![[tokkee]](http://tokkee.org/images/avatar.png){kind=avatar}
index 5d950ba7948edf3077baa4f4bee2559cc5571e7c..4f3a833e562bf292982bcc9f04d0bb360c3c1dfb 100644 (file)
--- a/NEWS
+++ b/NEWS
This file documents the major additions and syntax changes between releases.
-1.4.10 or 1.5 ??
- Fix check_http buffer overflow vulnerability when following HTTP redirects
+1.4.14 ...
+ check_http has options to specify the HTTP method (#2155152)
+ check_users thresholds were not working exactly as documented (>= rather than >)
+ Updated tinderbox_build script to point to new tinderbox server
+ check_ifoperstatus -n flag now works as expected (sf.net #1569488)
+ check_ifoperstatus now supports ifType based lookup for ifIndex
+ check_ups now sends a LOGOUT string (debian bug #387001)
+ Extra-opts (C plugins) now allows both '#' and ';' for comments (like N::P)
+ Extra-opts (C plugins) does not allow trailing comments anymore (like N::P)
+ Fixed dependency issue on libtap when ./configure --enable-libtap used. Warning: will install libtap
+ Fixed segfault in extra-opts under some circumstance when reading multiple sections
+ Fix long options parsing in check_disk, check_dns, check_mrtg, check_mrtgtraf and check_tcp
+ Add missing long options for check_nt (for use with extra-opts)
+ check_icmp now reports min and max round trip time perfdata (Steve Rader)
+ Fixed check_http bug where additional headers with redirection caused a segfault (Dieter Van de Walle - 2089159)
+ check_disk: make autofs mount paths specified with -p before we determine the mount list (Erik Welch)
+ Fixed buffer overflow in check_ntp/check_ntp_peer (#1999319, Ubuntu #291265)
+ Re-bundled libtap as a built-in library (--enable-libtap): detects system library as pre-1.4.13 and does not install the built-in library anymore
+ Fixed check_mrtg returning UNKNOWN instead of OK (bug #2378068)
+ Fixed check_http behaviour: all check are now performed as long as a valid response is returned (sf.net #1460312)
+ check_http --onredirect=sticky follows using the same IP address (sf.net #2550208)
+ check_http --onredirect=stickyport also follows the same port
+ Fixed coredump from check_nt when invalid drive is specified (#2179754 - Olli Hauer)
+ Fixed passing of quotes in OID for check_snmp (#1985230 - Jan Wagner, patch by John Barbuto)
+ Fixed check_http sending HTTP/1.0 with v1.1 headers (#2638765)
+ Fixed check_http not timing-out on redirects
+ Fixed negate not printing the real timeout in ALRM handler when left to default
+ negate timeout result is now configurable
+ Fixed segfault in check_mysql with old slaves (#2696823 - Oskar Ahner)
+
+1.4.13 25th Sept 2008
+ Fix Debian bug #460097: check_http --max-age broken (Hilko Bengen)
+ Optimised pst3 for systems with large number of processes (Duncan Ferguson)
+ Updated Nagios::Plugin to 0.27
+ Fix Debian bug #479013: check_dig's -l is mandatory now (sf.net #1986306)
+ check_dig now returns CRITICAL instead of WARNING when no answer section is found
+ check_procs now captures stderr in external command and adds to plugin output
+ check_snmp now only prints perfdata for non numeric values (#1867716)
+ check_icmp now supports packet size modification
+ check_http -e now accepts a comma-delimited list of expected status codes (Sven Nierlein)
+ libtap now included with this distribution for easier testing. Run ./configure with --enable-libtap
+ check_ntp_peer/check_ntp_time used to show port in --help but ignored the argument - now implemented
+ Fix possible segfault in check_ntp_peer with deliberately invalid packets
+
+1.4.12 27th May 2008
+ Added ./check_nt -v INSTANCES to count number of instances (Alessandro Ren)
+ New check_icmp -s option to specify the source IP address
+ check_dns now sorts addresses for testing results for more than one returned IP (Matthias Urlichs)
+ Fix segfault in check_ntp_time and (deprecated) check_ntp (Bug #1862300)
+ check_disk should now work with large file systems (2TB+) on all archs that supports it
+ Fixed check_disk disk usage calculation when using --group=NAME (related to bug #1348746)
+ Fix help text of check_ntp* (Bug #1880095)
+ Fix bugs and flaws in best offset server selection of check_ntp_time and (deprecated) check_ntp
+ check_ntp_peer now checks for the LI_ALARM flag
+ Sync to latest Gnulib (includes new floorf function)
+ check_pgsql now successfully builds with postgres lib v8.3 (Bug #1878972)
+ check_procs now accepts --ereg-argument-array for a regular expression match to the argument array
+ Reverted back to using pst3 for Solaris systems. Fixed issues re: -m64 needed to compile on 64bit systems
+ If applicable, Gettext linked dynamically instead of statically
+ check_dig can now pass arguments to dig by using -A/--dig-arguments (#1874041/#1889453)
+ check_ntp and check_ntp_peer now show proper jitter/stratum thresholds longopts in --help
+ check_dns now allow to repeat -a to match multiple possibly returned address (common with load balancers)
+ check_mysql and check_radius now try clearing password in processlist just like check_mysql_query
+ check_mysql and check_mysql_query now support sockets explicitely (-s, --socket)
+ negate now has the ability to replace the status text as well (-s, --substitute)
+ Added performance data to check_ping (Christian Schneemann)
+ Added support for --extra-opts in all C plugins (disabled by default, see configure --help)
+ Fixed passive option in check_by_ssh
+ On non-skipped stderr, check_by_ssh now returns UNKNOWN or worse (result from command) instead of always UNKNOWN.
