Checkmk git commits July 2024

checkmk-commits@lists.checkmk.com

1 participants
189 discussions

[Checkmk/checkmk] d0ae52: Set version to 2.1.0p46

by Checkmk git commit messages

Branch: refs/heads/2.1.0 Home: https://github.com/Checkmk/checkmk Commit: d0ae528441a09f8b6ca2f0700c11716af850259d https://github.com/Checkmk/checkmk/commit/d0ae528441a09f8b6ca2f0700c11716af… Author: Checkmk release system <feedback(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: M agents/check_mk_agent.aix M agents/check_mk_agent.freebsd M agents/check_mk_agent.hpux M agents/check_mk_agent.linux M agents/check_mk_agent.macosx M agents/check_mk_agent.netbsd M agents/check_mk_agent.openbsd M agents/check_mk_agent.openvms M agents/check_mk_agent.openwrt M agents/check_mk_agent.solaris M agents/cmk-agent-ctl/src/constants.rs M agents/plugins/apache_status.py M agents/plugins/asmcmd.sh M agents/plugins/db2_mem M agents/plugins/dnsclient M agents/plugins/hpux_lunstats M agents/plugins/hpux_statgrab M agents/plugins/ibm_mq M agents/plugins/isc_dhcpd.py M agents/plugins/jar_signature M agents/plugins/kaspersky_av M agents/plugins/lnx_container_host_if.linux M agents/plugins/lnx_quota M agents/plugins/lvm M agents/plugins/mailman_lists M agents/plugins/mk_apt M agents/plugins/mk_ceph M agents/plugins/mk_cups_queues M agents/plugins/mk_db2.aix M agents/plugins/mk_db2.linux M agents/plugins/mk_docker.py M agents/plugins/mk_errpt.aix M agents/plugins/mk_filehandler M agents/plugins/mk_filestats.py M agents/plugins/mk_haproxy.freebsd M agents/plugins/mk_informix M agents/plugins/mk_inotify.py M agents/plugins/mk_inventory.aix M agents/plugins/mk_inventory.linux M agents/plugins/mk_inventory.solaris M agents/plugins/mk_iptables M agents/plugins/mk_jolokia.py M agents/plugins/mk_logins M agents/plugins/mk_logwatch.py M agents/plugins/mk_mongodb.py M agents/plugins/mk_mysql M agents/plugins/mk_nfsiostat M agents/plugins/mk_omreport M agents/plugins/mk_oracle M agents/plugins/mk_oracle_crs M agents/plugins/mk_postgres.py M agents/plugins/mk_redis M agents/plugins/mk_sap.aix M agents/plugins/mk_sap.py M agents/plugins/mk_sap_hana M agents/plugins/mk_saprouter M agents/plugins/mk_scaleio M agents/plugins/mk_site_object_counts M agents/plugins/mk_sshd_config M agents/plugins/mk_suseconnect M agents/plugins/mk_tinkerforge.py M agents/plugins/mk_tsm M agents/plugins/mk_zypper M agents/plugins/mtr.py M agents/plugins/netstat.aix M agents/plugins/netstat.linux M agents/plugins/netstat.solaris M agents/plugins/nfsexports M agents/plugins/nfsexports.solaris M agents/plugins/nginx_status.py M agents/plugins/plesk_backups.py M agents/plugins/plesk_domains.py M agents/plugins/runas M agents/plugins/smart M agents/plugins/symantec_av M agents/plugins/unitrends_backup M agents/plugins/unitrends_replication.py M agents/plugins/vxvm M agents/plugins/websphere_mq M agents/plugins/zorp M agents/windows/plugins/ad_replication.bat M agents/windows/plugins/arcserve_backup.ps1 M agents/windows/plugins/citrix_farm.ps1 M agents/windows/plugins/citrix_licenses.vbs M agents/windows/plugins/citrix_xenapp.ps1 M agents/windows/plugins/hyperv_vms.ps1 M agents/windows/plugins/hyperv_vms_guestinfos.ps1 M agents/windows/plugins/iis_app_pool_state.ps1 M agents/windows/plugins/kaspersky_av_client.vbs M agents/windows/plugins/mcafee_av_client.bat M agents/windows/plugins/megaraid.bat M agents/windows/plugins/mk_dhcp_enabled.bat M agents/windows/plugins/mk_inventory.vbs M agents/windows/plugins/mk_msoffice.ps1 M agents/windows/plugins/mk_mysql.vbs M agents/windows/plugins/mk_oracle.ps1 M agents/windows/plugins/msexch_dag.ps1 M agents/windows/plugins/msexch_database.ps1 M agents/windows/plugins/mssql.vbs M agents/windows/plugins/netstat_an.bat M agents/windows/plugins/rds_licenses.vbs M agents/windows/plugins/rstcli.bat M agents/windows/plugins/sansymphony.ps1 M agents/windows/plugins/storcli.bat M agents/windows/plugins/tsm_checks.bat M agents/windows/plugins/veeam_backup_status.ps1 M agents/windows/plugins/win_dhcp_pools.bat M agents/windows/plugins/win_dmidecode.bat M agents/windows/plugins/win_license.bat M agents/windows/plugins/win_printers.ps1 M agents/windows/plugins/windows_broadcom_bonding.bat M agents/windows/plugins/windows_if.ps1 M agents/windows/plugins/windows_intel_bonding.bat M agents/windows/plugins/windows_multipath.vbs M agents/windows/plugins/windows_os_bonding.ps1 M agents/windows/plugins/windows_tasks.ps1 M agents/windows/plugins/windows_updates.vbs M agents/windows/plugins/wmic_if.bat M agents/wnx/src/common/wnx_version.h M bin/livedump M bin/mkbackup M bin/mkbench M cmk/utils/version.py M configure.ac M defines.make M docker/Dockerfile Log Message: ----------- Set version to 2.1.0p46 To unsubscribe from these emails, change your notification settings at https://github.com/Checkmk/checkmk/settings/notifications

5 days, 20 hours

[Checkmk/checkmk] b0325a: Cleanup now useless cleanups

by Checkmk git commit messages

Branch: refs/heads/master Home: https://github.com/Checkmk/checkmk Commit: b0325aff6d1afd5815c1d02e63496ff6a4976d43 https://github.com/Checkmk/checkmk/commit/b0325aff6d1afd5815c1d02e63496ff6a… Author: Lars Michelsen <lm(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: M cmk/gui/watolib/activate_changes.py M tests/unit/cmk/gui/conftest.py Log Message: ----------- Cleanup now useless cleanups Since we now use the spawn mode instead of fork, there is no need to clean up resources anymore. The code here may actually cause harm since the closing of file descriptors might leave references behind. Change-Id: I8502053ffe5543566e250d4a00c4d0152fba6e5b To unsubscribe from these emails, change your notification settings at https://github.com/Checkmk/checkmk/settings/notifications

5 days, 20 hours

[Checkmk/checkmk]

by Checkmk git commit messages

Branch: refs/heads/release/2.1.0p45 Home: https://github.com/Checkmk/checkmk To unsubscribe from these emails, change your notification settings at https://github.com/Checkmk/checkmk/settings/notifications

