patch again as this is 
  fixed with the latest version
- added manpages for {new,}mini_epn and convertcfg

Mon Jun  4 00:20:17 CEST 2012 -

- update to 3.4.1
  * Double quotes in check_command definition break functionality
  (#332, reverts #86)

Wed May 23 10:44:57 UTC 2012 -

- run config check first before restart (init script)
- ignore subsys-unsupported rpmlint check as the init script just 
  removes it

Mon May  7 16:57:36 UTC 2012 -

- update to 3.4.0
  * Use execv() to execute active check commands (#86 - Ton Voon, dnsmichi)
  * Added service_check_timeout_state configuration variable (Bill McGonigle)
  * Permanently remove sleep on run_event == FALSE in main loop (Max 
  * Reduce notification load by moving notification viability check into 
    notification list creation (Opsview Team)
  * Added code to apply allow_empty_hostgroup_assignment flag to host and 
    service dependencies (Daniel Wittenberg)
  * Users can now see hostgroups and servicegroups that contain at least 
    one host or service they are authorized for, instead of having to be 
    authorized for them all (Ethan Galstad)
  * RSS feed boxes fallback if an error occurs (Ethan Galstad)
  * RSS feeds no longer block main page load (Mike Guthrie)

  * Fix $NOTIFICATIONRECIPIENTS$ macro to contain all contacts assigned to 
    host|service, not only notified contacts (Bug #98 Matt Harrington)
  * Scheduled Downtime Notifications Resent On Nagios Restart/reload (Bug 
    #124 - ricardo)
  * NOTIFICATIONTYPE MACRO never became CUSTOM (Bug #168 - Alexey 
  * Plugged minor memory leaks in notification logic 

Wed Dec  7 14:04:52 UTC 2011 -

- fix
  * remove "^M" (antidos ;))

Tue Nov  1 13:02:02 UTC 2011 -

- skip fdupes call and ignore that we might save 4k on the disk
  => fixes bnc #721346 
- fix file permissions in docudir
- use nagios-rpm-macros

Fri Oct  7 18:37:43 UTC 2011 -

- also check (and fix) the ownership of the directory where 
  $status_file lives - Nagios uses this directory for temporary 

Mon Aug  1 18:43:41 UTC 2011 -

- update to 3.3.1

	* Fixes status.cgi when called with no parameters, where host should be 
	set to all if none specified (Michael Friedrich)
	* Fixes possible validation error with empty hostgroups/servicegroups 
	(Sven-Göran Bergh)
	* Performance-data handling and checking is now thread-safe so long as 
	embedded perl is not used.
	* Children should no longer hang on mutex locks held in parent for 
	localtime() (and similar) calls.
	* Debug logging is now properly serialized, using soft-locking with a 
	timeout of 150 milliseconds to avoid multiple threads competing for the 
	privilege to write debug info.
	* Fixed extraneous alerts for services when host is down
	* Fixed incorrect parsing of multi-line host check results (Jochen Bern)
	* Fixed bug with passive host checks being incorrectly sent to event 
	brokers as active checks
	* Fixed bug where passive host check status updates were not being 
	propagated to event brokers

Tue Jul 26 21:06:13 UTC 2011 -

- fixed typos in nagios.spec

Fri Jul  8 11:35:37 UTC 2011 -

- removed setuid bit from /var/spool/nagios - configure the 
  right permissions on service start instead
- use the right STDERR in the cron script
- cleanup files section

Tue Jul  5 14:57:40 UTC 2011 -

- integrated cron script from Daniel Kozar (bnc#701208)

Mon Jul  4 17:03:22 UTC 2011 -

- fixes in init script if check_external_commands are enabled
- added nagios-3.2.3-CVE-2011-1523.patch to fix 
  CVE-2011-1523 (bnc#682966)

Sun Mar 13 16:21:14 UTC 2011 -

- install /var/spool/nagios with setgroup bit set, so all new files 
  in this directory belong to the command group (maybe we should 
  use a permissions file for this?)

