Package Release Info

icinga2-2.8.4-bp150.1.3

Update Info: Base Release
Available in Package Hub : 15

platforms

AArch64
ppc64le
s390x
x86-64

subpackages

icinga2
icinga2-bin
icinga2-common
icinga2-doc
icinga2-ido-mysql
icinga2-ido-pgsql
icinga2-libs
nano-icinga2
vim-icinga2

Change Logs

* Fri Apr 27 2018 thardeck@suse.com
- update to version 2.8.4
  * fix plugins crash when run from icinga2-2.8.3
  * Fix InfluxDB backslash escaping
  * Fix Elasticsearch crash on invalid performance data
  * Sysconfig file settings are taken into account
  * Support multiple parameters for check_nscp_api
  * Documentation enhancements and fixes
- remove obsolete patch icinga2-2.8.2-boost.patch
* Tue Apr 17 2018 thardeck@suse.com
- fix bsc#1089808 by back porting the upstream patch icinga2-2.8.2-boost.patch
* Mon Apr 09 2018 ro@suse.de
- fix _fillupdir usage
* Fri Mar 23 2018 thardeck@suse.com
- update to version 2.8.2 (fixes CVE-2017-16933 - bsc#1086676, CVE-2018-6532 - bsc#1086672, CVE-2018-6533 - bsc#1086673,
  CVE-2018-6534 - bsc#1086674, CVE-2018-6535 - bsc#1086675, CVE-2018-6536)
  * [#5715](https://github.com/icinga/icinga2/issues/5715) (API, PR): Hash API password and comparison
  * [#6153](https://github.com/icinga/icinga2/issues/6153) (API, PR): Improve error handling for empty packages in /v1/config/packages
  * [#6147](https://github.com/icinga/icinga2/issues/6147) (PR): Fix incorrect argument type for JsonRpc::SendMessage
  * [#6146](https://github.com/icinga/icinga2/issues/6146) (PR): Ensure that SetCorked\(\) works properly
  * [#6134](https://github.com/icinga/icinga2/issues/6134) (PR): Fix incorrect HTTP content length limits
  * [#6133](https://github.com/icinga/icinga2/issues/6133) (PR): Limit the number of HTTP/JSON-RPC requests we read in parallel
  * [#6132](https://github.com/icinga/icinga2/issues/6132) (PR): Fix HTTP parser crash/hang
  * [#6129](https://github.com/icinga/icinga2/issues/6129): api/packages not created by prepare-dir/daemon
  * [#5995](https://github.com/icinga/icinga2/issues/5995) (InfluxDB, PR): Fix InfluxDB requests
  * [#5991](https://github.com/icinga/icinga2/issues/5991): Partial privilege escalation via PID file manipulation
  * [#5987](https://github.com/icinga/icinga2/issues/5987) (Elasticsearch, InfluxDB, Metrics): InfluxDBWriter and ElasticsearchWriter stop writing to HTTP API
  * [#5943](https://github.com/icinga/icinga2/issues/5943) (PR): Fix incorrect ::Start call
  * [#5793](https://github.com/icinga/icinga2/issues/5793): CVE-2017-16933: root privilege escalation via prepare-dirs \(init script and systemd service file\)
  * [#5760](https://github.com/icinga/icinga2/issues/5760) (Crash, PR): Fix incorrect socket handling for the HTTP client
  * [#6148](https://github.com/icinga/icinga2/issues/6148) (PR): Fix ApiUser unit test
  * [#6135](https://github.com/icinga/icinga2/issues/6135) (API, Cluster, PR): Limit JSON RPC message size
  * [#6115](https://github.com/icinga/icinga2/issues/6115) (PR): Fix incorrect size of request limits
  * [#6114](https://github.com/icinga/icinga2/issues/6114) (PR): Fix typo in prepare-dirs
  * [#6104](https://github.com/icinga/icinga2/issues/6104) (PR): Fix nullptr dereferences
  * [#6103](https://github.com/icinga/icinga2/issues/6103) (PR): HTTP Security fixes
  * [#5982](https://github.com/icinga/icinga2/issues/5982) (Packages, PR): SELinux: Allows icinga2\_t to send sigkill to all domains it transitions to
  * [#5916](https://github.com/icinga/icinga2/issues/5916) (Packages): Unable to kill process group after check timeout if SElinux is enabled
  * [#5850](https://github.com/icinga/icinga2/issues/5850) (Installation, PR): init script security fixes
  * [#5764](https://github.com/icinga/icinga2/issues/5764) (InfluxDB, code-quality, PR): Improve InfluxdbWriter performance
  * [#5759](https://github.com/icinga/icinga2/issues/5759) (code-quality, PR): Make default getters and setters non-virtual
- install limits.conf to systemd directory instead of etc
* Mon Mar 12 2018 bwiedemann@suse.com
- override ICINGA2_BUILD_HOST_NAME to make builds reproducible (boo#1084909)
* Mon Feb 19 2018 thardeck@suse.com
- incorporate spec changes from upstream
* Sun Feb 04 2018 ecsos@opensuse.org
- fix build error for 15.0, Tumbleweed and Factory
* Wed Jan 17 2018 thardeck@suse.com
- update to upstream version 2.8.1
  * [#5856](https://github.com/Icinga/icinga2/issues/5856) (PR): Implement AppLocal deployment support for UCRT
  * [#5986](https://github.com/Icinga/icinga2/issues/5986) (DB IDO, PR): Fix wrong schema constraint for fresh 2.8.0 installations
  * [#5947](https://github.com/Icinga/icinga2/issues/5947) (DB IDO): Duplicate entry constraint violations in 2.8
  * [#5907](https://github.com/Icinga/icinga2/issues/5907) (PR): Windows plugin check\_swap build fix
  * [#5808](https://github.com/Icinga/icinga2/issues/5808) (Crash, PR): Fix missing variable name which can lead to segfaults
  * [#5807](https://github.com/Icinga/icinga2/issues/5807) (Crash): icinga v2.8.0 crashes frequently with "segmentation fault" on Debian 8.9
  * [#5804](https://github.com/Icinga/icinga2/issues/5804) (Log, PR): Silence UpdateRepository message errors
  * [#5776](https://github.com/Icinga/icinga2/issues/5776) (Cluster, Log): 2.8.0: warning/JsonRpcConnection: Call to non-existent function 'event::UpdateRepository'
  * [#5746](https://github.com/Icinga/icinga2/issues/5746) (Livestatus, PR): livestatus: custom variables return empty arrays instead of strings
  * [#5716](https://github.com/Icinga/icinga2/issues/5716) (Livestatus, PR): add bogus zero reply in livestatus when aggregate and non matching filter
  * [#5626](https://github.com/Icinga/icinga2/issues/5626) (Livestatus, help wanted): Empty result set with non-matching filters in Livestatus stats query
  * [#5785](https://github.com/Icinga/icinga2/issues/5785) (ITL, PR): ITL: Drop ssl\_sni default setting
  * [#5775](https://github.com/Icinga/icinga2/issues/5775) (ITL): Default usage of ssl\_sni in check\_tcp
* Wed Dec 13 2017 thardeck@suse.com
- add logrotate as BuildRequires for the setup to recognize the version and
  enable the su usage accordingly
* Tue Dec 12 2017 thardeck@suse.com
- fix libboost devel dependencies for Tumbleweed
* Mon Nov 27 2017 thardeck@suse.com
- add user and group provides
* Mon Nov 27 2017 thardeck@suse.com
- remove icinga2.service.limits.conf from package source and use the one from
  the tarball instead
* Fri Nov 17 2017 thardeck@suse.com
- update to upstream version 2.8.0
  * Certificate path changed to /var/lib/icinga2/certs - check the upgrading docs!
