From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Adolf Belka (ipfire)" To: development@lists.ipfire.org Subject: [PATCH 1/2] nagios_nrpe: Update to 4.0.3 Date: Wed, 10 Mar 2021 13:08:14 +0100 Message-ID: <20210310120814.4481-1-adolf.belka@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============7256735256203567756==" List-Id: --===============7256735256203567756== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable - Update nagios_nrpe from 3.2.1 to 4.0.3 - No update for rootfile - Changelog [4.0.3](https://github.com/NagiosEnterprises/nrpe/releases/tag/nrpe-4.0.3)= - 2020-04-28 **FIXES** - Fixed nasty_metachars not being read from config file (#235) (Sebastia= n Wolf) [4.0.2](https://github.com/NagiosEnterprises/nrpe/releases/tag/nrpe-4.0.2)= - 2020-03-11 **FIXES** - Fixed buffer length calculations/writing past memory boundaries on som= e systems (#227, #228) (Andreas Baumann, hariwe, Sebastian Wolf) - Fixed use of uninitialized variable when validating requests (#229) (h= ariwe, Sebastian Wolf) [4.0.1](https://github.com/NagiosEnterprises/nrpe/releases/tag/nrpe-4.0.1)= - 2020-01-22 **FIXES** * Fixed syslog flooding with CRC-checking errors when both plugin and ag= ent were updated to version 4 (Sebastian Wolf) [4.0.0](https://github.com/NagiosEnterprises/nrpe/releases/tag/nrpe-4.0.0)= - 2019-01-13 Note: This update includes security fixes which affect both the check_nrp= e plugin and the NRPE daemon. The latest version of NRPE is still able to interoperate= with previous versions, but for best results, both programs should be updated. **ENHANCEMENTS** * Added TLSv1.3 and TLSv1.3+ support for systems that have it (Nigel Yon= g, Rahul Golam) * Added IPv6 ip address to list of default allow_from hosts (Troy Lea) * Added -D option to disable logging to syslog (Tom Griep, Sebastian Wol= f) * Added -3 option to force check_nrpe to use NRPE v3 packets * OpenRC: provide a default path for nrpe.cfg (Michael Orlitzky) * OpenRC: Use RC_SVCNAME over a hard-coded PID file (j-licht) **FIXES** * Checks for '!' now only occur inside the command buffer (Joni Eskeline= n) * NRPE daemon is more resilient to DOS attacks (Leonid Vasiliev) * allowed_hosts will no longer test getaddrinfo records against the wron= g protocol (dombenson) * nasty_metachars will now handle C escape sequences properly when speci= fied in the config file (Sebastian Wolf) * Calculated packet sizes now struct padding/alignment when sending and = receiving messages (Sebastian Wolf) * Buffer sizes are now checked before use in packet size calculation (Se= bastian Wolf) * When using `include_dir`, individual files' errors do not prevent the = remaining files from being read (Sebastian Wolf) Signed-off-by: Adolf Belka (ipfire) --- lfs/nagios_nrpe | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/nagios_nrpe b/lfs/nagios_nrpe index 075bfdef9..a011a75b4 100644 --- a/lfs/nagios_nrpe +++ b/lfs/nagios_nrpe @@ -24,7 +24,7 @@ =20 include Config =20 -VER =3D 3.2.1 +VER =3D 4.0.3 =20 THISAPP =3D nrpe-$(VER) DL_FILE =3D $(THISAPP).tar.gz @@ -32,7 +32,7 @@ DL_FROM =3D $(URL_IPFIRE) DIR_APP =3D $(DIR_SRC)/$(THISAPP) TARGET =3D $(DIR_INFO)/$(THISAPP) PROG =3D nagios_nrpe -PAK_VER =3D 6 +PAK_VER =3D 7 =20 DEPS =3D nagios-plugins =20 @@ -44,7 +44,7 @@ objects =3D $(DL_FILE) =20 $(DL_FILE) =3D $(DL_FROM)/$(DL_FILE) =20 -$(DL_FILE)_MD5 =3D 8997e195fea93cdceb8c7ed8ac1d43bc +$(DL_FILE)_MD5 =3D 42252d3c721c87ebb5e38b748f187e8d =20 install : $(TARGET) =20 --=20 2.30.2 --===============7256735256203567756==--