nagios-nrpe (2.15-1ubuntu3) yakkety; urgency=medium * debian/rules : Add "--enable-command-args". (LP: #1555258) This update enables the command-args support in nrpe by not ignoring option "dont_blame_nrpe=1". By default, the option is set as follow : "dont_blame_nrpe=0", which has the same effect of having the command-args support disabled at compile time like Debian does. Ubuntu has decided to deviate from Debian upstream for that particular case to allow/unblock the Ubuntu users of nrpe to make the choice for themselves whether to accept the security risks that the feature involve by manually enabling command-args in nrpe.cfg or not. For more details as of why Debian has decided to disable the feature can be found in debian/NEWS. (closes: #756479) * [5bf9b20] Add 10_remote_execution_exploit_fix.dpatch patch (LP: #1555258) As requested by the security team. -- Eric Desrochers Mon, 08 May 2017 08:01:10 -0400 nagios-nrpe (2.15-1ubuntu2) yakkety; urgency=medium * Use dpkg-dev's hardening support instead of hardening-includes. -- Matthias Klose Thu, 29 Sep 2016 21:06:08 +0200 nagios-nrpe (2.15-1ubuntu1) utopic; urgency=low [ Liam Young ] LP: #1348142 * Merge from Debian unstable (2.15-1). Remaining changes: - debian/{rules,control}: Add hardening-includes to gain PIE security builds. * Changes gained from Debian: - 01_nodevrandom-and-docoptions.dpatch: Patch dropped. Debian are no longer carrying this patch and it does not seem to be needed. 'l' is now listed as a doc option and it seems that using urandom for seeding srand is unlikely to realistically exhaust a machines entropy as was mentioned in Debian Bug #333552. - debian/patches/00list: 04_weird_output.dpatch dropped - debian/patches/05_pid_privileges.dpatch: Patch now matches debian - debian/patches/09_noremove_pid.dpatch: Patch now matches debian -- Liam Young Thu, 24 Jul 2014 12:39:39 +0100 nagios-nrpe (2.15-1) unstable; urgency=high * [f2cea9f] Imported Upstream version 2.15 * [023e909] Disable command-args in nrpe. (Closes: #745272) * [6369220] Use restorecon to set SE Linux context on $PIDDIR (Closes: #679241) * [a484e7d] Switch order of nagios-plugins recommends to prefer -basic. (Closes: #752243) * [b1ef043] Don't recommend a core implementation for the plugin * [16dbf01] Remove obsolete patch * [694b804] Remove luk from uploaders. (Closes: #719636) * [28d9004] Remove obsolete patch * [86ea67e] 08_CVE-2013-1362.dpatch is now obsolete * [74e3b07] Refresh patches * [1258ab2] Reword NEWS entry * [744eec6] configure is buggy: --disable- in fact enables a feautre. * [eec54b6] Adjust README.Debian for the removal or argument processing -- Alexander Wirt Tue, 15 Jul 2014 18:30:36 +0200 nagios-nrpe (2.15-0ubuntu1) trusty; urgency=medium * New upstream release (2.15). * Updated patches: - 01_nodevrandom-and-docoptions.dpatch - 04_weird_output.dpatch - 05_pid_privileges.dpatch - 09_noremove_pid.dpatch * Dropped patches (upstream): - 08_CVE-2013-1362.dpatch -- Stéphane Graber Mon, 13 Jan 2014 11:34:11 -0500 nagios-nrpe (2.13-4) unstable; urgency=low * [dcffec6] Do not remove the PID file after a connection error. Original patch from Hiren Patel. (Closes: #716949) -- Bernd Zeimetz Mon, 15 Jul 2013 16:07:54 +0200 nagios-nrpe (2.13-3.1ubuntu1) trusty; urgency=low * Merge from Debian unstable. Remaining changes: - debian/{rules,control}: Add hardening-includes to gain PIE security builds. - debian/rules: Use dpkg-buildflags. -- Michael Terry Tue, 29 Oct 2013 09:14:34 -0700 nagios-nrpe (2.13-3.1) unstable; urgency=low [ Ivo De Decker ] * Non-maintainer upload. * Remove Luk Claes from uploaders (Closes: #719636) [ KURASHIKI Satoru ] * debian/patches/09_noremove_pid.dpatch: - Do not remove the PID file after a connection error (original patch from Hiren Patel). (Closes: #716949) -- Ivo De Decker Sat, 05 Oct 2013 20:23:24 +0200 nagios-nrpe (2.13-3ubuntu2) saucy; urgency=low * debian/patches/09_noremove_pid.dpatch: - Do not remove the PID file after a connection error (original patch from Hiren Patel). (LP: #1126890) -- Michael Terry Fri, 24 May 2013 17:01:05 -0400 nagios-nrpe (2.13-3ubuntu1) saucy; urgency=low * Merge from Debian unstable. Remaining changes: - debian/{rules,control}: Add hardening-includes to gain PIE security builds. - debian/rules: Use dpkg-buildflags. -- Michael Terry Tue, 30 Apr 2013 09:24:13 -0700 nagios-nrpe (2.13-3) unstable; urgency=high * [e55afd1] Add 08_CVE-2013-1362.dpatch patch. If command arguments are enabled in the NRPE configuration, it was possible to pass $() as arguments as the checking for nasty caracters was not strict enough to catch $(). This allowed executing shell commands under a subprocess and pass the output as a parameter to the called script (if run under bash). CVE-2013-1362 (Closes: #701227) -- Alexander Wirt Sat, 09 Mar 2013 08:42:05 +0100 nagios-nrpe (2.13-2ubuntu1) raring; urgency=low * Merge from Debian unstable. Remaining changes: - debian/{rules,control}: Add hardening-includes to gain PIE security builds. - debian/rules: Use dpkg-buildflags. -- Logan Rosen Sun, 24 Feb 2013 15:29:43 -0500 nagios-nrpe (2.13-2) unstable; urgency=high [ Thijs Kinkhorst ] * Add warning about the inadequateness of the 'ssl' option. -- Alexander Wirt Mon, 11 Feb 2013 17:45:20 +0100 nagios-nrpe (2.13-1ubuntu1) raring; urgency=low * Merge from Debian unstable. Remaining changes: - debian/{rules,control}: Add hardening-includes to gain PIE security builds. - debian/rules: Use dpkg-buildflags. -- Logan Rosen Sat, 02 Feb 2013 18:16:48 -0500 nagios-nrpe (2.13-1) unstable; urgency=low * [3e113b5] Imported Upstream version 2.13 * [acc152b] Bump standards version * [c707bce] Use dh9 for hardening * Updated patches -- Alexander Wirt Sat, 30 Jun 2012 11:08:22 +0200 nagios-nrpe (2.12-6ubuntu2) quantal; urgency=low * Fixed compiler hardening configuration. (LP: #1000379) -- Bryan D. Payne Wed, 16 May 2012 17:29:52 +0000 nagios-nrpe (2.12-6ubuntu1) quantal; urgency=low [ Dmitrijs Ledkovs ] * Merge with Debian; remaining changes: - debian/{rules,control}: add hardening-includes to gain PIE security builds. - Use dpkg-buildflags. * Changes gained from Debian: - [4dc53fb] Use retry argument for start-stop-daemon when stopping nrpe (LP: #896388) [ Stéphane Graber ] * Drop useless diff file in source package (xxx) that was added by mistake in a previous merge. -- Stéphane Graber Thu, 03 May 2012 09:55:10 -0400 nagios-nrpe (2.12-6) unstable; urgency=low * [36b1062] Add add icinga to the list of recommends * [a698acb] Don't remove homedirectory of the nagios user (Closes: #665845) * [4dc53fb] Use retry argument for start-stop-daemon when stopping nrpe (Closes: #650464) -- Alexander Wirt Mon, 30 Apr 2012 09:25:45 +0200 nagios-nrpe (2.12-5ubuntu1) precise; urgency=low * Merge with Debian; remaining changes: - debian/{rules,control}: add hardening-includes to gain PIE security builds. * Use dpkg-buildflags. -- Matthias Klose Tue, 18 Oct 2011 15:09:21 +0200 nagios-nrpe (2.12-5) unstable; urgency=low [ Alexander Wirt ] * [e3af3bd] Bump compat to 8 * [4f9e892] Add versioned depends to dpatch for sequence support * [5ec5a3b] Install example nrpe_local.cfg * [69ea7b9] Move rules file to dh * [298f725] Use autotools_dev dh sequence helper * [10da37d] Bump debhelper dependency to 8 * [2b009ae] Bump standards version * [4d093e3] Ignore usermod failure (Closes: #538894) * [e776f7b] Use pidfile for start-stop-daemon and fix pidfile deletion (Closes: #548157, #639523) * [8050c97] Support multiarch in rulesfile (Closes: #642790) * [027274f] Use pidfile for start-stop-daemon in start() * [1f69c63] Support status in nrpe initscript * [42ccdcc] Add a comment to nrpe.cfg that snipplets have to end .cfg (Closes: #641933) [ Jan Wagner ] * [0a80fdb] Update debian/README.Debian about conf.d/ -- Alexander Wirt Sun, 25 Sep 2011 