  * DB IDO 2.8.0 schema upgrade
  * Cluster/Clients: Forward certificate signing requests over multiple levels
  * Cluster/Clients: Support on-demand signing next to ticket based certificate request signing
  * New flapping detection algorithm
  * Add ElasticsearchWriter feature with HTTP proxy support
  * Add CORS support for the REST API
  * Deprecate `flapping_threshold` config option
  * Remove client configuration mode "bottom up"
  * Remove classicui meta configuration package
  * Remove deprecated `enable_legacy_mode` in Graphite feature
  * Spec file was moved to https://github.com/icinga/icinga-packaging
  * ITL CheckCommand definition updates
  * Documentation updates
* Tue Nov 14 2017 jengelh@inai.de
- Documentation should not hard-require the program, as it is
  technically "usable" without it.
- Rectify RPM groups, fix odd grammar in descriptions.
- Remove redundant %clean section.
* Mon Nov 13 2017 thardeck@suse.com
- add icinga2.service.limits.conf on Tumbleweed too
* Fri Nov 10 2017 thardeck@suse.com
- update to upstream version 2.7.2
  * Fixed invalid attribute names in the systemd unit file
  * Improve documentation and systemd config on TaskMax
  * Fixed incorrect unique constraint for IDO DB
  * Moved spec file to the icinga-packaging Git repository
  * Documentation updates
* Thu Sep 21 2017 thardeck@suse.com
- update to upstream version 2.7.1
  * Fixes and upgrade documentation for notificatication scripts introduced in 2.7.0
  * InfluxdbWriter attribute socket_timeout introduced in 2.7.0 was deprecated (will be removed in 2.8.0). Details in #5469 and #5460
  * Livestatus bygroup table stats fixes for NagVis
  * DB IDO: Fixes for downtime/comment history queries not correctly updating the end time
  * check_nscp_api allows white spaces in arguments
* Tue Sep 05 2017 thardeck@suse.com
- adapt spec to latest upstream changes
* Fri Aug 25 2017 thardeck@suse.com
- fix SLES and Factory building issues
* Thu Aug 24 2017 thardeck@suse.com
- take upstream icinga2.spec as base again (fixes bnc#1055032)
- fix wrong position of classicui sed statement
- fix faulty systemd cleanup statement on suse systems
Version: 2.10.4-bp151.2.2
* Wed Mar 20 2019 ecsos@opensuse.org
- update to 2.10.4
  * Bugfixes:
  - Fix TLS connections in Influxdb/Elasticsearch features leaking file descriptors (#6989 #7018 ref/IP/12219)
  - Fixes for delayed and one-time notifications (#5561 #6757)
  - Improve performance for downtimes/comments added in HA clusters (#6885 ref/IP/9235)
  - check_perfmon supports non-localized performance counter names (#5546 #6418)
  Detail see: https://github.com/Icinga/icinga2/blob/master/CHANGELOG.md#2104-2019-03-19
* Tue Feb 26 2019 ecsos@opensuse.org
- update to 2.10.3
  * Bugfixes:
  - Stalled TLS connections on reload/Director deployments (#6816 #6898 ref/NC/588119)
  - 'Connection: close' header leading to unstable instance, affects Ruby clients (#6799)
  - Server time in the future breaks check result processing (#6797 ref/NC/595861)
  - ScheduledDowntimes: Generate downtime objects only on one HA endpoint (#2844 ref/IC/9673 ref/NC/590167 ref/NC/591721)
  - Improve activation & syncing for downtime objects generated from ScheduledDowntimes (#6826 ref/IC/9673 ref/NC/585559)
  - Generate a runtime downtime object from already running ScheduledDowntime objects (#6704)
  - DB IDO: Don't enqueue queries when the feature is paused in HA zones (#5876)
  - Crashes with localtime_r errors (#6887)
  * Documentation updates:
  - Ephemeral port range blocking on Windows agents (ref/NC/597307)
  - Technical concepts for the check scheduler (#6775)
  - DB IDO cleanup (#6791)
  - Unified development docs (#6819)
  Details see: https://github.com/Icinga/icinga2/blob/master/CHANGELOG.md#2103-2019-02-26
* Wed Nov 14 2018 ecsos@opensuse.org
- update to 2.10.2
  * Bug
  - #6770 (PR): Fix deadlock in GraphiteWriter
  - #6769 (Cluster): Hanging TLS connections
  - #6759 (Log, PR): Fix possible double free in StreamLogger::BindStream()
  - #6753: Icinga2.service state is reloading in systemd after safe-reload until systemd time-out
  - #6740 (DB IDO, PR): DB IDO: Don't enqueue queries when the feature is paused (HA)
  - #6738 (API, Cluster, PR): Ensure that API/JSON-RPC messages in the same session are processed and not stalled
  - #6736 (Crash): Stability issues with Icinga 2.10.x
  - #6717 (API, PR): Improve error handling for invalid child_options for API downtime actions
  - #6712 (API): Downtime name not returned when error occurs
  - #6711 (API, Cluster): Slow API (TLS-Handshake)
  - #6709 (PR): Fix the Icinga2 version check for versions with more than 5 characters
  - #6707 (Compat, PR): Fix regression for wrong objects.cache path overwriting icinga2.debug file
  - #6705 (CLI, Compat, Configuration): Crash "icinga2 object list" command with 2.10.1-1 on CentOS 7
  - #6703: Check command 'icinga' breaks when vars.icinga_min_version is defined (2.10.x)
  - #6635 (API): API TLS session connection closed after 2 requests
  - #5876 (DB IDO): IDO Work queue on the inactive node growing when switching connection between redundant master servers
  * Documentation
  - #6714 (Documentation, PR): Docs: Add package related changes to the upgrading docs
  * Support
  - #6773 (Installation, Packages, PR): Initialize ICINGA2_ERROR_LOG inside the systemd environment
  - #6771 (Tests, PR): Implement unit tests for Dictionary initializers
  - #6760 (Packages, Tests, PR): armhf: Apply workaround for timer tests with std::bind callbacks
  - #6710 (Packages): Crash when upgrading from 2.10.0 to 2.10.1 (SELinux related)
* Thu Oct 18 2018 liedke@rz.uni-mannheim.de
- update to 2.10.1
  * Bug
  - #6696 (PR): Remove default environment, regression from e678fa1aa5
  - #6694: v2.10.0 sets a default environment "production" in SNI
  - #6691 (PR): Add missing shutdown/program state dumps for SIGUSR2
    reload handler
  - #6689: State file not updated on reload
  - #6685 (API, PR): Fix regression with API permission filters and
    namespaces in v2.10
  - #6682 (API): API process-check-result fails in 2.10.0
  - #6679 (Windows, PR): Initialize Configuration::InitRunDir for
    Windows and writing the PID file
  - #6624 (Check Execution): Master Reload Causes Passive Check State Change
  - #6592: Reloads seem to reset the check atempt count. Also notifications
    go missing shortly after a reload.
  * Documentation
  - #6701 (Documentation, PR): Add GitHub release tag to README
  - #6700 (Documentation, PR): Enhance the addon chapter in the docs
  - #6699 (Documentation, PR): Update to https://icinga.com/
  - #6692 (Documentation, PR): Update release docs for Chocolatey
  - #6690 (Documentation, PR): Extend 09-object-types.md with argument array
  - #6674 (Documentation, PR): Add a note to the docs on >2 endpoints in
    a zone
  - #6673 (Documentation, PR): Update RELEASE docs
  - #6672 (Documentation, PR): Extend upgrade docs
  - #6671 (Documentation): Zone requirements changed in 2.10 -
    Undocumented Change
  * Support
  - #6681 (code-quality, PR): Fix spelling errors.
