Adding upstream version 2.3.5.upstream/2.3.5upstream

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 713 insertions, 0 deletions

diff --git a/NEWS b/NEWS
new file mode 100644
index 0000000..5ddadf4
--- /dev/null
+++ b/NEWS
@@ -0,0 +1,713 @@
+This file documents the major additions and syntax changes between releases.
+
+2.3.5 18th Oct 2023
+	FIXES
+	* Include maxfd.h in lib Makefile
+
+2.3.4 18th Oct 2023
+	ENHANCEMENTS
+	* check_curl: added --cookie-jar and doing proper cleanup of libcurl
+	* check_curl: Include all IPs from getaddrinfo() in curl DNS cache
+	* check_dhcp: Add dhcp rogue detection
+	* check_disk: add ignore-missing option to return OK for missing fs
+	* check_disk_smb: allow checking 0-sized resource (ex. IPC$)
+	* check_disk: The options to include or exclude specific file systems now allow the usage of regex(7)
+	* check_icmp: Add support to Jitter, MOS and Score
+	* check_mysql: Detect running mysqldump and handle it more gracefully
+	* check_procs: Implement --exclude-process to exclude specific processes
+	* check_smtp: add new longoption --tls
+	* check_smtp: Add option to prefix PROXY header
+	* check_smtp: Add support for SMTP over TLS
+	* check_smtp: Add support for SNI
+	* check_snmp: Implement option to ignore mib file parsing errors
+	* check_users: prefer systemd-logind over utmp
+
+	FIXES
+	* check_disk: Display SI units correctly
+	* check_ircd: use pack_sockaddr_in rather than hand-rolled
+	* check_log/check_oracle/check_sensors: fixed the outputs of the help functionality
+	* check_mysql: Add mysql_close to avoid spamming the server logs
+	* check_smtp: add missing -r option in usage
+	* check_snmp: disable multiplier when unused
+	* check_wave: Use compile time determined path to snmpget
+	
+	GENERAL
+	* Sync with the Gnulib code 668c0b8ffa
+	* Set autoconf prerequisite version to 2.64
+	* Remove sha1 and use sha256 in some parts of the plugin structure
+	* A lot of compiler warnings were fixed
+	* Some code was refactored a little bit
+
+2.3.3 2nd Feb 2023
+        ENHANCEMENTS
+	using PRId64 and PRIu64 instead of %ld directly
+	check_http: Make faster with larger files
+	check_snmp: add 'multiplier' to modify current value
+	check_http: Implement chunked encoding decoding
+	check_http/check_curl: add chunked encoding test
+	check_log: Added --exclude to exclude patterns
+	check_log: Add tests
+	check_disk: Clarify usage possibilities
+
+	FIXES
+	fixed two PRId64 to PRIu64 in perfdata_uint64
+	check_pgsql: Removing is_pg_dbname altogether,using postgres API.
+	check_http: Remove superfluous CRLF in HTTP-Requests
+	check_curl: detect ipv6
+	check_icmp: fix parsing help/version long options
+	check_http: fix test plan
+	check_disk: Find accessible mount path if multiple are available
+	check_apt: Fix unknown escape sequence error output
+	check_curl: fix checking large bodys
+	check_snmp: Improve tests for check_snmp & multiply option
+	check_snmp: always apply format when applying multiplier
+	check_http: Use real booleans instead of ints
+	check_http: Document process_arguments a little bit better
+	check_http: Remove dead code
+	check_http: Fix several bug in the implementation of unchunking
+	check_http: Reformat a part to increase readability
+	check_apt: Put upgrade options in the root sections
+	check_apt: Fix comment
+	check_apt: Use real booleans
+	check_mailq: Fixing nullmailer regex
+	check_snmp: Fix regex matches
+	check_log: Fixed a bug when using --all
+	check_log: Cleaned up duplicated code in the args
+	check_http: Fix memory reallocation error in chunk decoding logic
+	check_http: Add space for ending NULL byte in array for chunked encoding
+
+2.3.2 20th Oct 2022
+	GENERAL
+	Use netcat-openbsd for debian explicitly (by @RincewindsHat #1704)
+	Replace egrep with grep -E (by @RincewindsHat #1791)
+	Use silent automake by default (by @RincewindsHat #1747)
+
+	SINGLE PLUGINS
+	check_by_ssh: added option to exit with an warning, if there is output on STDERR (by @nafets #1301)
+	check_by_ssh: Add "-U" flag (#1123). (by @archiecobbs #1774)
+	check_by_ssh: Let ssh decide if a host is valid, enables usage of ssh .config file (by @RincewindsHat #1691)
+	check_curl: Add an option to check_curl to verify the peer certificate & host using the system CA's (by @bazzisoft #1669)
+	check_curl: fixed -ffollow for HTTP/2.0 (Fixes #1685): added major_version parsing to PicoHTTPParser (by @andreasbaumann #1742)
+	check_curl: fixes check_curl: "CRITICAL - Cannot retrieve certificate subject." (by @andreasbaumann #1689)
+	check_curl: fix if http header contains leading spaces (by @sni #1666)
