monitoring-plugins, branch v3.0.1

Monitoring Plugins 3.0.1

2026-07-01T12:01:31Z

Release 3.0.1 (#2293)

2026-07-01T11:58:40Z

Update NEWS

2026-06-30T15:02:57Z

check_icmp: Reject negative ICMP data length

2026-06-30T14:20:12Z

The -b/--size handler checks the lower bound after casting the value to unsigned long while checking the upper bound as a signed comparison. A negative argument such as "-b -65536" therefore satisfies both checks. The value is then truncated to an undersized icmp_data_size, which later serves as the size of the ICMP send buffer, so building the packet overflows that buffer. Compare the size as a signed long against both bounds so negative values are rejected. Reported-by: Christopher Kreft

check_icmp: Fix parsing of single-char threshold

2026-06-30T13:58:09Z

The threshold parser starts a pointer at the last character of the string and walks it backwards until it reaches the second character. This assumes the string is at least two characters long. For a single-character threshold such as "-w 1" or "-c 1", the pointer underflows past the start of the string and keeps dereferencing memory out of bounds. Beyond the out-of-bounds reads, an out-of-bounds write can occur if a stray '%' or ',' byte happens to turn up while scanning backwards. In that case, the parser writes a NUL byte at that out-of-bounds address (the ',' case additionally re-reads forward from there via strtoul(3)). Only run the descending scan when the string has at least two characters, leaving the behaviour for all valid thresholds unchanged. Reported-by: Christopher Kreft

check_icmp: Reject more than 65535 target hosts

2026-06-30T13:32:40Z

The number of -H hosts is counted into an unsigned short, so supplying more than 65535 hosts wraps the counter. The subsequent calloc(3) then allocates an undersized hosts array while the later parsing loop still writes one entry per host, overflowing the heap buffer. As process_arguments() runs before we drop privileges via setuid(getuid()), this happens while still running as root on setuid-root installs. Guard both places where the counter is incremented and bail out with a usage error once 65535 hosts are reached, rather than wrapping silently. Reported-by: Christopher Kreft

check for net-snmp-config when buildin check_snmp (fixes #2281) (#2286)

2026-06-19T09:12:08Z

this will fix the build error on check_snmp when net-snmp-config is not available. ``` CC check_snmp-check_snmp.o /bin/bash: line 1: net-snmp-config: command not found In file included from check_snmp.d/check_snmp_helpers.h:3, from check_snmp.c:42: check_snmp.d/./config.h:16:10: fatal error: net-snmp/net-snmp-config.h: No such file or directory 16 | #include | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ compilation terminated. make[3]: *** [Makefile:3353: check_snmp-check_snmp.o] Error 1 make[3]: Leaving directory '/opt/projects/git/monitoring-plugins/plugins' ``` Signed-off-by: Sven Nierlein

build(deps): bump actions/checkout from 6 to 7 (#2285)

2026-06-19T07:33:51Z

Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

check_mysql: Fix MariaDB casing (#2283)

2026-06-18T21:46:29Z

check_mysql_query: add option to hide query in output (#2279)

2026-06-18T14:47:56Z

Co-authored-by: Lorenz Kästle