  - #6677 (Packages, Windows): icinga does not start after Update to 2.10
* Fri Oct 12 2018 ecsos@opensuse.org
- update to 2.10.0
  * Notes
  - Support for namespaces, details in this blogpost
  - Only send acknowledgement notification to users notified about a problem before, thanks for sponsoring to the Max-Planck-Institut for Marine Mikrobiologie
  - More child options for scheduled downtimes
  - Performance improvements and fixes for the TLS connections inside cluster/REST API
  - Better logging for HTTP requests and less verbose object creation (e.g. downtimes via Icinga Web 2 & REST API)
  - New configuration path constants, e.g. ConfigDir
  - Fixed problem with dependencies rescheduling parent checks too fast
  - Fixed problem with logging in systemd and syslog
  - Improved vim syntax highlighting
  - Technical concepts docs update with config compiler and TLS network IO
  * Enhancement
  - #6663 (API, Log, PR): Silence config compiler logging for runtime created objects
  - #6657 (API, Log, PR): Enable the HTTP request body debug log entry for release builds
  - #6655 (API, Log, PR): Improve logging for disconnected HTTP clients
  - #6651 (Plugins, PR): Add 'used' feature to check_swap
  - #6633 (API, Cluster, PR): Use a dynamic thread pool for API connections
  - #6632 (Cluster, PR): Increase the cluster reconnect frequency to 10s
  - #6616 (API, Cluster, PR): Add ApiListener#tls_handshake_timeout option
  - #6611 (Notifications): Allow types = [ Recovery ] to always send recovery notifications
  - #6595 (API, Cluster, PR): Allow to configure anonymous clients limit inside the ApiListener object
  - #6532 (Configuration, PR): Add child_options to ScheduledDowntime
  - #6531 (API, PR): Expose Zone#all_parents via API
  - #6527 (Notifications, PR): Acknowledgment notifications should only be send if problem notification has been send
  - #6521 (Configuration, PR): Implement references
  - #6512 (Cluster, PR): Refactor environment for API connections
  - #6511 (Cluster, PR): ApiListener: Add support for dynamic port handling
  - #6509 (Configuration, PR): Implement support for namespaces
  - #6508 (Configuration, PR): Implement the Dictionary#clear script function
  - #6506 (PR): Improve path handling in cmake and daemon
  - #6460 (Log, help wanted): Feature suggestion: Do not log warnings when env elements are undefined in CheckCommand objects
  - #6455 (Log, PR): Log something when the Filelogger has been started
  - #6379 (Configuration, PR): Throw config error when using global zones as parent
  - #6356 (Log, PR): Fix logging under systemd
  - #6339 (Log, help wanted): On systemd, icinga2 floods the system log, and this cannot simply be opted out of
  - #6110 (Configuration, PR): Implement support for optionally specifying the 'var' keyword in 'for' loops
  - #6047 (Notifications): Acknowledgment notifications should only be sent if the user already received a problem notification
  - #4282 (API, Log): Icinga should log HTTP bodies for API requests
  * Bug
  - #6658 (API, PR): Ensure that HTTP/1.0 or 'Connection: close' headers are properly disconnecting the client
  - #6652 (Plugins, PR): Fix check_memory thresholds in 'used' mode
  - #6647 (CLI, PR): node setup: always respect --accept-config and --accept-commands
  - #6643 (Check Execution, Notifications, PR): Fix that check_timeout was used for Event/Notification commands too
  - #6639 (Windows, PR): Ensure to _unlink before renaming replay log on Windows
  - #6622 (DB IDO, PR): Ensure to use UTC timestamps for IDO PgSQL cleanup queries
  - #6603 (Check Execution, Cluster): CheckCommand 'icinga' seems to ignore retry interval via command_endpoint
  - #6575: LTO builds fail on Linux
  - #6566 (Cluster): Master disconnects during signing process
  - #6546 (API, CLI, PR): Overridden path constants not passed to config validation in /v1/config/stages API call
  - #6530 (DB IDO, PR): IDO/MySQL: avoid empty queries
  - #6519 (CLI, PR): Reset terminal on erroneous console exit
  - #6517 (Cluster): Not all Endpoints can't reconnect due to "Client TLS handshake failed" error after "reload or restart"
  - #6514 (API): API using "Connection: close" header results in infinite threads
  - #6507 (Cluster): Variable name conflict in constants.conf / Problem with TLS verification, CN and Environment variable
  - #6503 (Log, PR): Reduce the log level for missing env macros to debug
  - #6485 (Log): Icinga logs discarding messages still as warning and not as notice
  - #6475 (Compat, PR): lib->compat->statusdatawriter: fix notifications_enabled
  - #6430 (Log, PR): Fix negative 'empty in' value in WorkQueue log message
  - #6427 (Configuration, Crash, PR): Improve error message for serializing objects with recursive references
  - #6409 (Configuration, Crash): Assigning vars.x = vars causes Icinga 2 segfaults
  - #6408 (PR): ObjectLock#Unlock(): don't reset m_Object->m_LockOwner too early
  - #6386 (Configuration, PR): Fix that TimePeriod segments are not cleared on restart
  - #6382 (CLI, help wanted): icinga2 console breaks the terminal on errors
  - #6313 (Plugins, Windows, PR): Fix wrong calculation of check_swap windows plugin
  - #6304 (Configuration, Notifications): Timeout defined in NotificationCommand is ignored and uses check_timeout
  - #5815 (Plugins, Windows): swap-windows check delivers wrong result
  - #5375 (Check Execution, PR): Parents who are non-active should not be rescheduled
  - #5052 (Cluster, Windows): Replay log not working with Windows client
  - #5022 (Check Execution): Dependencies may reschedule passive checks, triggering freshness checks
  * ITL
  - #6646 (ITL, PR): Update ITL and Docs for memory-windows - show used
  - #6640 (ITL): Update ITL and Docs for memory-windows - show used
  - #6563 (ITL, PR): [Feature] Cloudera service health CheckCommand
  - #6561 (ITL, PR): [Feature] Ceph health CheckCommand
  - #6504 (ITL, PR): squashfs ignored
  - #6491 (ITL, PR): Feature/itl vmware health
  - #6481 (ITL): command-plugins.conf check_disk exclude squashfs
  * Documentation
  - #6670 (Documentation, PR): Add technical concepts for the config compiler and daemon CLI command
  - #6665 (Documentation, PR): Make the two modes of check_http more obvious.
  - #6615 (Documentation, PR): Update distributed monitoring docs for 2.10
  - #6610 (Documentation, PR): Add "TLS Network IO" into technical concepts docs
  - #6607 (Documentation, PR): Enhance development docs with GDB backtrace and thread list
  - #6606 (Documentation, PR): Enhance contributing docs
  - #6598 (Documentation, PR): doc/09-object-types: states filter ignored for Acknowledgements
  - #6597 (Documentation, PR): Add Fedora to development docs for debuginfo packages
  - #6593 (Documentation, help wanted): Include CA Proxy in 3rd scenario in Distributed Monitoring docs
  - #6573 (Documentation, PR): Fix operator precedence table
  - #6528 (Documentation, PR): Document default of User#enable_notifications
  - #6502 (Documentation, PR): Update 17-language-reference.md
  - #6501 (Documentation, PR): Update 03-monitoring-basics.md
  - #6488 (Documentation, ITL, PR): Fix typo with the CheckCommand cert
  * Support
  - #6669 (PR): Don't throw an error when namespace indexers don't find a valid key
  - #6668 (Installation, PR): Enhance vim syntax highlighting for 2.10
  - #6661 (API, Log, code-quality, PR): Cache the peer address in the HTTP server
  - #6642 (PR): Allow to override MaxConcurrentChecks constant
  - #6621 (code-quality, PR): Remove unused timestamp function in DB IDO
  - #6618 (PR): Silence compiler warning for nice()
  - #6591 (PR): Fix static initializer priority for namespaces in LTO builds
  - #6588 (PR): Fix using full path in prepare-dirs/safe-reload scripts
  - #6586 (PR): Fix non-unity builds on CentOS 7 with std::shared_ptr
  - #6583 (Documentation, Installation, PR): Update PostgreSQL library path variable in INSTALL.md
  - #6574 (PR): Move new downtime constants into the Icinga namespace
  - #6570 (Cluster, PR): Increase limit for simultaneously connected anonymous TLS clients
  - #6567 (PR): ApiListener: Dump the state file port detail as number
  - #6556 (Installation, Windows, PR): windows: Allow suppression of extra actions in the MSI package
  - #6544 (code-quality, PR): Remove #include for deprecated header file
  - #6539 (PR): Build fix for CentOS 7 and non-unity builds
  - #6526 (code-quality, PR): icinga::PackObject(): shorten conversion to string
  - #6510 (Tests, Windows, PR): Update windows build scripts
  - #6494 (Tests, PR): Test PackObject
  - #6489 (code-quality, PR): Implement object packer for consistent hashing
  - #6484 (Packages): Packages from https://packages.icinga.com are not Systemd Type=notify enabled?