Wed Oct  6 19:49:37 UTC 2010 -

- update to 3.2.3:
  + Fixes problem where disabling all active hosts/services was not 
    taking effect
  + Fixes for compiler warnings (code cleanup by Stephen Gran)
  + Fixes for format errors in event handler logging (Guillaume Rousse)
  + Fixed incorrect info in sample nagios.cfg file for 
    state_retention_file (Michael Friedrich)
  + Fixed broker_event_handler() to return ERR if data is NULL 
    (Michael Friedrich)
- rebased all patches
- adapted nagios-disable_phone_home.patch

Mon Sep 20 09:50:56 UTC 2010 -

- removed unneeded filter "permissions-directory-setuid-bit" from

Tue Sep  7 06:43:37 UTC 2010 -

- cleaned spec and sources, removed unused patches from source

Wed Sep  1 22:37:22 UTC 2010 -

- reworked phone-home patch 

Wed Sep  1 22:14:55 UTC 2010 -

- Update to nagios 3.2.2, excerpt from changelog:
* Fix for choosing next valid time on day of DST change when clocks go
one hour backwards
* Fix for nagios now erroring when "Error: Could not find any
contactgroup matching..." displayed
* Fix tap tests for Solaris 10 and newer versions of Test::Harness
* Fix for notifications not being sent out when scheduled downtime is
cancelled (Daniel Pouzzner)
* Fix for first notification delay being calculated incorrectly, and
notifications potentially going out early (Pawel Malachowski)
* Fix for text of scheduling downtime of all services on a host (Holger
* Fix for services inheriting notification period from hosts if not
defined (Gordon Messmer)
* Fix for incorrect service states on host failures (bug #130 Petya Kohts)
* Fix for incorrect service state attributes being set on host failures
(bug #128 Petya Kohts)
* Fix for non-scheduled hosts and services not being updated in NDOUtils
* Fix for incorrect host state counts in status CGI when viewing
servicegroups (bug #72)
* Fix for new Splunk integration query parameters (bug #136)
* Fix for extra field header in availability CSV export (bug #113)
* Fix for macro processing code modifying input string (Jochen Bern)
* Fix for event execution loop re-scheduling host checks instead of
executing them if service checks are disabled (bug #152)
* Fix for segfaults on Solaris (Torsten Huebler)
* Fix for incorrect comment expiration times being passed to event
broker (Mattieu Kermagot)

Thu Jul 15 20:56:09 UTC 2010 -

- back to the old file permissions (once again for clean 
  nagios support)
- readded nonsense stuff again
- create/fix check_result_path if needed

Fri Jul  9 14:06:55 UTC 2010 -

- fix file/dir perms
  o once again for centreon support
- spec mods
  o sort TAGS
  o added lost Authors (description)
  o macros
  o remove nonsense stuff

Thu Jun 24 10:16:35 UTC 2010 -

- rebase phone-home patch

Tue Jun 22 09:00:37 UTC 2010 -

- recommend nagios-plugins only to avoid buildcycles

Fri Jun 18 01:16:09 UTC 2010 -

- fix init script: touch files if they do not exist- 

Fri May 28 05:03:43 UTC 2010 -

- disable patch8 - needs rebasing
- install PIDDIR if it's not /var/run to avoid owner problems 
  during start
- always change ownership of standard files to the right values

Mon May 24 16:30:36 UTC 2010 -

- fix 'Schedule downtime for this host and all services' behavior
- fix typos resulting in non used style declarations
- fix deleting comments from the hashlist
- rebase
- fix a handful compiler warnings
- do not allow nagios to phone home: disable online_update_checks
- fix command-group 
- BuildRequire net-tools for enabling WAP

Fri May 14 12:51:20 UTC 2010 -

- check_verbose now always prints the resulting logfile - this 
  allows to see the warnings