+	check_curl: Update check_curl.c to display a specific human-readable error message where possible (by @bazzisoft #1668)
+	check_curl: verify certificates option should not force SSL to be used (by @bazzisoft #1688)
+	check_disk: Description for -M was the wrong way around (by @RincewindsHat #1746)
+	check_disk: Fixing the stuff that is broken on btrfs (by @waja #1388)
+	check_disk: Fix perfdata for big values for check disk (by @RincewindsHat #1714)
+	check_disk_smb: Add configfile feature (by @Napsty #1402)
+	check_disk_smb: Add timeout (by @cdruee #1770)
+	check_dns: Add --expect-nxdomain (by @Jonny007-MKD #1623)
+	check_dns: split multiple IP addresses passed in one -a argument (by @DerDakon #1649)
+	check_file_age: Make size parameter a little bit more intelligible (by @RincewindsHat #1730)
+	check_fping: Implements 'host-alive' mode (Closes. #1027) (by @waja #1740)
+	check_game: Update Url to qstat (by @RincewindsHat #1725)
+	check_http: changed 'STATE_CRITICAL' to 'STATE_WARNING' for infinite loop (by @xFuture603 #1690)
+	check_http: Increase regexp limit (by @hydrapolic #1566)
+	check_http: Support http redirect (by @waja #1449)
+	check_icmp: buffer offerflow (by @RincewindsHat #1733)
+	check_icmp: delay set_source_ip() until address_family is detected (by @ghciv6 #1735)
+	check_icmp: Fix "Invalid Argument" from sendmsg() under FreeBSD 13.1 and "setsockopt failed" for TTL setting (by @eriksejr #1771)
+	check_icmp: Fix pkt perfdata in check_host mode (by @sjoegren #1721)
+	check_ldap: Allows check_ldap to read password from environment variable (by @mullumaus #1724)
+	check_load: add LOAD prefix to load plugin (by @haraldj #1694)
+	check_load: Display total and scaled load values if check_load scales the values (by number of CPUs by @RincewindsHat #1778)
+	check_log: Missing oldlog now aborts check_log (by @RincewindsHat #1732)
+	check_mailq: Add mailq -C option for config dir or config file (by @leeclemens #1490)
+	check_mailq: Check mailq domain specific warnings (by @RincewindsHat #1731)
+	check_mailq: Fix regexp for nullmailer "mailq" output (by @darksoul42 #1493)
+	check_mysql: fix segfaults with mysql-connector-c #1562 (by @ghciv6 #1644)
+	check_pgsql: add --queryname parameter to check_pgsql (by @datamuc #1741)
+	check_ping: Do not show RTA if no connection was possible (by @RincewindsHat #1697)
+	check_ping: understang ping6 output from iputils package (by @glensc #1412)
+	check_proc: Fix check proc ps detection (by @sni #1712)
+	check_procs: exchange needle and haystack in strstr() for proper st… (by @wolfgangkarall #1654)
+	check_smtp: add -L flag to support LMTP (LHLO instead of HELO/EHLO). (by @ghen2 #1715)
+	check_snmp: Added option for null zero length string exit codes (by @FracKenA #1496)
+	check_snmp: fix performance thresholds when using multiple oids (by @sni #1722)
+	check_snmp fix segfaults (by @adrb #1589)
+	check_snmp: put the "c" (to mark a counter) after the perfdata value (by @lausser #1465)
+	check_swap: fix parsing swap values (by @sni #1780)
+	check_swap: Fix perfdata for check swap (by @RincewindsHat #1707)
+	check_swap: Fix unit for total in perfdata (by @RincewindsHat #1779)
+	check_swap: Handle cached swap (by @mdavranche #1642)
+	check_swap: Small fix to threshold validation and style (indentation) fixes (by @RincewindsHat #1723)
+	check_ups: Fix possible overflow in check_ups (by @phibos #1727)
+	check_uptime: Add option to report uptime in days instead of seconds (by @amotl #1750)
+	check_uptime: Fix/improve output message "Uptime is ..." (by @amotl #1751)
+
+	MULTIPLE PLUGINS
+	check_http, check_curl: added --max-redirs=N option (feature #1684) (by @andreasbaumann #1744)
+	check_http, check_curl: Enhancement --continue-after-certificate (backport from nagios-plugins) (by @andreasbaumann #1762)
+	check_http, check_curl: Remove check_http and check_curl test which are somehow always failing (by @RincewindsHat #1777)
+	check_log, check_oracle, check_sensors: Several fixes shellcheck complaining about (by @waja #1459)
+	sslutils: use chain from client certificates (by @tobiaswiese #1664)
+
+	NON FUNCTIONAL CHANGES
+	Trivial source code whitespace formatting fixes to standard. (by @ziesemer #1424)
+	docs: fix simple typo, conspicuosly -> conspicuously (by @timgates42 #1652)
+	Migrate to GitHub actions (by @jacobbaungard #1686)
+	Point to Icinga Exchange instead of dead Monitoring Exchange (by @RincewindsHat #1737)
+	github actions: fix check_users test case (by @sni #1713)
+	Add CodeQL checks (by @phibos #1682)
+	Fix some QL problems (by @RincewindsHat #1729)