  - #6469 (Installation, Windows, PR): Fix Windows Agent resize behavior
  - #6458 (code-quality, PR): Fix debug build log entry for ConfigItem activation priority
  - #6456 (code-quality, PR): Keep notes for immediately log flushing
  - #6440 (code-quality, PR): Fix typo
  - #6410 (code-quality, PR): Remove unused code
  - #4959 (Installation, Windows): Windows Agent Wizard Window resizes with screen, hiding buttons
* Wed Sep 26 2018 ecsos@opensuse.org
- update to 2.9.2
  * Enhancement
  - #6602 (API, Cluster, PR): Improve TLS handshake exception logging
  - #6568 (Configuration, PR): Ensure that config object types are committed in dependent load order
  - #6497 (Configuration, PR): Improve error logging for match/regex/cidr_match functions and unsupported
    dictionary usage
  * Bug
  - #6596 (Crash, PR): Fix crash on API queries with Fedora 28 hardening and GCC 8
  - #6581 (Configuration, PR): Shuffle items before config validation
  - #6569 (DB IDO): Custom Vars not updated after upgrade
  - #6533 (Crash): Icinga2 crashes after using some api-commands on Fedora 28
  - #6505 (Cluster, PR): Fix clusterzonecheck if not connected
  - #6498 (Configuration, PR): Fix regression with MatchAny false conditions on match/regex/cidr_match
  - #6496 (Configuration): error with match and type matchany
  * Documentation
  - #6590 (DB IDO, Documentation, PR): Update workaround for custom vars
  - #6572 (Documentation, PR): Add note about workaround for broken custom vars
  * Support
  - #6540 (Configuration): Evaluate a fixed config compiler commit order
  - #6486 (Configuration): Configuration validation w/ ScheduledDowntimes performance decreased in 2.9
  - #6442 (Configuration): Error while evaluating "assign where match" expression: std::bad_cast
- Add icinga2-graphite.patch to have all tags as descriped in
  upstream icingaweb2-module-graphite docs.
* Tue Sep 11 2018 ecsos@opensuse.org
- remove rpmlint warnings:
  - missing-dependency-to-logrotate
  - obsolete-not-provided icinga2-libs
  - permissions-missing-requires
* Tue Sep 11 2018 markus@lazyfrosch.de
- Incorporating upstream changes
  * Handle licensing different between SUSE and RedHat
  * Remove obsolete libs package
  * Move service and config from common to main package
  * Ensure consistent handling of fillupdir
    Also see https://github.com/Icinga/rpm-icinga2/pull/5
* Sat Jul 28 2018 ecsos@opensuse.org
- update to 2.9.1
  * Bug
  - #6457 (PR): Ensure that timer thread is initialized after Daemonize()
  - #6449: icinga r2.9.0-1 init.d script overrides PATH variable
  - #6445: Problem with daemonize (init scripts, -d) on Debian 8 / CentOS 6 / Ubuntu 14 / SLES 11 in 2.9
  - #6444 (PR): SELinux: allow systemd notify
  - #6443: selinux and 2.9
  * Support
  - #6470 (code-quality, PR): Fix spelling errors.
  - #6467 (Tests, PR): Start and stop the timer thread lazily
  - #6461 (Tests): Broken tests with fix from #6457
  - #6451 (Packages, PR): Fix initscripts
  - #6450 (Packages): init script helpers - source: not found
* Sat Jul 28 2018 uhaider.msee15seecs@seecs.edu.pk
- Fixed the "No valid ELF RPATH or RUNPATH entry exists in the file"
  error. (boo#1102980)
* Wed Jul 18 2018 ecsos@opensuse.org
- update to 2.9.0
  * Notes
  - Elasticsearch 6 Support
  - icinga health check supports minimum version parameter, ido thresholds for query rate, dummy check is executed
    in-memory, avoids plugin call
  - ApplicationVersion constant in the configuration
  - Setup wizards: global zone, disable conf.d inclusion, unified parameter handling
  - TTL support for check results, pretty formatting for REST API queries
  - TLS support for IDO PostgreSQL
  - Improvements for check scheduling, concurrent checks with command endpoints, downtime notification handling,
    scheduled downtimes and memory handling with many API requests
  * Enhancement
  - #6400 (Plugins, Windows, PR): Enhance debug logging for check_nscp_api
  - #6321 (Log, PR): Update log message for skipped certificate renewal
  - #6305 (PR): Introduce the 'Environment' variable
  - #6299 (Check Execution, Log, PR): Change log level for failed event command execution
  - #6285 (CLI, Log, PR): Add support for config validation log timestamps
  - #6270 (Configuration, PR): Add activation priority for config object types
  - #6236 (DB IDO, PR): Add TLS support for DB IDO PostgreSQL feature
  - #6219 (Elasticsearch, PR): Add support for Elasticsearch 6
  - #6211 (DB IDO): IDO pgsql with TLS support
  - #6209 (CLI, PR): Unify zone name settings in node setup/wizard; add connection-less mode for node setup
  - #6208 (CLI): Add connection-less support for node setup CLI command
  - #6206 (Configuration, PR): Add ApplicationVersion built-in constant
  - #6205 (API, PR): API: Unify verbose error messages
  - #6194 (Elasticsearch, Graylog, PR): Elasticsearch/GELF: Add metric unit to performance data fields
  - #6170 (Configuration, Windows, PR): Add option to windows installer to add global zones
  - #6158 (API, Log): Review API debugging: verboseErrors and diagnostic information
  - #6136 (Check Execution, PR): Add counter for current concurrent checks to Icinga check
  - #6131 (Log, PR): Log which ticket was invalid on the master
  - #6109 (Plugins, PR): Add 'used' feature to check_memory
  - #6090 (Notifications, PR): Fixed URL encoding for HOSTNAME and SERVICENAME in mail notification
  - #6078 (Check Execution, PR): Add more metrics and details to built-in 'random' check
  - #6039 (Configuration, PR): Improve location info for some error messages
  - #6033 (Compat): Deprecate StatusDataWriter
  - #6032 (Compat): Deprecate CompatLogger
  - #6010 (Cluster, PR): Move the endpoint list into a new line for the 'cluster' check
  - #5996 (PR): Add systemd watchdog and adjust reload behaviour
  - #5985 (DB IDO, PR): Add query thresholds for the 'ido' check: Rate and pending queries
  - #5979 (CLI, PR): Add quit, exit and help
  - #5973 (API, Check Execution, PR): Add 'ttl' support for check result freshness via REST API
  - #5959 (API, PR): API: Add 'pretty' parameter for beautified JSON response bodies
  - #5905 (Elasticsearch): Add support for Elasticsearch 6
  - #5888 (DB IDO, PR): FindMySQL: Support mariadbclient implementation
  - #5877 (API): Add pretty format to REST API parameters (for debugging)
  - #5811 (CLI, PR): Update NodeName/ZoneName constants with 'api setup'
  - #5767 (CLI, PR): Implement ability to make global zones configurable during node wizard/setup
  - #5733 (Plugins, Windows, PR): Make --perf-syntax also change short message
  - #5729 (CLI, Cluster, PR): Correct node wizard output formatting
  - #5675 (InfluxDB, PR): Add pdv unit to influxdbwriter if not empty + doc
  - #5627 (InfluxDB, Metrics): InfluxDBWriter: Send metric unit (perfdata)
  - #5605 (CLI, Cluster, Configuration): Disable conf.d inclusion in node setup wizards
  - #5509 (Cluster, wishlist): Add metrics about communication between endpoints
  - #5444 (Cluster): Display endpoints in the second line of the ClusterCheckTask output
  - #5426 (CLI, Configuration, PR): Add the ability to disable the conf.d inclusion through the node wizard
  - #5418 (Plugins, Windows): Feature request: check_perfmon.exe - Change name of counter in output
  - #4966 (CLI, Cluster): Unify setting of master zones name