Tue May 11 15:13:42 UTC 2010 -

- ghost the pid directory

Wed May  5 08:52:01 UTC 2010 -

- fix broken files section 
- init skript now handles /var/run on tmpfs
- small adaptions of init skript 
- default pidfile now /var/run/nagios/
- add manpages from Debian package
- add Debian patches:
  + nagios-fix_forced_servicechecks.patch
  + nagios-fix_encoding_trends.cgi.patch
  + nagios-fix_spurious_dollar_signs_added_to_command_lines.patch

Tue Apr  6 10:48:52 UTC 2010 -

- cleanup source
  o removed nagios-3.2.0

Wed Mar 10 11:25:24 UTC 2010 -

- update to 3.2.1:
  + Link to allow scheduling downtime for all services on a host
  + Speedup to CGIs when lots of comments or downtimes in status.dat file
  + Patch for new_mini_epn to allow for any command line length without 
    breaking extra trailing or leading whitespace
  + Fix for incorrect scheduling when time has gone back an hour 
    (partial fix for 24x7)
  + Fix for logging test, which was not timezone aware 
    (bug #0000077 - Allan Clark)
  + Fix for CSS validation of padding: X
  + Fix for documentation re: case-insensitive nature of custom 
    variables (Marc Powell)
  + Fix for template configurations which use negated wildcards 
    (Tim Wilde) 

Mon Nov 23 11:41:07 CET 2009 -

- changed path to send_nsca in the eventhandler script according 
    to the path given in the nagios-nsca package. BNC #486937

Fri Nov  6 19:10:21 UTC 2009 -

- added lost changes
  o Jun 24 2009
  o Jun 23 2009
- spec mods
  o removed changelog
  o added LEGAL to doc
  o simplify install of extra SOURCES
- added support for centreon
  o centreon is frontend GUI for nagios
  o changed perms/ownership in files section 

Fri Aug 21 12:16:49 UTC 2009 -

- cleanup spec
  o fixed header
  o sorted TAGS
- fixed deps
  o added missing Req nagios-plugins

Fri Aug 14 12:15:31 CEST 2009 -

- added Requires php and mod_php_any 

Thu Aug 13 11:15:30 CET 2009 -

- added ndo2db to Should-Start/Should-Stop in rcnagios
  changed permission of resource.cfg (needed by centreon)
    (Changes by

Wed Aug 12 22:02:30 CET 2009 -

- update to 3.2.0:
 * Fix for read-only permissions bug in CGIs that caused problems viewing
 comments (bug #0000029)
 * Fix for incorrect CGI reports (availability, trends, etc.) when
 reporting period spans Daylight Savings Time (bug #0000046)
 * Fix for detection of truecolor support in GD library (Lars Hecking)
 * Reverted to use --datadir configure script option instead of the more
 recently introduced --datarootdir option
 * Status and retention files are now flushed/synced to disk to prevent
 incomplete information being displayed in CGIs
 * Fix for incorrect next service check time calculation when Nagios is
 reloaded with different timeperiod ranges
 * Updated Fedora quickstart guide to indicate PHP requirements
 * Known issue: Service checks that are defined with timeperiods that
 contain "exclude" directives are incorrectly re-scheduled.  Don't use
 these for now - we'll get this fixed for 3.4

Wed Jun 24 11:26:03 CEST 2009 -

- update to 3.1.2
    - fixes bug in host/service schduling logic that caused excessive
      CPU usage introduced with 3.1.0