+	Update CodeQL and update runner before installing (by @RincewindsHat #1775)
+	check_disk: Check disk compiler warnings (by @RincewindsHat #1758)
+	check_disk: Trivial printf fix and a little bit of code style (by @RincewindsHat #1695)
+	check_http: Docs: make -C obvious (by @stblassitude #1554)
+	check_ifoperstatus: Re-attach a comment to where it actually belongs (by @peternewman #1699)
+	check_ircd: Restrict the nickname length of the test user for check_ircd (by @RincewindsHat #1710)
+	check_load: Check load compiler warnings (by @RincewindsHat #1759)
+	check_log: Modernize check log (by @RincewindsHat #1692)
+	check_mailq: remove duplicate W=i/C=i args in check_mailq.pl (by @ichdasich #1755)
+	check_ntp: Check ntp remove unused variables (by @RincewindsHat #1781)
+	check_pgsql: Using snprintf which honors the buffers size and guarantees null termination. (Closes: #1601) (by @waja #1663)
+	check_procs: Fix double percentage sign in usage (by @RincewindsHat #1743)
+	check_sensors.sh: Make shellcheck happier (by @RincewindsHat #1679)
+	check_snmp: Fixed option description authpassword -> authpasswd + whitespaces (by @RincewindsHat #1676)
+	check_swap: Check swap compiler warnings (by @RincewindsHat #1756)
+
+2.3.1 10 April 2021
+	ENHANCEMENTS
+	check_curl: Add an option to verify the peer certificate & host using the system CA's
+
+	FIXES
+	check_icmp: fix simple typo, conspicuosly -> conspicuously
+	check_curl: fixed help, usage and errors for TLS 1.3
+	check_curl: fixed a potential buffer overflow in url buffer
+	check_dns: split multiple IP addresses passed in one -a argument
+	check_curl: added string_statuscode function for printing HTTP/1.1 and HTTP/2 correctly
+	check_curl: fix crash if http header contains leading spaces
+	check_curl: display a specific human-readable error message where possible
+	check_pgsql: Using snprintf which honors the buffers size and guarantees null termination.
+	check_snmp: put the "c" (to mark a counter) after the perfdata value
+	check_http: Increase regexp limit
+	check_http: make -C obvious
+	check_curl: Increase regexp limit (to 1024 as in check_http)
+	check_curl: make -C obvious (from check_http)
+	check_curl: backported --show-body/-B to print body (from check_http)
+
+2.3 10th December 2020
+	ENHANCEMENTS
+	check_dns: allow 'expected address' (-a) to be specified in CIDR notation
+	  (IPv4 only).
+	check_dns: allow for IPv6 RDNS
+	check_dns: Accept CIDR
+	check_dns: allow unsorted addresses
+	check_dns: allow forcing complete match of all addresses
+	check_dns: option to expect NXDOMAIN
+	check_apt: add --only-critical switch
+	check_apt: add -l/--list option to print packages
+        check_file_age: add range checking
+	check_file_age: enable to test for maximum file size
+	check_apt: adding packages-warning option
+	check_load: Adding top consuming processes option
+	check_http: Adding Proxy-Authorization and extra headers
+	check_snmp: make calculation of timeout value in help output more clear
+	check_uptime: new plugin for checking uptime to see how long the system is running
+	check_curl: check_http replacement based on libcurl
+	check_http: Allow user to specify HTTP method after proxy CONNECT
+	check_http: Add new flag --show-body/-B to print body
+	check_cluster: Added data argument validation
+	check_icmp: Add IPv6 support
+	check_icmp: Automatically detect IP protocol
+	check_icmp: emit error if multiple protocol version
+	check_disk: add support to display inodes usage in perfdata
+	check_hpjd: Added -D option to disable warning on 'out of paper'
+	check_http: support the --show-body/-B flag when --expect is used
+	check_mysql: allow mariadbclient to be used
+	check_tcp: add --sni
+	check_dns: detect unreachable dns service in nslookup output
+
+	FIXES
+	Fix regression where check_dhcp was rereading response in a tight loop
+	check_dns: fix error detection on sles nslookup
+	check_disk_smb: fix timeout issue
+	check_swap: repaired "-n" behaviour
+	check_icmp: Correctly set address_family on lookup
+	check_icmp: Do not overwrite -4,-6 on lookup
+	check_smtp: initializes n before it is used
+	check_dns: fix typo in parameter description
+	check_by_ssh: fix child process leak on timeouts
+	check_mysql: Allow sockets to be specified to -H
+	check_procs: improve command examples for 'at least' processes
+	check_swap: repaired "-n" behaviour
+	check_disk: include -P switch in help
+	check_mailq: restore accidentally removed options
+
+2.2 29th November 2016
+	ENHANCEMENTS
+	The check_http -S/--ssl option now accepts the arguments "1.1" and "1.2"
+	  to force TLSv1.1 and TLSv1.2 connections, respectively
