Nagios Changelog

What's new in Nagios 4.3.1

Feb 24, 2017
  • FIXES:
  • Service hard state generation and host hard or soft down status (John Frickson)
  • Comments are duplicated through Nagios reload (John Frickson)
  • host hourly value is incorrectly dumped as json boolean (John Frickson)
  • Bug - Quick Search no longer allows search by IP (John Frickson)
  • Config: status_update_interval can not be set to 1 (John Frickson)
  • Check attempts not increasing if nagios is reloaded (John Frickson)
  • nagios hangs on reload while sending external command to cmd file (John Frickson)
  • Feature Request: return code xxx out of bounds - include message as well (John Frickson)

New in Nagios 4.3.0 (Feb 21, 2017)

  • SECURITY FIXES:
  • Fix for CVE-2016-6209 - The "corewindow" parameter (as in
  • http://localhost/nagios?corewindow=www.somewhere.com) has been disabled by
  • default. See the UPGRADING document for how to enable it. (John Frickson)
  • FIXES:
  • Fix early event scheduling (pmalek / John Frickson)
  • on-demand host checks triggered by service checks cause attempt number increments (fredericve)
  • Service notification not being send when host is in soft down state (John Frickson)
  • configure does not error if no perl installed on CentOS 7 (John Frickson)
  • failed passive requests leave .ok files in checkresults dir (caronc)
  • Services don't show in status.cgi if "noheader" specified (John Frickson)
  • Standardized check interval config file names (John Frickson)
  • "Event Log" (showlog.cgi) could not open log file (John Frickson)
  • "nagios_check_command" has been deprecated since v3.0. Last vestiges removed (John Frickson)
  • ENHANCEMENTS:
  • Added new flag to cgi.cfg: tac_cgi_hard_only to show only HARD states (John Frickson)
  • Add broker-event for the end of a timed event (NEBTYPE_TIMEDEVENT_END) (John Frickson)
  • There is no Macro to retrieve addresses of hostgroup members (now $HOSTGROUPMEMBERADDRESSES$) (John Frickson)
  • Add "Page Tour" videos to several of the core web pages (John Frickson)
  • Added a login page, and a `Logoff` links (John Frickson)
  • On the status map, the host name will be colored if services are not all OK. (John Frickson)
  • Added "Clear flapping state" command on host and services detail pages. (John Frickson)
  • User-entered comment now displays below generated comment for downtime (John Frickson)

New in Nagios 4.2.4 (Jan 21, 2017)

  • SECURITY FIXES:
  • Fixed another root privilege escalation (CVE-2016-9566) Thanks for bringing this to our attention go to Dawid Golunski (http://legalhackers.com).

New in Nagios 4.2.3 (Jan 21, 2017)

  • SECURITY FIXES:
  • Fixed a root privilege escalation (CVE-2016-8641) (John Frickson)
  • FIXES:
  • external command during reload doesn't work (John Frickson)
  • Nagios provides no error condition as to why it fails on the verify for serviceescalation (John Frickson)
  • No root group in FreeBSD and Apple OS X (John Frickson)
  • jsonquery.html doesn't display scheduled_time_ok correctly (John Frickson)
  • daemon_dumps_core=1 has no effect on Linux when Nagios started as root (John Frickson)
  • Configuration check in hostgroup - misspelled hostname does not error (John Frickson)
  • contacts or contact_groups directive with no value should not be allowed (John Frickson)
  • Compile 64-bit on SPARC produces LD error (John Frickson)
  • HOSTSTATEID returns 0 even if host does not exist (John Frickson)
  • Submitting UNREACHABLE passive result for host sets it as DOWN if the host has no parents (John Frickson)
  • nagios: job XX (pid=YY): read() returned error 11 (changed from LOG_ERR to LOG_NOTICE) (John Frickson)
  • Fix for quick search not showing services if wildcard used (John Frickson)

New in Nagios 4.2.2 (Oct 24, 2016)