Tue Jun 23 10:48:36 CEST 2009 -
- update to 3.1.1
    * New "important check command" flag for use in service templates, to
    aid configuration in distributed environments
    * Fix for nagios validation error when no services defined
    * Fix for stylesheet link
    * Fix for extinfo.cgi error message when cgi.cfg doesn't exist
    * Fix for notifications.cgi where Update button on right didn't retain
    host information when no host= was in query parameters
    * Fix for potential bug where a contactgroup with no members could cause
    parsing errors
    * Fix for W3 validation for history.cgi
    * Fix for W3 validation for extinfo.cgi
    * Fix for nagiostats to return non-zero with failures in MRTG mode
    * Added t/ directory for tests. Use make test to run. Requires perl on
    development server
    * Fix for duplicate event_id attributes in status and retention data
    * Fix for duplicate unlink() during check processing
    * Added missing check period column to host config display (CGI)
        * Fix for embedded Perl initialization under FreeBSD
        * Fix for incorrect re-initialization of mutext after program restart
        * Fix for incorrect weighting in host flap detection logic
        * Added libtap to distribution. Use ./configure --enable-libtap to compile
        * nagios.log permissions are now kept after log rotation
        * Fix for "Max concurrent service checks (X) has been reached" messages
            - will now push services 5 + random(10) seconds ahead for retry
        * Fix for removing old HTML files for web frontend that are now replaced
        with PHP equivalents (in dex/main/side.html)
        * Fix for incorrect service history link text in CGIs
        * Fix for useless code loop in netutils.c
        * Fix for potential divide by zero in event scheduling code
        * Fix for trailing backslash in plugin output causing memory corruption
        in CGIs
        * Fix for bug that could affect host/service scheduling during clock
        time skew or changes to time perod definitions between restarts
        * Leading whitespace from continuation lines in configuration files is
        now stripped out
        * Fix for bug where pipe (used by IPC) file descriptors get inherited by
        child processed (e.g. event handlers) (bug #0000026)
        * Fix for failure to daemonize - Nagios now bails (bug #0000011)
        * Fix for notifications about flapping starting not processed properly
        by retention data
        * Patch to add transparency to statusmap icons for truecolor images
        * Patch to add read-only permissions to extinfo CGI
        * Security fix for statuswml.cgi where arbitrary shell injection was

Fri Mar 27 11:28:44 CET 2009 -

- added check_verbose to rcnagios to print the error messages 
    directly instead of pointing to the error_log BNC #486912

Tue Mar  3 14:05:41 CET 2009 -

- changed rcnagios to delete control characters from values
    BNC #480747

Tue Dec  9 12:29:09 CET 2008 -

- update to 3.0.6:
  + Fix for CGI submission of external commands (writing newlines 
    and submitting service comments)
  + Fix for Apache group membership in RPM spec file
  + Fix for improper notification propagation command processing
  + Better out-of-disk-space error handling when writing retention 
    and status files
  + Disabled adaptive check and eventhandler commands for security 
  + Fix for reading output from system commands (event handlers, 
    etc) that have timed out
  + Added wildcard host matching in CGIs
  + Fixes for playing audio alerts in CGIs
  + Fix for incorrect host status links in status CGI when viewing
    hostgroup summary
  + Added support for x509 cert authentication in the CGIs

Mon Dec  1 12:19:51 CET 2008 -

- don't fail if the host has problems to execute newaliases

Mon Nov 10 13:17:25 CET 2008 -

- update to 3.0.5:
  + Security fix for Cross Site Request Forgery (CSRF) bug reported
    by Tim Starling.
  + Sample audio files for CGIs removed from distribution
  + Fix for mutliline config file continuation bug
  + Minor sample config file fix
  + Added documentation on CGI security issues 
- added permissions-directory-setuid-bit for /var/spool/nagios

Tue Oct 28 17:54:37 CET 2008 -

- use relative pathnames in %%post

Fri Oct 17 15:40:25 CEST 2008 -

- update to 3.0.4:
  + Fix for properly terminating plugins when parent processes get 
    killed (e.g. using 'killall nagios' with check_timeout plugins 
  + Fix for event broker callback when service notifications are 
  + Fix for scheduling scheduling servicegroup downtime with 
    'hosts too' option in CGIs
  + Fixes for bugs in sample event handlers - stop/start active 
    service checks and enable notifications
  + Cosmetic fix for logging of notifications
  + Fix for host/service name encoding in CGIs (trends and 
    availability reports, etc.)