+	The check_http -S/--ssl option now allows for specifying the desired
+	  protocol with a "+" suffix to also accept newer versions
+	Let check_http check HTTPS web sites via proxies
+	check_http: add timeout to performance data as max value
+	check_http: report certificate expiry date in UTC
+	check_snmp: add IPv6 support
+	check_snmp's performance data now also includes warning/critical
+	  thresholds
+	New check_snmp -N option to specify SNMPv3 context name
+	Let check_smtp's -D option imply -S
+	Let check_smtp's -e option match against the full SMTP response
+	check_dig: expected response is now case-insensitive
+	New check_mailq -s option which tells the plugin to use sudo(8)
+	New check_nt -l parameters: seconds|minutes|hours|days
+	New -W/-C option for check_ldap to check number of entries
+	check_users: add support for range thresholds
+	check_fping now auto-detects IPv6 addresses
+	check_radius now supports the radcli library
+	Support OpenSSL 1.1
+
+	FIXES
+	check_http: fix host header port handling
+	Let check_real terminate lines with CRLF when talking to the server, as
+	  mandated by RFC 2326
+	Fix check_procs on HP-UX
+	check_smtp's -e/--expect option can now be combined with -S/--starttls
+	Fix incorrect performance data thresholds emitted by check_ups
+	Don't let check_procs miss some processes on busy Solaris systems
+
+	WARNINGS
+	The format of the performance data emitted by check_mrtgtraf has been
+	  changed to comply with the development guidelines
+	check_ssh now returns CRITICAL for protocol/version errors
+	If a plugin is invoked with -h/--help or -V/--version, the exit status
+	  is now UNKNOWN
+	The superseded check_ntp.pl was removed, please use check_ntp_peer or
+	  check_ntp_time instead
+
+2.1.2 16th October 2015
+	FIXES
+	Fix incorrect performance data thresholds emitted by check_ups
+	Fix check_dhcp's option parsing to not crash with certain arguments
+	Fix check_snmp using correct timeout
+
+2.1.1 2nd December 2014
+	FIXES
+	Fix check_ntp's jitter checking
+	Fix check_ntp's handling of invalid server responses
+	Fix check_apt's handling of invalid regular expressions
+	Fix check_real's server response processing
+	Fix backslash escaping in check_tcp's --help output
+
+2.1 15th October 2014
+	ENHANCEMENTS
+	New check_hpjd -p option for port specification
+	New ./configure --with-qmail-qstat-command option to specify the path to
+	  qmail-qstat(8)
+	New check_ifstatus -n option to ignore interfaces by name
+	check_ntp_peer has now specific state output for each metric
+	New check_mysql -n option to ignore authentication failures
+	Added IP and port or socket name to error messages
+	New check_ntp_time -o option to add expected offset
+	check_disk shows now troubled partitions in verbose mode
+	check_dig has now support for drill and dig
+	check_dig has now support for -6 option
+	Add performance data to check_file_age
+
+	FIXES
+	Fix check_jabber to work with Openfire servers
+	Fix check_oracle bad string matching when testing TNS server
+	Fixed check_ifstatus performance data output
+        Fixed expire time output for sslutils
+	check_dns now verifies if the answer is returning from the queried
+	  server
+	Fix check_by_ssh to accept --hostname as argument
+
+	WARNINGS
+	This release doesn't ship with an RPM spec file, please contribute to
+	  PR #1283 if you are interested in it
+
+2.0 11th July 2014
+	ENHANCEMENTS
+	check_mailq now supports auto detection of qmail, postfix, exim and nullmailer with
+	  fallback to sendmail
+	check_ide_smart now defaults to plugin output, original output appended with -v
+	Extra-Opts are now enabled by default, see:
+	  https://www.monitoring-plugins.org/doc/extra-opts.html
+	check_swap now supports a configurable state when there is no swap
+	check_radius now supports the FreeRADIUS Client library
+	New check_mysql_query -f option to specify a client options file
+	New check_mysql_query -g option to specify a client options group
+	Add performance data to check_mysql_query
+	New check_file_age -i/--ignore-missing option to return OK on nonexistent files
+	Make check_ping, check_users, and check_disk work on Windows
+	New check_ssh -P option to specify the expected SSH protocol version
+	check_dns now emits the warning and critical thresholds with the performance data
+
+	FIXES
+	Don't let e.g. check_http's -C option reset SSL version if e.g. -S 1 -C 5 is specified
+	Don't have check_http's -N option expect an argument
+	check_ide_smart could disable offline auto tests but could not re-enable them.
+	  For this reason all SMART command modes have been disabled.
