Fedora 20 Update: check-mk-1.2.6p3-1.fc20
updates at fedoraproject.org
updates at fedoraproject.org
Sat May 30 15:43:56 UTC 2015
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-8648
2015-05-21 13:06:06
--------------------------------------------------------------------------------
Name : check-mk
Product : Fedora 20
Version : 1.2.6p3
Release : 1.fc20
URL : https://mathias-kettner.de/check_mk
Summary : A new general purpose Nagios-plugin for retrieving data
Description :
check-mk is a general purpose Nagios-plugin for retrieving data. It adopts a
new approach for collecting data from operating systems and network components.
It obsoletes NRPE, check_by_ssh, NSClient, and check_snmp and it has many
benefits, the most important are a significant reduction of CPU usage on
the Nagios host and an automatic inventory of items to be checked on hosts.
--------------------------------------------------------------------------------
Update Information:
New upstream release: 1.2.6p3
New upstream release: 1.2.6p2
New upstream release: 1.2.6p2
New upstream release: 1.2.6p2
New upstream release: 1.2.6p2
New upstream release: 1.2.6p2
New upstream release: 1.2.6p2
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 20 2015 Andrea Veri <averi at fedoraproject.org> - 1.2.6p3-1
- New upstream release.
- Do not create an /etc/check_mk/conf.d/wato directory on both the
main and multisite packages.
* Tue May 5 2015 Andrea Veri <averi at fedoraproject.org> - 1.2.6p2-1
- New upstream release.
- Add a Require on bind-utils. (BZ: #1218501)
- Do not install all the plugins by default but make them available
on a different directory. Users will then be able to symlink each
of the plugins under the %{_datadir}/check-mk-agent/plugins directory
and finally mark them as active. Make sure mk_logins is however
installed to prevent the agent to complain about it being missing. (BZ: #1218516)
- Get rid of plugins from unsupported archs or operating systems.
* Mon Apr 13 2015 Andrea Veri <averi at fedoraproject.org> - 1.2.6p1-1
- New upstream release.
* Tue Apr 7 2015 Andrea Veri <averi at fedoraproject.org> - 1.2.6-1
- New upstream release. Source0 is now generated directly from Git
as Check-Mk's upstream has decided to not include source code files
(.cc, .c) for livestatus, mkeventd and waitmax anymore on the tarballs
they release. We want to have these binaries built during the RPM build,
thus the need to repack the tarball with the procedure outlined above.
- Include the 02-Downtime-Struct-Update patch to prevent Nagios to core dump
when a downtime is set. This was caused by a change on the downtime struct
applied in the course of Nagios 3's development. Thanks Mike Battersby for
the patch. (BZ: #1083003)
- Filter the /usr/bin/bash require on EL 6 as it's available under /bin/bash,
additionally fix the /usr/bin/pnp shebang from the plugins/unitrends_backup file
as that is a non-existent binary file, upstream probably meant php.
- PLUGINSDIR on the check_mk_agent binary file is set to be
%{_datadir}/check-mk-agent/plugins, make sure all the plugins are installed
there and not on %{_datadir}/check_mk/plugins instead.
* Tue Sep 30 2014 Andrea Veri <averi at fedoraproject.org> - 1.2.4p5-2
- Do not require any other shell than bash since that's the default
shell for the Fedora / RHEL distributions.
* Wed Sep 17 2014 Andrea Veri <averi at fedoraproject.org> - 1.2.4p5-1
- New upstream release. Fixes CVEs:
- CVE-2014-5338
- CVE-2014-5339
- CVE-2014-5340 (BZ: #1132337, #1132339, #1132341)
- Stop shipping the j4p_performance plugin as it's deprecated. (BZ: #1133068)
- Turn Wato_Legacy_Eval as True as we want to prevent breakages
between machines running different Python and/or check-mk releases.
This is necessary after the 'ast' move from 'pickle' (that was
generating a insecure API call), however the 'ast' module is still
not available for RHEL / CentOS 5 machines. The patch is there to
avoid miscommunications between different distribution releases. More
information is available at:
http://mathias-kettner.com/check_mk_werks.php?werk_id=984.
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.2.4p2-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.2.4p2-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Tue May 27 2014 Andrea Veri <averi at fedoraproject.org> - 1.2.4p2-2
- Install the mk-job binary on /usr/bin.
- Make sure the proper permissions are given to /var/lib/check_mk_agent/job
to prevent any hard or symlink to be created by a normal user and pointing
to any file on the filesystem exposing it on the check-mk-agent output being
run as root. Fixes BZ #1101669.
* Mon Apr 14 2014 Andrea Veri <averi at fedoraproject.org> - 1.2.4p2-1
- New upstream release.
* Wed Apr 2 2014 Andrea Veri <averi at fedoraproject.org> - 1.2.4p1-1
- New upstream release. Fixes the missing two CVEs that were still
left unfixed on 1.2.4:
- CVE-2014-2330
- CVE-2014-2331
* Tue Mar 25 2014 Andrea Veri <averi at fedoraproject.org> - 1.2.4-1
- New upstream release. Fixes the following CVEs:
- CVE-2014-2329
- CVE-2014-2332
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1218516 - Plugins should not be activated by default
https://bugzilla.redhat.com/show_bug.cgi?id=1218516
[ 2 ] Bug #1218501 - Missing bind-utils dependency
https://bugzilla.redhat.com/show_bug.cgi?id=1218501
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update check-mk' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
More information about the package-announce
mailing list