Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package nagios for openSUSE:Factory checked in at 2026-04-29 19:19:23 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/nagios (Old) and /work/SRC/openSUSE:Factory/.nagios.new.30200 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "nagios" Wed Apr 29 19:19:23 2026 rev:32 rq:1349888 version:4.5.12 Changes: -------- --- /work/SRC/openSUSE:Factory/nagios/nagios.changes 2025-10-28 14:47:49.450112592 +0100 +++ /work/SRC/openSUSE:Factory/.nagios.new.30200/nagios.changes 2026-04-29 19:20:37.723926437 +0200 @@ -1,0 +2,35 @@ +Fri Apr 17 13:15:20 UTC 2026 - Joel Baltazor <[email protected]> + +- update to 4.5.12 + * Fix vulnerabilities in CSRF cookie (Thanks SeungMyung Lee) (Emmett Kapsner) + * Fix runcmd compile error by replacing maxfd macro with a static variable (Leon Adomaitis) + +- update nagios-disable_phone_home.patch +- update .spec to delete non-empty contrib/exfoliation directory + +- Changes from 4.5.5 back to 4.5.11 + * Fix order of Event Queue Initialization (Bryan Heden) + * Fix double-negatives in template-processing related error messages (Vanush Paturyan) + * Update quickstart and documentations links (Aaron Cieslicki) + * Remove null coalescing operators and fix some php errors (Dylan Anderson and Robert Högberg) + * Replace sys/poll.h with poll.h (Michael Orlitzky) + * Fix musl 64bit time_t on 32bit arm (Doug Nazar) + * Remove Ubuntu 20 From Testing (Doug Nazar) + * Change 'which' to 'command -v' in autoconf scripts (Michael Orlitzsky) + * Fix NULL Pointer dereference in Update Chack API response parsing (Ankur Patel) + * Fix missing image (J. Winters-Brown) + * Fix unreachable notifications (Dylan Anderson) + * Add light option in new exfoliation theme (Dylan Anderson) + * Fix authentication in trends.cgi (Dylan Anderson) + * Improve new exfoliation theme and add back in PID information (Dylan Anderson) + * Fix issues with downtimes that are both flexible and triggered and improve downtime additions in general (#595) (Dylan Anderson) + * Expand the custom variable macros to an empty string, if the custom variable does not exist (Andre Klärner) + * Fix notification logic to not send a notification if a host and services parents are down (#873) (Dylan Anderson) + * Update Exfoliation theme (Dylan Anderson) + * Send a recovery notification if the object recovered while flapping (#847) (Dylan Anderson) + * Fix for separate build directory & a couple small cleanups (Doug Nazar) + * Update tutorial links in Readme (Igor Udot) + * Update configure scripts using newer versions of autotools (Dylan Anderson) + * Disable maintainer mode for TAP testing and add Github Actions (Dylan Anderson) + +------------------------------------------------------------------- Old: ---- nagios-4.5.4.tar.gz New: ---- nagios-4.5.12.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ nagios.spec ++++++ --- /var/tmp/diff_new_pack.H6kjWH/_old 2026-04-29 19:20:38.887974082 +0200 +++ /var/tmp/diff_new_pack.H6kjWH/_new 2026-04-29 19:20:38.891974246 +0200 @@ -32,7 +32,7 @@ %endif Name: nagios -Version: 4.5.4 +Version: 4.5.12 Release: 0 Summary: The Nagios Network Monitor License: GPL-2.0-or-later @@ -401,7 +401,9 @@ cp -a %{buildroot}%{nagios_datadir}/* %{buildroot}%{_datadir}/nagios-themes/exfoliation/ rm -rf %{buildroot}%{_datadir}/nagios-themes/exfoliation/{stylesheets,images} mv -fv contrib/exfoliation/{stylesheets,images} %{buildroot}%{_datadir}/nagios-themes/exfoliation/ -rmdir contrib/exfoliation +#rmdir contrib/exfoliation +rm -rf contrib/exfoliation + %fdupes %{buildroot}%{_datadir}/nagios-themes/exfoliation/ ++++++ _service ++++++ --- /var/tmp/diff_new_pack.H6kjWH/_old 2026-04-29 19:20:38.979977848 +0200 +++ /var/tmp/diff_new_pack.H6kjWH/_new 2026-04-29 19:20:38.995978503 +0200 @@ -2,7 +2,7 @@ <service name="download_url" mode="localonly"> <param name="host">github.com</param> <param name="protocol">https</param> - <param name="path">/NagiosEnterprises/nagioscore/releases/download/nagios-4.5.4/nagios-4.5.4.tar.gz</param> + <param name="path">/NagiosEnterprises/nagioscore/releases/download/nagios-4.5.12/nagios-4.5.12.tar.gz</param> </service> </services> ++++++ nagios-4.5.4.tar.gz -> nagios-4.5.12.tar.gz ++++++ ++++ 40362 lines of diff (skipped) ++++++ nagios-disable_phone_home.patch ++++++ --- /var/tmp/diff_new_pack.H6kjWH/_old 2026-04-29 19:20:40.120024510 +0200 +++ /var/tmp/diff_new_pack.H6kjWH/_new 2026-04-29 19:20:40.136025166 +0200 @@ -1,8 +1,8 @@ -Index: nagios-4.5.1/base/utils.c +Index: nagios-4.5.12/base/utils.c =================================================================== ---- nagios-4.5.1.orig/base/utils.c -+++ nagios-4.5.1/base/utils.c -@@ -3330,142 +3330,6 @@ int check_for_nagios_updates(int force, +--- nagios-4.5.12.orig/base/utils.c ++++ nagios-4.5.12/base/utils.c +@@ -3330,146 +3330,6 @@ int check_for_nagios_updates(int force, /* checks for updates at api.nagios.org */ int query_update_api(void) { @@ -113,6 +113,10 @@ - var = strtok(ptr, "="); - val = strtok(NULL, "\n"); - +- /* skip malformed lines to prevent NULL pointer dereference */ +- if(var == NULL || val == NULL) +- continue; +- - if(!strcmp(var, "UPDATE_AVAILABLE")) { - update_available = atoi(val); - /* we were successful */
