Xymon version 4.3.4 available
Hi,
I have just uploaded version 4.3.4 of Xymon to Sourceforge, and it should be available from all of the mirror-sites shortly.
This version fixes some rather nasty bugs, which could lead to data corruption of client messages (typically this would trigger wrong data for various statuses and spurious creation of disk RRD files) - I would like to thank Greg Shea for working with me to diagnose and fix this problem.
Another important bugfix resolves the issue of acknowledgment cookies not being recognised after a while.
Several other bugs that could cause various crashes, lockup and other nastiness were also fixed - see the full list below - so I strongly recommend that you upgrade to this version.
Regards, Henrik
Changes from 4.3.3 to 4.3.4:
- Fix crashes and data corruption in Xymon worker modules (xymond_client, xymond_rrd etc) after handling large messages.
- Fix xymond lock-up when renaming/deleting hosts
- Fix xymond cookie lookup mechanism
- Webpages: Add new HOSTPOPUP setting to control what values from hosts.cfg are displayed as a "comment" to the hostname (either in pop-up's or next to the hostname).
- Fix xymond_client crash if analysis.cfg contains invalid configuration entries, e.g. expressions that do not compile.
- Fix showgraph CGI crash when legends contain colon.
- xymonnet: Include hostname when reporting erroneous test-spec
- CGI utils: Multiple potential security fixes involving buffer- overruns when generating responses.
- CGI utils: Fix crash when invoked with HTTP "HEAD"
- CGI utils: Fix crashes on 64-bit platforms due to missing prototype of "basename()" function.
- svcstatus CGI: Dont crash if history log is not a file.
- Critical systems view CGI: Cross-site scripting fix
- Fix recovery-messages for alerts sent to a GROUP
- RRD "memory" status handler now recognizes the output from the bb-xsnmp.pl module (for Cisco routers).
- Web templates modified so the menu CSS can override the default body CSS.
- Acknowledge web page now allows selecting minutes/hours/days
- Enable/Disable webpage enhanced, so when selecting multiple hosts the "Tests" column only lists the tests those hosts have.
Hi,
After the upgrade, my column "info" do not work. I try to restart Apache and Xymon, but same result.
Internal Server Error
The server encountered an internal error or misconfiguration and was unable to complete your request.
Please contact the server administrator, webmaster at localhost and inform them of the time the error occurred, and anything you might have done that may have caused the error.
More information about this error may be available in the server error log.
Apache/2.2.16 (Ubuntu) Server at mon01 Port 80
David Raymond
-----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Henrik Størner Sent: Monday, August 01, 2011 17:48 To: Xymon mailinglist; xymon-announce at xymon.com Subject: [Xymon] Xymon version 4.3.4 available
Hi,
I have just uploaded version 4.3.4 of Xymon to Sourceforge, and it should be available from all of the mirror-sites shortly.
This version fixes some rather nasty bugs, which could lead to data corruption of client messages (typically this would trigger wrong data for various statuses and spurious creation of disk RRD files) - I would like to thank Greg Shea for working with me to diagnose and fix this problem.
Another important bugfix resolves the issue of acknowledgment cookies not being recognised after a while.
Several other bugs that could cause various crashes, lockup and other nastiness were also fixed - see the full list below - so I strongly recommend that you upgrade to this version.
Regards,
Henrik
Changes from 4.3.3 to 4.3.4:
Fix crashes and data corruption in Xymon worker modules
(xymond_client, xymond_rrd etc) after handling large
messages.
Fix xymond lock-up when renaming/deleting hosts
Fix xymond cookie lookup mechanism
Webpages: Add new HOSTPOPUP setting to control what values from
hosts.cfg are displayed as a "comment" to the hostname (either
in pop-up's or next to the hostname).
Fix xymond_client crash if analysis.cfg contains invalid
configuration entries, e.g. expressions that do not compile.
Fix showgraph CGI crash when legends contain colon.
xymonnet: Include hostname when reporting erroneous test-spec
CGI utils: Multiple potential security fixes involving buffer-
overruns when generating responses.