08:35:48 +0200 nagios-nrpe (2.12-4ubuntu3) oneiric; urgency=low * Configure with --with-ssl-lib=. LP: #829434. -- Matthias Klose Thu, 25 Aug 2011 21:10:45 +0200 nagios-nrpe (2.12-4ubuntu2) oneiric; urgency=low * Rebuild for OpenSSL 1.0.0. -- Colin Watson Tue, 17 May 2011 12:16:15 +0100 nagios-nrpe (2.12-4ubuntu1) lucid; urgency=low * debian/{rules,control}: add hardening-includes to gain PIE security builds. * debian/control: Update maintainer according to spec. -- Chuck Short Thu, 07 Jan 2010 14:31:00 -0500 nagios-nrpe (2.12-4) unstable; urgency=low * Build against libwrap0-dev (Closes: #412705) * Remove 'last modified header' from nrpe config (Closes: #499280) * Create /etc/nagios/nrpe.d (Closes: #505700, #474333) * Fix pidfile handling (Closes: #411046) * Add newer config.{guess,sub} (Closes: #535737) - Build-depend on autotools-dev * Delete /var/lib/nagios if empty after purge (Closes: #527069) * Bump standards version (add README.source) * Bump dh_compat version (remove -k from dh_clean) -- Alexander Wirt Mon, 06 Jul 2009 07:08:26 +0200 nagios-nrpe (2.12-3.1) unstable; urgency=low * Non-maintainer upload. * Fix bashism (Closes: #530149). -- Raphael Geissert Sat, 04 Jul 2009 20:23:23 -0500 nagios-nrpe (2.12-3) unstable; urgency=low * Sync homedirectory of the nagios user with the nagios3 package (Closes: #479051) * Removed now empty nagios-nrpe-plugins.post* scripts -- Alexander Wirt Sat, 21 Mar 2009 09:33:39 +0100 nagios-nrpe (2.12-2) unstable; urgency=low * Add myself to uploaders. * Clean buffer before use (Closes: #498749). * Remove pid file before creating a new ones (Closes: #411046). * Include inetd support (Closes: #409772). -- Luk Claes Sun, 14 Sep 2008 16:04:17 +0200 nagios-nrpe (2.12-1) unstable; urgency=low * Support an nrpe.d config directory in addition to nrpe_local.cfg (Closes: #474333) * Add myself to uploaders * Add watch file * New upstream version (Closes: #475081) * Acknowledge NMU from Chris Lamb (Closes: #484412) * Recommend Nagios 3 instead of Nagios 2 * Update copyright file * Use the same homedir as nagios3 (Closes: #479051) -- Alexander Wirt Wed, 06 Aug 2008 20:33:57 +0200 nagios-nrpe (2.8.1-1.1) unstable; urgency=medium * Non-maintainer upload. * Fix bashism in debian/rules (Closes: #484412) * Bump Standards-Version to 3.8.0. -- Chris Lamb Sat, 12 Jul 2008 01:09:21 +0100 nagios-nrpe (2.8.1-1) unstable; urgency=low * New upstream release * bump Recommends to nagios2, thanks to Henning Sprang for suggesting this (closes: #399856). * fix typo in package description, thanks to Tilman Koschnick for noticing this (closes: #419130). -- sean finney Sat, 12 May 2007 12:27:30 +0200 nagios-nrpe (2.5.1-3) unstable; urgency=high * apparently we were already including another default file without installing it, and some people were using it. so now we include this one as well as the new default, with this one taking precedence since it was there first. thanks to Peter Palfrader for catching this (closes: #398914). -- sean finney Fri, 17 Nov 2006 09:17:55 +0100 nagios-nrpe (2.5.1-2) unstable; urgency=low * include a /etc/default/nagios-nrpe-server where variables such as DAEMON_OPTS can be set (closes: #396709). * bump standards version to 3.7.2 * add pre-depends on adduser * LSB-ize init script, and add dependency on lsb-base -- sean finney Sat, 04 Nov 2006 17:38:34 +0100 nagios-nrpe (2.5.1-1) unstable; urgency=low * new upstream release. includes fix from Peter Palfrader to catch invalid free()'s when nrpe is called with --no-ssl (closes: #361233). -- sean finney Sun, 14 May 2006 21:38:48 -0500 nagios-nrpe (2.4-2) unstable; urgency=low [sean finney] * removing nrpe_local.cfg caused trouble for some people, so i've added it back in (closes: #360093). -- sean finney Fri, 31 Mar 2006 07:02:31 +0200 nagios-nrpe (2.4-1) unstable; urgency=low * new upstream release. [sean finney] * (NEEDS TESTING) move away from cdbs