nagios-devel-4.4.6-bp151.4.6.1<>,p`!M@eee~R-wgu. $N d)=)7zӲźC]pFbCs+dVϜ_gC&STچqɕw$U;0ZPIbzQ-g>5^Fz c; ]%h@_z~N݃?ɚ[Y er*5+C2BtQOb*F5'W3*5/Ǣ0vv7Eg|-D>;?d ! > %.? Xx5t5 5 H5 5 5 H55%5.P5$H`(8)9):)FQGh5H<5I5XHYP\t5]H5^vbcdd eflu(5vzCnagios-devel4.4.6bp151.4.6.1Development files for NagiosNagios is a program that will monitor hosts and services on your network. It has the ability to email or page you when a problem arises and when a problem is resolved. Nagios is written in C and is designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. This package provides include files that Nagios-related applications may compile against.`obs-arm-8:SUSE Linux Enterprise 15openSUSEGPL-2.0-or-laterhttp://bugs.opensuse.orgDevelopment/Libraries/C and C++http://www.nagios.org/linuxaarch64&)N E.L:#f=h6 ! H 4  c5G3Mbw5-A큤A큤`^^^^^^`F`X^^^^^`````````````````````X^^`F^^^^^^^^^^^^^^`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-4.4.6-bp151.4.6.1.src.rpmnagios-develnagios-devel(aarch-64)    gccnagiosrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)4.4.63.0.4-14.6.0-14.0-15.2-14.14.1` @` @^א^^8 @]]@][\ \Db[ā@[ā@[{@Z%Zp^@Z!D@Z!D@Z@YY@YY7XO@X @XM?X=mX#X!@XI@WίWiV U@UU@UoUc@T\@T-@TT@TLlars@linux-schulserver.de - 4.4.6lars@linux-schulserver.de - 4.4.6Stefan Botter lars@linux-schulserver.de - 4.4.5Dominique Leuenberger Stefan Botter Ansgar Esztermann kukuk@suse.deStefan obs@botter.cc - 4.4.3aeszter@gwdg.delars@linux-schulserver.de - 4.4.2adaugherity@tamu.educrrodriguez@opensuse.orgobs@botter.cclars@linux-schulserver.delars@linux-schulserver.derbrown@suse.comsbrabec@suse.comlars@linux-schulserver.delars@linux-schulserver.deobs@botter.cclars@linux-schulserver.delars@linux-schulserver.delars@linux-schulserver.dejengelh@inai.delars@linux-schulserver.delars@linux-schulserver.delars@linux-schulserver.delars.vogdt@suse.comadaugherity@tamu.eduaj@ajaissle.dearchie@dellroad.orglars@linux-schulserver.delars@linux-schulserver.depgajdos@suse.comdarin@darins.netlars@linux-schulserver.delars@linux-schulserver.delars@linux-schulserver.delars@linux-schulserver.de- new nagios-exec-start-post script to fix bsc#1003362- fix nagios_upgrade.sh writing to log file in user controlled directory (bsc#1182398). The nagios_upgrade.sh script writes the logfile directly below /var/log/- 4.4.6 * Fixed Map display in Internet Explorer 11 (#714) * Fixed duplicate properties appearing in statusjson.cgi (#718) * Fixed NERD not building when enabled in ./configure (#723) * Fixed build process when using GCC 10 (#721) * Fixed postauth vulnerabilities in histogram.js, map.js, trends.js (CVE-2020-13977, bsc#1172794) * When using systemd, configuration will be verified before reloading (#715) * Fixed HARD OK states triggering on the maximum check attempt (#757)- fix boo#1156309, CVE-2019-3698 : Symbolic Link (Symlink) following vulnerability in the cronjob allows local attackers to cause cause DoS or potentially escalate privileges by winning a race. - enhance systemd service: check nagios config before reloading - enable build for SLE11 by excluding some special macros and directories via 'sles_version != 11' condition - add nagios-archive.service and nagios-archive.timer as replacement for the script in cron.weekly: no need for cron on systemd systems - run set_permissions and verifyscript for /etc/cron.weekly on those distributions that need it - enhance rpmlint: ignore empty htpasswd file - enable php apache module and not php5 on newer distributions - try to harden the rcnagios script- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to shortcut through the -mini flavors.