  • SECURITY FIXES:
  • There was a fix to vulnerability CVE-2008-4796 in the 4.2.0 release on August 1, 2016. The fix was apparently incomplete, as there was still a problem. However, we are now getting all RSS feeds using AJAX calls instead of the (outdated) MagpieRSS package. Thanks for bringing this to our attention go to Dawid Golunski (http://legalhackers.com).
  • ENHANCEMENTS:
  • Update status.c to display passive check icon for hosts when passive checks are enabled and actives disabled (John Frickson)
  • FIXES:
  • Fix permissions for Host Groups reports (status.cgi) (Patrik Halfar)
  • Service Parents does not appear to be functioning as intended (lev)
  • Availability report mixes up scheduled and unscheduled warning percentages (Helmut Mikulcik)
  • Invalid values for saved_stamp in comput_subject_downtime_times() (John Frickson)
  • Remove deprecated "framespacing" (John Frickson)
  • The nagios tarball contains two identical jquery copies (John Frickson)
  • extinfo.cgi does not set content-type (most cgi's don't) (John Frickson)
  • Timeperiods are corrupted by external command CHANGE_SVC_CHECK_TIMEPERIOD (xoubih)
  • Quick search doesn't show hosts without services (service status detail page) (John Frickson)
  • In host/services details view, if exactly 100 entries would not show last one (John Frickson)
  • nagios host URL parameter for NEW map doesn`t work - Network Map for All Hosts (John Frickson)
  • next_problem_id is improperly initialized (gherteg)
  • Passive problems not showing as "unhandled" (John Frickson)
  • September reported as Sept instead of Sep (Rostislav Opočenský)
  • Notifications are not sent for active alerts after scheduled downtime ends (John Frickson)
  • Nagios 4.2.0 not working on Solaris (John Frickson)
  • install-exfoliation and install-classicui don't work FreeBSD and Mac OS X (John Frickson)
  • Updated makefile to delete some no-longer-needed files (John Frickson)

New in Nagios 4.2.1 (Sep 8, 2016)

  • FIXES:
  • Fix undefined variable php error (John Frickson)
  • Links on the sidebar menu under 'Problems' are indented too far (John Frickson)
  • Using $ARGn$ Macros in perfdata (John Frickson)
  • using a wildcard in search returns service status total all zero's (John Frickson)
  • read_only does not take priority (deppy)
  • Running nagios -v on 4.2.0 takes 90+ seconds (John Frickson)
  • Bare "make" invoked in subtarget (mjo)
  • Theme images/stylesheets installed with inconsistent permissions (mjo / John Frickson)
  • Missing Image for Host and Service State Trends in Availability Report (nichokap / John Frickson)
  • Maintain non-persistent comments through reload (John Frickson)
  • Servicegroup availability report ignores includesoftstates in service report links (PriceChild)
  • error: format not a string literal and no format arguments (Karsten Weiss)
  • Synced config.guess and config.sub with GNU (Zakhar Kleyman)

New in Nagios 4.1.0 (Aug 19, 2015)