Mon Sep 15 18:38:23 CEST 2008 -

- be a bit more secure in %post scripts
- fix ownership of resource file in init script
- enhance the README.SuSE a bit
- Recommend cron

Mon Jul 21 15:38:40 CEST 2008 -

- fix fillup call
- update to 3.0.3:
  + Minor bug fixes in CGIs
  + Minor bug fix in navigation frame
  + Better error logging during fork() errors
  + Fixed bug in parsing host dependencies
  + Updated to allow for 4KB lines in Perl plugin output
  + Fixed bug in command for disabling contact notifications
  + Fix for bugs in host and service orphan check logic
  + Fix for properly escaping macros containing URLs
  + Patches for possible XSS vulnerability in CGIs (CVE-2007-5803)
  + Changes to service check event broker logic (DNX patches)
  + Fixes for url encoding
  + Fix for debug logging of notifications
  + Segfault fix in history CGI
  + Typo fix in object config routines

Thu May 29 11:15:34 CEST 2008 -

- fix missing return value in run_async_service_check (bnc#395203)

Thu Apr 24 16:16:24 CEST 2008 -

- require mailx (bnc#383209)

Tue Apr 22 14:33:59 CEST 2008 -

- fix cron logfile-check in /var/log/nagios/archives/ (bnc#381857)

Thu Apr  3 12:42:34 CEST 2008 -

- update to 3.0.1:
  + Fixed bug in trends CGI with user not being authorized
    for hosts/services
  + Fixed bug in status CGI with page layout messing up when
    sounds enabled

Thu Mar 13 21:08:55 CET 2008 -

- update to 3.0 (final):
  + Faster program startup times (especially in large installs)
    with new object lookup code
  + Fix for special contact inheritance rules in
    host and service escalations
  + Fix for bug in processing $CONTACTADDRESSx$ macros
  + Documentation fixes
- Recommend perl

Wed Mar  5 18:38:43 CET 2008 -

- update to 3.0rc3:
  + New macros have been added
  + The old $NOTIFICATIONNUMBER$ macro has been deprecated in favor 
  + The $HOSTNOTES$ and $SERVICENOTES$ macros may now contain 
    macros themselves
  + new 'enable_environment_macros' option, which allow to disable
    global macros for use in check, event handler, notification, 
    and other commands on large installations
  + scheduled downtime entries are now stored in the status file 
    and retention file, respectively
  + Current and retained comments are now stored in the status file 
    and retention file, respectively
  + Acknowledgement comments that are marked as non-persistent are 
    now only deleted when the acknowledgement is removed.
  + Comment and downtime IDs are now retained across program 
    restarts and should be unique unless the retention data is 
    deleted or ignored.
  + Added flap_detection_options directive to host and service 
    definitions to allow you to specify what host/service states 
    should be used by the flap detection logic
  + Added a new PROCESS_FILE external command to allow processing 
    of external commands found in an eternal (regular) file. 
  + Contact status information (last notification times, 
    notifications enabled/disabled, etc.) is now saved in the 
    status and retention files, although it is not processed 
    by the CGIs.
  + check timeperiod for hosts and services can now be modified 
  + Multiline plugin output is now supported for host and 
    service checks
  + Nagios now checks for orphaned service checks by default.
  + Host checks are now run in parallel
  + Timeperiods were overdue for a major overhaul 
  + Added event broker callbacks for adaptive programm and contact 
    status data
  + ... (See ChangeLog for more details)
- Logfiles are stored in /var/log/nagios now 
- Nagios uses own logrotation - but we bzip the old logfiles via 
  weekly cronjob (Requires: bzip2)
- added sysconfig file for timeout and nice level
- overhaul the init script
- added a README.SuSE
- added rpmlintrc
- added config.err file as %ghost
- use upstream macros for all steps during rpmbuild where possible 
- adapt to work on all (open)SUSE distributions
- overhaul the patches
- cmdusr is now wwwrun and not nobody
- cmdgrp is now new group nagcmd and not www
- split out devel package
- enable event-broker
- use upstream apache config 
- adapt the generated sample configurations so the work out of the 
- enable template-objects 
- prepare and own the directory for event brokers
- include all sample configuration in docdir 
- use fdupes
- create/update new groups/users in %pre of the (sub-)package
- add the apache2 user to the nagcmd group in %post of nagios-www
- restart apache2 if nagios-www changes
- own some %ghost files with the correct permissions