5 days, 20 hours

[Checkmk/checkmk] 318301: 16845 SEC fix a privilege escalation vulnerability...

by Checkmk git commit messages

Branch: refs/heads/2.3.0 Home: https://github.com/Checkmk/checkmk Commit: 3183015032286a59585d3146a9b73ce9926ef90a https://github.com/Checkmk/checkmk/commit/3183015032286a59585d3146a9b73ce99… Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com> Date: 2024-07-01 (Mon, 01 Jul 2024) Changed paths: A .werks/16845.md M agents/wnx/include/wnx/cfg_details.h M agents/wnx/include/wnx/cma_core.h M agents/wnx/src/common/wtools.cpp M agents/wnx/src/engine/cfg.cpp M agents/wnx/src/engine/cma_core.cpp M agents/wnx/watest/test-yaml.cpp Log Message: ----------- 16845 SEC fix a privilege escalation vulnerability in the Checkmk Windows Agent This Werk fixes a privilege escalation vulnerability in the Checkmk Windows Agent. Prior to this Werk, it was possible for authenticated users on the monitored Windows host to execute commands as administrator account that is used to run the Agent, allowing them to elevate their privileges. The reason for this issue were excessive write permissions on the `ProgramData\checkmk\agent` directory. Note that you must update Checkmk as well as the agent in order to apply this fix. This issue was found in a commissioned penetration test conducted by modzero GmbH. *Affected Versions*: * 2.3.0 * 2.2.0 * 2.1.0 *Mitigations*: If updating is not possible, you can manually remove write access for non-admin users on the `ProgramData\checkmk\agent` folder. To do this, navigate to the folder's property settings and make sure to verify the special permissions and advanced permission settings in addition to the basic permission settings. *Vulnerability Management*: We have rated the issue with a CVSS Score of 8.8 High (`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H`) and assigned `CVE-2024-28827`. Change-Id: Ic4592f5ff0e4310e3821c955c31542cab84710b6 Commit: 9c39ca70b4fe0e2e0a8687727195d516a3e3af61 https://github.com/Checkmk/checkmk/commit/9c39ca70b4fe0e2e0a8687727195d516a… Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com> Date: 2024-07-01 (Mon, 01 Jul 2024) Changed paths: M .werks/16845.md Log Message: ----------- Reserve werk for potential future use Change-Id: Ie9f5516caa39dae729264cf42f1afb0fa0bdfdc4 Commit: 3ba8e13383f2027e4138f14f58c2c16a171e56f4 https://github.com/Checkmk/checkmk/commit/3ba8e13383f2027e4138f14f58c2c16a1… Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com> Date: 2024-07-01 (Mon, 01 Jul 2024) Changed paths: M .werks/16845.md Log Message: ----------- Revert "Reserve werk for potential future use" This reverts commit 9c39ca70b4fe0e2e0a8687727195d516a3e3af61. Commit: 3289139fb1ec66f5c12c6debc49cc8bbb0dc61f7 https://github.com/Checkmk/checkmk/commit/3289139fb1ec66f5c12c6debc49cc8bbb… Author: Maximilian Wirtz <maximilian.wirtz(a)checkmk.com> Date: 2024-07-01 (Mon, 01 Jul 2024) Changed paths: A .werks/17010.md M cmk/gui/valuespec.py Log Message: ----------- 17010 SEC XSS in SQL check parameters Prior to this Werk an attacher could add HTML to one parameter of the *Check SQL database* rule which was executed on the overview page. We found this vulnerability internally. **Affected Versions**: LI: 2.3.0 LI: 2.2.0 LI: 2.1.0 LI: 2.0.0 (probably older versions as well) **Indicators of Compromis**: The creation of such rules is logged in the audit log. You can therefore check the `wato_audit.log` either on the terminal or in the UI for entries that contain malicious HTML. **Vulnerability Management**: We have rated the issue with a CVSS Score of 6.5 (Medium) with the following CVSS vector: `CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L` We assigned CVE-2024-6052 to this vulnerability. **Changes**: This Werk fixes the escaping. CMK-17809 Change-Id: I8cf2d8218f1d6bb449beb6947d879b8a114e081a Commit: f93c345b2ef1435d51333d3593a6b1701d5c249c https://github.com/Checkmk/checkmk/commit/f93c345b2ef1435d51333d3593a6b1701… Author: Hannes Rantzsch <hannes.rantzsch(a)checkmk.com> Date: 2024-07-01 (Mon, 01 Jul 2024) Changed paths: A .werks/17090.md M cmk/gui/backup/handler.py M cmk/gui/bi/_config.py M cmk/gui/custom_icons/_modes.py M cmk/gui/key_mgmt.py M cmk/gui/mkeventd/wato.py M cmk/gui/wato/pages/_simple_modes.py M cmk/gui/wato/pages/audit_log.py M cmk/gui/wato/pages/bulk_discovery.py M cmk/gui/wato/pages/bulk_edit.py M cmk/gui/wato/pages/bulk_import.py M cmk/gui/wato/pages/diagnostics.py M cmk/gui/wato/pages/folders.py M cmk/gui/wato/pages/global_settings.py M cmk/gui/wato/pages/groups.py M cmk/gui/wato/pages/host_diagnose.py M cmk/gui/wato/pages/host_rename.py M cmk/gui/wato/pages/ldap.py M cmk/gui/wato/pages/notifications.py M cmk/gui/wato/pages/parentscan.py M cmk/gui/wato/pages/read_only.py M cmk/gui/wato/pages/roles.py M cmk/gui/wato/pages/rulesets.py M cmk/gui/wato/pages/search.py M cmk/gui/wato/pages/sites.py M cmk/gui/wato/pages/tags.py M cmk/gui/wato/pages/timeperiods.py M cmk/gui/wato/pages/user_migrate.py M cmk/gui/wato/pages/users.py M web/htdocs/js/modules/forms.ts Log Message: ----------- 17090 SEC Fix Various CSRF Issues This Werk adds priviously missing CSRF-Token validation to various endpoints in WATO. The lack of CSRF-Token validation could allow an attacker to perform actions on behalf of a user without their consent, by tricking the user into visiting clicking on a malicious link. This vulnerability was identified during a commissioned penetration test conducted by PS Positive Security GmbH. *Affected Versions*: * 2.3.0 * 2.2.0 * 2.1.0 * 2.0.0 (EOL) *Vulnerability Management*: We have rated the issue with a CVSS Score of 8.8 High (`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`) and assigned `CVE-2024-28828`. Change-Id: Ib12128b873b7d06140e48fb66147e7a2599dd6f9 Commit: 665b52622a34c0197bc28090df6306b36436ca76 https://github.com/Checkmk/checkmk/commit/665b52622a34c0197bc28090df6306b36… Author: Checkmk release system <feedback(a)checkmk.com> Date: 2024-07-01 (Mon, 01 Jul 2024) Changed paths: M agents/check_mk_agent.aix M agents/check_mk_agent.freebsd M agents/check_mk_agent.hpux M agents/check_mk_agent.linux M agents/check_mk_agent.macosx M agents/check_mk_agent.netbsd M agents/check_mk_agent.openbsd M agents/check_mk_agent.openvms M agents/check_mk_agent.openwrt M agents/check_mk_agent.solaris M agents/plugins/apache_status.py M agents/plugins/asmcmd.sh M agents/plugins/db2_mem M agents/plugins/dnsclient M agents/plugins/hpux_lunstats M agents/plugins/hpux_statgrab M agents/plugins/ibm_mq M agents/plugins/isc_dhcpd.py M agents/plugins/jar_signature M agents/plugins/kaspersky_av M agents/plugins/lnx_container_host_if.linux M agents/plugins/lnx_quota M agents/plugins/lvm M agents/plugins/mailman2_lists M agents/plugins/mailman3_lists M agents/plugins/mk_apt M agents/plugins/mk_ceph M agents/plugins/mk_cups_queues M agents/plugins/mk_db2.aix M agents/plugins/mk_db2.linux M agents/plugins/mk_docker.py M agents/plugins/mk_errpt.aix M agents/plugins/mk_filehandler M agents/plugins/mk_filestats.py M agents/plugins/mk_haproxy.freebsd M agents/plugins/mk_informix M agents/plugins/mk_inotify.py M agents/plugins/mk_inventory.aix