  • ENHANCEMENTS:
  • Promoted JSON CGIs to released status (Eric Stanley)
  • New graphical CGI displays: statusmap, trends, histogram (Eric Stanley)
  • Make sticky status for acks and comments configurable enhancement #20 (Trevor McDonald / Scott Wilkerson)
  • Add host_down_disable_service_checks directive to nagios.cfg #44 (Trevor McDonald / Scott Wilkerson)
  • httpd.conf doesn't support Apache versions > 2.3 (DanielB / John Frickson)
  • FIXES:
  • Fix for not all service dependencies created (John Frickson)
  • Fix SIGSEGV with empty custom variable (orbis / John Frickson)
  • Fix contact macros in environment variables (dvoryanchikov)
  • Fixed host's current attempt goes to 1 after going to hard state (John Frickson)
  • Fixed two bugs/problems: Replace use of %zd in base/utils.c & incorrect va_start() in cgi/jsonutils.c (Peter Eriksson)
  • Fixed: Let remove_specialized actually remove all workers (Phil Mayers)
  • Fixed log file spam caused when using perfdata command directives in nagios.cfg (shashikanthbussa)
  • Fixed off-by-one error in bounds check leads to segfault (Phil Mayers)
  • Added links for legacy graphical displays (Eric Stanley)
  • Update embedded URL's to https versions of Nagios websites (scottwilkerson)
  • Fixed doxygen comments to work with latest doxygen 1.8.9.1 #30 (Trevor McDonald)
  • Fixed makefile target "html" to PHONY to fix GitHub issue #28 (Trevor McDonald)
  • Fixed typo as per GitHub issue #27 (Trevor McDonald)
  • Fixed jsonquery.php 404 not found error, and disabled Send Query button until form populates #43 (Scott Wilkerson)
  • Fixed linking in Tactical Overview for several of the Host entries in Featured section #48 (Scott Wilkerson)
  • Fixed passing limit and sort options to pagination and sort links #42 (Scott Wilkerson)
  • Added form field for icon URL and clean-up when it changes in CGI Status Map. (Eric Stanley)
  • Added options to cgi.cfg to uncheck sticky and send when acknowledging a problem (Trevor McDonald)
  • Low impact changes to automate the generation of RPMs from nagios.spec file. (T.J. Yang)
  • Update index.php (Trevor McDonald)
  • Fixed escaping of corewindow parameter to account for possible XSS injection (Scott Wilkerson)
  • Typo correction (T.J. Yang)
  • Make getCoreStatus respect cgi_base_url (Moritz Schlarb)
  • Adjusted map layout to work within frames (Eric Stanley)
  • Fixed map displays are now the full size of browser window (Eric Stanley)
  • Fixed labels and icons on circular markup no longer scale on zoom (Eric Stanley)
  • Got all maps except circular markup working with icons (Eric Stanley)
  • Fixes to make legacy CGIs work again. (Eric Stanley)
  • Fixes to make all/html target tolerant of being run multiple times (Eric Stanley)
  • For user-supplied maps, converted node group to have transform (Eric Stanley)
  • Fixed issue transitioning from circular markup map to other maps (Eric Stanley)
  • Fix displayForm to trigger on the buttom press (Scott Wilkerson)
  • Fix fo getBBox crash on Firefox (Eric Stanley)
  • Fixed map now resets zoom when form apply()'d (Eric Stanley)
  • Fixed so close box on dialogs actually closes dialog (Eric Stanley)
  • Corrected directive in trends display (Eric Stanley)
  • Fixed minor issue with link in trends linkes (Eric Stanley)
  • Fixed issue with map displaying on Firefox (Eric Stanley)
  • Added exclusions for ctags generation (Eric Stanley)
  • Update map-popup.html (Scott Wilkerson)
  • Initial commit of new graphical CGIs (Eric Stanley)
  • Fixed Github bug #18 - archivejson.cgi returns wrong host for state change query (Eric Stanley)
  • Status JSON: Added next_check to service details (Eric Stanley)
  • Fixed escaping of keys for scalar values in JSON CGIs (Eric Stanley)
  • build: Include if it exists. (Eric J. Mislivec)
  • lib-tests: test-io{cache|broker} need -lsocket to link. (Eric J. Mislivec)
  • lib-tests: test-runcmd assumes GNU echo. (Eric J. Mislivec)
  • lib-tests: Signal handlers don't return int on most platforms, and using a cast was the wrong way to resolve this. (Eric J. Mislivec)
  • Fix some type/format mismatch warnings for pid_t. (Eric J. Mislivec)
  • Fix build on Solaris. (Eric J. Mislivec)
  • runcmd: Fix build when we don't HAVE_SETENV. (Eric J. Mislivec)
  • Fixed checkresult output processing (Eric Mislivec)
  • Corrected escaping of long output macros (Eric Mislivec)
  • Fixed null pointer dereferences in archive JSON (Eric Stanley)
  • Fixed memory overwrite issue in JSON string escaping (Eric Stanley)
  • JSON CGI: Now escaping object and array keys (Eric Stanley)

New in Nagios 4.1.0 RC 1 (Feb 20, 2015)

  • ENHANCEMENTS:
  • Promoted JSON CGIs to released status (Eric Stanley)
  • New graphical CGI displays: statusmap, trends, histogram (Eric Stanley)
  • FIXES
  • Fixed compilation on Solaris (Eric Mislivec)
  • Fixed escaping of keys for scalar values in JSON CGIs (Eric Stanley)
  • Fixed checkresult output processing (Eric Mislivec)
  • Corrected escaping of long output macros (Eric Mislivec)
  • Fixed Github bug #18 - archivejson.cgi returns wrong host for state change query
  • Fixed null pointer dereferences in archive JSON (Eric Stanley)
  • Fixed memory overwrite issue in JSON string escaping (Eric Stanley)