for my own sanity. * add build-dependency on dpatch. * no longer create nrpe_local.cfg. no reason to have it. * remove postinst script for nagios-nrpe-server, as all it did was touch the previously mentioned file. * upstream has incorporated the following patches: - 02_global-cmd-prefix.dpatch - 03_nrpe-trailing-whitespace.dpatch * check_nrpe -h provides what "-a" does, but i've gone ahead and added a comment in check_nrpe.cfg too, because it can't hurt to do so :) (closes: #351714). * no longer generate the nagios-nrpe-doc package, and move copies of the documentation into the plugin and server packages. add a Conflicts: nagios-nrpe-doc to the remaining packages to ensure that the stale package doesn't remain. NEWS.Debian also mentions this and instructs the admin to purge the package too. -- sean finney Tue, 24 Jan 2006 18:16:54 +0100 nagios-nrpe (2.2-1) unstable; urgency=low * new upstream release. [sean finney] * debian packaging source repository is now migrated to svn. * updated 01_nodevrandom-and-docoptions.dpatch and 02_global-cmd-prefix.dpatch to apply against the latest upstream version. * nrpe.cfg has moved location in the upstream tarball. * introduced 03_nrpe-trailing-whitespace.dpatch to fix regression in config file parsing until upstream incorporates it. -- sean finney Tue, 24 Jan 2006 17:52:54 +0100 nagios-nrpe (2.0-9) unstable; urgency=low * Sean Finney: - nagios-nrpe has now joined forces with the debian pkg-nagios project, updated Maintainer and Uploaders field accordingly. - provide check_nrpe_1arg command definition so that one can call check_nrpe both with and without arguments to the cmds (closes: #248424). - changed nagios-nrpe-server's Recommends on nagios-plugins to reflect the upcoming new nagios-plugins layout. - changed nagios-nrpe-plugin's Depends on nagios to a Recommends. - building issues seem to be resolved on arm now (closes: #259442). - updated Standards-Version to 3.6.2 - included patch from joerg and weasel to document some cmdline options and provide a better alternative to reading a random byte from /dev/random (closes: #333552). - included "global command prefix" patch from joerg jaspert (closes: #332253). -- sean finney Tue, 25 Oct 2005 10:04:59 -0400 nagios-nrpe (2.0-8) unstable; urgency=low * debian/control: change depends on nagios-plugins, to recommends. (closes: #327199) -- Jason Thomas Mon, 10 Oct 2005 08:07:57 +1000 nagios-nrpe (2.0-7) unstable; urgency=high * The previous upload fixes a bug that breaks the install of this package so this is a new upload with a high urgency to try and get it into sarge. -- Jason Thomas Thu, 19 Aug 2004 22:47:40 +1000 nagios-nrpe (2.0-6) unstable; urgency=low * nagios plugin config dir changed to etc/nagios-plugins/configs/ (closes: #266826) -- Jason Thomas Thu, 19 Aug 2004 21:17:28 +1000 nagios-nrpe (2.0-5) unstable; urgency=low * debian/nagios-nrpe-server.preinst: added code to create nagios user and group. (closes: #248995, #241168) -- Jason Thomas Sat, 15 May 2004 12:02:35 +1000 nagios-nrpe (2.0-4) unstable; urgency=low * debian/nagios-nrpe-server.init.d: added missing -d to restart. (closes: #248797) * debian/nrpe.1: renamed to nrpe.8 * debian/nagios-nrpe-server.manpages: changed nrpe.1 to nrpe.8 * debian/dirs: deleted it as its not needed. -- Jason Thomas Fri, 14 May 2004 14:05:03 +1000 nagios-nrpe (2.0-3) unstable; urgency=low * debian/nagios-nrpe-server.init.d: added --oknodo to stop commands which will make upgrades and purges clean. -- Jason Thomas Wed, 24 Mar 2004 13:09:00 +1100 nagios-nrpe (2.0-2) unstable; urgency=low * debian/control: added build-depends cdbs (closes: #230943) * debian/control: nagios-nrpe-server now conflicts netsaint-nrpe-server (closes: #230303) -- Jason Thomas Wed, 11 Feb 2004 09:27:01 +1100 nagios-nrpe (2.0-1) unstable; urgency=low * Initial Release. (closes: #209124) -- Jason Thomas Wed, 14 Jan 2004 16:13:36 +1100