  - #4508 (CLI): node wizard/setup: allow to disable conf.d inclusion
  - #3455 (API, Log): startup.log in stage dir has no timestamps
  - #3245 (CLI, help wanted, wishlist): Add option to Windows installer to add global zone during setup
  - #2287 (help wanted, wishlist): Please support systemd startup notification
  * Bug
  - #6429 (PR): Make HttpServerConnection#m_DataHandlerMutex a boost::recursive_mutex
  - #6428 (API): Director kickstart wizard querying the API results in TLS stream disconnected infinite loop
  - #6411 (Plugins, Windows, PR): Windows: Conform to the Plugin API spec for performance label quoting
  - #6407 (Windows, PR): Fix wrong UOM in check_uptime windows plugin
  - #6405 (Windows, PR): TcpSocket#Bind(): reuse socket addresses on Windows, too
  - #6403 (API, PR): Conform to RFC for CRLF in HTTP requests
  - #6401 (Elasticsearch, InfluxDB, PR): Fix connection error handling in Elasticsearch and InfluxDB features
  - #6397 (Plugins, Windows, PR): TlsStream#IsEof(): fix false positive EOF indicator
  - #6394 (Crash, Elasticsearch): Icinga will throw an exception, if ElasticSearch is not reachable
  - #6393 (API, Elasticsearch, PR): Stream#ReadLine(): fix false positive buffer underflow indicator
  - #6387 (Configuration, Crash, Windows, PR): Remove ApiUser password_hash functionality
  - #6383 (API, CLI, PR): HttpRequest#ParseBody(): indicate success on complete body
  - #6378 (Windows): Analyze Windows reload behaviour
  - #6371 (API, Cluster, PR): ApiListener#NewClientHandlerInternal(): Explicitly close the TLS stream on any failure
  - #6368 (CLI, PR): Fix program option parsing
  - #6365 (CLI): Different behavior between icinga2 -V and icinga2 --version
  - #6355 (API): HTTP header size too low: Long URLs and session cookies cause bad requests
  - #6354 (Elasticsearch): ElasticsearchWriter not writing to ES
  - #6336 (Log, PR): Fix unnecessary blank in log message
  - #6324 (Crash, PR): Ensure that password hash generation from OpenSSL is atomic
  - #6319 (Windows): Windows service restart fails and config validate runs forever
  - #6297 (Cluster, PR): Execute event commands only on actively checked host/service objects in an HA zone
  - #6294 (API, Configuration, PR): Ensure that group memberships on API object creation are unique
  - #6292 (Notifications, PR): Fix problem with reminder notifications if the checkable is flapping
  - #6290 (OpenTSDB, PR): Fixed opentsdb metric name with colon chars
  - #6282 (Configuration): Issue when using excludes in TimePeriod Objects
  - #6279 (Crash): segfault with sha1_block_data_order_avx of libcrypto
  - #6255 (Configuration): On debian based systems /etc/default/icinga2 is not read/used
  - #6242 (Plugins, Windows): Sporadic check_nscp_api timeouts
  - #6239 (Plugins, Windows, PR): Fix Windows check_memory rounding
  - #6231 (Notifications): icinga2.8 - Notifications are sent even in downtime
  - #6218 (PR): attempt to fix issue #5277
  - #6217 (Check Execution, PR): Fix check behavior on restart
  - #6204 (API, PR): API: Check if objects exists and return proper error message
  - #6195 (API, Crash, PR): Fix crash in remote api console
  - #6193 (Crash, Graylog, PR): GelfWriter: Fix crash on invalid performance data metrics
  - #6184 (API): debug console with API connection sometimes hangs since 2.8.2
  - #6125 (Configuration, PR): Fix description of the NotificationComponent in notification.conf
  - #6077 (API, PR): Allow to pass raw performance data in 'process-check-result' API action
  - #6057 (Notifications): Icinga2 sends notifications without logging about it and despite having a downtime
  - #6020 (CLI, PR): Fix crash when running 'icinga2 console' without HOME environment variable
  - #6019: icinga2 console -r crashes when run without a HOME environment variable
  - #6016 (Notifications, PR): Check notification state filters for problems only, not for Custom, etc.
  - #5988 (Check Execution, Cluster, PR): Fix concurrent checks limit while using command_endpoint
  - #5964 (Metrics, OpenTSDB, PR): OpenTSDB writer - Fix function for escaping host tag chars.
  - #5963 (Metrics, OpenTSDB): OpenTSDB writer is escaping wrong chars for host names.
  - #5952 (Notifications): Custom notifications are filtered by object state
  - #5940 (PR): Remove deprecated Chocolatey functions
  - #5928 (PR): Fix build problem with MSVC
  - #5908 (Windows): Icinga2 fails to build on Windows
  - #5901 (PR): Do not replace colons in plugin output
  - #5885 (PR): Workaround for GCC bug 61321
  - #5884: Icinga2 fails to build
  - #5872 (PR): Replace incorrect fclose() call with pclose()
  - #5863 (PR): Fix glob error handling
  - #5861 (PR): Fix incorrect memory access
  - #5860 (PR): Fix memory leaks in the unit tests
  - #5853 (Plugins, Windows, PR): Fix missing space in check_service output
  - #5840 (Elasticsearch, PR): Fix newline terminator for bulk requests in ElasticsearchWriter
  - #5796 (CLI, PR): Fix error reporting for 'icinga2 console -r'
  - #5795 (Elasticsearch): ElasticsearchWriter gives "Unexpected response code 400" with Elasticsearch 6.x
  - #5763 (API): "icinga2 api setup" should explicitly set the NodeName constant in constants.conf
  - #5753 (API, Cluster, Metrics, PR): Fix that RingBuffer does not get updated
    and add metrics about communication between endpoints
  - #5718 (API, PR): API: Fix http status codes
  - #5550 (API): Verify error codes and returned log messages in API actions
  - #5277 (Notifications): Flexible downtime is expired at end_time, not trigger_time+duration
  - #5095 (API): Wrong HTTP status code when API request fails
  - #5083 (Check Execution): Initial checks are not executed immediately
  - #4786 (API): API: Command process-check-result fails if it contains performance data
  - #4785 (Compat): Semicolons in plugin output are converted to colon
  - #4732 (API, Configuration): Duplicate groups allowed when creating host
  - #4436 (Check Execution): New objects not scheduled to check immediately
  - #4272 (Cluster, Configuration): Duplicating downtime from ScheduledDowntime object on each restart
  - #3431 (Cluster): Eventhandler trigger on all endpoints in high available zone
  * ITL
  - #6389 (ITL, PR): New ITL command nscp-local-tasksched
  - #6348 (ITL, PR): Fix for catalogued locally databases. Fixes #6338
  - #6338 (ITL): db2_health not working with catalogued databases, as --hostname is always used
  - #6308 (ITL, PR): Update lsi-raid ITL command
  - #6263 (ITL, PR): ITL: Add default thresholds to windows check commands
  - #6139 (ITL, PR): itl/disk: Ignore overlay and netfs filesystems
  - #6045 (ITL, PR): Move the "passive" check command to command-icinga.conf
  - #6043 (ITL): ITL "plugins" has an implicit dependency on "itl"
  - #6034 (ITL, PR): ITL by_ssh add -E parameter
  - #5958 (ITL, PR): Add minimum version check to the built-in icinga command
  - #5954 (ITL, PR): ITL: Add mongodb --authdb parameter support
  - #5951 (ITL, PR): itl: Add command parameters for snmp-memory
  - #5921 (ITL, PR): Add icingacli-director check to ITL
  - #5920 (ITL): Add Check for Director Jobs to ITL
  - #5914 (ITL, PR): Fix for wrong attribute in ITL mongodb CheckCommand
  - #5906 (ITL, PR): Add check_openmanage command to ITL.