New in Nagios 4.0.8 (Aug 13, 2014)

  • ENHANCEMENTS:
  • Removed 8 kB string size limitation in JSON CGIs
  • Re-implemented auto-rescheduling of checks
  • Avoid bunching of checks delayed due to timeperiod constraints
  • Limit the number of autocalculated core workers to not spawn too many on large systems
  • FIXES:
  • Removed quotes from numeric duration values in JSON CGIs
  • Fixed escaping in JSON CGIs so all required characters are escaped, and in the correct order
  • Fixed segfault in archive JSON CGI when plugin output was empty
  • Fixed several possibilities for buffer overflow
  • Fixed Tracker #582, #626: Handle VAR=VAL assignments at the start of simple commands
  • Fixed Tracker #630: Recognize '' as redirection operators
  • Corrected worker communication protocol documentation
  • Fixed init script to leave config test log in a better location, let sysconfig override init script variables, and not remove nagios.cmd when attempting to start with another instance running
  • Fixed Tracker #361: Downtime notifications not displayed properly

New in Nagios 4.0.7 (Jun 4, 2014)

  • ENHANCEMENTS:
  • Added value of custom variables to Object JSON output for hosts, services and contacts (Eric Stanley)
  • FIXES:
  • Fixed bug #616: Unescape plugin output read from checkresult files, fix multiline perf data concatenation, and avoid extra memory allocation and copies. (Eric Mislivec)
  • Fixed bug #609: Image on home page doesn't have correct image path prefix. (Derek Brewer)
  • Fixed bug #608: Extra newline in service check timeout output string. (Mauno Pihelgas)
  • Fixed bug #596: Crashes checking contact authorization for host escalations. (Alexey Dvoryanchikov - duplicates #590, #586)
  • Fixed bug #496: Syntax error in exfoliation's common.css. (Karsten Weiss)

New in Nagios 4.0.6 (May 1, 2014)

  • ENHANCEMENTS:
  • Added name of authenticated user to JSON CGI results object (Eric Stanley)
  • Added Nagios Core version to the Status JSON CGI programstatus query (Eric Stanley)
  • Added daemon status to main page (Eric Mislivec)
  • FIXES:
  • Fixed bug #600: Service Check Timeout State always returns OK (0) status (Mauno , Eric Stanley)
  • Fixed bug #583: Status Check Output of (No output on stdout) stderr: (Eric
  • Stanley - duplicate of bug #573)
  • Fixed bug #573: Service checks returns (No output on stdout) stderr (Eric Stanley)
  • Fixed bug #438: Reloads during downtime causes wrong availability calculations (Eric Stanley)
  • Fixed feed updates when daemon can not access external networks (Eric Mislivec)
  • Archive JSON: Fixed bugs calculating availability (Eric Stanley)
  • Archive JSON: Allow missing logs to be skipped (Eric Stanley)

New in Nagios 4.0.5 (Apr 12, 2014)

  • Increased security by resolving vulnerability.
  • Fixed significant memory leak.
  • Improved alerting capabilities by fixing audio alert bug.
  • Various enhancements made to daemon-init and init script.
  • Numerous bug fixes.

New in Nagios 4.0.4 (Apr 5, 2014)

  • ENHANCEMENTS:
  • JSON CGIs moved to beta status (Eric Stanley)
  • FIXES:
  • Fixed bug #491,#553: Rebuilt the daemon-init scripts back to something that should work on all systems (Scott Wilkerson)

New in Nagios 4.0.3 (Apr 5, 2014)

  • ENHANCEMENTS:
  • Aliased hourly_value to importance and minimum_value to minimum_importance and deprecated the former (Eric Stanley)
  • Added host and service importance macros (Eric Stanley)
  • Added notifications on flexible downtime expiration (Dan Wittenberg)
  • FIXES:
  • Bug #548: Temporary fix that rejects all external command during restart to prevent Core from crashing (Eric Stanley)
  • Corrected calculation of host importance and importance defaults (Eric Stanley)
  • Fixed bug #498: Nagios 4 enable_environment_macros=1 not working (Eric Stanley, Alexey Dvoryanchikov)
  • No longer checks whether logs can be written when verifying configuration (Eric Stanley)
  • Fixed CGI bug where the CGI could read past the end of the list of CGI variables, potentially crashing the CGI (Scott Wilkerson)
  • Fixed inheritance of hourly_value from host and service templates (Scott Wilkerson)
  • Fixed bug #502: 4.0.0: Configuration -> Service Escalations = incomplete list (Eric Stanley)
  • Fixed bug #523: quotes and double quotes in plugin message are converted to HTML escapes in Nagios 4.0 (duplicate of bug #524)
  • Fixed bug #524: URLs returned in plugin check results are not correctly displayed (Eric Stanley)
  • Fixed bug where passive service checks would return "Service check timed out after 0.00 seconds" (Scott Wilkerson)