M agents/plugins/mk_inventory.linux M agents/plugins/mk_inventory.solaris M agents/plugins/mk_iptables M agents/plugins/mk_jolokia.py M agents/plugins/mk_logins M agents/plugins/mk_logwatch.py M agents/plugins/mk_mongodb.py M agents/plugins/mk_mysql M agents/plugins/mk_nfsiostat M agents/plugins/mk_omreport M agents/plugins/mk_oracle M agents/plugins/mk_oracle_crs M agents/plugins/mk_postgres.py M agents/plugins/mk_redis M agents/plugins/mk_sap.aix M agents/plugins/mk_sap.py M agents/plugins/mk_sap_hana M agents/plugins/mk_saprouter M agents/plugins/mk_scaleio M agents/plugins/mk_site_object_counts M agents/plugins/mk_sshd_config M agents/plugins/mk_suseconnect M agents/plugins/mk_tinkerforge.py M agents/plugins/mk_tsm M agents/plugins/mk_zypper M agents/plugins/mtr.py M agents/plugins/netstat.aix M agents/plugins/netstat.linux M agents/plugins/netstat.solaris M agents/plugins/nfsexports M agents/plugins/nfsexports.solaris M agents/plugins/nginx_status.py M agents/plugins/plesk_backups.py M agents/plugins/plesk_domains.py M agents/plugins/runas M agents/plugins/smart M agents/plugins/symantec_av M agents/plugins/unitrends_backup M agents/plugins/unitrends_replication.py M agents/plugins/vxvm M agents/plugins/zorp M agents/windows/plugins/ad_replication.bat M agents/windows/plugins/arcserve_backup.ps1 M agents/windows/plugins/citrix_farm.ps1 M agents/windows/plugins/citrix_licenses.vbs M agents/windows/plugins/citrix_xenapp.ps1 M agents/windows/plugins/hyperv_vms.ps1 M agents/windows/plugins/hyperv_vms_guestinfos.ps1 M agents/windows/plugins/iis_app_pool_state.ps1 M agents/windows/plugins/kaspersky_av_client.vbs M agents/windows/plugins/mcafee_av_client.bat M agents/windows/plugins/megaraid.bat M agents/windows/plugins/mk_dhcp_enabled.bat M agents/windows/plugins/mk_inventory.vbs M agents/windows/plugins/mk_msoffice.ps1 M agents/windows/plugins/mk_mysql.vbs M agents/windows/plugins/mk_oracle.ps1 M agents/windows/plugins/msexch_dag.ps1 M agents/windows/plugins/msexch_database.ps1 M agents/windows/plugins/mssql.vbs M agents/windows/plugins/netstat_an.bat M agents/windows/plugins/nvidia_smi.ps1 M agents/windows/plugins/rds_licenses.vbs M agents/windows/plugins/rstcli.bat M agents/windows/plugins/sansymphony.ps1 M agents/windows/plugins/storcli.bat M agents/windows/plugins/tsm_checks.bat M agents/windows/plugins/veeam_backup_status.ps1 M agents/windows/plugins/win_dhcp_pools.bat M agents/windows/plugins/win_dmidecode.bat M agents/windows/plugins/win_license.bat M agents/windows/plugins/win_printers.ps1 M agents/windows/plugins/windows_broadcom_bonding.bat M agents/windows/plugins/windows_if.ps1 M agents/windows/plugins/windows_intel_bonding.bat M agents/windows/plugins/windows_multipath.vbs M agents/windows/plugins/windows_os_bonding.ps1 M agents/windows/plugins/windows_tasks.ps1 M agents/windows/plugins/windows_updates.vbs M agents/windows/plugins/wmic_if.bat M agents/wnx/include/common/wnx_version.h M bin/livedump M cmk/special_agents/agent_jolokia.py M cmk/special_agents/agent_netapp.py M cmk/special_agents/agent_splunk.py M cmk/special_agents/agent_vsphere.py M cmk/utils/version.py M defines.make M docker_image/Dockerfile M packages/cmk-agent-ctl/src/constants.rs M packages/mk-sql/src/constants.rs M packages/neb/CMakeLists.txt Log Message: ----------- Set version to 2.3.0p9 Commit: 1bf9ffb45e768111b3d727829ed3a1700f8b653a https://github.com/Checkmk/checkmk/commit/1bf9ffb45e768111b3d727829ed3a1700… Author: Jonas Scharpf <jonas.scharpf(a)checkmk.com> Date: 2024-07-01 (Mon, 01 Jul 2024) Changed paths: M .werks/17010.md Log Message: ----------- Fix version of werk Change-Id: I65384c553f83cd83b540ee4ad36159a9512dd727 Commit: 4a965bf10988decd95f82eecfc7f949688b2788d https://github.com/Checkmk/checkmk/commit/4a965bf10988decd95f82eecfc7f94968… Author: Solomon Jacobs <solomon.jacobs(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: A .werks/16431.md M omd/packages/omd/omdlib/main.py Log Message: ----------- 16431 FIX omd restore: Fix RuntimeError: Failed to determine site version SUP-18672 Change-Id: Ic212139fd8e2e38c2dfbb70c9db68812870d22d5 Commit: f86e6dfdb40aa3f90773b1bdc208f8d13b5e652b https://github.com/Checkmk/checkmk/commit/f86e6dfdb40aa3f90773b1bdc208f8d13… Author: Gav <gavin.mcguigan(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: M cmk/gui/openapi/endpoints/activate_changes/__init__.py Log Message: ----------- activate_changes: catch unknown activation processes error before returning running activations Running activations have already been activated (in some cases) when we then ask for the activation details. This is causing the test to be flaky. CMK-18048 Change-Id: I2789e03a04a15ea6b4c95cd88ed1eb4286e51c8f Commit: 405aadd3e603186f600ea95b47110910fa383e80 https://github.com/Checkmk/checkmk/commit/405aadd3e603186f600ea95b47110910f… Author: Simon Jess <simon.jess(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: A .werks/16753.md M cmk/gui/views/inventory/__init__.py M cmk/gui/views/join_service_rows.py Log Message: ----------- 16753 FIX HW/SW Inventory: Fix missing joined service columns if a service is assigned to a cluster Change-Id: I75b0bd6141ba2f4b715b8c06f8aeb844df1641f3 Commit: 8f01c977eeba4bac1c1d6539d7204e5f2e2056ae https://github.com/Checkmk/checkmk/commit/8f01c977eeba4bac1c1d6539d7204e5f2… Author: Checkmk release system <feedback(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: M tests/update/base_versions_current_branch.json Log Message: ----------- Include 2.3.0p8 in base-versions list for update-test Commit: ec809c74cc557aee4b09efef74a0d56230962c36 https://github.com/Checkmk/checkmk/commit/ec809c74cc557aee4b09efef74a0d5623… Author: Jonas Scharpf <jonas.scharpf(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: M .werks/16431.md Log Message: ----------- Fix version of werk Change-Id: Iaaa491fc3cd2ea1cd199ab320e5b7eb28ae37218 Commit: c11e5332c49cfa7eceb22ae7e3b256c8ea5d31ab https://github.com/Checkmk/checkmk/commit/c11e5332c49cfa7eceb22ae7e3b256c8e… Author: Sofia Colakovic <sofia.colakovic(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: A .werks/16863.md M cmk/special_agents/agent_proxmox_ve.py M tests/unit/cmk/special_agents/test_agent_proxmox_ve.py Log Message: ----------- 16863 FIX proxmox: Fix log parsing crash for Proxmox versions 3.2.4 and newer The backup log format changed in Proxmox version 3.2.4 which resulted in a crash in the Proxmox special agent. The special agent can now handle both old and the new format of backup log messages. SUP-19222 Change-Id: I57c0108b20874b8d3fb5841f8827779ed1504d3a Commit: 95dccaf7a0c72d1939397451adaa39e64139c1ee https://github.com/Checkmk/checkmk/commit/95dccaf7a0c72d1939397451adaa39e64… Author: Checkmk release system <feedback(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: M tests/update/base_versions_previous_branch.json Log Message: ----------- Include 2.2.0p29 in base-versions list for update-test Compare: https://github.com/Checkmk/checkmk/compare/105ffefff92e...95dccaf7a0c7 To unsubscribe from these emails, change your notification settings at https://github.com/Checkmk/checkmk/settings/notifications