+	check_dig: fix wrong IPv6 arguments order
+	check_dig: make sure not to give up too early when a timeout is specified with -t
+	check_log: don't stumble over log lines that include a "%" character
+	check_nt: add UPTIME to perfdata
+	Handle SNMPv3 noAuthNoPriv properly with check_snmp
+	Fix compilation with GnuTLS
+
+	WARNINGS
+	New default installation prefix: /usr/local instead of /usr/local/nagios
+	check_snmp now evaluates negative values properly, which means it might return CRITICAL
+	  in cases where it used to return OK. If this is undesired, the warning/critical
+	  threshold(s) must be fixed by specifying e.g. ~:100 instead of 100
+	check_procs now ignores its parent process to avoid unexpected results when invoked via
+	  certain shells
+	utils.sh no longer defines ECH
+	check_ide_smart -q/--quiet and -n/--nagios (Nagios-compatible output) are now deprecated
+	  but accepted for backward-compatibility
+	check_ide_smart -0/--auto-off, -1/--auto-on and -i/--immediate: options have
+	  been disabled because they were broken
+	State retention: the NAGIOS_PLUGIN_STATE_DIRECTORY environment variable has been
+	  renamed MP_STATE_PATH. The old variable will continue to work in v2.0.x
+	Add the UID of the invoking user to the state retention file path. This helps solving
+	  permission issues when different users run the same plugin
+	check_swap used to allow returning OK on a system without swap when only percent thresholds
+	  were used. This is no longer the case and one must now use -n/--no-swap=<state>
+	The Perl and Shell plugins now use the PATH specified via ./configure's --trusted-path
+	  option, or "/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin" by default
+
+1.5 2nd October 2013
+	ENHANCEMENTS
+	New check_dbi plugin for checking an (SQL) database using DBI
+	Let OpenSSL load its configuration file (see the OPENSSL_config(3) man page)
+	Add performance data to check_apt
+	Add performance data to check_procs
+	Added -4/-6 options to check_dig
+	New check_oracle --connect option to perform real login
+	New check_nagios -t option to override the default timeout
+	New check_disk -f/--freespace-ignore-reserved option to ignore space reserved for root
+	New check_disk -N/--include-type option to limit the filesystem types to check
+	Allow for building the plugins in parallel
+	Add --without-{dbi,ldap,radius} options to ./configure
+	Made Verbose output of check_sensors compliant
+	New switch -E/--extended-perfdata for check_http to print additional performance data
+	New check_http -d option to specify a string to expect within the response headers
+	New check_http -J/-K options for client certificate authentication support
+	Add support for executing queries to check_pgsql
+	Let check_pgsql accept a UNIX socket directory as hostname
+	New check_pgsql -o option to specify additional connection parameters
+	New check_fping -S option to specify the source IP address
+	New check_fping -I option to specify the interface to bind to
+	Let check_fping support IPv6
+	New check_procs -k option to ignore kernel threads (on Linux)
+	Let check_procs use /proc/<PID>/exe (if available) instead of getpid(2), unless -T is specified
+	Let check_mysql support SSL
+	Let check_mysql add performance metrics for all checks
+	New check_mysql -f option to specify a client options file
+	New check_mysql -g option to specify a client options group
+	New check_snmp --offset option to allow for adding/subtracting an offset value to sensor data
+	Let check_snmp support an arbitrary number of OIDs
+	Let check_ide_smart support NetBSD
+
+	FIXES
+	Change the MAIL FROM command generated by check_smtp to be RFC compliant
+	Fix compilation of check_http without SSL support
+	Fix check_snmp reversed threshold ranges (backward-compatibility)
+	Fix check_snmp memory violation when using more than 8 oids
+	Fix check_apt security regular expression
+	Fix check_http handling extra header (-k) containing semicolons
+	Fix check_apt handling unknown exit codes from apt-get
+	Fix deprecated imports of check_nmap.py
+
+	WARNINGS
+	check_http behaviour of -k/--header changed since it does not separate multiple headers by semicolons anymore. Use multiple -k switches instead.
+	check_http's --proxy_authorization option is now called --proxy-authorization (it was always documented this way)
+	The contrib directory has been removed from this distribution
+
+1.4.16 27th June 2012
+	ENHANCEMENTS
+	check_nt UPTIME accepts warning/critical thresholds
+	check_disk_smb now allows spaces in share names (#990948, #1370031, Debian #601699)
+	check_http now uses standard threshold functions (enables floating point and ranges)
+	check_http now checks for and prints the certificate cn (hostname) in SSL certificate checks
+	check_http now supports an optional -S/--ssl value to choose the SSL protocol version (#3066166)
+	Add perfdata to check_ssh (#3244097)
+	New option to check_smtp to ignore failures when sending QUIT (#3358348)
+	New check_by_ssh -F option which allows for specifying an alternative ssh_config(5) file (#2895334)
+	check_sensors now detects faulty sensors unless --ignore-fault is specified
+	utils.sh now provides a check_range function
+	Improved the performance of check_users
+	Add perfdata to check_disk_smb (Debian #654259)
+	Updated Nagios::Plugin perl module
+	Add warning threshold to certificate expiration checks of check_tcp/http/smtp
+	Add --perf-oids option for check_snmp
+
+	FIXES
+	Fix check_disk free space calculation if blocksizes differ within a disk group (#2973603)
+	check_disk_smb now handles NT_STATUS_ACCESS_DENIED properly (Debian #601696)
+	Make check_snmp work more like v1.4.14 with regard to using special values (Timeticks, STRING) as numeric thresholds
