1 files changed, 195 insertions, 10 deletions

diff --git a/NEWS b/NEWS
index 2db2a2c..9ec3c5e 100644
--- a/NEWS
+++ b/NEWS
@@ -1,15 +1,201 @@
 This file documents the major additions and syntax changes between releases.
 
-2.3 [...]
+2.3.3 2nd Feb 2023
+        ENHANCEMENTS
+        using PRId64 and PRIu64 instead of %ld directly
+        check_http: Make faster with larger files
+        check_snmp: add 'multiplier' to modify current value
+        check_http: Implement chunked encoding decoding
+        check_http/check_curl: add chunked encoding test
+        check_log: Added --exclude to exclude patterns
+        check_log: Add tests
+        check_disk: Clarify usage possibilities
+
+        FIXES
+        fixed two PRId64 to PRIu64 in perfdata_uint64
+        check_pgsql: Removing is_pg_dbname altogether,using postgres API.
+        check_http: Remove superfluous CRLF in HTTP-Requests
+        check_curl: detect ipv6
+        check_icmp: fix parsing help/version long options
+        check_http: fix test plan
+        check_disk: Find accessible mount path if multiple are available
+        check_apt: Fix unknown escape sequence error output
+        check_curl: fix checking large bodys
+        check_snmp: Improve tests for check_snmp & multiply option
+        check_snmp: always apply format when applying multiplier
+        check_http: Use real booleans instead of ints
+        check_http: Document process_arguments a little bit better
+        check_http: Remove dead code
+        check_http: Fix several bug in the implementation of unchunking
+        check_http: Reformat a part to increase readability
+        check_apt: Put upgrade options in the root sections
+        check_apt: Fix comment
+        check_apt: Use real booleans
+        check_mailq: Fixing nullmailer regex
+        check_snmp: Fix regex matches
+        check_log: Fixed a bug when using --all
+        check_log: Cleaned up duplicated code in the args
+        check_http: Fix memory reallocation error in chunk decoding logic
+        check_http: Add space for ending NULL byte in array for chunked encoding
+
+2.3.2 20th Oct 2022
+        GENERAL
+        Use netcat-openbsd for debian explicitly (by @RincewindsHat #1704)
+        Replace egrep with grep -E (by @RincewindsHat #1791)
+        Use silent automake by default (by @RincewindsHat #1747)
+
+        SINGLE PLUGINS
+        check_by_ssh: added option to exit with an warning, if there is output on STDERR (by @nafets #1301)
+        check_by_ssh: Add "-U" flag (#1123). (by @archiecobbs #1774)
+        check_by_ssh: Let ssh decide if a host is valid, enables usage of ssh .config file (by @RincewindsHat #1691)
+        check_curl: Add an option to check_curl to verify the peer certificate & host using the system CA's (by @bazzisoft #1669)
+        check_curl: fixed -ffollow for HTTP/2.0 (Fixes #1685): added major_version parsing to PicoHTTPParser (by @andreasbaumann #1742)
+        check_curl: fixes check_curl: "CRITICAL - Cannot retrieve certificate subject." (by @andreasbaumann #1689)
+        check_curl: fix if http header contains leading spaces (by @sni #1666)
+        check_curl: Update check_curl.c to display a specific human-readable error message where possible (by @bazzisoft #1668)
+        check_curl: verify certificates option should not force SSL to be used (by @bazzisoft #1688)
+        check_disk: Description for -M was the wrong way around (by @RincewindsHat #1746)
+        check_disk: Fixing the stuff that is broken on btrfs (by @waja #1388)
+        check_disk: Fix perfdata for big values for check disk (by @RincewindsHat #1714)
+        check_disk_smb: Add configfile feature (by @Napsty #1402)
+        check_disk_smb: Add timeout (by @cdruee #1770)
+        check_dns: Add --expect-nxdomain (by @Jonny007-MKD #1623)
+        check_dns: split multiple IP addresses passed in one -a argument (by @DerDakon #1649)
+        check_file_age: Make size parameter a little bit more intelligible (by @RincewindsHat #1730)
+        check_fping: Implements 'host-alive' mode (Closes. #1027) (by @waja #1740)