5 days, 20 hours

[Checkmk/checkmk] ee57b4: Fix version of werk

by Checkmk git commit messages

Branch: refs/heads/release/2.3.0p8 Home: https://github.com/Checkmk/checkmk Commit: ee57b478f75ce0a57090c759288d140425318379 https://github.com/Checkmk/checkmk/commit/ee57b478f75ce0a57090c759288d14042… Author: Jonas Scharpf <jonas.scharpf(a)checkmk.com> Date: 2024-07-01 (Mon, 01 Jul 2024) Changed paths: M .werks/17010.md Log Message: ----------- Fix version of werk Change-Id: I65384c553f83cd83b540ee4ad36159a9512dd727 To unsubscribe from these emails, change your notification settings at https://github.com/Checkmk/checkmk/settings/notifications

5 days, 20 hours

[Checkmk/checkmk] d28166: 17010 SEC XSS in SQL check parameters

by Checkmk git commit messages

Branch: refs/heads/2.2.0 Home: https://github.com/Checkmk/checkmk Commit: d281666ab76a7ffdee34ce668bb186ccc562d158 https://github.com/Checkmk/checkmk/commit/d281666ab76a7ffdee34ce668bb186ccc… Author: Maximilian Wirtz <maximilian.wirtz(a)checkmk.com> Date: 2024-07-01 (Mon, 01 Jul 2024) Changed paths: A .werks/17010 M cmk/gui/valuespec.py Log Message: ----------- 17010 SEC XSS in SQL check parameters Prior to this Werk an attacher could add HTML to one parameter of the *Check SQL database* rule which was executed on the overview page. We found this vulnerability internally. **Affected Versions**: LI: 2.3.0 LI: 2.2.0 LI: 2.1.0 LI: 2.0.0 (probably older versions as well) **Indicators of Compromis**: The creation of such rules is logged in the audit log. You can therefore check the `wato_audit.log` either on the terminal or in the UI for entries that contain malicious HTML. **Vulnerability Management**: We have rated the issue with a CVSS Score of 6.5 (Medium) with the following CVSS vector: `CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L` We assigned CVE-2024-6052 to this vulnerability. **Changes**: This Werk fixes the escaping. CMK-17809 Change-Id: I8cf2d8218f1d6bb449beb6947d879b8a114e081a Commit: cad9dd2ec159e66c9d57cde977e9a9a32c57b670 https://github.com/Checkmk/checkmk/commit/cad9dd2ec159e66c9d57cde977e9a9a32… Author: Kenneth Okoh <kenneth.okoh(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: M .werks/17010 Log Message: ----------- Fix werk version Change-Id: I5c53b5b32f1013a1611377a5d15120afebe9e245 Commit: 1a3de82e3473eee4b565691b4d2103399ca99074 https://github.com/Checkmk/checkmk/commit/1a3de82e3473eee4b565691b4d2103399… Author: Hannes Rantzsch <hannes.rantzsch(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: A .werks/17090 M cmk/gui/backup.py M cmk/gui/key_mgmt.py M cmk/gui/mkeventd/wato.py M cmk/gui/plugins/wato/bi_config.py M cmk/gui/plugins/wato/utils/simple_modes.py M cmk/gui/wato/pages/audit_log.py M cmk/gui/wato/pages/bulk_discovery.py M cmk/gui/wato/pages/bulk_edit.py M cmk/gui/wato/pages/bulk_import.py M cmk/gui/wato/pages/diagnostics.py M cmk/gui/wato/pages/folders.py M cmk/gui/wato/pages/global_settings.py M cmk/gui/wato/pages/groups.py M cmk/gui/wato/pages/host_diagnose.py M cmk/gui/wato/pages/host_rename.py M cmk/gui/wato/pages/icons.py M cmk/gui/wato/pages/ldap.py M cmk/gui/wato/pages/notifications.py M cmk/gui/wato/pages/parentscan.py M cmk/gui/wato/pages/read_only.py M cmk/gui/wato/pages/roles.py M cmk/gui/wato/pages/rulesets.py M cmk/gui/wato/pages/search.py M cmk/gui/wato/pages/sites.py M cmk/gui/wato/pages/tags.py M cmk/gui/wato/pages/timeperiods.py M cmk/gui/wato/pages/user_migrate.py M cmk/gui/wato/pages/users.py M web/htdocs/js/modules/forms.ts Log Message: ----------- 17090 SEC Fix Various CSRF Issues This Werk adds priviously missing CSRF-Token validation to various endpoints in WATO. The lack of CSRF-Token validation could allow an attacker to perform actions on behalf of a user without their consent, by tricking the user into visiting clicking on a malicious link. This vulnerability was identified during a commissioned penetration test conducted by PS Positive Security GmbH. *Affected Versions*: * 2.3.0 * 2.2.0 * 2.1.0 * 2.0.0 (EOL) *Vulnerability Management*: We have rated the issue with a CVSS Score of 8.8 High with the following CVSS vector: `CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`. and assigned CVE `CVE-2024-28828`. Change-Id: Ib12128b873b7d06140e48fb66147e7a2599dd6f9 Commit: 1daf1f2c116f786c03ac155006dff14ac96b8d9f https://github.com/Checkmk/checkmk/commit/1daf1f2c116f786c03ac155006dff14ac… Author: Solomon Jacobs <solomon.jacobs(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: A .werks/16431 M omd/packages/omd/omdlib/main.py Log Message: ----------- 16431 FIX omd restore: Fix RuntimeError: Failed to determine site version SUP-18672 Change-Id: Ic212139fd8e2e38c2dfbb70c9db68812870d22d5 Commit: 991ffeda722dc12d049c3dd7a667cb5ef08a8fc7 https://github.com/Checkmk/checkmk/commit/991ffeda722dc12d049c3dd7a667cb5ef… Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: A .werks/16845 M agents/wnx/src/common/wtools.cpp M agents/wnx/src/engine/cfg.cpp M agents/wnx/src/engine/cfg_details.h M agents/wnx/src/engine/cma_core.cpp M agents/wnx/src/engine/cma_core.h M agents/wnx/watest/test-yaml.cpp Log Message: ----------- 16845 SEC fix a privilege escalation vulnerability in the Checkmk Windows Agent This Werk fixes a privilege escalation vulnerability in the Checkmk Windows Agent. Prior to this Werk, it was possible for authenticated users on the monitored Windows host to execute commands as administrator account that is used to run the Agent, allowing them to elevate their privileges. The reason for this issue were excessive write permissions on the `ProgramData\checkmk\agent` directory. Note that you must update Checkmk as well as the agent in order to apply this fix. This issue was found in a commissioned penetration test conducted by modzero GmbH. *Affected Versions*: * 2.3.0 * 2.2.0 * 2.1.0 *Mitigations*: If updating is not possible, you can manually remove write access for non-admin users on the `ProgramData\checkmk\agent` folder. To do this, navigate to the folder's property settings and make sure to verify the special permissions and advanced permission settings in addition to the basic permission settings. *Vulnerability Management*: We have rated the issue with a CVSS Score of 8.8 High (`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H`) and assigned `CVE-2024-28827`. Change-Id: Ie739e73f15af032a3d2cdd0cfd20ea8bb97a761f Commit: db4fb9cbcff2e657426db49c28e2c228e7d6646f https://github.com/Checkmk/checkmk/commit/db4fb9cbcff2e657426db49c28e2c228e… Author: Checkmk release system <feedback(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: M agents/check_mk_agent.aix M agents/check_mk_agent.freebsd M agents/check_mk_agent.hpux M agents/check_mk_agent.linux M agents/check_mk_agent.macosx M agents/check_mk_agent.netbsd M agents/check_mk_agent.openbsd M agents/check_mk_agent.openvms M agents/check_mk_agent.openwrt M agents/check_mk_agent.solaris