- 4.4.5 * Reverted changes related to #625 due to CPU load issues * Partially reverted changes for #647 due to CPU load issues * Fixed "Quick Search" so that leading/trailing whitespace doesn't affect output (#681) (Sebastian Wolf) * Fixed build issues on non-RPM-based platforms (#617) (T.J. Yang) - 4.4.4 * Fixed log rotation logic to not repeatedly schedule rotation on a DST change (#610, #626) (Jaroslav Jindrak & Sebastian Wolf) * Fixed $SERVICEPROBLEMID$ to be reset after service recovery (#621) (Sebastian Wolf) * Fixed defunct worker processes appearing after nagios was reloaded (#441, #620) (Sebastian Wolf) * Fixed main nagios thread to release nagios.qh on a closed connection (#635) (Sebastian Wolf) * Fixed semicolon escaping to remove prepended backslash (\) (#643) (Sebastian Wolf) * Fixed 'Checks of this host have been disabled' message showing on passive-only hosts (#632) (Vojtěch Širůček & Sebastian Wolf) * Fixed last_hard_state showing the current hard state when service status is brokered (#633) (Sebastian Wolf) * Fixed long plugin output (>8KB) occasionally getting truncated (#625) (Sebastian Wolf) * Fixed check scheduling for objects with large check_intervals and small timeperiods (#647) (Sebastian Wolf) * Fixed SOFT recoveries sending when services had HARD recovery some time after host recovery (#651) (Sebastian Wolf) * Fixed incorrect permissions on debugging builds of FreeBSD (#420) (Sebastian Wolf) * Fixed NEB callback lists being partially orphaned when multiple modules subscribe to one callback (#590) (Sebastian Wolf) * Fixed memory leaks in run_async_service_check(), run_async_host_check() when checks are brokered (#664) (Sebastian Wolf) * Fixed potential XSS in main.php, map.php (#671, #672) (Jak Gibb) * Removed NEB brokering for nagios daemonization, since daemonization occurs before NEB initialization (#591) (Sebastian Wolf)- compile with -ffat-lto-objects to prevent build failure- Add /etc/cron.weekly to filelist, as this is now part of cron, which we don't want to require- revert setting of sbindir back to nagios_cgidir- update to 4.4.3 * Fixed services sending recovery emails when they recover if host in down state (#572) (Scott Wilkerson) * Fixed a make error when building on the aarch64 architecture (#598) (Gareth Randall) * Fixed --with-cgibindir and --with-webdir to actually set values given (#585) (lawsontyler) * Fixed soft recovery states for services (#575) (Jake Omann) * Fixed XSS vulnerability in Alert Summary report (CVE-2018-18245, boo#1119832) (Jake Omann) * Fixed services in soft states sometimes not switching into hard states (#576) (Jake Omann) * Fixed last_state_change to update when a state goes from soft -> hard state (#592) (Jake Omann) * Fixed Map link always being set to undefined host and don't show link for Nagios Process root note (#539) (Jake Omann) * Fixed notifications sending when services went into hard state on a down or unreachable host (#584) (Jake Omann) * Fixed log_host_retries not logging the host soft state checks (#599) (Jake Omann) * Fixed stalking_options N option to properly log only when a notification is actually sent (#604) (Jake Omann) * Fixed issue with service status totals being zero when servicegroup=all on servicegroup status page (#579) (Jake Omann) * Fixed escalation notifications logic and recovery notifications not going out (#582) (Jake Omann) * Fixed not finding child index causing duplicate hosts showing in the Map (#471) (Jake Omann) * Fixed Map configuration popup checkboxes not working and Root Node not populating (#543) (Jake Omann) * Fixed cleanup and deinit of neb modules on reload (#573) (Jake Omann) - rebase nagios-4.2.2-enable-ppc64le.patch (allow ppc64le builds in contrib Makefile) to: nagios-4.4.3-enable-ppc64le.patch- install /var/spool/nagios setgid nagcmd so external applications like the webinterface can issue commands to nagios (boo#1028975)- update to 4.4.2 * Fix comment data being duplicated after a `service nagios reload` or similar (#549) (Bryan Heden) * Fix check_interval and retry_interval not changing at the appropriate times (#551) (Scott Wilkerson) * Fixed passive checks