Fri Oct 26 08:56:18 CEST 2007 -

- update to nagios version 2.10
  * Added 'make install-webconf' command to install Apache web config file
  * Sample config files are now installed without a -sample extension
  * Fix for SIGTERMs being seen as SIGEXITs, non-logging of SIGTERMs/shutdowns
  * Minor fix for notification timeout log messages
  * Fix for not logging passive host check results
  * Minor bug fixes in CGIs
  * Fix for a segfault when processing passive host check results with empty output/perfdata
  * Fix for incorrect latency calculation for passive service checks
  * Bug fix with attempting to access an uninitalized mutex if external commands are disabled
  * Fix for keeping service checks in the event queue when active service checks are disabled globally
  * Fix for a potential cross site scripting vulnerability in the CGIs
  * Program version is now displayed in CGIs

- removed obsolete FAQ patch in html/docs dir

Sun Sep 16 22:28:02 CEST 2007 -

- added openssl-devel to BuildRequires to support SSL in check_http 

Sun Aug 12 13:15:56 CEST 2007 -

- move to /usr/lib/nagios/
  set 0755 permissions for executable files (157814)

Wed May 16 23:11:48 CEST 2007 -

- build on older distributions:
  BuildRequires: libapr0 XFree86-devel XFree86-libs

Fri May  4 16:54:26 CEST 2007 -

- update to nagios version 2.9
  * Fix for incorrect performance data file write/append mode options
  * Fix for current status of hosts with no host check command defined
  * SIGSEGV signals should now be logged again (broken in 2.8)
  * Configure script fix for no mail program found/installed on system
  * Configure script option bug fixes for cygwin and embedded perl
  * Command definitions and host/service plugin perfdata with HTML should now be escaped in CGIs
  * Patch for incorrect time down percentage in availability CGI
  * Updated init script to fix a race condition during restarts  

Mon Mar 12 13:27:34 CET 2007 -

- update to nagios version 2.8
  * Bug fix for calculating notification interval with service escalations
  * Bug fix for using servicegroups in service dependency definitions
  * Bug fix for bad date format submission in command CGI
  * Possible segfault fix during restarts when daemon was performing host checks
  * Fix for missing check timeout in event broker calls
  * Fix for handling signals under NPTL
  * Added error messages for passive service checks that don't correspond to a defined service

Fri Feb  9 11:03:20 CET 2007 -

- update to nagios version 2.7
  * now sets environment var (NAGIOS_PLUGIN) to indicate patch of plugin that is executing
  * Updated nagiostats with new MRTG vars for tracking buffer usage
  * Added sample MRTG config file
  * Minor patches to availability and status CGIs
  * Minor documentation updates
  * Fix for segfault during expiration or deletion of scheduled downtime
  * Fix for scheduling immediate service check through WAP interface
  * Fix for leading whitespace before comments in object config files

Thu Feb  1 11:57:31 CET 2007 -

- add quick-start.txt (#237372)

Thu Feb  1 10:54:08 CET 2007 -

- remove unneeded trailing slashes from Alias and Directory entries
  in nagios-http.conf