M agents/plugins/apache_status.py M agents/plugins/asmcmd.sh M agents/plugins/db2_mem M agents/plugins/dnsclient M agents/plugins/hpux_lunstats M agents/plugins/hpux_statgrab M agents/plugins/ibm_mq M agents/plugins/isc_dhcpd.py M agents/plugins/jar_signature M agents/plugins/kaspersky_av M agents/plugins/lnx_container_host_if.linux M agents/plugins/lnx_quota M agents/plugins/lvm M agents/plugins/mailman2_lists M agents/plugins/mailman3_lists M agents/plugins/mk_apt M agents/plugins/mk_ceph M agents/plugins/mk_cups_queues M agents/plugins/mk_db2.aix M agents/plugins/mk_db2.linux M agents/plugins/mk_docker.py M agents/plugins/mk_errpt.aix M agents/plugins/mk_filehandler M agents/plugins/mk_filestats.py M agents/plugins/mk_haproxy.freebsd M agents/plugins/mk_informix M agents/plugins/mk_inotify.py M agents/plugins/mk_inventory.aix M agents/plugins/mk_inventory.linux M agents/plugins/mk_inventory.solaris M agents/plugins/mk_iptables M agents/plugins/mk_jolokia.py M agents/plugins/mk_logins M agents/plugins/mk_logwatch.py M agents/plugins/mk_mongodb.py M agents/plugins/mk_mysql M agents/plugins/mk_nfsiostat M agents/plugins/mk_omreport M agents/plugins/mk_oracle M agents/plugins/mk_oracle_crs M agents/plugins/mk_postgres.py M agents/plugins/mk_redis M agents/plugins/mk_sap.aix M agents/plugins/mk_sap.py M agents/plugins/mk_sap_hana M agents/plugins/mk_saprouter M agents/plugins/mk_scaleio M agents/plugins/mk_site_object_counts M agents/plugins/mk_sshd_config M agents/plugins/mk_suseconnect M agents/plugins/mk_tinkerforge.py M agents/plugins/mk_tsm M agents/plugins/mk_zypper M agents/plugins/mtr.py M agents/plugins/netstat.aix M agents/plugins/netstat.linux M agents/plugins/netstat.solaris M agents/plugins/nfsexports M agents/plugins/nfsexports.solaris M agents/plugins/nginx_status.py M agents/plugins/plesk_backups.py M agents/plugins/plesk_domains.py M agents/plugins/runas M agents/plugins/smart M agents/plugins/symantec_av M agents/plugins/unitrends_backup M agents/plugins/unitrends_replication.py M agents/plugins/vxvm M agents/plugins/zorp M agents/windows/plugins/ad_replication.bat M agents/windows/plugins/arcserve_backup.ps1 M agents/windows/plugins/citrix_farm.ps1 M agents/windows/plugins/citrix_licenses.vbs M agents/windows/plugins/citrix_xenapp.ps1 M agents/windows/plugins/hyperv_vms.ps1 M agents/windows/plugins/hyperv_vms_guestinfos.ps1 M agents/windows/plugins/iis_app_pool_state.ps1 M agents/windows/plugins/kaspersky_av_client.vbs M agents/windows/plugins/mcafee_av_client.bat M agents/windows/plugins/megaraid.bat M agents/windows/plugins/mk_dhcp_enabled.bat M agents/windows/plugins/mk_inventory.vbs M agents/windows/plugins/mk_msoffice.ps1 M agents/windows/plugins/mk_mysql.vbs M agents/windows/plugins/mk_oracle.ps1 M agents/windows/plugins/msexch_dag.ps1 M agents/windows/plugins/msexch_database.ps1 M agents/windows/plugins/mssql.vbs M agents/windows/plugins/netstat_an.bat M agents/windows/plugins/nvidia_smi.ps1 M agents/windows/plugins/rds_licenses.vbs M agents/windows/plugins/rstcli.bat M agents/windows/plugins/sansymphony.ps1 M agents/windows/plugins/storcli.bat M agents/windows/plugins/tsm_checks.bat M agents/windows/plugins/veeam_backup_status.ps1 M agents/windows/plugins/win_dhcp_pools.bat M agents/windows/plugins/win_dmidecode.bat M agents/windows/plugins/win_license.bat M agents/windows/plugins/win_printers.ps1 M agents/windows/plugins/windows_broadcom_bonding.bat M agents/windows/plugins/windows_if.ps1 M agents/windows/plugins/windows_intel_bonding.bat M agents/windows/plugins/windows_multipath.vbs M agents/windows/plugins/windows_os_bonding.ps1 M agents/windows/plugins/windows_tasks.ps1 M agents/windows/plugins/windows_updates.vbs M agents/windows/plugins/wmic_if.bat M agents/wnx/src/common/wnx_version.h M bin/livedump M bin/mkbackup M cmk/special_agents/agent_jolokia.py M cmk/special_agents/agent_netapp.py M cmk/special_agents/agent_splunk.py M cmk/special_agents/agent_vsphere.py M cmk/utils/version.py M configure.ac M defines.make M docker_image/Dockerfile M packages/cmk-agent-ctl/src/constants.rs Log Message: ----------- Set version to 2.2.0p30 Commit: 12eba85c9112773b9c4e977c09368ea27f180069 https://github.com/Checkmk/checkmk/commit/12eba85c9112773b9c4e977c09368ea27… Author: Kenneth Okoh <kenneth.okoh(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: A .werks/16999 M cmk/base/core_nagios.py M cmk/gui/mkeventd/icon.py M cmk/gui/views/painter/v0/painters.py M cmk/utils/escaping.py M tests/unit/cmk/gui/plugins/views/test_painters.py Log Message: ----------- 16999 FIX Service check command UI escaping Previously instead of "!" the GUI displayed "\!" when rendering a service check command. This is fixed to rendering unescaped service check commands to the GUI. CMK-17241 Change-Id: I66b903ab2c35add145938e0c2bba50614496cc33 Commit: 1551cfeef6b3ff6356e7388c059ec0ac839df236 https://github.com/Checkmk/checkmk/commit/1551cfeef6b3ff6356e7388c059ec0ac8… Author: Kenneth Okoh <kenneth.okoh(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: M .werks/16999 Log Message: ----------- Werk #16999: fix version Change-Id: Ibdc9f3a93f283c3d241a85f3f719f829a25ebff4 Commit: c9e762baf9b7bc6374feaa927e2454d2872c4abe https://github.com/Checkmk/checkmk/commit/c9e762baf9b7bc6374feaa927e2454d28… Author: Simon Jess <simon.jess(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: A .werks/16753 M cmk/gui/views/inventory/__init__.py M cmk/gui/views/join_service_rows.py Log Message: ----------- 16753 FIX HW/SW Inventory: Fix missing joined service columns if a service is assigned to a cluster Change-Id: I75b0bd6141ba2f4b715b8c06f8aeb844df1641f3 Commit: 378067cdd4f087c1f6b42a14c4bc1b0a40df798f https://github.com/Checkmk/checkmk/commit/378067cdd4f087c1f6b42a14c4bc1b0a4… Author: Sofia Colakovic <sofia.colakovic(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: A .werks/16863 M cmk/special_agents/agent_proxmox_ve.py M tests/unit/checks/test_agent_proxmox_ve.py Log Message: ----------- 16863 FIX proxmox: Fix log parsing crash for Proxmox versions 3.2.4 and newer The backup log format changed in Proxmox version 3.2.4 which resulted in a crash in the Proxmox special agent. The special agent can now handle both old and the new format of backup log messages. SUP-19222 Change-Id: I57c0108b20874b8d3fb5841f8827779ed1504d3a Commit: fc36525c611e6f62b82e710598ca6aa2164f71dd https://github.com/Checkmk/checkmk/commit/fc36525c611e6f62b82e710598ca6aa21… Author: Checkmk release system <feedback(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: M tests/update/base_versions_current_branch.json Log Message: ----------- Include 2.2.0p29 in base-versions list for update-test Compare: https://github.com/Checkmk/checkmk/compare/e3222a6bc5ff...fc36525c611e To unsubscribe from these emails, change your notification settings at https://github.com/Checkmk/checkmk/settings/notifications