sending recovery email when host was previously UP (#552) (Scott Wilkerson) * Fixed flapping comments duplication on nagios reload (#554) (Christian Jung) * Fix for CVE-2018-13441, CVE-2018-13458, CVE-2018-13457 null pointer dereference (Trevor McDonald) (boo#1101293, boo#1101289, boo#1101290) * Fixed syntax error in file: default-init.in (#558) (Christian Zettel) * Reset current notification number and state flags when the host recovers, reset all service variables when they recover fixes (#557) (Scott Wilkerson) * Fixed wrong counting of service status totals when showing servicegroup details (#548) (Christian Zettel, Bryan Heden) * Fixed avail.cgi not printing CSV output when checkbox is checked (for any type: host/service/hostgroup/servicegroup) (#570) (Bryan Heden) * Fixed nagios not logging SOFT state changes after 1 (Scott Wilkerson) 4.4.1 - 2018-06-25 * Revert some macro->kvvec changes causing problems when `enable_environment_macros` was enabled (Bryan Heden) * Adjust `process_macro_r` function logic so that it handles macros properly (Bryan Heden) * Fix spec file for systemd (Karsten Weiss, Fr3dY, Bryan Heden) * Fix bug where `ssize_t` typedef to int on some systems (Bryan Heden) 4.4.0 - 2018-06-19 ENHANCEMENTS * new status for check dependencies (John Frickson) * Allow more flexible requirements for comments (John Frickson) * Add a `statusCRITICALACK` class for the status column (John Frickson) * CSV output based on groups (all options) (John Frickson) * New Macro(s) to generate URL for host / service object to be used in notifications (John Frickson) * New Macro(s) to determine if host/service notifications are enabled (#419) (Bryan Heden) * New Macro(s) for obtaining the host/service notification periods (#350) (Bryan Heden) * enable_page_tour interface option (Bryan Heden) * Code cleanups in important sections (Workers, Handling Results) (Bryan Heden) * Automatic mail program detection (with same /bin/mail failback) (Bryan Heden) * Incorporated [autoconf-macros](https://github.com/NagiosEnterprises/autoconf-macros) into Core (Bryan Heden) * Lots of enhancements/additions to configure/make process. (Bryan Heden) + Moved all files to startup/ + Added upstart job * Added system limit detection (RLIMIT_NPROC) to check for anticipated fork() failures (#434) (Bryan Heden) * Added stalking on notifications (`N` or `notifications` option when specifying `stalking_options`) (#342) (Bryan Heden) * Added automatic `systemctl daemon-reload` and `initctl reload-configuration` where applicable on `make install-init` (Bryan Heden) * Added case-insentive command submission. (#373) (Bryan Heden) * Enabled `check_external_commands` by default (Bryan Heden) FIXES * Command line macro detection skips potential macros with no ending dollar sign (Bryan Heden, Jake Omann) * Fixed a lockup condition sometimes encountered on shutdown or restart (Aaron Beck) * Fixed negative time offset calculations computing incorrectly sometimes (bbeutel) * Fixed reloads causing defunct (zombie) processes (#441) (Bryan Heden) * Fixed wait3(), wait4() implementations (replaced with waitpid()) (#326) (Bryan Heden) * Fixed additive inheritance not testing for duplicates in hosts/services/(+escalations) (#392) (Bryan Heden) * Fixed very very (around 600k chars or greater) large plugin output crashing Nagios (#432) (Bryan Heden) * Fixed first_notification_delay not beeing calculated from last_hard_state_change (#425) (Christian Zettel) * Fixed duplicate downtime ID occuring from downtimes in retention file (#506) (Franz [feisenko]) * Fixed segfault when navbarsearch was used in status.cgi for something other than a host (#489) (Bryan Heden) * Fixed some miscellaneous ./configure issues on Solaris (Bryan Heden, Troy Lea) * Fixed "Locate host on map" link (#496) (Troy Lea) * Fixed service groups defined with unknown service members (that