baserev update by copy to link target

• Files Changed
• Browse Source

- update to 4.1.1
  + Use correct HUP signal for Solaris
- introduced a simple check section

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

Prepare for RPM 4.20

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- update to 4.1.0
  ENHANCEMENTS
  + Add support for OpenSSL 3 (and EL9/Debian 11/Ubuntu 22)
  + Allow tcpd/libwrap to be excluded from build when present on the system
  + Allow loading of full certificate chains
  + Change -u (connection issues return UNKNOWN) to include all SSL-layer failures.
  + Disable renegotiation and enforce server cipher order when using SSL
  + Verify that private keys match certificates when using SSL
  FIXES
  + Fixed incorrect default for nasty_metachars in nrpe.cfg
  + Fixed incorrect help text for --use-adh
  + Fixed potential out-of-bound read when used with IPv6
- use system-user-nagios package to create the neccessary 
  user and group
- remove macros for old, unsupported SUSE versions
- refresh patches:
  + nrpe-implicit_declaration.patch
  + nrpe-static_dh_parameters.patch
  + nrpe-4.0.4-silence_wrong_package_version_messages.patch
- remove patches:
  + nrpe-disable-chkconfig_in_Makefile.patch (obsolete)
  + nrpe-improved_help.patch (fixed upstream)
  + nrpe_check_control.patch (better fix inside the spec file 
    and use existing nagios macros)
- remove obsolete nrpe-rpmlintrc

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Fixed SLES 12 build

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- use getent to check if the nrpe port is already added to the 
  services description in post-script (bsc#1205157)
- remove xinetd snipplets on newer (>15.5) distributions: 
  xinetd is not supported any longer

• Files Changed
• Browse Source

- follow /bin/bash -> /usr/bin/bash in the apparmor profile

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- fix apparmor profile to allow /run as well as /var/run

• Files Changed
• Browse Source

- added nrpe-4.0.4-silence_wrong_package_version_messages.patch
  NRPE logs 'packet version was invalid' and 'Could not read request
  from client' if the NRPE version on the client does not match the
  one on the server side. 
  This patch reduces the importance of the log entry to be just 
  informal, which should silent most client logs, while it makes 
  it still available for debugging.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- update to 4.0.3
  ENHANCEMENTS
  * Added TLSv1.3 and TLSv1.3+ support for systems that have it (Nigel Yong, Rahul Golam)
  * Added IPv6 ip address to list of default allow_from hosts (Troy Lea)
  * Added -D option to disable logging to syslog (Tom Griep, Sebastian Wolf)
  * Added -3 option to force check_nrpe to use NRPE v3 packets
  * OpenRC: provide a default path for nrpe.cfg (Michael Orlitzky)
  * OpenRC: Use RC_SVCNAME over a hard-coded PID file (j-licht)
  FIXES
  * Fixed nasty_metachars not being read from config file (#235) (Sebastian Wolf)
  * Fixed buffer length calculations/writing past memory boundaries
    on some systems (#227, #228) (Andreas Baumann, hariwe, Sebastian Wolf)
  * Fixed use of uninitialized variable when validating requests (#229) (hariwe, Sebastian Wolf)
  * Fixed syslog flooding with CRC-checking errors when both plugin 
    and agent were updated to version 4 (Sebastian Wolf)
  * Checks for '!' now only occur inside the command buffer (Joni Eskelinen)
  * NRPE daemon is more resilient to DOS attacks (Leonid Vasiliev)
  * allowed_hosts will no longer test getaddrinfo records against the
    wrong protocol (dombenson)
  * nasty_metachars will now handle C escape sequences properly when
    specified in the config file (Sebastian Wolf)
  * Calculated packet sizes now struct padding/alignment when sending
    and receiving messages (Sebastian Wolf)
  * Buffer sizes are now checked before use in packet size calculation (Sebastian Wolf)
  * When using include_dir, individual files' errors do not prevent
    the remaining files from being read (Sebastian Wolf)
- refreshed the following patches:
  * nrpe-implicit_declaration.patch
  * nrpe-improved_help.patch
  * nrpe_check_control.patch

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Don't install SuSEfirewall2 service file, SuSEfirewall2 is gone

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source