5 days, 20 hours

[Checkmk/checkmk] 6fc4f3: 17010 SEC XSS in SQL check parameters

by Checkmk git commit messages

Branch: refs/heads/2.1.0 Home: https://github.com/Checkmk/checkmk Commit: 6fc4f3b341bae28d741edf172812ac204d2f78f5 https://github.com/Checkmk/checkmk/commit/6fc4f3b341bae28d741edf172812ac204… Author: Maximilian Wirtz <maximilian.wirtz(a)checkmk.com> Date: 2024-07-01 (Mon, 01 Jul 2024) Changed paths: A .werks/17010 M cmk/gui/valuespec.py Log Message: ----------- 17010 SEC XSS in SQL check parameters Prior to this Werk an attacher could add HTML to one parameter of the *Check SQL database* rule which was executed on the overview page. We found this vulnerability internally. **Affected Versions**: LI: 2.3.0 LI: 2.2.0 LI: 2.1.0 LI: 2.0.0 (probably older versions as well) **Indicators of Compromis**: The creation of such rules is logged in the audit log. You can therefore check the `wato_audit.log` either on the terminal or in the UI for entries that contain malicious HTML. **Vulnerability Management**: We have rated the issue with a CVSS Score of 6.5 (Medium) with the following CVSS vector: `CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L` We assigned CVE-2024-6052 to this vulnerability. **Changes**: This Werk fixes the escaping. CMK-17809 Change-Id: I8cf2d8218f1d6bb449beb6947d879b8a114e081a Commit: a6104a4a2d431870634becabd186b8e98460397e https://github.com/Checkmk/checkmk/commit/a6104a4a2d431870634becabd186b8e98… Author: Hannes Rantzsch <hannes.rantzsch(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: A .werks/17090 M cmk/gui/backup.py M cmk/gui/key_mgmt.py M cmk/gui/plugins/wato/bi_config.py M cmk/gui/plugins/wato/utils/simple_modes.py M cmk/gui/wato/mkeventd.py M cmk/gui/wato/pages/audit_log.py M cmk/gui/wato/pages/bulk_discovery.py M cmk/gui/wato/pages/bulk_edit.py M cmk/gui/wato/pages/bulk_import.py M cmk/gui/wato/pages/diagnostics.py M cmk/gui/wato/pages/folders.py M cmk/gui/wato/pages/global_settings.py M cmk/gui/wato/pages/groups.py M cmk/gui/wato/pages/host_diagnose.py M cmk/gui/wato/pages/host_rename.py M cmk/gui/wato/pages/icons.py M cmk/gui/wato/pages/ldap.py M cmk/gui/wato/pages/notifications.py M cmk/gui/wato/pages/parentscan.py M cmk/gui/wato/pages/read_only.py M cmk/gui/wato/pages/roles.py M cmk/gui/wato/pages/rulesets.py M cmk/gui/wato/pages/search.py M cmk/gui/wato/pages/sites.py M cmk/gui/wato/pages/tags.py M cmk/gui/wato/pages/timeperiods.py M cmk/gui/wato/pages/users.py M web/htdocs/js/modules/forms.js Log Message: ----------- 17090 SEC Fix Various CSRF Issues This Werk adds priviously missing CSRF-Token validation to various endpoints in WATO. The lack of CSRF-Token validation could allow an attacker to perform actions on behalf of a user without their consent, by tricking the user into visiting clicking on a malicious link. This vulnerability was identified during a commissioned penetration test conducted by PS Positive Security GmbH. *Affected Versions*: * 2.3.0 * 2.2.0 * 2.1.0 * 2.0.0 (EOL) *Vulnerability Management*: We have rated the issue with a CVSS Score of 8.8 High with the following CVSS vector: `CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`. and assigned CVE `CVE-2024-28828`. Change-Id: Ib12128b873b7d06140e48fb66147e7a2599dd6f9 Commit: 646362ad319de61d69c3ea40599616137456c4cc https://github.com/Checkmk/checkmk/commit/646362ad319de61d69c3ea40599616137… Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: A .werks/16845 M agents/wnx/src/common/wtools.cpp M agents/wnx/src/engine/cfg.cpp M agents/wnx/src/engine/cfg_details.h M agents/wnx/src/engine/cma_core.cpp M agents/wnx/src/engine/cma_core.h M agents/wnx/watest/test-yaml.cpp Log Message: ----------- 16845 SEC fix a privilege escalation vulnerability in the Checkmk Windows Agent This Werk fixes a privilege escalation vulnerability in the Checkmk Windows Agent. Prior to this Werk, it was possible for authenticated users on the monitored Windows host to execute commands as administrator account that is used to run the Agent, allowing them to elevate their privileges. The reason for this issue were excessive write permissions on the `ProgramData\checkmk\agent` directory. Note that you must update Checkmk as well as the agent in order to apply this fix. This issue was found in a commissioned penetration test conducted by modzero GmbH. *Affected Versions*: * 2.3.0 * 2.2.0 * 2.1.0 *Mitigations*: If updating is not possible, you can manually remove write access for non-admin users on the `ProgramData\checkmk\agent` folder. To do this, navigate to the folder's property settings and make sure to verify the special permissions and advanced permission settings in addition to the basic permission settings. *Vulnerability Management*: We have rated the issue with a CVSS Score of 8.8 High (`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H`) and assigned `CVE-2024-28827`. Change-Id: Ib1209a61e89abaff520490a817a85f8840c94e45 Compare: https://github.com/Checkmk/checkmk/compare/41ea55fe138f...646362ad319d To unsubscribe from these emails, change your notification settings at https://github.com/Checkmk/checkmk/settings/notifications

5 days, 20 hours

[Checkmk/checkmk]

by Checkmk git commit messages

Branch: refs/heads/release/2.2.0p29 Home: https://github.com/Checkmk/checkmk To unsubscribe from these emails, change your notification settings at https://github.com/Checkmk/checkmk/settings/notifications

5 days, 20 hours

[Checkmk/checkmk] cad421: testlib: Add helper to create dynamic host configu...

