From patchwork Wed Mar 10 12:08:14 2021 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adolf Belka X-Patchwork-Id: 3942 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4DwW7P4qCkz3xGH for ; Wed, 10 Mar 2021 12:08:17 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail02.haj.ipfire.org", Issuer "R3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4DwW7P2D2kz5P1; Wed, 10 Mar 2021 12:08:17 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4DwW7P1bzJz2xhq; Wed, 10 Mar 2021 12:08:17 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4DwW7M46b3z2xZX for ; Wed, 10 Mar 2021 12:08:15 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4DwW7M1Ymjz5Nt; Wed, 10 Mar 2021 12:08:15 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1615378095; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=cV86i0MWIwYX4WKMt82Ml+lotV+ftikLwC6xrClMuIQ=; b=PrPz8kQtXvHXf9lvd6zZdrz3zjoYe9k8MaIazzMbOUp/B9N5kEYr6XX6ea3w/ByaCvBkEx GsOqh4YzvWZO/VCA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1615378095; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=cV86i0MWIwYX4WKMt82Ml+lotV+ftikLwC6xrClMuIQ=; b=lrR7z3arb3J7cXABl0FCxFwrpOOTMpzQYDQs6UVow6G+6vS6BV4+r5DzSNroYkmA4y5tK4 39pRoZ+5IDeg8flksgcBi3SIuGm+LENDZRIGE9QCqaHl6DludLo5gtWGiE/iPn8m695pzm bnyWKw/yj8rHRidRaJ4J0LlD6fYxYw2mH/wmBfL0PYVZkIkvRRkXPxFFly1Rre5Mhwxiof E/IzS4B1FHOA1soLDmODxc0/7CZQei37vaxH6UtxEhfllaQ+Q4d1l5gPMlSi/8mBcCk4Vw 4728ykCv3lhuYscMBHLi66J/d5GPwRr/Ukt+wW+wDKD0yfpScFpY9vA5iMIZqQ== From: "Adolf Belka (ipfire)" To: development@lists.ipfire.org Subject: [PATCH 1/2] nagios_nrpe: Update to 4.0.3 Date: Wed, 10 Mar 2021 13:08:14 +0100 Message-Id: <20210310120814.4481-1-adolf.belka@ipfire.org> MIME-Version: 1.0 X-BeenThere: development@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IPFire development talk List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: development-bounces@lists.ipfire.org Sender: "Development" - Update nagios_nrpe from 3.2.1 to 4.0.3 - No update for rootfile - Changelog [4.0.3](https://github.com/NagiosEnterprises/nrpe/releases/tag/nrpe-4.0.3) - 2020-04-28 **FIXES** - Fixed nasty_metachars not being read from config file (#235) (Sebastian Wolf) [4.0.2](https://github.com/NagiosEnterprises/nrpe/releases/tag/nrpe-4.0.2) - 2020-03-11 **FIXES** - Fixed buffer length calculations/writing past memory boundaries on some systems (#227, #228) (Andreas Baumann, hariwe, Sebastian Wolf) - Fixed use of uninitialized variable when validating requests (#229) (hariwe, Sebastian Wolf) [4.0.1](https://github.com/NagiosEnterprises/nrpe/releases/tag/nrpe-4.0.1) - 2020-01-22 **FIXES** * Fixed syslog flooding with CRC-checking errors when both plugin and agent were updated to version 4 (Sebastian Wolf) [4.0.0](https://github.com/NagiosEnterprises/nrpe/releases/tag/nrpe-4.0.0) - 2019-01-13 Note: This update includes security fixes which affect both the check_nrpe plugin and the NRPE daemon. The latest version of NRPE is still able to interoperate with previous versions, but for best results, both programs should be updated. **ENHANCEMENTS** * Added TLSv1.3 and TLSv1.3+ support for systems that have it (Nigel Yong, Rahul Golam) * Added IPv6 ip address to list of default allow_from hosts (Troy Lea) * Added -D option to disable logging to syslog (Tom Griep, Sebastian Wolf) * Added -3 option to force check_nrpe to use NRPE v3 packets * OpenRC: provide a default path for nrpe.cfg (Michael Orlitzky) * OpenRC: Use RC_SVCNAME over a hard-coded PID file (j-licht) **FIXES** * Checks for '!' now only occur inside the command buffer (Joni Eskelinen) * NRPE daemon is more resilient to DOS attacks (Leonid Vasiliev) * allowed_hosts will no longer test getaddrinfo records against the wrong protocol (dombenson) * nasty_metachars will now handle C escape sequences properly when specified in the config file (Sebastian Wolf) * Calculated packet sizes now struct padding/alignment when sending and receiving messages (Sebastian Wolf) * Buffer sizes are now checked before use in packet size calculation (Sebastian Wolf) * When using `include_dir`, individual files' errors do not prevent the remaining files from being read (Sebastian Wolf) Signed-off-by: Adolf Belka (ipfire) --- lfs/nagios_nrpe | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/nagios_nrpe b/lfs/nagios_nrpe index 075bfdef9..a011a75b4 100644 --- a/lfs/nagios_nrpe +++ b/lfs/nagios_nrpe @@ -24,7 +24,7 @@ include Config -VER = 3.2.1 +VER = 4.0.3 THISAPP = nrpe-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = nagios_nrpe -PAK_VER = 6 +PAK_VER = 7 DEPS = nagios-plugins @@ -44,7 +44,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 8997e195fea93cdceb8c7ed8ac1d43bc +$(DL_FILE)_MD5 = 42252d3c721c87ebb5e38b748f187e8d install : $(TARGET)