New in Nagios 4.0.2 RC 1 (Nov 16, 2013)

  • Fixed bug 528: Nagios 4.0.1: Logrotation: Only current host- and servicestates saved in rotated logfiles (duplicate of 507)
  • Fixed bug 507: Nagios 4.0.0 - Problem during log rotate (Stefano Ghelfi)
  • Fixed bug 530: RPM spec file sets wrong permissions on plugins directory (duplicate of bug 494)
  • Fixed bug 494: nagios.spec fixes (with patch) (Karsten Weiss)
  • Fixed bug 515: Segsegv after starting up nagios (duplicate of bug 526)
  • Fixed bug 513: Crash while entering downtime for service (duplicate of bug 526)
  • Fixed bug 529: Core Worker failed to reap child in 4.0.1 Description
  • Fixed bug 514: scheduled downtime not showing in web interface (Eric Stanley)
  • Fixed bug 526: sort_downtime() corrupts scheduled_downtime_list causing segfault (Adam James)
  • Fixed bug 492: Nagios 4 fails to remove/add checks upon reload (Eric Stanley)
  • Fixed Bug 484: Beta4.0.0b4 service checks returning (No output on stdout) (Eric Stanley)
  • Fixed Bug 470: statusmap doesn't display info (Cameron Moore)
  • Fixed Bug 499: Security issue in daemon-init.in, function check_config (Tómas Edwardsson)

New in Nagios 4.0.1 (Oct 16, 2013)

  • ENHANCEMENTS:
  • Added compiler flags in RPM spec file to reduce compiler noise (Dan Wittenberg)
  • Added logging of failure in dlclose() call (Anton Lofgren)
  • Added a simple query handler interface, nagios-qh.rb (Dan Wittenberg)
  • Multiple code simplifications, additional error handling in downtime code (Andreas Ericsson)
  • FIXES:
  • Reverted commit f99a9a7b which set check_interval to 1 if it was configured as zero.
  • Corrected order of arguments when logging unknown hosts/services (Scott Wilkerson)
  • Downtime initialized before retention data read (Eric Stanley)
  • Patches to make RPM build again (Dan Wittenberg)
  • Ensure that scheduled_downtime_depth never drops below zero (Andreas Ericsson)

New in Nagios 3.5.1 (Aug 31, 2013)

  • Added handler for SIGXFSZ signal (Eric Stanley)
  • Fixed bug #444: Nagios 3.5.0 problem with macro $ADMINEMAIL$ : @ is converted to @ after 2 nagios reload (Duplicate of bug #407)
  • Fixed bug #407: Reloading nagios config causes spaces in notifications to become plus signs (Alexey Dvoryanchikov)
  • Fixed bug #445: Adding triggered downtime for child hosts causes a SIGSEGV on restart/reload (Eric Stanley)
  • Fixed bug #375: Freshness expiration never reached and bug #427: freshness threshold doesn't work if it is set long (Scott Wilkerson, Eric Stanley)
  • Fixed bug #432: Downtime scheduled as "Nagios Process" and not the Users name (Sam Lansing, Eric Stanley)

New in Nagios 3.5.0 (Mar 15, 2013)

  • Fixed bug #403: The "configuration" page of the webui doesn't use entity encoding when displaying the "command expansion" item (Eric Stanley, Phil Randal)
  • Fixed bug #424: Nagios Core 3.4.4 seg fault (core dump) on restart after removing config for running service (Eric Stanley)
  • Updated CGI utility functions to support UTF-8 characters (Eric Stanley)
  • Fixed bug where selecting Command Expansion from Configuration CGI page would display commands instead (Eric Stanley)
  • Fixed bug #369: status.cgi crashes with segfault when there are german ulauts (äöüß) in the hostname or the servicename (Eric Stanley)
  • Fixed bug #418: Scheduled Downtime Notifications Resent On Nagios Restart/reload (Eric Stanley)