  - #5902 (ITL, PR): Add parameter --octetlength to snmp-storage command.
  - #5817 (ITL): mongodb_address vs mongodb_host
  - #5812 (ITL): Better way to check required parameters in notification scripts
  - #5805 (ITL, PR): Add support for LD_LIBRARY_PATH env variable in oracle_health ITL CheckCommand
  - #5792 (ITL, PR): ITL: Add check_rpc
  - #5787 (Check Execution, ITL): random check should provide performance data metrics
  - #5744 (Check Execution, ITL, PR): Implement DummyCheckTask and move dummy into embedded in-memory checks
  - #5717 (ITL, PR): add order tags to disk check
  - #5714 (ITL): disk check in icinga2/itl/command-plugins.conf lacks order tags
  - #5260 (ITL): CheckCommand mongodb does not expose authdb option
  * Documentation
  - #6436 (Documentation, PR): Update tested Elasticsearch version
  - #6435 (Documentation, PR): Add note on sysconfig shell variables for Systemd to the Upgrading docs
  - #6433 (Documentation, PR): Docs: Fix typos in 03-monitoring-basics.md
  - #6426 (Documentation, PR): Update 'Upgrading to 2.9' docs
  - #6413 (Documentation, PR): Fix table in Livestatus Filters
  - #6391 (Documentation, PR): Docs: Fix icinga.com link
  - #6390 (Documentation, Windows, PR): Docs: Update Windows wizard images
  - #6375 (Documentation, PR): some minor fixes in the flapping documentation
  - #6374 (Documentation, PR): Docs: Add an additional note for VMWare timeouts on Ubuntu 16.04 LTS
  - #6373 (Documentation, PR): Drop command template imports for versions < 2.6 in the docs
  - #6372 (Documentation, PR): Remove the import of 'legacy-timeperiod' in the docs
  - #6350 (Documentation, PR): clarify the permision system of the api in the docs
  - #6344 (Documentation, PR): README: Fix broken community link
  - #6330 (Documentation, PR): Fix $ipaddress6$ attribute name typo in the docs
  - #6317 (Documentation, PR): Add a note on Windows NSClient++ CPU checks to the docs
  - #6289 (Documentation, PR): Update release documentation with git tag signing key configuration
  - #6286 (Documentation): Update Windows wizard screenshots in the docs
  - #6283 (Documentation, PR): edit Icinga license info so that GitHub recognizes it
  - #6271 (Documentation, PR): Enhance advanced topics with (scheduled) downtimes
  - #6267 (Documentation, PR): Update docs to reflect required user* attributes for notification objects
  - #6265 (Documentation): Notifications user/user_groups required
  - #6264 (Documentation, PR): Enhance "Getting Started" chapter
  - #6262 (Documentation, PR): Enhance the environment variables chapter
  - #6254 (Documentation, PR): Enhance release documentation
  - #6253 (Documentation, PR): Doc: Add note for not fully supported Plugin collections
  - #6243 (Documentation, PR): Update PostgreSQL documentation
  - #6226 (Documentation, PR): Fix broken SELinux anchor in the documentation
  - #6224 (Documentation, PR): Update volatile docs
  - #6216 (Documentation): Volatile service explanation
  - #6180 (Documentation, PR): Doc: fixed wrong information about defaulting
  - #6128 (Documentation, PR): Adding documentation for configurable global zones during setup
  - #6067 (Documentation, Windows, PR): Improve Windows builds and testing
  - #6022 (Configuration, Documentation, PR): Update default config and documentation for the "library" keyword
  - #6018 (Documentation): Move init configuration from getting-started
  - #6000 (Documentation, PR): Add newline to COPYING to fix Github license detection
  - #5948 (Documentation, PR): doc: Improve INSTALL documentation
  - #4958 (Check Execution, Documentation): How to set the HOME environment variable
  * Support
  - #6439 (PR): Revert "Fix obsolete parameter in Systemd script"
  - #6423 (PR): Fix missing next check update causing the scheduler to execute checks too often
  - #6421 (Check Execution): High CPU load due to seemingly ignored check_interval
  - #6412 (Plugins, Windows, PR): Fix output formatting in windows plugins
  - #6402 (Cluster, code-quality, PR): Use SSL_pending() for remaining TLS stream data
  - #6384 (PR): Remove leftover for sysconfig file parsing
  - #6381 (Packages, PR): Fix sysconfig not being handled correctly by sysvinit
  - #6377 (code-quality, PR): Fix missing name for workqueue while creating runtime objects via API
  - #6364 (code-quality): lib/base/workqueue.cpp:212: assertion failed: !m_Name.IsEmpty()
  - #6361 (API, Cluster): Analyse socket IO handling with HTTP/JSON-RPC
  - #6359 (Configuration, PR): Fix ScheduledDowntimes replicating on restart
  - #6357 (API, PR): Increase header size to 8KB for HTTP requests
  - #6347 (Packages, PR): SELinux: Allow notification plugins to read local users
  - #6343 (Check Execution, Cluster, PR): Fix that checks with command_endpoint don't return any check results
  - #6337: Checks via command_endpoint are not executed (snapshot packages only)
  - #6328 (Installation, Packages, PR): Rework sysconfig file/startup environment
  - #6320 (PR): Ensure that icinga_min_version parameter is optional
  - #6309 (PR): Fix compiler warning in checkercomponent.ti
  - #6306 (code-quality, PR): Adjust message for CheckResultReader deprecation
  - #6301 (Documentation, code-quality, PR): Adjust deprecation removal for compat features
  - #6295 (Compat, PR): Deprecate compatlog feature
  - #6238 (Notifications, PR): Implement better way to check parameters in notification scripts
  - #6233 (Check Execution): Verify next check execution on daemon reload
  - #6229 (Packages, PR): Don't use shell variables in sysconfig
  - #6214 (Packages): Reload-internal with unresolved shell variable
  - #6201 (Windows, PR): Handle exceptions from X509Certificate2
  - #6199 (API, PR): Return 500 when no api action is successful
  - #6198 (Compat, PR): Deprecate Statusdatawriter
  - #6187 (code-quality, PR): Remove Icinga Studio Screenshots
  - #6181 (Tests, PR): tests: Ensure IcingaApplication is initialized before adding config
  - #6174 (API, PR): Fix crash without CORS setting
  - #6173 (API, Crash): Using the API crashes Icinga2 in v2.8.1-537-g064fc80
  - #6171 (code-quality, PR): Update copyright of the Windows Agent to 2018
  - #6163 (PR): Fix reload handling by updating the PID file before process overtake
  - #6160 (code-quality, PR): Replace std::vector:push_back calls with initializer list
  - #6126 (PR): Require systemd headers
  - #6113 (Tests, PR): appveyor: Disable artifacts until we use them
  - #6107 (code-quality, PR): Allow MYSQL_LIB to be specified by ENV variable
  - #6105 (Tests): Snapshot builds fail on livestatus tests
  - #6098 (API, code-quality, PR): Clean up CORS implementation
  - #6085 (Cluster, Crash, PR): Fix crash with anonymous clients on certificate signing request and storing sent bytes
  - #6083 (Log, code-quality, PR): Fix wrong type logging in ConfigItem::Commit
  - #6082 (Installation, Packages): PID file removed after reload
  - #6063 (Compat, PR): Deprecate CheckResultReader
  - #6062 (code-quality, PR): Remove the obsolete 'make-agent-config.py' script
  - #6061 (code-quality, PR): Remove jenkins test scripts
  - #6060 (code-quality, PR): Remove Icinga development docker scripts
  - #6059 (code-quality, PR): Remove Icinga Studio
  - #6058 (code-quality, PR): Clean up the Icinga plugins a bit
  - #6055 (Check Execution, Windows, code-quality, PR): methods: Remove unused clrchecktask feature
  - #6054 (Check Execution, Windows, code-quality): Remove unused clrchecktask
  - #6051 (code-quality, PR): Set FOLDER cmake property for the icingaloader target
  - #6050 (code-quality, PR): Replace boost::algorithm::split calls with String::Split
