The Nagios Plugins Development Team is proud to announce that nagios-plugins 2.0.3 has been released and is available for download.
This release is mostly small bug fixes and additional protections against the SUID vulnerability discovered by David Golunski. As we are now using coverity to scan for small bugs, there will be a number of small commits in the near future.
The mailq autodetection commits were reverted as there were issues with parsing performed by the awk script. We decided to use FindBin in lieu of shimming the awk regex. You can try out the proposed FindBin changes in the branch “findbin”. Expect the branches “findbin” and “timeout_state” to be merged into the next major release (2.1.0).
2.0.3 26th June 2014
SECURITY FIXES
parse_ini.c - Additional fixes for the SUID plugins vulnerabilities (sreinhardt)
Added Gnulib module idpriv-droptemp (weiss)
FIXES
check_dns.c - Resolved issues with reverse lookup (sreinhardt)
check_dns.c - Changed query types from ALL to ANY (sreinhardt)
common.h - Include fixes for esoteric AIX compile issues (emislivec)
negate.c - Small fixes from coverity (66479) (66480) (sreinhardt)
check_dhcp.c - Small fix from coverity (66488) (sreinhardt)
check_http.c - Potential memory leak and overflow fixed from coverity (66514) (sreinhardt)
check_ntp.c - Small fix from coverity (66524) (sreinhardt)
utils_cmd.c - Small file descriptor fix from coverity (66502) (sreinhardt)
check_apt.c - Small fix for from coverity (66531) (sreinhardt)
REVERTS
check_mailq - Reverted autodetection commits to avoid awk parsing issues. Autodetection will return in version 2.1.0 as part of the changes in the FindBin branch (abrist)
Download Nagios Plugins 2.0.3 at:
http://nagios-plugins.org/downloads/
Or visit us on github:
https://github.com/nagios-plugins/nagios-plugins
–
Andy Brist
Technical Support Team Manager
Nagios-Plugins Team Lead
Nagios Enterprises, LLC
Office: (888)NAGIOS-1
Intl: (651)204-9102
Fax: (651)204-9103
Email: [email protected]
Web: www.nagios.com
Nagios-announce mailing list
[email protected]
lists.nagios.com/mailman/listinf … s-announce