by Checkmk git commit messages

Branch: refs/heads/master Home: https://github.com/Checkmk/checkmk Commit: cad421b7ec002b48b8ebc72605c59454d9c35211 https://github.com/Checkmk/checkmk/commit/cad421b7ec002b48b8ebc72605c59454d… Author: Matteo Stifano <matteo.stifano(a)checkmk.com> Date: 2024-07-01 (Mon, 01 Jul 2024) Changed paths: M tests/testlib/openapi_session.py Log Message: ----------- testlib: Add helper to create dynamic host configuration via API CMK-17945 Change-Id: I2162ff6c2151679b0d3621258b13c07b48909090 Commit: bee0d07b71dfd2c14e6e069e5095c3a4e8a73cec https://github.com/Checkmk/checkmk/commit/bee0d07b71dfd2c14e6e069e5095c3a4e… Author: Matteo Stifano <matteo.stifano(a)checkmk.com> Date: 2024-07-01 (Mon, 01 Jul 2024) Changed paths: M tests/testlib/openapi_session.py Log Message: ----------- testlib: Add helper to remove dynamic host configuration via API CMK-17945 Change-Id: Ie071325077fd39f0b7be8f634d877744e9a3df7c Commit: 529f138ef13193e81f0e866bfe676484410f671b https://github.com/Checkmk/checkmk/commit/529f138ef13193e81f0e866bfe6764844… Author: Maximilian Wirtz <maximilian.wirtz(a)checkmk.com> Date: 2024-07-01 (Mon, 01 Jul 2024) Changed paths: M cmk/gui/type_defs.py M cmk/gui/utils/security_log_events.py M cmk/gui/wato/pages/user_profile/two_factor.py Log Message: ----------- Change parameter to type AuthType CMK-17995 Change-Id: I878df2d8211b4a39f88ac5f188aaeb10484b0e52 Commit: ec63892e04bd084e2de829b0faafd6e0709f5a54 https://github.com/Checkmk/checkmk/commit/ec63892e04bd084e2de829b0faafd6e07… Author: Maximilian Wirtz <maximilian.wirtz(a)checkmk.com> Date: 2024-07-01 (Mon, 01 Jul 2024) Changed paths: A .werks/17010.md Log Message: ----------- 17010 SEC XSS in SQL check parameters Here on master this was already fixed with `64147810f50f` CMK-17809 Change-Id: I8cf2d8218f1d6bb449beb6947d879b8a114e081a Commit: 4eff15c2c51b0e063813c08f13a5b44f3b1c78cb https://github.com/Checkmk/checkmk/commit/4eff15c2c51b0e063813c08f13a5b44f3… Author: Mathias Laurin <mathias.laurin(a)checkmk.com> Date: 2024-07-01 (Mon, 01 Jul 2024) Changed paths: M cmk/base/automations/check_mk.py M cmk/base/config.py M cmk/base/core_factory.py M cmk/base/default_config/notify.py M cmk/base/diagnostics.py M cmk/base/modes/check_mk.py M cmk/gui/autocompleters.py M cmk/gui/availability.py M cmk/gui/bi/_config.py M cmk/gui/config.py M cmk/gui/dashboard/__init__.py M cmk/gui/dashboard/cre_dashboards.py M cmk/gui/dashboard/page_show_dashboard.py M cmk/gui/fields/definitions.py M cmk/gui/global_config.py M cmk/gui/logged_in.py M cmk/gui/login.py M cmk/gui/main_menu.py M cmk/gui/main_modules.py M cmk/gui/mkeventd/wato.py M cmk/gui/openapi/endpoints/contact_group_config/__init__.py M cmk/gui/openapi/endpoints/host_group_config/__init__.py M cmk/gui/openapi/endpoints/password/__init__.py M cmk/gui/openapi/endpoints/service_group_config/__init__.py M cmk/gui/openapi/endpoints/site_management/common.py M cmk/gui/openapi/endpoints/utils.py M cmk/gui/openapi/endpoints/version/__init__.py M cmk/gui/page_menu_utils.py M cmk/gui/pagetypes.py M cmk/gui/painter/v0/painters.py M cmk/gui/plugins/config/base.py M cmk/gui/plugins/main_modules/registration.py M cmk/gui/plugins/wato/special_agents/azure.py M cmk/gui/plugins/wato/special_agents/datadog.py M cmk/gui/plugins/wato/special_agents/kube.py M cmk/gui/raw/registration.py M cmk/gui/sidebar/_snapin/__init__.py M cmk/gui/sites.py M cmk/gui/userdb/_check_credentials.py M cmk/gui/userdb/ldap_connector.py M cmk/gui/utils/theme.py M cmk/gui/view_renderer.py M cmk/gui/views/availability.py M cmk/gui/views/builtin_views.py M cmk/gui/views/command/commands.py M cmk/gui/visuals/__init__.py M cmk/gui/visuals/_add_to_visual.py M cmk/gui/visuals/_store.py M cmk/gui/wato/_check_mk_configuration.py M cmk/gui/wato/_main_modules.py M cmk/gui/wato/_notification_parameter/_mail.py M cmk/gui/wato/_omd_configuration.py M cmk/gui/wato/page_handler.py M cmk/gui/wato/pages/__init__.py M cmk/gui/wato/pages/_host_attributes.py M cmk/gui/wato/pages/activate_changes.py M cmk/gui/wato/pages/automation.py M cmk/gui/wato/pages/diagnostics.py M cmk/gui/wato/pages/events.py M cmk/gui/wato/pages/groups.py M cmk/gui/wato/pages/host_rename.py M cmk/gui/wato/pages/notifications.py M