New in Nagios 3.4.5 RC 1 (Feb 23, 2013)

  • Fixed bug #424: Nagios Core 3.4.4 seg fault (core dump) on restart after removing config for running service (Eric Stanley)
  • Updated CGI utility functions to support UTF-8 characters (Eric Stanley)
  • Fixed bug where selecting Command Expansion from Configuration CGI page would display commands instead (Eric Stanley)
  • Fixed bug #369: status.cgi crashes with segfault when there are german ulauts (äöüß) in the hostname or the servicename (Eric Stanley)
  • Fixed bug #418: Scheduled Downtime Notifications Resent On Nagios Restart/reload (Eric Stanley)

New in Nagios 3.4.4 (Jan 14, 2013)

  • Reenabled check for newer versions of Nagios Core (Mike Guthrie)
  • Fixed bug #408: service checks get duplicated on reload (Eric Stanley)
  • Fixed bug #401: segmentation fault on Solaris when parsing unknown timeperiod directives. (Eric Stanley)
  • Added NULL pointer checks to CGI code. (Eric Stanley)
  • Fixed buffer overflow vulnerability in CGI code. Thanks to Neohapsis (http://archives.neohapsis.com/archives/fulldisclosure/2012-12/0108.html) for finding this. (Eric Stanley)

New in Nagios 3.4.4 RC 1 (Jan 5, 2013)

  • Fixed bug #408: service checks get duplicated on reload (Eric Stanley)
  • Fixed bug #401: segmentation fault on Solaris when parsing unknown timeperiod directives. (Eric Stanley)
  • Added NULL pointer checks to CGI code. (Eric Stanley)
  • Fixed buffer overflow vulnerability in CGI code.

New in Nagios 3.4.2 (Nov 10, 2012)

  • Fixed issue where deleting a downtime could cause Nagios to crash (Eric Stanley)
  • Corrected logic so that end times for flexible downtimes are calculated from the downtime start rather than the current time in the case where Nagios is restarted (Eric Stanley)
  • Fixed issue introduced by fix for bug #124 where flexible downtimes are not taken into account on Nagios restart. (Scott Wilkerson, Eric Stanley)
  • Fixed bug #247: If a service reports no performance data, the perfdata log file has no line indicating the test. ([email protected])
  • Fixed link for unhandled unreachable host problems on tactical overview page (Rudolf Cejka)
  • Fixed bug #345 with wild card searches not paging properly on status.cgi (Phil Randal)
  • Fixed bug #343 on status.cgi where Service Group Summary can potentially show wrong totals (Mark Ziesemer)
  • Fixed memory leaks on SIGHUP (Carlos Velasco)

New in Nagios 3.4.1 (May 23, 2012)

  • Double quotes in check_command definition break functionality (#332, reverts #86)

New in Nagios 3.4.0 (May 9, 2012)

  • ENHANCEMENTS:
  • Use execv() to execute active check commands (#86 - Ton Voon, dnsmichi)
  • Added service_check_timeout_state configuration variable (Bill McGonigle)
  • Permanently remove sleep on run_event == FALSE in main loop (Max )
  • Reduce notification load by moving notification viability check into notification list creation (Opsview Team)
  • Added code to apply allow_empty_hostgroup_assignment flag to host and service dependencies (Daniel Wittenberg)
  • Users can now see hostgroups and servicegroups that contain at least one host or service they are authorized for, instead of having to be authorized for them all (Ethan Galstad)
  • RSS feed boxes fallback if an error occurs (Ethan Galstad)
  • RSS feeds no longer block main page load (Mike Guthrie)
  • FIXES:
  • Fix $NOTIFICATIONRECIPIENTS$ macro to contain all contacts assigned to host|service, not only notified contacts (Bug #98 Matt Harrington)
  • Scheduled Downtime Notifications Resent On Nagios Restart/reload (Bug #124 - ricardo)
  • NOTIFICATIONTYPE MACRO never became CUSTOM (Bug #168 - Alexey Dvoryanchikov)
  • Plugged minor memory leaks in notification logic