+        check_game: Update Url to qstat (by @RincewindsHat #1725)
+        check_http: changed 'STATE_CRITICAL' to 'STATE_WARNING' for infinite loop (by @xFuture603 #1690)
+        check_http: Increase regexp limit (by @hydrapolic #1566)
+        check_http: Support http redirect (by @waja #1449)
+        check_icmp: buffer offerflow (by @RincewindsHat #1733)
+        check_icmp: delay set_source_ip() until address_family is detected (by @ghciv6 #1735)
+        check_icmp: Fix "Invalid Argument" from sendmsg() under FreeBSD 13.1 and "setsockopt failed" for TTL setting (by @eriksejr #1771)
+        check_icmp: Fix pkt perfdata in check_host mode (by @sjoegren #1721)
+        check_ldap: Allows check_ldap to read password from environment variable (by @mullumaus #1724)
+        check_load: add LOAD prefix to load plugin (by @haraldj #1694)
+        check_load: Display total and scaled load values if check_load scales the values (by number of CPUs by @RincewindsHat #1778)
+        check_log: Missing oldlog now aborts check_log (by @RincewindsHat #1732)
+        check_mailq: Add mailq -C option for config dir or config file (by @leeclemens #1490)
+        check_mailq: Check mailq domain specific warnings (by @RincewindsHat #1731)
+        check_mailq: Fix regexp for nullmailer "mailq" output (by @darksoul42 #1493)
+        check_mysql: fix segfaults with mysql-connector-c #1562 (by @ghciv6 #1644)
+        check_pgsql: add --queryname parameter to check_pgsql (by @datamuc #1741)
+        check_ping: Do not show RTA if no connection was possible (by @RincewindsHat #1697)
+        check_ping: understang ping6 output from iputils package (by @glensc #1412)
+        check_proc: Fix check proc ps detection (by @sni #1712)
+        check_procs: exchange needle and haystack in strstr() for proper st… (by @wolfgangkarall #1654)
+        check_smtp: add -L flag to support LMTP (LHLO instead of HELO/EHLO). (by @ghen2 #1715)
+        check_snmp: Added option for null zero length string exit codes (by @FracKenA #1496)
+        check_snmp: fix performance thresholds when using multiple oids (by @sni #1722)
+        check_snmp fix segfaults (by @adrb #1589)
+        check_snmp: put the "c" (to mark a counter) after the perfdata value (by @lausser #1465)
+        check_swap: fix parsing swap values (by @sni #1780)
+        check_swap: Fix perfdata for check swap (by @RincewindsHat #1707)
+        check_swap: Fix unit for total in perfdata (by @RincewindsHat #1779)
+        check_swap: Handle cached swap (by @mdavranche #1642)
+        check_swap: Small fix to threshold validation and style (indentation) fixes (by @RincewindsHat #1723)
+        check_ups: Fix possible overflow in check_ups (by @phibos #1727)
+        check_uptime: Add option to report uptime in days instead of seconds (by @amotl #1750)
+        check_uptime: Fix/improve output message "Uptime is ..." (by @amotl #1751)
+
+        MULTIPLE PLUGINS
+        check_http, check_curl: added --max-redirs=N option (feature #1684) (by @andreasbaumann #1744)
+        check_http, check_curl: Enhancement --continue-after-certificate (backport from nagios-plugins) (by @andreasbaumann #1762)
+        check_http, check_curl: Remove check_http and check_curl test which are somehow always failing (by @RincewindsHat #1777)
+        check_log, check_oracle, check_sensors: Several fixes shellcheck complaining about (by @waja #1459)
+        sslutils: use chain from client certificates (by @tobiaswiese #1664)
+
+        NON FUNCTIONAL CHANGES
+        Trivial source code whitespace formatting fixes to standard. (by @ziesemer #1424)
+        docs: fix simple typo, conspicuosly -> conspicuously (by @timgates42 #1652)
+        Migrate to GitHub actions (by @jacobbaungard #1686)
+        Point to Icinga Exchange instead of dead Monitoring Exchange (by @RincewindsHat #1737)
+        github actions: fix check_users test case (by @sni #1713)
+        Add CodeQL checks (by @phibos #1682)
+        Fix some QL problems (by @RincewindsHat #1729)
+        Update CodeQL and update runner before installing (by @RincewindsHat #1775)