aren't first in the list) not erroring out (#500) (Bryan Heden) * Fixed tac.cgi to have consistent behavior with the other cgis (#481) (Bryan Heden, Matt Capra) * Fixed clear_host/service_flapping command logic to broker/notify properly (#525) (Bryan Heden, Karsten Weiss) - removed upstreamed patches: + nagios-fix_spurious_dollar_signs_added_to_command_lines.patch + nagios-4.3.4-fix_memleak_4.3.3.diff - refreshed patches: + nagios-4.0.6-remove-date-time.patch + nagios-4.1.0-add_KOHANNA.conf + nagios-4.2.2-enable-ppc64le.patch + nagios-disable_phone_home.patch + nagios-fix_encoding_trends.cgi.patch + nagios-output-length.patch + nagios-random_data.patch- fix setting default values in nagios-exec-start-pre- remove unused xorg-x11-devel BuildRequires- fix upstream issue #455, memleak introduced with 4.3.3 nagios-4.3.4-fix_memleak_4.3.3.diff- update to 4.1.0 fixed boo#939829 already, mentioned here just for reference- fix a possible symlink attack for files/dirs created by root fixes CVE-2016-8641 (bsc#1011630 and bsc#1018047) - remove the pre-configured administrative account with fixed password from the htpasswd file and provide an empty one instead (fixes boo#961115 - CVE-2016-0726)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Do not introduce new RPM group just for nagios-contrib. Use established Development/Tools/Other instead.- update to 4.3.4 * Improved config file parsing (Mark Felder) * Fixed configure script to check for existence of /run for lock file (in regards to CVE-2017-12847, Bryan Heden) * Use absolute paths when deleting check results files (Emmanuel Dreyfus) * Add sanity checking in reassign_worker (sq5bpf) * xodtemplate.c wrong option-deprecation code warning (alex2grad / John Frickson) * On-demand host check always use cached host state (John Frickson) * 'á' causes Serivce Status Information to not be displayed (John Frickson) * New Macro(s) to generate URL for host / service object (John Frickson) * Fix minor map issues (Troy Lea) * Fix lockfile issues (Bryan Heden) * Switch order of daemon_init and drop_priveleges (CVE-2017-12847, Bryan Heden) * Add an OpenRC init script (Michael Orlitzky) - only require insserv on older SUSE distributions- update to 4.3.2 FIXED * Every 15sec /var/log/messages is flooded with "nagios: set_environment_var" (John Frickson) * Changed release date to ISO format (yyyy-mm-dd) (John Frickson) * `make all` fails if unzip is not installed (John Frickson) * Quick Search no longer allows search by Alias (John Frickson) * flexible downtime on a service immediately turns off notifications (John Frickson) * Fix to allow url_encode to be called twice (Z. Liu) * Update timeperiods.cfg.in (spelling) (Parth Laxmikant Kolekar) * Spelling fixes (Josh Soref) * Vent command pipe before remove to avoid deadlocks on writing end (Kai Kunstmann) * CGI utility cgiutil.c does not process relative config file path names properly (John Frickson) * xdata/xodtemplate.c bug in option-deprecation code (John Frickson) * Wildcard searching causes service status links to not work properly (John Frickson) * Quick search with no hits shows a permission denied error (John Frickson) * Setting a service as its own parent is not caught by the sanity checker (-v) and causes a segfault (John Frickson) - removed nagios-4.3.1-remove-flooding-messages.patch (fixed upstream)- fix upstream issue #337: remove debugging messages: nagios-4.3.1-remove-flooding-messages.patch- Update to 4.3.1 SECURITY FIXES * Fix for CVE-2016-6209 (bsc#989759) - The "corewindow" parameter (as in http://localhost/nagios?corewindow=www.somewhere.com) has been disabled by default. See the UPGRADING document for how to enable it. (John Frickson) FIXES * Service hard state generation and host hard or soft down status (John Frickson) * Comments are duplicated through Nagios reload (John Frickson) * host hourly value is