Xymon version 4.3.4 available 🔗 link

Hi,

I have just uploaded version 4.3.4 of Xymon to Sourceforge, and it 
should be available from all of the mirror-sites shortly.

This version fixes some rather nasty bugs, which could lead to data 
corruption of client messages (typically this would trigger wrong data 
for various statuses and spurious creation of disk RRD files) - I would 
like to thank Greg Shea for working with me to diagnose and fix this 
problem.

Another important bugfix resolves the issue of acknowledgment cookies 
not being recognised after a while.

Several other bugs that could cause various crashes, lockup and other 
nastiness were also fixed - see the full list below - so I strongly 
recommend that you upgrade to this version.


Regards,
Henrik

Changes from 4.3.3 to 4.3.4:

* Fix crashes and data corruption in Xymon worker modules
   (xymond_client, xymond_rrd etc) after handling large
   messages.
* Fix xymond lock-up when renaming/deleting hosts
* Fix xymond cookie lookup mechanism
* Webpages: Add new HOSTPOPUP setting to control what values from
   hosts.cfg are displayed as a "comment" to the hostname (either
   in pop-up's or next to the hostname).
* Fix xymond_client crash if analysis.cfg contains invalid
   configuration entries, e.g. expressions that do not compile.
* Fix showgraph CGI crash when legends contain colon.
* xymonnet: Include hostname when reporting erroneous test-spec
* CGI utils: Multiple potential security fixes involving buffer-
   overruns when generating responses.
* CGI utils: Fix crash when invoked with HTTP "HEAD"
* CGI utils: Fix crashes on 64-bit platforms due to missing prototype
   of "basename()" function.
* svcstatus CGI: Dont crash if history log is not a file.
* Critical systems view CGI: Cross-site scripting fix
* Fix recovery-messages for alerts sent to a GROUP
* RRD "memory" status handler now recognizes the output from the
   bb-xsnmp.pl module (for Cisco routers).
* Web templates modified so the menu CSS can override the default
   body CSS.
* Acknowledge web page now allows selecting minutes/hours/days
* Enable/Disable webpage enhanced, so when selecting multiple hosts
   the "Tests" column only lists the tests those hosts have.

Hi,

Nice one - good job on this. Lotsa nice fixes and features in this release.

PS - link on xymon.com needs updating to 4.3.4 :)

/melgaard

On 02-08-2011 10:02, Carl Melgaard wrote:

PS - link on xymon.com needs updating to 4.3.4 :)

Oops - fixed, thanks.


Regards,
Henrik

Hi,

 
After the upgrade, my column "info" do not work. I try to restart Apache and Xymon, but same result.

 
Internal Server Error

 
The server encountered an internal error or misconfiguration and was unable to complete your request.

 
Please contact the server administrator, webmaster at localhost and inform them of the time the error occurred, and anything you might have done that may have caused the error.

 
More information about this error may be available in the server error log.

 
Apache/2.2.16 (Ubuntu) Server at mon01 Port 80

 
David Raymond 

-----Original Message-----
From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Henrik Størner
Sent: Monday, August 01, 2011 17:48
To: Xymon mailinglist; xymon-announce at xymon.com
Subject: [Xymon] Xymon version 4.3.4 available

 
Hi,

 
I have just uploaded version 4.3.4 of Xymon to Sourceforge, and it should be available from all of the mirror-sites shortly.

 
This version fixes some rather nasty bugs, which could lead to data corruption of client messages (typically this would trigger wrong data for various statuses and spurious creation of disk RRD files) - I would like to thank Greg Shea for working with me to diagnose and fix this problem.

 
Another important bugfix resolves the issue of acknowledgment cookies not being recognised after a while.

 
Several other bugs that could cause various crashes, lockup and other nastiness were also fixed - see the full list below - so I strongly recommend that you upgrade to this version.

 
Regards,

Henrik

 
Changes from 4.3.3 to 4.3.4:

 
* Fix crashes and data corruption in Xymon worker modules

   (xymond_client, xymond_rrd etc) after handling large

   messages.