New in Nagios 3.2.3 (Oct 4, 2010)

  • Fixes problem where disabling all active hosts/services was not taking effect
  • Fixes for compiler warnings (code cleanup by Stephen Gran)
  • Fixes for format errors in event handler logging (Guillaume Rousse)
  • Fixed incorrect info in sample nagios.cfg file for state_retention_file (Michael Friedrich)
  • Fixed broker_event_handler() to return ERR if data is NULL (Michael Friedrich)

New in Nagios 3.2.2 (Sep 2, 2010)

  • ENHANCEMENTS:
  • Patch to new_mini_epn to allow any command line length without breaking on extra trailing or leading whitespace (Ray Bengen)
  • Patch to mini_epn to allow any command line length (Thomas Guyot-Sionnest)
  • Patch to speed up loading of state retention data (Matthieu Kermagoret)
  • Custom notifications are now suppressed during scheduled downtime (Sven Nierlein)
  • Added code to warn user about exit code of 126 meaning plugin is not executable (bug #153)
  • Scheduled downtime can now start on SOFT error states (bug #47)
  • Main window frame URL can now be specify with a "corewindow=" parameter
  • Improved config CGI shows commands, command args in an easier to use manner (Jochen Bern)
  • Added ability for NEB modules to override execution of event handlers (Sven Nierlein)
  • Custom macros are no longer cleaned/stripped as they are user-defined and should be trusted (Peter Morch)
  • FIXES:
  • Fix for choosing next valid time on day of DST change when clocks go one hour backwards
  • Fix for nagios now erroring when "Error: Could not find any contactgroup matching..." displayed
  • Fix tap tests for Solaris 10 and newer versions of Test::Harness
  • Fix for notifications not being sent out when scheduled downtime is cancelled (Daniel Pouzzner)
  • Fix for first notification delay being calculated incorrectly, and notifications potentially going out early (Pawel Malachowski)
  • Fix for text of scheduling downtime of all services on a host (Holger Weiss)
  • Fix for services inheriting notification period from hosts if not defined (Gordon Messmer)
  • Fix for incorrect service states on host failures (bug #130 Petya Kohts)
  • Fix for incorrect service state attributes being set on host failures (bug #128 Petya Kohts)
  • Fix for non-scheduled hosts and services not being updated in NDOUtils
  • Fix for typos in TAC, CMD CGIs (bugs #150, #144, #148)
  • Fix for types in documentation (bugs #145, #105, #106)
  • Fix for incorrect host state counts in status CGI when viewing servicegroups (bug #72)
  • Fix for new Splunk integration query parameters (bug #136)
  • Fix for extra field header in availability CSV export (bug #113)
  • Fix for macro processing code modifying input string (Jochen Bern)
  • Fix for update check API
  • Fix for CGI speedup when persistent=0 for comments
  • Fix for event execution loop re-scheduling host checks instead of executing them if service checks are disabled (bug #152)
  • Fix for segfaults on Solaris (Torsten Huebler)
  • Fix for incorrect comment expiration times being passed to event broker (Mattieu Kermagot)
  • Doc updates related to cleaning of custom macros (Peter Valdemar Morch)
  • Fix to sample notify-service-by-email command (bug #62)
  • Fix for retaining host display name and alias, as well as service display name (Folkert van Heusden)

New in Nagios 3.1.2 (Jul 17, 2009)

  • Fix for CPU hogging in service and host check scheduling logic

New in Nagios 3.1.1 (Jun 23, 2009)

