CVS commit: [pkgsrc-2011Q2] pkgsrc/net

["Matthias Scheler" <tron%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   tron
Date:           Wed Aug  3 17:51:52 UTC 2011

Modified Files:
        pkgsrc/net/nagios-base [pkgsrc-2011Q2]: Makefile Makefile.common PLIST
            distinfo
        pkgsrc/net/nagios-base/patches [pkgsrc-2011Q2]: patch-aa patch-ad
            patch-ag patch-ah
        pkgsrc/net/nagios-plugins [pkgsrc-2011Q2]: Makefile.common

Log Message:
Pullup ticket #3488 - requested by bouyer
net/nagios-base: security update

Revisions pulled up:
- net/nagios-base/Makefile                                      1.32
- net/nagios-base/Makefile.common                               1.12
- net/nagios-base/PLIST                                         1.10
- net/nagios-base/distinfo                                      1.13
- net/nagios-base/patches/patch-aa                              1.9
- net/nagios-base/patches/patch-ad                              1.8
- net/nagios-base/patches/patch-ag                              1.8
- net/nagios-base/patches/patch-ah                              1.3
- net/nagios-plugins/Makefile.common                            1.9

---
   Module Name: pkgsrc
   Committed By:        bouyer
   Date:                Tue Aug  2 14:03:18 UTC 2011

   Modified Files:
        pkgsrc/net/nagios-base: Makefile Makefile.common PLIST distinfo
        pkgsrc/net/nagios-base/patches: patch-aa patch-ad patch-ag patch-ah
        pkgsrc/net/nagios-plugins: Makefile.common

   Log Message:
   Update nagios-base to 3.3.1, fixig CVE-2011-1523 and CVE-2011-2179.
   Changes since 3.2.3:
   ENHANCEMENTS

       * Added support for same host service dependencies with servicegroups 
(Mathieu Gagn?)
       * Empty hostgroups referenced from services now optionally generate a 
warning instead of an error.
       * Documentation links now point to online resources
       * Matt Wall's Exfoliation theme is now installed by default. You can 
reinstall the classic theme with "make install-classicui"
       * Downtime delete commands made "distributable" by deleting by host 
group name, host name or start time/comment (Opsview team)
       * Allow status.cgi to order by "host urgency" (Jochen Bern)
       * Added news items and quick links to main splash page
       * Added ability to authenticate to CGIs using contactgroup name (Stephen 
Gran)

   FIXES

       * Fixes status.cgi when called with no parameters, where host should be 
set to all if none specified (Michael Friedrich)
       * Fixes possible validation error with empty hostgroups/servicegroups 
(Sven-G?ran Bergh)
       * Performance-data handling and checking is now thread-safe so long as 
embedded perl is not used.
       * Children should no longer hang on mutex locks held in parent for 
localtime() (and similar) calls.
       * Debug logging is now properly serialized, using soft-locking with a 
timeout of 150 milliseconds to avoid multiple threads competing for the 
privilege to write debug info.
       * Fixed extraneous alerts for services when host is down
       * Fixed incorrect parsing of multi-line host check results (Jochen Bern)
       * Fixed bug with passive host checks being incorrectly sent to event 
brokers as active checks
       * Fixed bug where passive host check status updates were not being 
propagated to event brokers
       * Reverted 'Fix for retaining host display name and alias, as well as 
service display name' as configuration information stored incorrectly over a 
reload
       * Fixed compile warnings for size_t (Michael Friedrich)
       * Fixed problem where acknowledgements were getting reset when a hard 
state change occurred
       * Removed duplicated unlinks for check result files with multiple results
       * Fixed race condition on flexible downtime commands when duration not 
set or zero (Michael Friedrich)
       * Fixed flexible downtime on service hard state change doesn't get 
triggered/activated (Michael Friedrich)
       * Fixed XSS vulnerability in config.cgi and statusmap.cgi (Stefan 
Schurtz)
       * Fixed segfault when sending host notifications (Michael Friedrich)
       * Fixed bug where unauthorized contacts could issue hostgroup and 
servicegroup commands (Sven Nierlein)


To generate a diff of this commit:
cvs rdiff -u -r1.31 -r1.31.2.1 pkgsrc/net/nagios-base/Makefile
cvs rdiff -u -r1.11 -r1.11.2.1 pkgsrc/net/nagios-base/Makefile.common
cvs rdiff -u -r1.9 -r1.9.2.1 pkgsrc/net/nagios-base/PLIST
cvs rdiff -u -r1.12 -r1.12.2.1 pkgsrc/net/nagios-base/distinfo
cvs rdiff -u -r1.8 -r1.8.2.1 pkgsrc/net/nagios-base/patches/patch-aa
cvs rdiff -u -r1.7 -r1.7.2.1 pkgsrc/net/nagios-base/patches/patch-ad \
    pkgsrc/net/nagios-base/patches/patch-ag
cvs rdiff -u -r1.2 -r1.2.2.1 pkgsrc/net/nagios-base/patches/patch-ah
cvs rdiff -u -r1.8 -r1.8.2.1 pkgsrc/net/nagios-plugins/Makefile.common

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.