* Fix xymond lock-up when renaming/deleting hosts

* Fix xymond cookie lookup mechanism

* Webpages: Add new HOSTPOPUP setting to control what values from

   hosts.cfg are displayed as a "comment" to the hostname (either

   in pop-up's or next to the hostname).

* Fix xymond_client crash if analysis.cfg contains invalid

   configuration entries, e.g. expressions that do not compile.

* Fix showgraph CGI crash when legends contain colon.

* xymonnet: Include hostname when reporting erroneous test-spec

* CGI utils: Multiple potential security fixes involving buffer-

   overruns when generating responses.

* CGI utils: Fix crash when invoked with HTTP "HEAD"

* CGI utils: Fix crashes on 64-bit platforms due to missing prototype

   of "basename()" function.

* svcstatus CGI: Dont crash if history log is not a file.

* Critical systems view CGI: Cross-site scripting fix

* Fix recovery-messages for alerts sent to a GROUP

* RRD "memory" status handler now recognizes the output from the

   bb-xsnmp.pl module (for Cisco routers).

* Web templates modified so the menu CSS can override the default

   body CSS.

* Acknowledge web page now allows selecting minutes/hours/days

* Enable/Disable webpage enhanced, so when selecting multiple hosts

   the "Tests" column only lists the tests those hosts have.

On Tue, 2 Aug 2011 09:05:29 -0400, "Raymond, David"

meaning the svcstatus CGI program crashed ...

Could you try running it by hand like this:

  REQUEST_METHOD=GET \
  SCRIPT_NAME=svcstatus.sh \
  QUERY_STRING="HOST=myhost.example.com&SERVICE=info" \
  xymoncmd /usr/lib/xymon/server/bin/svcstatus.cgi

(change the host-name from "myhost" to one of your hosts). If it crashes
and generates a core-file, then a back-trace would be very helpful to see
where it crashes. Run

  gdb ~xymon/server/bin/svcstatus.cgi COREFILE

(COREFILE is the filename of the core file). At the "gdb>" prompt, enter
the command "bt" (backtrace) and send me the output.


Regards,
Henrik

Lubos Pavlicek spotted this bug before I managed to find it, so credit 
goes to him. This patch should fix it, or change line 571 of 
xymon-4.3.4/web/svcstatus-info.c from "char istr[3];" to "char istr[5];".

Weird thing is valgrind doesn't spot it ...


Regards,
Henrik

Hi,

Whats the correct procedure to apply this? Edit the file, make clean ; make install as root?

/melgaard

-----Oprindelig meddelelse-----
Fra: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] På vegne af Henrik Størner
Sendt: 4. august 2011 17:36
Til: xymon at xymon.com
Emne: Re: [Xymon] Xymon version 4.3.4 available

Lubos Pavlicek spotted this bug before I managed to find it, so credit 
goes to him. This patch should fix it, or change line 571 of 
xymon-4.3.4/web/svcstatus-info.c from "char istr[3];" to "char istr[5];".

Weird thing is valgrind doesn't spot it ...


Regards,
Henrik

Hi,

I think I figured out it - edit the file -  make clean; make and then copy svcstatus.cgi over to the installation directory?

/melgaard

-----Oprindelig meddelelse-----
Fra: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] På vegne af Carl Melgaard
Sendt: 5. august 2011 09:37
Til: 'xymon at xymon.com'
Emne: Re: [Xymon] Xymon version 4.3.4 available

Hi,

Whats the correct procedure to apply this? Edit the file, make clean ; make install as root?

/melgaard

I think I figured out it - edit the file -  make clean; make and then copy svcstatus.cgi over to the installation directory?

That will do it, yes.

Generally, quick-fix patches such as this one are applied like this:

cd xymon-4.3.4
patch -p0 </tmp/infocolumn-crash.diff
make clean
make
sudo make install

Since only the svcstatus.cgi binary is changed by the current patch, 
copying that file over to ~xymon/server/bin/ is fine instead of running 
"make install".


Regards,
Henrik