  - #6044 (code-quality, PR): Implement support for frozen arrays and dictionaries
  - #6038 (PR): Fix missing include for boost::split
  - #6037 (PR): Fix build error on Windows
  - #6029 (code-quality, PR): Remove duplicate semicolons
  - #6028 (Packages): python notification not running when icinga ran as a service
  - #6026 (Check Execution, Windows, PR): Fix flapping support for Windows
  - #6025 (Windows): Implement Flapping on Windows
  - #6023: Icinga should check whether the libsystemd library is available
  - #6017 (PR): Remove build breaking include
  - #6015 (code-quality, PR): Fix whitespaces in CMakeLists files
  - #6009 (PR): Build fix for ancient versions of GCC
  - #6008 (PR): Fix compatibility with CMake < 3.1
  - #6007 (PR): Fix missing include
  - #6005 (PR): Fix incorrect dependencies for mkunity targets
  - #5999 (PR): Build fix
  - #5998 (code-quality, PR): Build all remaining libraries as object libraries
  - #5997 (PR): Use gcc-ar and gcc-ranlib when building with -flto
  - #5994 (InfluxDB, PR): InfluxDBWriter: Fix macro in template
  - #5993 (code-quality, PR): Use CMake object libraries for our libs
  - #5992 (code-quality, PR): Remove unused includes
  - #5984 (DB IDO, PR): Fix missing static libraries for DB IDO
  - #5983 (code-quality, PR): Use initializer lists for arrays and dictionaries
  - #5980 (code-quality, PR): Explicitly pass 1 or 0 for notification filters in DB IDO
  - #5974 (PR): Fix non-unity builds with the icinga check
  - #5971 (code-quality, PR): Remove libdemo and libhello
  - #5970 (code-quality, PR): Allocate ConfigItemBuilder objects on the stack
  - #5969 (code-quality, PR): Remove the WorkQueue::m_StatsMutex instance variable
  - #5968 (code-quality, PR): Update the RingBuffer class to use a regular mutex instead of ObjectLock
  - #5967 (code-quality, PR): Avoid accessing attributes for validators where not necessary
  - #5965 (code-quality, PR): Avoid unnecessary casts in the JSON encoder
  - #5961 (PR): Fix macro warning from the icinga check
  - #5960: Macro warning from the icinga check
  - #5957 (code-quality, PR): Change a bunch more copyright headers for 2018
  - #5955 (Configuration, code-quality, PR): Avoid mutex contention in the config parser
  - #5946 (code-quality, PR): Use clang-tidy to add some more C++11 features
  - #5945 (code-quality, PR): Fix incorrect indentation for code generated by mkclass
  - #5944 (code-quality, PR): Add the final keyword to classes
  - #5939 (PR): Build fix for Debian wheezy
  - #5937 (code-quality, PR): Remove inline methods and use explicit template instantiation
    to minimize the number of weak symbols
  - #5936 (code-quality, PR): Clean up source lists in the CMakeLists.txt files
  - #5935 (code-quality, PR): Implement support for precompiled headers
  - #5934 (code-quality, PR): Add more include/library paths for MySQL and PostgreSQL
  - #5933 (code-quality, PR): Change copyright headers for 2018
  - #5932 (code-quality, PR): Fix copyright header in cli/troubleshootcommand.hpp
  - #5931 (code-quality, PR): Improve detection for linker flags
  - #5930 (code-quality, PR): Replace boost::function with std::function
  - #5929 (code-quality, PR): Get rid of boost::assign::list_of in mkclass
  - #5927 (code-quality, PR): Build libraries as static libraries
  - #5909 (code-quality, PR): WIP: Improve build times
  - #5903 (code-quality, PR): Cleanup CompatUtility class and features
  - #5897 (code-quality, PR): Remove unnecessary inline statements
  - #5894 (code-quality, PR): Remove string_iless
  - #5891 (code-quality, PR): Update .gitignore
  - #5889 (code-quality, PR): execvpe: Fixup indention for readability
  - #5887 (PR): Windows build fix
  - #5886 (code-quality): Remove unnecessary 'inline' keyword
  - #5882 (code-quality, PR): Avoid unnecessary allocations
  - #5871 (code-quality, PR): Unit tests for the LegacyTimePeriod class
  - #5868 (Configuration, code-quality, PR): Use std::unique_ptr for Expression objects
  - #5865 (code-quality, PR): Add missing initializer in Utility::NewUniqueID()
  - #5862 (code-quality, PR): Replace a few more NULLs with nullptr
  - #5858 (Tests, code-quality, PR): Travis: Add support for Coverity
  - #5857 (code-quality, PR): Fix compiler warnings
  - #5855 (PR): Fix build problems with Visual Studio 2017
  - #5848 (code-quality, PR): Fix COPYING format
  - #5846 (code-quality, PR): Fix compiler warnings
  - #5831 (Check Execution, Configuration): No checks were launched on snapshot version 2.8.0.71 (RHEL6)
  - #5827 (code-quality, PR): Replace StatsFunction with Function
  - #5825 (code-quality, PR): Replace boost::assign::list_of with initializer lists
  - #5824 (code-quality, PR): Replace a few Boost features with equivalent C++11 features
  - #5821 (Packages, Windows): check_disk build error
  - #5819 (code-quality, PR): Avoid unnecessary allocations in the FunctionCallExpression class
  - #5816 (code-quality, PR): Re-implement WrapFunction() using C++11 features
  - #5809 (Documentation, Installation, PR): Raise required OpenSSL version to 1.0.1
  - #5758 (Documentation, Packages): Completely remove the spec file from the icinga2 repository
  - #5743 (CLI, Configuration, Installation): node setup: Deprecate --master_host and use --parent_host instead
  - #5725 (code-quality, PR): Use real UUIDs for Utility::NewUniqueID
  - #5388 (Packages, PR): Handle mis-detection with clang on RHEL/CentOS 7
  - #3246 (Installation): Add option to windows installer to disable inclusion of conf.d directory
* Thu May 24 2018 thardeck@suse.com
- allow build hostname to be overwritten by the variable _buildhost
Version: 2.12.1-bp151.3.3.4
* Mon Oct 19 2020 ecsos <ecsos@opensuse.org>
- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)
* Thu Oct 15 2020 ecsos <ecsos@opensuse.org>
- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189
* Tue Sep 22 2020 ecsos <ecsos@opensuse.org>
- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc<EOF> #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) => x and () use(x) => { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch
* Mon Aug 24 2020 Callum Farmer <callumjfarmer13@gmail.com>
- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)
* Wed Aug 05 2020 ecsos <ecsos@opensuse.org>
- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097
* Thu Jun 18 2020 ecsos <ecsos@opensuse.org>
- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054
* Tue Mar 03 2020 ecsos@opensuse.org
- Update to 2.11.3
  * Bugfixes
  - Cluster
    Fix JSON-RPC crashes (#7532) in large environments: #7846 #7848 #7849
* Mon Jan 13 2020 ecsos@opensuse.org
- Set minimum require boost version to 1.66
* Mon Jan 13 2020 ecsos@opensuse.org
- Fix boo#1159869
  Permission error when use the icinga cli wizard.
* Thu Dec 19 2019 Dominique Leuenberger <dimstar@opensuse.org>
- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Aloow OBS to shortcut through the -mini flavors.
* Thu Oct 24 2019 ecsos@opensuse.org
- Update to 2.11.2
  This release fixes a problem where the newly introduced config sync "check-change-then-reload" functionality could cause endless reload loops with agents. The most visible parts are failing command endpoint checks with "not connected" UNKNOWN state. Only applies to HA enabled zones with 2 masters and/or 2 satellites.
  * Bugfixes
  - Cluster Config Sync
  - Config sync checksum change detection may not work within high load HA clusters #7565
* Thu Oct 17 2019 ecsos@opensuse.org
- Update to 2.11.1
  This release fixes a hidden long lasting bug unveiled with 2.11
  and distributed setups. If you are affected by agents/satellites
  not accepting configuration anymore, or not reloading, please upgrade.