+ Fix linking against OpenSSL where libdl is required
+
+1.4.11 13th December 2007
+ Fixed check_http regression in 1.4.10 where following redirects to
+ relative URLs on virtual hosts failed if both "-H" and "-I" were used
+ Merged two new checks that deprecates check_ntp: check_ntp_peer and check_ntp_time.
+ You should read the --help output so see which one is suitable for you. check_ntp_peer
+ implement stratum thresholds support (feature request #1703823).
+ check_ntp now returns UNKNOWN instead of WARNING if jitter is unavailable (jitter=-1.000000)
+ as long as the thresholds range include -1. If no offset threshold is specified
+ and the offset is unavailable, will return UNKNOWN as well.
+ NOTE: If jitter thresholds are specified as integers it will return CRITICAL if jitter
+ is "-1" as the default range starts at 0. See Examples in --help output.
+ Fixed broken usage2 in check_snmp and check_cluster
+ check_cluster now accepts all valid characters in its thresholds ("-", "@", "~")
+ Fixed check_disk reporting OK if disk usage grows over 100% (bug #1348746).
+ The problem happens to be in Gnulib but a workaround have been implemented in check_disk.c
+ Fixed check_load argument handling when not passing triplets (bug #1831890)
+ Fixed buffer overflow in check_snmp (CVE-2007-5623)
+ Tinderbox builds now runs tests in a verbose mode
+ Updated Nagios::Plugin to 0.22
+ VPATH problem fixed for compiling plugins-root
+
+1.4.10 28th September 2007
+ Fix check_http buffer overflow vulnerability when following HTTP redirects (CVE-2007-5198)
check_http now explicitly asks HTTP/1.1 servers to close the connection
after completion of the response
- Check_ldaps' guessing which secure method to use (starttls vs. ssl on connect)
+ Check_ldaps' guessing which secure method to use (starttls vs. ssl on connect)
is now deprecated. See --help for further information.
- Check_disk now calls stat() on all filesystems to check. (Old: only the ones selected using -p)
+ Check_disk now calls stat() on all filesystems to check. (Old: only the ones selected using -p)
A meaningful error message (eg "Stale NFS Handle") is printed if stat fails.
New check_disk option -L: Only check local filesystems, but call stat() on remote ones, too.
Thus accessibility of remote filesystems can be checked without any threshold comparison.
Fix possible check_icmp bus errors on some (non-x86/AMD64) platforms
Fix check_smtp's handling of multiple-packet server responses
WARNING: Fix for negate which may break existing commands:
- - stop evaluating command line options through shell twice
+ - stop evaluating command line options through shell twice
- enforce a full path for the command to run
The "negate" utility can now remap custom states
Check_radius now supports radiusclient-ng
+ The (undocumented) positional parameter parsing which check_radius used
+ instead of getopt(3) if 8 arguments were given is no longer available
Check_by_ssh now supports multiline output
IPv6 support can now be disabled using ./configure --without-ipv6
Fix check_ntp now honor ntp flags
SSL plugins work with gnutls as well as OpenSSL
check_mysql_query added to run arbitrary SQL commands, with threshold checking
libtool now required for development systems
- Notice: check_udp (compiled from check_udp.c) will be deprecated in the next release.
+ Notice: check_udp (compiled from check_udp.c) will be deprecated in the next release.
check_udp2 should be used instead and will be renamed to check_udp
1.4.2