Wed Jan 17 18:31:49 CET 2007 -

- fix more comparison with string literal in avail.c

Thu Jan 11 13:08:56 CET 2007 -

- FATE #301512

Thu Jan 11 13:05:31 CET 2007 -

- fix typo in html docu, perdata.html -> perfdata.html

Thu Jan 11 11:49:01 CET 2007 -

- correct link to external FAQ website

Thu Jan 11 11:34:54 CET 2007 -

- correct Alias in nagios-httpd.conf

Wed Jan 10 18:05:04 CET 2007 -

- update the default example config to mail to nagios%localhost
  instead to non-existant nagios-admin%localhost

Wed Jan 10 11:58:32 CET 2007 -

- fix comparison with string literal (#232415)

Mon Jan  8 22:30:07 CET 2007 -

- move pid file to /var/run/nagios/ (#231169)

Fri Dec  1 11:48:59 CET 2006 -

- update to version 2.6
  * fix for unscheduled triggered downtime entries
  * fix for embedded audio in tac and status CGIs
  * fixed bug in nagiostats utility when reporting host/service check latency
  * misc code cleanups for compiler warnings
  * fixed error when reading empty (zero byte) config files
  * default is now to check for orphaned service checks (Francois Caen)
  * fixed bug with non-standard CGI config file location in status data (Carson Gaspar)
  * fixed bugs and simplified examples in sample config files (Mark Young) 
  * removed obsolete patches which are included in upstream now

- fixed "empty PID file error" in init script

Thu Nov 16 18:14:37 CET 2006 -

- changed home dir to /var/lib/nagios (#221791)

Tue Oct 17 16:14:56 CEST 2006 -

- fix uninitialized variable in run_global_service_event_handler (212892)

Mon Sep 18 20:36:36 CEST 2006 -

- add a user/group nagios (#61908)

Fri Sep  8 11:28:49 CEST 2006 -

- update to version 2.5
  disable sapmon patch for the time being

Wed May 24 18:33:07 CEST 2006 -

- Don't build as root.
- Don't strip binaries.
- Fix format string bug.

Wed May  3 22:51:20 CEST 2006 -

- fixed possible buffer overflow in CGI scripts (#140494)

Wed Jan 25 21:38:32 CET 2006 -

- converted neededforbuild to BuildRequires

Mon Jan  9 12:46:14 CET 2006 -

- fixed off-by-one overflow (#141124)

Fri Nov 18 06:41:12 CET 2005 -

- update to stable version 1.3

Thu Oct  6 21:23:41 CEST 2005 -

- fixed autobuild warnings about printf format

Sat May 14 21:11:21 CEST 2005 -

- fixed compiler errors about usage of uninitialized vars

Sun Apr 24 09:37:02 CEST 2005 -

- Compile with GCC4.

Mon Aug 30 15:51:56 CEST 2004 -

- removed apache1 traces

Mon May  3 14:21:58 CEST 2004 -

- fix compiler-warnings

Tue Feb  3 07:18:49 CET 2004 -

- update to nagios 1.2 

Thu Sep 18 21:26:52 CEST 2003 -

- /usr/lib/nagios and /usr/lib/nagios/plugins are owned 
  by root (#31100)

Mon Sep  8 10:22:16 CEST 2003 -

- add apache2 config-files, require http_daemon 
  and need apache2-devel-packages for build (#30157) 

Wed Aug 27 12:52:24 CEST 2003 -

- remove traceroute-lbl from neededforbuild
  traceroute from net-tools is used anyway

Mon Aug 18 06:29:30 CEST 2003 -

- added activation meta-data to sysconfig (#28830)

Fri Aug 15 02:28:47 CEST 2003 -

- change cmdgrp from nogroup to www (the group apache now runs
  under) [#21782]
- implement try-restart correctly

Thu Jul 31 06:19:24 CEST 2003 -

- use stop/restart macros 

Tue Jul 29 15:19:34 CEST 2003 -

- Fix chown invocation.