  * Bugfixes
  - Cluster Config Sync
  - Never accept authoritative config markers from other instances #7552
  - This affects setups where agent/satellites are newer than the config master, e.g. satellite/agent=2.11.0, master=2.10.
  - Configuration
  - Error message for command_endpoint should hint that zone is not set #7514
  - Global variable 'ActiveStageOverride' has been set implicitly via 'ActiveStageOverride ... #7521
  * Documentation
  - Docs: Add upgrading/troubleshooting details for repos, config sync, agents #7526
  - Explain repository requirements for 2.11:
    https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#added-boost-166
  - command_endpoint objects require a zone:
    https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#agent-hosts-with-command-endpoint-require-a-zone
  - Zones declared in zones.d are not loaded anymore:
    https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#config-sync-zones-in-zones
* Thu Sep 19 2019 ecsos@opensuse.org
- Update to 2.11.0
  * Core
  - Rewrite Network Stack (cluster, REST API) based on Boost Asio, Beast, Coroutines
  - Technical concept: #7041
  - Requires package updates: Boost >1.66 (either from packages.icinga.com, EPEL or backports). SLES11 & Ubuntu 14 are EOL.
  - Require TLS 1.2 and harden default cipher list
  - Improved Reload Handling (umbrella process, now 3 processes at runtime)
  - Support running Icinga 2 in (Docker) containers natively in foreground
  - Quality: Use Modern JSON for C++ library instead of YAJL (dead project)
  - Quality: Improve handling of invalid UTF8 strings
  * API
  - Fix crashes on Linux, Unix and Windows from Nessus scans #7431
  - Locks and stalled waits are fixed with the core rewrite in #7071
  - schedule-downtime action supports all_services for host downtimes
  - Improve storage handling for runtime created objects in the _api package
  * Cluster
  - HA aware features & improvements for failover handling #2941 #7062
  - Improve cluster config sync with staging #6716
  - Fixed that same downtime/comment objects would be synced again in a cluster loop #7198
  * Checks & Notifications
  - Ensure that notifications during a restart are sent
  - Immediately notify about a problem after leaving a downtime and still NOT-OK
  - Improve reload handling and wait for features/metrics
  - Store notification command results and sync them in HA enabled zones #6722
  * DSL/Configuration
  - Add getenv() function
  - Fix TimePeriod range support over midnight
  - concurrent_checks in the Checker feature has no effect, use the global MaxConcurrentChecks constant instead
  * CLI
  - Permissions: node wizard/setup, feature, api setup now run in the Icinga user context, not root
  - ca list shows pending CSRs by default, ca remove/restore allow to delete signing requests
  * ITL
  - Add new commands and missing attributes
  * Windows
  - Update bundled NSClient++ to 0.5.2.39
  - Refine agent setup wizard & update requirements to .NET 4.6
  * Documentation
  - Service Monitoring: How to create plugins by example, check commands and a modern version of the supported plugin API with best practices
  - Features: Better structure on metrics, and supported features
  - Technical Concepts: TLS Network IO, Cluster Feature HA, Cluster Config Sync
  - Development: Rewritten for better debugging and development experience for contributors including a style guide. Add nightly build setup instructions.
  - Packaging: INSTALL.md was integrated into the Development chapter, being available at https://icinga.com/docs too.
* Tue Jul 30 2019 ecsos@opensuse.org
- Update to 2.10.6
  * Bugfixes
  - Fix el7 not loading ECDHE cipher suites #7247
* Thu May 23 2019 ecsos@opensuse.org
- update to 2.10.5
  * Core
  - Fix crashes with logrotate signals #6737 (thanks Elias Ohm)
  * API
  - Fix crashes and problems with permission filters from recent
    Namespace introduction #6785 (thanks Elias Ohm) #6874 (backported from 2.11)
  - Reduce log spam with locked connections (real fix is the network stack rewrite in 2.11) #6877
  * Cluster
  - Fix problems with replay log rotation and storage #6932 (thanks Peter Eckel)
  * IDO DB
  - Fix that reload shutdown deactivates hosts and hostgroups (introduced in 2.9) #7157
  * Documentation
  - Improve the REST API chapter: Unix timestamp handling, filters, unify POST requests with filters in the body
  - Better layout for the features chapter, specifically metrics and events
  - Split object types into monitoring, runtime, features
  - Add technical concepts for cluster messages
Version: 2.12.4-bp151.3.6.1
* Thu May 27 2021 ecsos <ecsos@opensuse.org>
- Update to 2.12.4
  * Bugfixes
  - Fix a crash when notification objects are deleted using the
    API #8782
  - Fix crashes that might occur during downtime scheduling if
    host or downtime objects are deleted using the API #8785
  - Fix an issue where notifications may incorrectly be skipped
    after a downtime ends #8775
  - Don't send reminder notification if the notification is still
    suppressed by a time period #8808
  - Fix an issue where attempting to create a duplicate object
    using the API might result in the original object being
    deleted #8787
  - IDO: prioritize program status updates #8809
  - Improve exceptions handling, including a fix for an uncaught
    exception on Windows #8777
  - Retry file rename operations on Windows to avoid intermittent
    locking issues #8771
  * Enhancements
  - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792
- Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch
  and icinga2-boost-8185-8191.patch because now in upstream.
* Tue Dec 15 2020 ecsos <ecsos@opensuse.org>
- Update to 2.12.3
  * Security
  - Fix that revoked certificates due for renewal will
    automatically be renewed ignoring the CRL
    (Advisory / CVE-2020-29663)
  * Bugfixes
  - Improve config sync locking - resolves high load issues on
    Windows #8511
  - Fix runtime config updates being ignored for objects without
    zone #8549
  - Use proper buffer size for OpenSSL error messages #8542
  * Enhancements
  - On checkable recovery: re-check children that have a problem
    [#8506]
* Tue Dec 01 2020 ecsos <ecsos@opensuse.org>
- Update to 2.12.2
  * Bugfixes
  - Fix a connection leak with misconfigured agents #8483
  - Properly sync changes of config objects in global zones done
    via the API #8474 #8470
  - Prevent other clients from being disconnected when replaying
    the cluster log takes very long #8496
  - Avoid duplicate connections between endpoints #8465
  - Ignore incoming config object updates for unknown zones #8461
  - Check timestamps before removing files in config sync #8495
  * Enhancements
  - Include HTTP status codes in log #8467
* Tue Nov 17 2020 Guillaume GARDET <guillaume.gardet@opensuse.org>
- Update _constraints to current requirements to avoid OOM seen
  in aarch64 Tumbleweed
Version: 2.12.5-bp151.3.9.1
* Thu Jul 15 2021 ecsos <ecsos@opensuse.org>
- Update to 2.12.5
  Version 2.12.5 fixes two security vulnerabilities that may lead
  to privilege escalation for authenticated API users.
  Other improvements include several bugfixes related to downtimes,
  downtime notifications, and more reliable connection handling.
  * Security
  - Don't expose the PKI ticket salt via the API. This may lead
    to privilege escalation for authenticated API users by them
    being able to request certificates for other identities
    (CVE-2021-32739)
  - Don't expose IdoMysqlConnection, IdoPgsqlConnection, and
    ElasticsearchWriter passwords via the API
    (CVE-2021-32743)
  - Windows: Update bundled OpenSSL to version 1.1.1k #8888
    Depending on your setup, manual intervention beyond installing
    the new versions may be required, so please read the more
    detailed information in the release blog post carefully.
  * Bugfixes
  - Don't send downtime end notification if downtime hasn't
    started #8878
  - Don't let a failed downtime creation block the others #8871
  - Support downtimes and comments for checkables with long names
    [#8870]
  - Trigger fixed downtimes immediately if the current time
    matches (instead of waiting for the timer) #8891
  - Add configurable timeout for full connection handshake #8872
  * Enhancements
  - Replace existing downtimes on ScheduledDowntime change #8880
  - Improve crashlog #8869