Release announcements

Nrpe 2.14 contains a number of changes including a patch to prevent a potential security issue arising from passing bash command substitutions as arguments. Winrpe installer delivers also updated versions of Cygwin, OpenSSL and other tools.

More detailed information about changes in Nagios Core can be found here. The Perl package included in Nagwin contains now the Net::SNMP module, making many plugins dependent on that module available in Nagwin environments. Cygwin and many related tools are also updated to their latest versions.

Existing customers can download the latest version from their customer page at www.itefix.no

Adolsign 2.2 gets information from Active Directory in UTF-8 format, allowing to support a wider set of character sets instead of only Latin-1. To utilize this new feature, you need to save your template files in UTF-8 format. Text and html signatures are supported. In addition, Adolsign can now create anchors with hyperlinks in rtf signatures.

Existing customers can download the latest version from their customer page at www.itefix.net

Nagwin 1.4.1 contains an updated Nginx web server with SSL-support, giving users ability to use secure communications. You may have a look at a related recipe for proper ssl setup. Nginx has also the capability of giving some status information. Cygwin DLL is also updated to a newer version. We have also added a start menu link to start a Bash shell easily. There are also some plugin changes: Earlier versions of check_winping had to be customized on localized versions of Windows for proper operation. Nagwin has now an updated check_winping without any dependencies. Check_snmp is introduced as a new plugin, allowing you to monitor any SNMP source. As a consequence of this, we have now removed plugins check_snmp_printer and check_snmp_cisco from Nagwin distribution.

Version 4.4.1 has an user activation wizard allowing users to specify home directories of their choice.

 In addition, there is no need to specify domain names during login any longer. You need only to specify user names in lowercase. All activated users gets also Windows user right 'Logon locally' automatically assigned.

ENHANCEMENTS

• Added service_check_timeout_state configuration variable (Bill McGonigle)
• Permanently remove sleep on run_event == FALSE in main loop (Max <perldork@webwizarddesign.com>)
• Reduce notification load by moving notification viability check into notification list creation (Opsview Team)
• Added code to apply allow_empty_hostgroup_assignment flag to host and service dependencies (Daniel Wittenberg)
• Users can now see hostgroups and servicegroups that contain at least one host or service they are authorized for, instead of having to be authorized for them all (Ethan Galstad)
• RSS feed boxes fallback if an error occurs (Ethan Galstad)
• RSS feeds no longer block main page load (Mike Guthrie)

 
FIXES

• Fix $NOTIFICATIONRECIPIENTS$ macro to contain all contacts assigned to host|service, not only notified contacts (Bug #98 Matt Harrington)
• Scheduled Downtime Notifications Resent On Nagios Restart/reload (Bug #124 - ricardo)
• NOTIFICATIONTYPE MACRO never became CUSTOM (Bug #168 - Alexey Dvoryanchikov)
• Plugged minor memory leaks in notification logic

Existing customers can download the latest version from their customer page at www.itefix.net

Version 5.0.3 of the cwRsync client comes with OpenSSH binaries updated to version 6.1. It contains also the correct version of OpenSSL (1.0.1c) as announced before.

Existing customers can download the latest version from their customer page at www.itefix.net

OpenSSH version 6.1 is primarily a bugfix release.

Features:

• sshd(8): This release turns on pre-auth sandboxing sshd by default for new installs, by setting UsePrivilegeSeparation=sandbox in sshd_config.
• ssh-keygen(1): Add options to specify starting line number and number of lines to process when screening moduli candidates, allowing processing of different parts of a candidate moduli file in parallel
• sshd(8): The Match directive now supports matching on the local (listen) address and port upon which the incoming connection was received via LocalAddress and LocalPort clauses.
• sshd(8): Extend sshd_config Match directive to allow setting AcceptEnv and {Allow,Deny}{Users,Groups}
• Add support for RFC6594 SSHFP DNS records for ECDSA key types. bz#1978
• ssh-keygen(1): Allow conversion of RSA1 keys to public PEM and PKCS8
• sshd(8): Allow the sshd_config PermitOpen directive to accept "none" as an argument to refuse all port-forwarding requests.
• sshd(8): Support "none" as an argument for AuthorizedPrincipalsFile
• ssh-keyscan(1): Look for ECDSA keys by default. bz#1971
• sshd(8): Add "VersionAddendum" to sshd_config to allow server operators to append some arbitrary text to the server SSH protocol banner.

Bugfixes:

• ssh(1)/sshd(8): Don't spin in accept() in situations of file descriptor exhaustion. Instead back off for a while.
• ssh(1)/sshd(8): Remove hmac-sha2-256-96 and hmac-sha2-512-96 MACs as they were removed from the specification. bz#2023,
• sshd(8): Handle long comments in config files better. bz#2025
• ssh(1): Delay setting tty_flag so RequestTTY options are correctly picked up. bz#1995
• sshd(8): Fix handling of /etc/nologin incorrectly being applied to root on platforms that use login_cap.

Portable OpenSSH:

• sshd(8): Allow sshd pre-auth sandboxing to fall-back to the rlimit sandbox from the Linux SECCOMP filter sandbox when the latter is not available in the kernel.
• ssh(1): Fix NULL dereference when built with LDNS and using DNSSEC to retrieve a CNAME SSHFP record.
• Fix cross-compilation problems related to pkg-config. bz#1996

Existing customers can download the latest version from their customer page at www.itefix.net

Cwrsync 5.0.2 has an rsync binary with two additional patches: the official ignore-case patch and an unofficial patch removing permissions checks on the password file. In addition, the installers have updated versions of OpenSSH (6.0), OpenSSL(1.0.1c) and Cygwin (1.7.15). The Server installer is now made UAC-aware, requiring admin privileges for proper installation on Vista or later. Rsyncd.conf sample contains uid=0 and gid=0  directives for error-free operation.

Existing customers can download the latest version from their customer page at www.itefix.net

Copssh is now UAC (User Account Control) aware, and does not require to disable it any longer. Version 4.3.1 contains many tool and library updates including OpenSSL 1.0.1c security and bug fix and Cygwin 1.7.15. Start menu items are installed for all users instead of the current user. An improved version of the Control Panel (2.1.3) is also a part of the installer: It requires to be run as admin, converts short domain names to uppercase automatically, and is able to locate domain controllers in complex and segmented networks.

Existing customers can download the latest version from their customer page at www.itefix.net