  • New "important check command" flag for use in service templates, to aid configuration in distributed
  • environments
  • Fix for nagios validation error when no services defined
  • Fix for stylesheet link
  • Fix for extinfo.cgi error message when cgi.cfg doesn't exist
  • Fix for notifications.cgi where Update button on right didn't retain host information when no host= w
  • as in query parameters
  • Fix for potential bug where a contactgroup with no members could cause parsing errors
  • Fix for W3 validation for history.cgi
  • Fix for W3 validation for extinfo.cgi
  • Fix for nagiostats to return non-zero with failures in MRTG mode
  • Added t/ directory for tests. Use make test to run. Requires perl on development server
  • Fix for duplicate event_id attributes in status and retention data
  • Fix for duplicate unlink() during check processing
  • Added missing check period column to host config display (CGI)
  • Fix for embedded Perl initialization under FreeBSD
  • Fix for incorrect re-initialization of mutext after program restart
  • Fix for incorrect weighting in host flap detection logic
  • Added libtap to distribution. Use ./configure --enable-libtap to compile
  • nagios.log permissions are now kept after log rotation
  • Fix for "Max concurrent service checks (X) has been reached" messages - will now push services 5 + ra
  • ndom(10) seconds ahead for retry
  • Fix for removing old HTML files for web frontend that are now replaced with PHP equivalents (index/ma
  • in/side.html)
  • Fix for incorrect service history link text in CGIs
  • Fix for useless code loop in netutils.c
  • Fix for potential divide by zero in event scheduling code
  • Fix for trailing backslash in plugin output causing memory corruption in CGIs
  • Fix for bug that could affect host/service scheduling during clock time skew or changes to timeperod
  • definitions between restarts
  • Leading whitespace from continuation lines in configuration files is now stripped out
  • Fix for bug where pipe (used by IPC) file descriptors get inherited by child processed (e.g. event ha
  • ndlers) (bug #0000026)
  • Fix for failure to daemonize - Nagios now bails (bug #0000011)
  • Fix for notifications about flapping starting not processed properly by retention data
  • Patch to add transparency to statusmap icons for truecolor images
  • Patch to add read-only permissions to extinfo CGI
  • Security fix for statuswml.cgi where arbitrary shell injection was possible

New in Nagios 3.1.0 (Jan 26, 2009)

  • Added automatic update check functionality - runs once a day to check for new Nagios releases
  • Splash screen on web UI now indicates whether a new update is available (requires that update checks are enabled)
  • Updates to nagiostats utility for faster execution if using external stats file
  • Added a bit more verbosity to config verification
  • Fixed bug in logging event handlers
  • Fix to prevent debug output from being shown when Nagios is compiled with embedded Perl interpreter
  • Fix for CPU hogging issues on OpenBSD
  • Fix to RPM spec file for sample configuration files
  • Fix for bug in time calculation routines that could cause notification, reporting, and check scheduling anomalies
  • Fix for scheduling forced service checks from web interface
  • Minor mods for frameset base for HTML compliance (more fixes coming soon)
  • Fix for bug in handling of hard host and service problem states during restarts that could incorrectly set current check attempt and adversely affect notifications, etc.
  • Fix for bug in timeperiod calculation of year/month rollovers and display of fixed calendar dates in web interface

New in Nagios 3.0.6 (Dec 2, 2008)

  • Fix for CGI submission of external commands (writing newlines and submitting service comments)
  • Fix for Apache group membership in RPM spec file
  • Fix for improper notification propagation command processing
  • Better out-of-disk-space error handling when writing retention and status files
  • Disabled adaptive check and eventhandler commands for security reasons
  • Fix for reading output from system commands (event handlers, etc) that have timed out
  • Added wildcard host matching in CGIs
  • Fixes for playing audio alerts in CGIs
  • Fix for incorrect host status links in status CGI when viewing hostgroup summary
  • Added support for x509 cert authentication in the CGIs

New in Nagios 3.0.5 (Nov 5, 2008)

  • Security fix for Cross Site Request Forgery (CSRF) bug reported by Tim Starling.
  • Sample audio files for CGIs removed from distribution
  • Fix for mutliline config file continuation bug
  • Minor fix to RPM spec file
  • Fix for AIX compiler warnings
  • Minor sample config file fix
  • Added documentation on CGI security issues

New in Nagios 3.0.4 (Oct 16, 2008)

  • Fix for properly terminating plugins when parent processes get killed (e.g. using 'killall nagios' with check_timeout plugins running
  • Fix for event broker callback when service notifications are disabled
  • Fix for scheduling scheduling servicegroup downtime with 'hosts too' option in CGIs
  • Fix for segfault under Solaris with NULL plugin output
  • Fixes for bugs in sample event handlers - stop/start active service checks and enable notifications
  • Cosmetic fix for logging of notifications
  • Fix for high CPU utilization under OS X
  • Fix for host/service name encoding in CGIs (trends and availability reports, etc.)