Created attachment 272382 [details] patch to update monitoring-plugins to 3.0.1 https://github.com/monitoring-plugins/monitoring-plugins/releases/tag/v3.0.1 says: This is a security release to fix a potential local privilege escalation problem in check_icmp which might be possible if check_icmp runs with setuid (our default). Additionally there are some other small changes. a few checks were removed since 2.4: - check_nt - check_nwstat - check_overcr plus the patch to check_http.c is in upstream: https://github.com/monitoring-plugins/monitoring-plugins/blob/master/plugins/check_http.c#L1533-L1541
A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=1cf9c8325aaeccbfa2443410306e1c3e0d9009dc commit 1cf9c8325aaeccbfa2443410306e1c3e0d9009dc Author: Jochen Neumeister <joneum@FreeBSD.org> AuthorDate: 2026-07-18 10:13:45 +0000 Commit: Jochen Neumeister <joneum@FreeBSD.org> CommitDate: 2026-07-18 10:14:24 +0000 net-mgmt/monitoring-plugins: Update to 3.0.1 *) Security: fix a potential local privilege escalation in check_icmp, which might be possible if check_icmp runs with setuid (the default) *) Change: check_nt, check_ntp, check_nwstat and check_overcr were removed upstream; check_ntp is replaced by check_ntp_time and check_ntp_peer *) Change: check_http is deprecated in favor of check_curl *) Change: check_snmp now uses net-snmp natively instead of executing snmpget *) Change: generalized, mostly multi-line output for many plugins *) Fix: check_curl now populates the DNS cache when the hostname is resolved locally Release Notes: https://github.com/monitoring-plugins/monitoring-plugins/releases/tag/v3.0.1 PR: 296451 Sponsored by: Netzkommune GmbH net-mgmt/monitoring-plugins/Makefile | 5 ++--- net-mgmt/monitoring-plugins/distinfo | 6 +++--- .../files/extra-patch-dig-to-drill.diff | 22 ++++++++++++---------- .../files/patch-plugins_check__http.c (gone) | 17 ----------------- net-mgmt/monitoring-plugins/pkg-plist | 4 ---- 5 files changed, 17 insertions(+), 37 deletions(-)
A commit in branch 2026Q3 references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=606075cf7b55a935cd1a6c9f3245206c0f44a4c4 commit 606075cf7b55a935cd1a6c9f3245206c0f44a4c4 Author: Jochen Neumeister <joneum@FreeBSD.org> AuthorDate: 2026-07-18 10:13:45 +0000 Commit: Jochen Neumeister <joneum@FreeBSD.org> CommitDate: 2026-07-18 10:16:36 +0000 net-mgmt/monitoring-plugins: Update to 3.0.1 *) Security: fix a potential local privilege escalation in check_icmp, which might be possible if check_icmp runs with setuid (the default) *) Change: check_nt, check_ntp, check_nwstat and check_overcr were removed upstream; check_ntp is replaced by check_ntp_time and check_ntp_peer *) Change: check_http is deprecated in favor of check_curl *) Change: check_snmp now uses net-snmp natively instead of executing snmpget *) Change: generalized, mostly multi-line output for many plugins *) Fix: check_curl now populates the DNS cache when the hostname is resolved locally Release Notes: https://github.com/monitoring-plugins/monitoring-plugins/releases/tag/v3.0.1 PR: 296451 Sponsored by: Netzkommune GmbH (cherry picked from commit 1cf9c8325aaeccbfa2443410306e1c3e0d9009dc) net-mgmt/monitoring-plugins/Makefile | 5 ++--- net-mgmt/monitoring-plugins/distinfo | 6 +++--- .../files/extra-patch-dig-to-drill.diff | 22 ++++++++++++---------- .../files/patch-plugins_check__http.c (gone) | 17 ----------------- net-mgmt/monitoring-plugins/pkg-plist | 4 ---- 5 files changed, 17 insertions(+), 37 deletions(-)