incorrectly dumped as json boolean (John Frickson) * Bug - Quick Search no longer allows search by IP (John Frickson) * Config: status_update_interval can not be set to 1 (John Frickson) * Check attempts not increasing if nagios is reloaded (John Frickson) * nagios hangs on reload while sending external command to cmd file (John Frickson) * Feature Request: return code xxx out of bounds - include message as well (John Frickson) * Fix early event scheduling (pmalek / John Frickson) * on-demand host checks triggered by service checks cause attempt number increments (fredericve) * Service notification not being send when host is in soft down state (John Frickson) * configure does not error if no perl installed on CentOS 7 (John Frickson) * failed passive requests leave .ok files in checkresults dir (caronc) * Services don't show in status.cgi if "noheader" specified (John Frickson) * Standardized check interval config file names (John Frickson) * "Event Log" (showlog.cgi) could not open log file (John Frickson) * "nagios_check_command" has been deprecated since v3.0. Last vestiges removed (John Frickson) ENHANCEMENTS * Added new flag to cgi.cfg: tac_cgi_hard_only to show only HARD states (John Frickson) * Add broker-event for the end of a timed event (NEBTYPE_TIMEDEVENT_END) (John Frickson) * There is no Macro to retrieve addresses of hostgroup members (now $HOSTGROUPMEMBERADDRESSES$) (John Frickson) * Add "Page Tour" videos to several of the core web pages (John Frickson) * Added a login page, and a `Logoff` links (John Frickson) * On the status map, the host name will be colored if services are not all OK. (John Frickson) * Added "Clear flapping state" command on host and services detail pages. (John Frickson) * User-entered comment now displays below generated comment for downtime (John Frickson) - refreshed patches- update to 4.2.4 SECURITY FIXES * Fixed another root privilege escalation (CVE-2016-9566) Thanks for bringing this to our attention go to Dawid Golunski (bsc#1014637) (http://legalhackers.com).- update to 4.2.3 SECURITY FIXES * Fixed a root privilege escalation (CVE-2016-8641) (John Frickson) FIXES * external command during reload doesn't work (John Frickson) * Nagios provides no error condition as to why it fails on the verify for serviceescalation (John Frickson) * No root group in FreeBSD and Apple OS X (John Frickson) * jsonquery.html doesn't display scheduled_time_ok correctly (John Frickson) * daemon_dumps_core=1 has no effect on Linux when Nagios started as root (John Frickson) * Configuration check in hostgroup - misspelled hostname does not error (John Frickson) * contacts or contact_groups directive with no value should not be allowed (John Frickson) * Compile 64-bit on SPARC produces LD error (John Frickson) * HOSTSTATEID returns 0 even if host does not exist (John Frickson) * Submitting UNREACHABLE passive result for host sets it as DOWN if the host has no parents (John Frickson) * nagios: job XX (pid=YY): read() returned error 11 (changed from LOG_ERR to LOG_NOTICE) (John Frickson) * Fix for quick search not showing services if wildcard used (John Frickson)- use faster find variants- allow ppc64le builds in contrib Makefile: nagios-4.2.2-enable-ppc64le.patch- update to 4.2.2 SECURITY + There was a fix to vulnerability CVE-2008-4796 in the 4.2.0 release on August 1, 2016. The fix was apparently incomplete, as there was still a problem. However, we are now getting all RSS feeds using AJAX calls instead of the (outdated) MagpieRSS package. Thanks for bringing this to our attention go to Dawid Golunski (http://legalhackers.com). ENHANCEMENTS + Update status.c to display passive check icon for hosts when passive checks are enabled and actives disabled FIXES + Fix permissions for Host Groups reports (status.cgi) + Service Parents does not appear to be functioning as intended + Availability