+        check_disk: Check disk compiler warnings (by @RincewindsHat #1758)
+        check_disk: Trivial printf fix and a little bit of code style (by @RincewindsHat #1695)
+        check_http: Docs: make -C obvious (by @stblassitude #1554)
+        check_ifoperstatus: Re-attach a comment to where it actually belongs (by @peternewman #1699)
+        check_ircd: Restrict the nickname length of the test user for check_ircd (by @RincewindsHat #1710)
+        check_load: Check load compiler warnings (by @RincewindsHat #1759)
+        check_log: Modernize check log (by @RincewindsHat #1692)
+        check_mailq: remove duplicate W=i/C=i args in check_mailq.pl (by @ichdasich #1755)
+        check_ntp: Check ntp remove unused variables (by @RincewindsHat #1781)
+        check_pgsql: Using snprintf which honors the buffers size and guarantees null termination. (Closes: #1601) (by @waja #1663)
+        check_procs: Fix double percentage sign in usage (by @RincewindsHat #1743)
+        check_sensors.sh: Make shellcheck happier (by @RincewindsHat #1679)
+        check_snmp: Fixed option description authpassword -> authpasswd + whitespaces (by @RincewindsHat #1676)
+        check_swap: Check swap compiler warnings (by @RincewindsHat #1756)
+
+2.3.1 10 April 2021
+        ENHANCEMENTS
+        check_curl: Add an option to verify the peer certificate & host using the system CA's
+
+        FIXES
+        check_icmp: fix simple typo, conspicuosly -> conspicuously
+        check_curl: fixed help, usage and errors for TLS 1.3
+        check_curl: fixed a potential buffer overflow in url buffer
+        check_dns: split multiple IP addresses passed in one -a argument
+        check_curl: added string_statuscode function for printing HTTP/1.1 and HTTP/2 correctly
+        check_curl: fix crash if http header contains leading spaces
+        check_curl: display a specific human-readable error message where possible
+        check_pgsql: Using snprintf which honors the buffers size and guarantees null termination.
+        check_snmp: put the "c" (to mark a counter) after the perfdata value
+        check_http: Increase regexp limit
+        check_http: make -C obvious
+        check_curl: Increase regexp limit (to 1024 as in check_http)
+        check_curl: make -C obvious (from check_http)
+        check_curl: backported --show-body/-B to print body (from check_http)
+
+2.3 10th December 2020
         ENHANCEMENTS
         check_dns: allow 'expected address' (-a) to be specified in CIDR notation
           (IPv4 only).
         check_dns: allow for IPv6 RDNS
+        check_dns: Accept CIDR
+        check_dns: allow unsorted addresses
+        check_dns: allow forcing complete match of all addresses
+        check_dns: option to expect NXDOMAIN
         check_apt: add --only-critical switch
         check_apt: add -l/--list option to print packages
+        check_file_age: add range checking
+        check_file_age: enable to test for maximum file size
+        check_apt: adding packages-warning option
+        check_load: Adding top consuming processes option
+        check_http: Adding Proxy-Authorization and extra headers
+        check_snmp: make calculation of timeout value in help output more clear
+        check_uptime: new plugin for checking uptime to see how long the system is running
+        check_curl: check_http replacement based on libcurl
+        check_http: Allow user to specify HTTP method after proxy CONNECT
+        check_http: Add new flag --show-body/-B to print body
+        check_cluster: Added data argument validation
+        check_icmp: Add IPv6 support
+        check_icmp: Automatically detect IP protocol
+        check_icmp: emit error if multiple protocol version
+        check_disk: add support to display inodes usage in perfdata
+        check_hpjd: Added -D option to disable warning on 'out of paper'
+        check_http: support the --show-body/-B flag when --expect is used
+        check_mysql: allow mariadbclient to be used
+        check_tcp: add --sni
+        check_dns: detect unreachable dns service in nslookup output
 