+	Fix check_ldap overriding the port when --ssl was specified after -p
+	Fix check_procs where regex input of '|' would get displayed in output - now replaced with ','
+	Fix segfault in check_host when hostname returns multiple IP addresses
+	Fix check_smtp and check_tcp where duplicate messages were displayed for certificate errors
+	Fix check_ping's parsing of ping6(1) output (#1894850, Debian #514588, Debian #662638)
+	Fix a check_dhcp bug which was triggered by checking Windows 2003 DHCP servers (#3503921)
+	Disable RFC4507 support, to work around SSL negotiation issues with (at least) some Tomcat versions
+	Fix performance data label containing spaces in check_snmp
+
+1.4.15 27th July 2010
+	ENHANCEMENTS
+	New check_ntp_peer -m and -n options to check the number of usable time sources ("truechimers")
+	New check_disk_smb -a option which allows for specifying the IP address of the remote server
+	New check_radius -N option which allows for specifying the value of the NAS-IP-Address attribute
+	New check_snmp --rate option to store differences between invocations. Saves state in PREFIX/var/{plugin}
+	check_snmp -l label option now also changes the perfdata label. See WARNINGS
+	check_snmp has an --invert-search option which reverses status of the string and regexp searches
+	check_http now displays the missing search string and the URL in the output when failed (#2999924)
+	Updated Nagios::Plugin perl module
+	Updated gnulib to June 2010
+
+	FIXES
+	Fix check_ircd binding to wrong interface (#668778)
+	Add proxy-authorization option to check_http (#1323230, #2863925)
+	check_icmp now increment the sequence counter in each packet
+	Fix usage of repeated -o options in check_snmp
+	Try to detect arguments passed via --with-ping[6]-command and set options accordingly (#2908236)
+	Fix memory leak in check_http for large pages (#2957455)
+	Fix compilation with GCC 2.96 (#2977105)
+	Fix regression introduced in #1867716 where partially valid performance strings would not be printed anymore
+	Fix regression in check_http ssl checks on some servers - make SNI an option
+	Fix guest mode support in check_disk_smb
+	Fix check_disk_smb and check_ircd failures when run via ePN
+	check_ldap now allows for specifying an empty LDAP base
+	Fix compilation error of pst3 in Solaris 8
+	Fix check_radius returning OK on unexpected results (#2911752)
+	Fix translations when extra-opts aren't enabled (#2832884)
+	Fix parsing of multi-line strings in check_snmp (broken in 1.4.14) and enhance output in such case (#2832451)
+	Fix detection of pst3 64-bit compile flags with Sun CC
+	Fix cmd_run overwriting the environment, which would break some commands that needed it
+	Allow check_ifstatus to accept version=2c - used to only allow version=2
+	Fix examples in check_disk, where it implied was possible to suffix unit values to warn/crit parameters
+
+	WARNINGS
+	Updated developer documentation to say that performance labels should not have an equals sign or
+	single quote in the label
+	check_http 1.4.14 introduced SSL SNI support - you now have to enable it explicitly with "--sni"
+	check_snmp -l label option is also used for the performance label. This could change history from previous uses
+
+1.4.14 16th September 2009
+	check_http has options to specify the HTTP method (#2155152)
+	check_users thresholds were not working exactly as documented (>= rather than >)
+	Updated tinderbox_build script to point to new tinderbox server
+	check_ifoperstatus -n flag now works as expected (#1569488)
+	check_ifoperstatus now supports ifType based lookup for ifIndex
+	check_ups now sends a LOGOUT string (Debian #387001)
+	Extra-opts (C plugins) now allows both '#' and ';' for comments (like N::P)
+	Extra-opts (C plugins) does not allow trailing comments anymore (like N::P)
+	Fixed dependency issue on libtap when ./configure --enable-libtap used. Warning: will install libtap
+	Fixed segfault in extra-opts under some circumstance when reading multiple sections
+	Fix long options parsing in check_disk, check_dns, check_mrtg, check_mrtgtraf and check_tcp
+	Add missing long options for check_nt (for use with extra-opts)
+	check_icmp now reports min and max round trip time perfdata
+	Fixed check_http bug where additional headers with redirection caused a segfault (2089159)
+	check_disk: make autofs mount paths specified with -p before we determine the mount list
+	Fixed buffer overflow in check_ntp/check_ntp_peer (#1999319, Ubuntu #291265)
+	Re-bundled libtap as a built-in library (--enable-libtap): detects system library as pre-1.4.13 and does not install the built-in library anymore
+	Fixed check_mrtg returning UNKNOWN instead of OK (#2378068)
+	Fixed check_http behaviour: all check are now performed as long as a valid response is returned (#1460312)
+	check_http --onredirect=sticky follows using the same IP address (#2550208)
+	check_http --onredirect=stickyport also follows the same port
+	Fixed coredump from check_nt when invalid drive is specified (#2179754)
+	Fixed crash from check_nt when -H unspecified or given multiple times (#2731755, Debian #521097)
+	Fixed passing of quotes in OID for check_snmp (#1985230)
+	Fixed check_http sending HTTP/1.0 with v1.1 headers (#2638765)
+	Fixed check_http not timing-out on redirects
+	Fixed negate not printing the real timeout in ALRM handler when left to default
+	negate timeout result is now configurable
+	Fixed segfault in check_mysql with old slaves (#2696823)
+	check_nt can return UNKNOWN on timeouts (-u)
+	Fixed typos for check_disk
+	Fixed check_mysql* not using password set in my.cnf (#2531905) - Specify an empty password explicitly if you need to override it.