report mixes up scheduled and unscheduled warning percentages + Invalid values for saved_stamp in comput_subject_downtime_times() + Remove deprecated “framespacing” + The nagios tarball contains two identical jquery copies + extinfo.cgi does not set content-type (most cgi’s don’t) + Timeperiods are corrupted by external command CHANGE_SVC_CHECK_TIMEPERIOD + Quick search doesn’t show hosts without services (service status detail page) + In host/services details view, if exactly 100 entries would not show last one + nagios host URL parameter for NEW map doesn`t work – Network Map for All Hosts + next_problem_id is improperly initialized + Passive problems not showing as “unhandled” + September reported as Sept instead of Sep + Notifications are not sent for active alerts after scheduled downtime ends + Nagios 4.2.0 not working on Solaris + install-exfoliation and install-classicui don’t work FreeBSD and Mac OS X + Updated makefile to delete some no-longer-needed files- update to 4.2.1 FIXES + Fix undefined variable php error (John Frickson) + Links on the sidebar menu under 'Problems' are indented too far + Using $ARGn$ Macros in perfdata (John Frickson) + using a wildcard in search returns service status total all zero's + read_only does not take priority (deppy) + Running nagios -v on 4.2.0 takes 90+ seconds (John Frickson) + Missing Image for Host and Service State Trends in Availability Report + Maintain non-persistent comments through reload (John Frickson) + Servicegroup availability report ignores includesoftstates in service report links (PriceChild) + error: format not a string literal and no format arguments (Karsten Weiss) - ignore rpmlint warnings about tmpfile creating/listing: this is handled, but not properly detected by rpmlnt- update to 4.2.0 SECURITY FIXES + Fixed vulnerability CVE-2008-4796 (John Frickson) + Fixed vulnerability CVE-2013-4214 (John Frickson) + web interface vulnerable to Cross-Site Request Forgery attacks ENHANCEMENTS + Increase socket queue length for listen() + Added host name to the website page title (leres / John Frickson) + Added additional icons for NetBSD and SuSE (John Frickson) + The new Status Map will now use cgi.cfg options (John Frickson) default_statusmap_layout will default to "6" for the new map + The new Status Map will now show some valid values in the popup for "Nagios Process" (John Frickson) FIXES + Network outage view without access to all hosts (John Frickson) + Core workers looping (John Frickson) + service query returns duplicate host_name and description fields in the returned data (John Frickson) + HTML output of plug-ins is parsed in wrong way => webgui unusable (John Frickson) + Command worker fails to handle SIGPIPE + "View Status" links under "Map" broken in Nagios Core Version 4.1.1 (John Frickson) + Can't send big buffer - wproc: Core Worker seems to be choked + Too big CPU load on FreeBSD and other systems using poll() interface + Flexible downtime recorded as unscheduled downtime (John Frickson) + Service Flexible downtimes produce 1 notification before entering + Once you "set flap_detection_enabled 0" it should remove flapping state from the host/services page (John Frickson) + New map doesn't finish loading if a logo image is not found + Extraneous Div end tag in map.html (Scott Wilkerson) + Issue with "Problems" section (John Frickson) + Status Map icons and online/offline status dots disappear in IE11 + New network map overlays the nagios process with objects + Added Default-Start and Default-Stop to the init script + Compile / logging issues with BSD 6 + Related to above, Fixed a lot of incorrectly handled time_t's in *printf's + New map not working for RU locale (actually, most locales) + Replaced all instances of signal() with sigaction() + blockig + UTF-8 characters like german ä are not processed properly by function