Fri Jul 25 10:25:50 CEST 2003 -

- added bugfixes 

Thu Jun 12 14:58:37 CEST 2003 -

- Make sure plugin directory exist

Thu Jun 12 07:37:12 CEST 2003 -

- Add nagios libdir to filelist

Wed Jun  4 08:53:53 CEST 2003 -

- update to bugfix release 1.1
  * File descriptor leak in file-based performance routines
  * Timestamp fix for PostgreSQL 7.3
  * Minor bug fixes to cmd and history CGIs
  * Minor documentation fixes 

Mon Jan 13 08:48:07 CET 2003 -

- added sysconfig-metadata (#22607) 

Mon Dec  2 08:57:08 CET 2002 -

- adopted sapmoni.dif for gcc 3.3 

Mon Nov 25 07:49:50 CET 2002 -

- update to 1.0 final
  * Minor bug fixes in CGIs
  * Minor doc updates
  * Bug fix for flex host downtime
  * Embedded perl bug fixe for arguments with spaces
  * Host escalation logic fix

Tue Oct 15 13:59:36 CEST 2002 -

- running pre-flight configuration check always when
  starting nagios (#20916)
- added logrotate definitions for logfiles
- fixed embedded perl (#20916) (thanks to mls)

Mon Sep 23 07:39:24 CEST 2002 -

- update to 1.0b6
  * Added wildcards and multiple hosts/hostgroups to host dependency
    and service dependency definitions
  * Added wildcard support for members directive in hostgroup 
  * Minor bug fixes and cleanups in CGIs
  * Minor cleanups in the core
  * New version of snprintf() included that supports %f
  * Notification interval for escalations now defaults to 
    non-escalated value

Fri Aug 23 10:47:43 CEST 2002 -

- update to 1.0b5 
  * Fixed memory leak related to processing of passive checks
  * Memory leak fixes in the CGIs
  * Minor interface changes to the status and TAC CGIs
  * Bug fix in the notification CGI
  * Added minimalistic sample object config file (minimal.cfg)

Fri Aug 16 09:09:36 CEST 2002 -

- added PreReq (Bug #17938 #17939) 

Mon Aug 12 12:51:09 CEST 2002 -

- updated sapmoni patch to provide documentation

Mon Aug 12 11:56:48 MEST 2002 -

- made it work with threaded perl-5.8

Thu Aug  8 14:02:59 CEST 2002 -

- added patch to be able to use nagios-plugins-sap 

Sat Jul 27 10:32:19 CEST 2002 -

- fix neededforbuild

Fri Jul  5 07:56:23 CEST 2002 -

- update to 1.0b4
  * Address field in host definitions is now optional in 
    template-based config format. Defaults to host name if not 
  * Fixed memory leak when processing passive checks
  * Added illegal_macro_output_chars variable to main config file 
    to allow for stripping dangerous shell characters from plugin 

Wed Jun 12 06:58:26 CEST 2002 -

- removed -devel subpackage and moved the file to main-package 

Mon Jun 10 13:29:57 CEST 2002 -

- update to 1.0b3
  * Bug fixes in template-based object code
  * Bug fix in tac CGI for counting host and service states 
  * Default is now to check for external commands as often as 
  * Ping syntax for WAP interface moved to CGI config file
  * Command file user/group defaults to Nagios user/group unless
    overridden with configure script options
  * Sample template-based object config file fixes

Tue May 28 07:00:42 CEST 2002 -

- update to 1.0b2 
  * Fixed bug with escaping strings for DB support 
    (MySQL & PostgreSQL)
  * Several bug fixes in template-based object code
  * Multiple hostgroups supported in host and service escalations
  * Wildcard support in service, service escalation, and host
    escalation definitions

Thu May 23 10:06:11 CEST 2002 -

- install config-file templates 

Wed May 22 13:11:09 CEST 2002 -

- initial version of Nagios (the successor of NetSaint)
openSUSE Build Service is sponsored by