+	Fixed awk subst.in/subst script path error (#2722832)
+	check_http: Add SSL/TLS hostname extension support (SNI) - (#1939022)
+	Fixed wrong perfdata label for output traffic in check_mrtgtraf (#2654308)
+	Fixed check_by_ssh interpretation of quotes in -C parameter (#1985246, #2268675)
+	check_snmp now supports standard threshold ranges and doubles (floating numbers) in thresholds
+	check_fping now supports passing target timeout and interval to fping (#2347686)
+	Fixed SNMPv3 behaviour of check_ifoperstatus and check_ifstatus. Added -P to define privprotocol (#2343438)
+	check_ifoperstatus and check_ifstatus are now more user-friendly in case of missing arguments
+	pst3 compile fix for Sun Studio Compiler
+
+1.4.13 25th Sept 2008
+	Fix Debian bug #460097: check_http --max-age broken
+	Optimised pst3 for systems with large number of processes
+	Updated Nagios::Plugin to 0.27
+	Fix Debian bug #479013: check_dig's -l is mandatory now (#1986306)
+	check_dig now returns CRITICAL instead of WARNING when no answer section is found
+	check_procs now captures stderr in external command and adds to plugin output
+	check_snmp now only prints perfdata for non numeric values (#1867716)
+	check_icmp now supports packet size modification
+	check_http -e now accepts a comma-delimited list of expected status codes
+	libtap now included with this distribution for easier testing. Run ./configure with --enable-libtap
+	check_ntp_peer/check_ntp_time used to show port in --help but ignored the argument - now implemented
+	Fix possible segfault in check_ntp_peer with deliberately invalid packets
+
+1.4.12 27th May 2008
+	Added ./check_nt -v INSTANCES to count number of instances
+	New check_icmp -s option to specify the source IP address
+	check_dns now sorts addresses for testing results for more than one returned IP
+	Fix segfault in check_ntp_time and (deprecated) check_ntp (#1862300)
+	check_disk should now work with large file systems (2TB+) on all archs that supports it
+	Fixed check_disk disk usage calculation when using --group=NAME (related to #1348746)
+	Fix help text of check_ntp* (#1880095)
+	Fix bugs and flaws in best offset server selection of check_ntp_time and (deprecated) check_ntp
+	check_ntp_peer now checks for the LI_ALARM flag
+	Sync to latest Gnulib (includes new floorf function)
+	check_pgsql now successfully builds with postgres lib v8.3 (#1878972)
+	check_procs now accepts --ereg-argument-array for a regular expression match to the argument array
+	Reverted back to using pst3 for Solaris systems. Fixed issues re: -m64 needed to compile on 64bit systems
+	If applicable, Gettext linked dynamically instead of statically
+	check_dig can now pass arguments to dig by using -A/--dig-arguments (#1874041/#1889453)
+	check_ntp and check_ntp_peer now show proper jitter/stratum thresholds longopts in --help
+	check_dns now allow to repeat -a to match multiple possibly returned address (common with load balancers)
+	check_mysql and check_radius now try clearing password in processlist just like check_mysql_query
+	check_mysql and check_mysql_query now support sockets explicitly (-s, --socket)
+	negate now has the ability to replace the status text as well (-s, --substitute)
+	Added performance data to check_ping
+	Added support for --extra-opts in all C plugins (disabled by default, see configure --help)
+	Fixed passive option in check_by_ssh
+	On non-skipped stderr, check_by_ssh now returns UNKNOWN or worse (result from command) instead of always UNKNOWN.
+	Fix linking against OpenSSL where libdl is required
+
+1.4.11 13th December 2007
+	Fixed check_http regression in 1.4.10 where following redirects to
+	  relative URLs on virtual hosts failed if both "-H" and "-I" were used
+	Merged two new checks that deprecates check_ntp: check_ntp_peer and check_ntp_time.
+	  You should read the --help output so see which one is suitable for you. check_ntp_peer
+	  implement stratum thresholds support (feature request #1703823).
+	check_ntp now returns UNKNOWN instead of WARNING if jitter is unavailable (jitter=-1.000000)
+	  as long as the thresholds range include -1. If no offset threshold is specified
+	  and the offset is unavailable, will return UNKNOWN as well.
+	  NOTE: If jitter thresholds are specified as integers it will return CRITICAL if jitter
+	  is "-1" as the default range starts at 0. See Examples in --help output.
+	Fixed broken usage2 in check_snmp and check_cluster
+	check_cluster now accepts all valid characters in its thresholds ("-", "@", "~")
+	Fixed check_disk reporting OK if disk usage grows over 100% (#1348746).
+	  The problem happens to be in Gnulib but a workaround have been implemented in check_disk.c
+	Fixed check_load argument handling when not passing triplets (#1831890)
+	Fixed buffer overflow in check_snmp (CVE-2007-5623)
+	Tinderbox builds now runs tests in a verbose mode
+	Updated Nagios::Plugin to 0.22
+	VPATH problem fixed for compiling plugins-root
+
+1.4.10 28th September 2007
+	Fix check_http buffer overflow vulnerability when following HTTP redirects (CVE-2007-5198)
+	check_http now explicitly asks HTTP/1.1 servers to close the connection
+	  after completion of the response
+	Check_ldaps' guessing which secure method to use (starttls vs. ssl on connect)
+	  is now deprecated. See --help for further information.
+	Check_disk now calls stat() on all filesystems to check. (Old: only the ones selected using -p)
+	  A meaningful error message (eg "Stale NFS Handle") is printed if stat fails.
+	New check_disk option -L: Only check local filesystems, but call stat() on remote ones, too.
+	  Thus accessibility of remote filesystems can be checked without any threshold comparison.