url_encode (John Frickson) + nagios worker processes can hog CPU (huxley / John Frickson) + custom time periods that include special characters were not being handled in reports (John Frickson) + Fixed init script to wait up to 90 seconds then kill the nagios process (John Frickson) + No Host Groups results in wrong error message (John Frickson) + Setup Nagios users to view specific host is not working in the new network map (John Frickson) + statusjson.cgi fails glibc realloc truncate response output (John Frickson) + Report Time Period does not work if an @ character is in the timeperiod name (John Frickson) + State History does not use actual plugin long_output (John Frickson) + Time period corruption (xoubih) + Tactical Overview - Disabled Flap Detection Link (John Frickson) - add /var/run/nagios as ghost directory- Fix nagios-www: keep nagios-www-dch from owning html files shipped with Nagios. - Remove unused NAGIOSDCH apache flag.- Update to 4.1.1 FIXES * CGI Could not read object configuration data (broken by error in 4.1.0) * exclude (!) not working (broken by mis-applied fix for 4.1.0) - Dropped patch nagios-issue_71.patch (included in sources)- Add nagios-issue_71.patch * Fixes "CGI Could not read object configuration data" (boo#944102)- add nagios-4.1.0-add_KOHANNA.conf patch to allow using kohanna2 if available- update to 4.1.0: ENHANCEMENTS * Promoted JSON CGIs to released status * New graphical CGI displays: statusmap, trends, histogram * Make sticky status for acks and comments configurable enhancement #20 * Add host_down_disable_service_checks directive to nagios.cfg #44 * httpd.conf doesn't support Apache versions > 2.3 FIXES * Fix for not all service dependencies created (John Frickson) * Fix SIGSEGV with empty custom variable (orbis / John Frickson) * Fix contact macros in environment variables (dvoryanchikov) * Fixed host's current attempt goes to 1 after going to hard state * Fixed two bugs/problems: Replace use of %zd in base/utils.c & incorrect va_start() in cgi/jsonutils.c (Peter Eriksson) * Fixed: Let remove_specialized actually remove all workers (Phil Mayers) * Fixed log file spam caused when using perfdata command directives in nagios.cfg * Fixed off-by-one error in bounds check leads to segfault (Phil Mayers) * Added links for legacy graphical displays (Eric Stanley) * Update embedded URL's to https versions of Nagios websites * Fixed doxygen comments to work with latest doxygen 1.8.9.1 #30 * Fixed makefile target "html" to PHONY to fix GitHub issue #28 * Fixed typo as per GitHub issue #27 (Trevor McDonald) * Fixed jsonquery.php 404 not found error, and disabled Send Query button until form populates #43 * Fixed linking in Tactical Overview for several of the Host entries in Featured section #48 * Fixed passing limit and sort options to pagination and sort links #42 * Added form field for icon URL and clean-up when it changes in CGI Status Map. * Added options to cgi.cfg to uncheck sticky and send when acknowledging a problem * Low impact changes to automate the generation of RPMs from nagios.spec file. * Update index.php (Trevor McDonald) * Fixed escaping of corewindow parameter to account for possible XSS injection * Typo correction (T.J. Yang) * Make getCoreStatus respect cgi_base_url (Moritz Schlarb) * Adjusted map layout to work within frames (Eric Stanley) * Fixed map displays are now the full size of browser window (Eric Stanley) * Fixed labels and icons on circular markup no longer scale on zoom * Got all maps except circular markup working with icons (Eric Stanley) * Fixes to make legacy CGIs work again. (Eric Stanley) * Fixes to make all/html target tolerant of being run multiple times * For user-supplied maps, converted node group to have transform * Fixed issue transitioning from circular markup map to other maps * Fix displayForm to trigger on the buttom press (Scott Wilkerson) * Fix fo getBBox crash on Firefox (Eric Stanley) * Fixed map now resets zoom when form apply()'d (Eric Stanley) * Fixed so close box on dialogs actually closes dialog (Eric Stanley) * Corrected directive in trends display (Eric Stanley) * Fixed minor issue with link in trends linkes (Eric Stanley) * Fixed issue with map displaying on Firefox (Eric Stanley) * Added exclusions for ctags generation (Eric Stanley) * Update map-popup.html (Scott Wilkerson) * Initial commit of new graphical CGIs (Eric Stanley) * Fixed Github bug #18 - archivejson.cgi returns wrong host for state change query (Eric Stanley) * Status JSON: Added next_check to service details (Eric Stanley) * Fixed escaping of keys for scalar values in JSON CGIs (Eric Stanley) * build: Include if it exists. (Eric J. Mislivec) * lib-tests: test-io{cache|broker} need -lsocket to link. (Eric J. Mislivec) * lib-tests: test-runcmd assumes GNU echo. (Eric J. Mislivec) * lib-tests: Signal handlers don't return int on most platforms, and using a cast was the wrong way to resolve this. (Eric J. Mislivec) * Fix some type/format mismatch warnings for pid_t. (Eric J. Mislivec) * Fix build on Solaris. (Eric J. Mislivec) * runcmd: Fix build when we don't HAVE_SETENV. (Eric J. Mislivec) * Fixed checkresult output processing (Eric Mislivec) * Corrected escaping of long output macros (Eric Mislivec) * Fixed null pointer dereferences in archive JSON (Eric Stanley) * Fixed memory overwrite issue in JSON string escaping (Eric Stanley) * JSON CGI: Now escaping object and array keys (Eric Stanley) KNOWN ISSUES * New map does not account for multiple parents, leaving "legacy" map as an option in the menu - removed upstreamed patches: + nagios-bogus_warnings.patch + nagios-apache24.patch - refreshed all other patches- use new syntax for apache 2.4 + nagios-apache24.patch- patch so nagios does not truncate performace data- fix alias definition in systemd file- ignore errors during *post* of nagios-theme-exfoliation caused by the script trying to restart apache during build (bnc#911755) - ignore suse-missing-rclink rpmlint warning, as we use a wrapper script to provide backward compatible features (check)- add Alias=monitoring_daemon.service to systemd file to have a similar virtual provides like in the old times- package a shell script in /usr/sbin/rcnagios providing the check commands as in the old sysvinit days (and redirect anything else directly to systemctl)obs-arm-8 1621537929  !"#$%&'()*+,-./0123454.4.6-bp151.4.6.14.4.6-bp151.4.6.1nagiosarchivejson.harchiveutils.hbroker.hcgiauth.hcgiutils.hcomments.hcommon.hconfig.hconfig_pwd.hdefaults.hdowntime.hgetcgi.hjsonutils.hlibbitmap.hdkhash.hfanout.hiobroker.hiocache.hkvvec.hlibnagios.hlnag-utils.hnsock.hnspath.hnsutils.hnwrite.hpqueue.hruncmd.hskiplist.hsnprintf.hsqueue.ht-utils.hworker.hlocations.hlogging.hmacros.hnagios.hnebcallbacks.hneberrors.hnebmods.hnebmodules.hnebstructs.hnetutils.hobjectjson.hobjects.hperfdata.hshared.hsretention.hstatusdata.hstatusjson.hworkers.hlibnagios.a/usr/include//usr/include/nagios//usr/include/nagios/lib//usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protectionobs://build.opensuse.org/openSUSE:Maintenance:16344/openSUSE_Backports_SLE-15-SP1_Update/09b7a601049fc5f4fa144f7df8a275bd-nagios.openSUSE_Backports_SLE-15-SP1_Updatedrpmxz5aarch64-suse-linuxdirectoryC source, ASCII textC source, ASCII text, with very long linesC source, UTF-8 Unicode textASCII textcurrent ar archivemCutf-848b0a49702dbea4cec9d6208206b5dec158acd2d2d8caddc520dd996010801a5?P7zXZ !t/a]"k% !n 87Kʌ/@ +2-s..-PkQP&0jV1J'g3|5Zhʓ &P`|:@oh,JR|o( i[̎ؑ Aaye}myVIGFKGxCHwկ}iJ40MN?SRmGScW!Q{yxo+ϊ?[=pւ~*OASKc ֧הؔK7^mfOBsWuB(m?ux~4?{`^HC&'o'{@~T$L,r<࿿Z|ɳqk<#xvg~`Jhp? b, Hou,ko|41~Ef $SP4Aak`$)I~X0Nt9#^F@ jzu1Ov@jbJ7tZFϋ3CYRι|X}9wzҳB`PAl04n1q=3Q=6C27{̌`f*?&]]@ڳ[Z\ [+_ɷ [jAE[aRN؊^eTQɩ u.)bL`' !j3i Kn9~i 1 YZ