CGI utils: Fix crash when invoked with HTTP "HEAD"
CGI utils: Fix crashes on 64-bit platforms due to missing prototype
of "basename()" function.
svcstatus CGI: Dont crash if history log is not a file.
Critical systems view CGI: Cross-site scripting fix
Fix recovery-messages for alerts sent to a GROUP
RRD "memory" status handler now recognizes the output from the
bb-xsnmp.pl module (for Cisco routers).
Web templates modified so the menu CSS can override the default
body CSS.
Acknowledge web page now allows selecting minutes/hours/days
Enable/Disable webpage enhanced, so when selecting multiple hosts
the "Tests" column only lists the tests those hosts have.
Xymon mailing list
Xymon at xymon.com <mailto:Xymon at xymon.com>
http://lists.xymon.com/mailman/listinfo/xymon <http://lists.xymon.com/mailman/listinfo/xymon>
On Tue, 2 Aug 2011 09:05:29 -0400, "Raymond, David"
After the upgrade, my column "info" do not work. I try to restart Apache and Xymon, but same result.
Internal Server Error
meaning the svcstatus CGI program crashed ...
Could you try running it by hand like this:
REQUEST_METHOD=GET
SCRIPT_NAME=svcstatus.sh
QUERY_STRING="HOST=myhost.example.com&SERVICE=info"
xymoncmd /usr/lib/xymon/server/bin/svcstatus.cgi
(change the host-name from "myhost" to one of your hosts). If it crashes and generates a core-file, then a back-trace would be very helpful to see where it crashes. Run
gdb ~xymon/server/bin/svcstatus.cgi COREFILE
(COREFILE is the filename of the core file). At the "gdb>" prompt, enter the command "bt" (backtrace) and send me the output.
Regards, Henrik
After the upgrade, my column "info" do not work. I try to restart Apache and Xymon, but same result.
/Internal Server Error/
Lubos Pavlicek spotted this bug before I managed to find it, so credit goes to him. This patch should fix it, or change line 571 of xymon-4.3.4/web/svcstatus-info.c from "char istr[3];" to "char istr[5];".
Weird thing is valgrind doesn't spot it ...
Regards, Henrik
Hi,
Whats the correct procedure to apply this? Edit the file, make clean ; make install as root?
/melgaard
-----Oprindelig meddelelse----- Fra: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] På vegne af Henrik Størner Sendt: 4. august 2011 17:36 Til: xymon at xymon.com Emne: Re: [Xymon] Xymon version 4.3.4 available
After the upgrade, my column "info" do not work. I try to restart Apache and Xymon, but same result.
/Internal Server Error/
Lubos Pavlicek spotted this bug before I managed to find it, so credit goes to him. This patch should fix it, or change line 571 of xymon-4.3.4/web/svcstatus-info.c from "char istr[3];" to "char istr[5];".
Weird thing is valgrind doesn't spot it ...
Regards, Henrik
Hi,
I think I figured out it - edit the file - make clean; make and then copy svcstatus.cgi over to the installation directory?
/melgaard
-----Oprindelig meddelelse----- Fra: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] På vegne af Carl Melgaard Sendt: 5. august 2011 09:37 Til: 'xymon at xymon.com' Emne: Re: [Xymon] Xymon version 4.3.4 available
Hi,
Whats the correct procedure to apply this? Edit the file, make clean ; make install as root?
/melgaard
I think I figured out it - edit the file - make clean; make and then copy svcstatus.cgi over to the installation directory?
That will do it, yes.
Generally, quick-fix patches such as this one are applied like this:
cd xymon-4.3.4 patch -p0 </tmp/infocolumn-crash.diff make clean make sudo make install
Since only the svcstatus.cgi binary is changed by the current patch, copying that file over to ~xymon/server/bin/ is fine instead of running "make install".
Regards, Henrik
participants (3)
-
Carl.Melgaard@STAB.RM.DK
-
David.Raymond@ca.ebarrette.com
-
henrik@hswn.dk