+	Check_disk's --help now prints some examples for the new features introduced in 1.4.8
+	New check_disk -i/-I option to ignore paths/partitions based on regular expressions
+	New check_disk -A option to select all filesystems explicitly
+	WARNING: check_disk's -E option must now be passed before -p or -r/-R arguments
+	  Passing -E after -p or -r results in UNKNOWN state, now
+	  This is needed due to the new ignore feature
+	Fix check_disk bug when mixing case sensitive and case insensitive regex arguments
+	New check_dhcp -u/--unicast option for emulating a DHCP relay in order
+	  to check DHCP servers on remote networks
+	New check_dhcp -m/--mac option which allows for specifying the MAC
+	  address to use in the DHCP request
+	The check_dhcp -r and -s options now accept host names, too
+	Fix possible check_icmp bus errors on some (non-x86/AMD64) platforms
+	Fix check_smtp's handling of multiple-packet server responses
+	WARNING: Fix for negate which may break existing commands:
+	  - stop evaluating command line options through shell twice
+	  - enforce a full path for the command to run
+	The "negate" utility can now remap custom states
+	Check_radius now supports radiusclient-ng
+	The (undocumented) positional parameter parsing which check_radius used
+	  instead of getopt(3) if 8 arguments were given is no longer available
+	Check_by_ssh now supports multiline output
+	IPv6 support can now be disabled using ./configure --without-ipv6
+	Fix check_ntp now honor ntp flags
+
+1.4.9 4th June 2007
+	Inclusion of contrib/check_cluster2 as check_cluster with some improvements
+	New/improved -E/--skip-stderr and -S/--skip-stdout options for check_by_ssh
+	check_snmp now supports Counter64
+	Fix compilation of check_ldap, check_radius and check_pgsql
+	check_load can optionally divide by number of cpus
+	Fix check_time returning wrong OK when time is before the epoch on some arch
+	Make check_http output more consistent
+	Fix possible check_http segfaults when following HTTP redirects
+	check_snmp don't warn anymore if something is printed on stderr
+	Fix check_tcp segfault when multiple expect strings are given
+	New option for check_tcp: -A/--all to test if all given expect strings match
+
+1.4.8 11th April 2007
+	Respects --without-world-permissions for setuid plugins
+	check_disk extra options for regex matching of filesystems and grouping of filesystems
+	for collective thresholds
+	Better configure test for mysqlclient availability
+	Various check_ntp fixes
+
+1.4.7 29th March 2007
+	check_procs uses /usr/ucb/ps if available - fixes pst3 problems on Solaris
+	Fixed MKINSTALLDIRS problem in po/
+	./configure now detects if possible to compile check_mysql
+	Fixed broken HELO in check_smtp
+	check_icmp now allows to set a minimum number of hosts required for success (-m)
+	check_icmp fix for *BSD when running for long time
+	check_ping times out 1 second quicker if host is unreachable
+	Root plugins installed with world executable
+	check_sybase from contrib now maintained in MonitoringExchange
+	--with-nagios-user/group reinstated ./configure option
+	New --without-world-permissions ./configure option
+
+1.4.6 5th February 2007
+	Reduced number of DNS lookups in check_ping and netutils.c for IPv6 configurations
+	Fixed compile problems with *BSD re: alloca.h
+	Fixed Solaris problems with check_swap (tested on Solaris 9)
+	Fixed check_swap for HP/UX where swapinfo command was incorrect
+	Fixed check_disk inode threshold checks, regressed at r1.4.4.
+	Fixed crit/warn for check_disk perf data
+	Fixed buffer overflow in check_procs
+	Fixed error handling for UNIX sockets in netutils.c
+	New -q and -o options for check_by_ssh which are handed over to ssh(1) as is
+	Synced with latest GNUlib
+	Fixed check_jabber always returns warning
+
+1.4.5
+	Fixed bug in perl's is_hostname routine
+
+1.4.4
+	New C based check_ntp. The perl version is now deprecated.
+	New check_apt plugin
+	Notice: plugins in contrib/ will start to be removed from this distribution.
+	  Please check at http://www.monitoringexchange.org for contributed plugins
+	Major bug fixes to check_disk where values were incorrectly calculated and alerted on.
+	check_udp2 removed. check_udp is now linked to check_tcp.c
+	check_mailq now errors if the sub-program run returns non-zero return code. This would appear
+	  as if mailqs were okay when the nagios user could not query the mail-queues
+	Compile problems with check_snmp fixed
+
+1.4.3
+	Setuid plugins (check_dhcp, check_icmp) separated into plugins-root/. Run make install as root to install
+	SSL plugins work with gnutls as well as OpenSSL
+	check_mysql_query added to run arbitrary SQL commands, with threshold checking
+	libtool now required for development systems
+	Notice: check_udp (compiled from check_udp.c) will be deprecated in the next release.
+	  check_udp2 should be used instead and will be renamed to check_udp
+
+1.4.2
+	Fix for Redhat ES4 for check_dns and check_dig
+
+1.4
+	IPv6 support in check_ping, check_by_ssh, check_http, check_ldap, check_smtp, check_tcp
+	Internationalisation support
+	Performance data added to most plugins
+	check_disk now using GNU coreutils code
+	New plugins - check_dhcp, check_icmp
+	contrib/check_citrix has been replaced by contrib/check_ica* (requires packet_utils.pm in libexec)
+	check_http --min changed to --pagesize, added max so min:max in check
+	check_vsz and check_rss deprecated - functionality moved into check_procs
+	check_swap % thresholds changed to measure amount free, instead of amount used
+	check_disk syntax changes for -p, -m/-M, defaults to MB instead of kB
+	check_procs -C expects no path for the command name