         FIXES
         Fix regression where check_dhcp was rereading response in a tight loop
+        check_dns: fix error detection on sles nslookup
+        check_disk_smb: fix timeout issue
+        check_swap: repaired "-n" behaviour
+        check_icmp: Correctly set address_family on lookup
+        check_icmp: Do not overwrite -4,-6 on lookup
+        check_smtp: initializes n before it is used
+        check_dns: fix typo in parameter description
+        check_by_ssh: fix child process leak on timeouts
+        check_mysql: Allow sockets to be specified to -H
+        check_procs: improve command examples for 'at least' processes
+        check_swap: repaired "-n" behaviour
+        check_disk: include -P switch in help
+        check_mailq: restore accidentally removed options
 
 2.2 29th November 2016
         ENHANCEMENTS
@@ -50,7 +236,7 @@ This file documents the major additions and syntax changes between releases.
         check_ssh now returns CRITICAL for protocol/version errors
         If a plugin is invoked with -h/--help or -V/--version, the exit status
           is now UNKNOWN
-        The superseeded check_ntp.pl was removed, please use check_ntp_peer or
+        The superseded check_ntp.pl was removed, please use check_ntp_peer or
           check_ntp_time instead
 
 2.1.2 16th October 2015
@@ -77,7 +263,7 @@ This file documents the major additions and syntax changes between releases.
         New check_mysql -n option to ignore authentication failures
         Added IP and port or socket name to error messages
         New check_ntp_time -o option to add expected offset
-        check_disk shows now troubled partions in verbose mode
+        check_disk shows now troubled partitions in verbose mode
         check_dig has now support for drill and dig
         check_dig has now support for -6 option
         Add performance data to check_file_age
@@ -171,10 +357,10 @@ This file documents the major additions and syntax changes between releases.
         New check_procs -k option to ignore kernel threads (on Linux)
         Let check_procs use /proc/<PID>/exe (if available) instead of getpid(2), unless -T is specified
         Let check_mysql support SSL
-        Let check_mysql add perfromance metrics for all checks
+        Let check_mysql add performance metrics for all checks
         New check_mysql -f option to specify a client options file
         New check_mysql -g option to specify a client options group
-        New check_snmp --offset option to allow for adding/substracting an offset value to sensor data
+        New check_snmp --offset option to allow for adding/subtracting an offset value to sensor data
         Let check_snmp support an arbitrary number of OIDs
         Let check_ide_smart support NetBSD
 
@@ -189,7 +375,7 @@ This file documents the major additions and syntax changes between releases.
         Fix deprecated imports of check_nmap.py
 
         WARNINGS
-        check_http behaviour of -k/--header changed since it does not seperate multiple headers by semicolons anymore. Use multiple -k switches instead.
+        check_http behaviour of -k/--header changed since it does not separate multiple headers by semicolons anymore. Use multiple -k switches instead.
         check_http's --proxy_authorization option is now called --proxy-authorization (it was always documented this way)
         The contrib directory has been removed from this distribution
 
@@ -340,7 +526,7 @@ This file documents the major additions and syntax changes between releases.
         check_ntp and check_ntp_peer now show proper jitter/stratum thresholds longopts in --help
         check_dns now allow to repeat -a to match multiple possibly returned address (common with load balancers)
         check_mysql and check_radius now try clearing password in processlist just like check_mysql_query
-        check_mysql and check_mysql_query now support sockets explicitely (-s, --socket)
+        check_mysql and check_mysql_query now support sockets explicitly (-s, --socket)
         negate now has the ability to replace the status text as well (-s, --substitute)
         Added performance data to check_ping
         Added support for --extra-opts in all C plugins (disabled by default, see configure --help)
@@ -380,7 +566,7 @@ This file documents the major additions and syntax changes between releases.
         New check_disk option -L: Only check local filesystems, but call stat() on remote ones, too.
           Thus accessibility of remote filesystems can be checked without any threshold comparison.
         Check_disk's --help now prints some examples for the new features introduced in 1.4.8
-        New check_disk -i/-I option to ignore pathes/partitions based on regular expressions
+        New check_disk -i/-I option to ignore paths/partitions based on regular expressions
         New check_disk -A option to select all filesystems explicitly
         WARNING: check_disk's -E option must now be passed before -p or -r/-R arguments
           Passing -E after -p or -r results in UNKNOWN state, now
@@ -429,7 +615,7 @@ This file documents the major additions and syntax changes between releases.
         Fixed MKINSTALLDIRS problem in po/
         ./configure now detects if possible to compile check_mysql
         Fixed broken HELO in check_smtp
-        check_icmp now allows to set a minimum number of hosts required for successs (-m)
+        check_icmp now allows to set a minimum number of hosts required for success (-m)
         check_icmp fix for *BSD when running for long time
         check_ping times out 1 second quicker if host is unreachable
         Root plugins installed with world executable
@@ -487,4 +673,3 @@ This file documents the major additions and syntax changes between releases.
         check_swap % thresholds changed to measure amount free, instead of amount used
         check_disk syntax changes for -p, -m/-M, defaults to MB instead of kB
         check_procs -C expects no path for the command name
-