cmk/gui/wato/pages/user_profile/mega_menu.py M cmk/gui/wato/pages/user_profile/page_menu.py M cmk/gui/wato/pages/userdb_common.py M cmk/gui/wato/pages/users.py M cmk/gui/wato/registration.py M cmk/gui/watolib/activate_changes.py M cmk/gui/watolib/automation_commands.py M cmk/gui/watolib/automations.py M cmk/gui/watolib/config_domains.py M cmk/gui/watolib/config_sync.py M cmk/gui/watolib/global_settings.py M cmk/gui/watolib/groups.py M cmk/gui/watolib/registration.py M cmk/gui/watolib/rulesets.py M cmk/gui/watolib/rulespecs.py M cmk/gui/watolib/search.py M cmk/gui/watolib/site_management.py M cmk/gui/watolib/sites.py M cmk/gui/wsgi/applications/rest_api.py M cmk/gui/wsgi/applications/utils.py M cmk/plugins/collection/agent_based/inventory_checkmk_server.py M cmk/plugins/emailchecks/rulesets/active_check_mail.py M cmk/plugins/gcp/rulesets/gcp.py M cmk/post_rename_site/main.py M cmk/update_config/main.py M cmk/update_config/plugins/pre_actions/rulesets.py M cmk/utils/licensing/registry.py M cmk/utils/licensing/usage.py M cmk/utils/version.py M omd/packages/omd/omdlib/config_hooks.py M tests/conftest.py M tests/integration/cmk/base/test_check_variables.py M tests/integration/cmk/gui/utils/test_theme.py M tests/integration/cmk/snmplib/helper_get_single_oid.py M tests/integration/cmk/snmplib/helper_get_snmp_table.py M tests/integration/cmk/snmplib/helper_walk_for_export.py M tests/testlib/rest_api_client.py M tests/unit/cmk/automations/test_results.py M tests/unit/cmk/base/server_side_calls/test_macro_support_doc.py M tests/unit/cmk/base/test_core_config.py M tests/unit/cmk/base/test_core_nagios.py M tests/unit/cmk/base/test_unit_automations.py M tests/unit/cmk/gui/openapi/test_headers.py M tests/unit/cmk/gui/openapi/test_notification_rules.py M tests/unit/cmk/gui/openapi/test_openapi_agent.py M tests/unit/cmk/gui/openapi/test_openapi_autocompleters.py M tests/unit/cmk/gui/openapi/test_openapi_downtime.py M tests/unit/cmk/gui/openapi/test_openapi_folder_config.py M tests/unit/cmk/gui/openapi/test_openapi_group_config.py M tests/unit/cmk/gui/openapi/test_openapi_host_config.py M tests/unit/cmk/gui/openapi/test_openapi_password.py M tests/unit/cmk/gui/openapi/test_openapi_service.py M tests/unit/cmk/gui/openapi/test_openapi_user.py M tests/unit/cmk/gui/openapi/test_site_management.py M tests/unit/cmk/gui/openapi/test_version.py M tests/unit/cmk/gui/plugins/sidebar/test_snapins.py M tests/unit/cmk/gui/plugins/views/test_painters.py M tests/unit/cmk/gui/plugins/visuals/test_filters.py M tests/unit/cmk/gui/plugins/wato/utils/test_sample_config.py M tests/unit/cmk/gui/test_background_job.py M tests/unit/cmk/gui/test_cron.py M tests/unit/cmk/gui/test_dashboard.py M tests/unit/cmk/gui/test_pages.py M tests/unit/cmk/gui/test_visuals.py M tests/unit/cmk/gui/userdb/test_userdb.py M tests/unit/cmk/gui/utils/test_ntop.py M tests/unit/cmk/gui/views/icon/test_icons.py M tests/unit/cmk/gui/views/test_join_service_rows.py M tests/unit/cmk/gui/views/test_row_post_processing.py M tests/unit/cmk/gui/views/test_views.py M tests/unit/cmk/gui/wato/pages/test_automation.py M tests/unit/cmk/gui/wato/test_menu.py M tests/unit/cmk/gui/watolib/test_analyze_configuration.py M tests/unit/cmk/gui/watolib/test_config_sync.py M tests/unit/cmk/gui/watolib/test_gui_rulesets.py M tests/unit/cmk/gui/watolib/test_rulespecs.py M tests/unit/cmk/gui/watolib/test_user_roles.py M tests/unit/cmk/gui/watolib/test_watolib.py M tests/unit/cmk/plugins/aws/rulesets/test_aws.py M tests/unit/cmk/plugins/collection/agent_based/test_inv_checkmk.py M tests/unit/cmk/plugins/collection/agent_based/test_section_host_label_doc.py M tests/unit/cmk/update_config/plugins/actions/test_rulesets.py M tests/unit/cmk/utils/rulesets/test_tuple_rulesets.py M tests/unit/cmk/utils/test_version.py M tests/unit/conftest.py Log Message: ----------- Remove paths dep from cmk.utils.version mechanical CMK-18050 Change-Id: I404432159a020e5c5e7863e4a615f8f885172010 Commit: 1f162c49c683e45bcbb8e4b3f96975a146ff68fb https://github.com/Checkmk/checkmk/commit/1f162c49c683e45bcbb8e4b3f96975a14… Author: Max Linke <max.linke(a)checkmk.com> Date: 2024-07-01 (Mon, 01 Jul 2024) Changed paths: M tests/integration/checks/test_checks_sanity.py Log Message: ----------- test: fix sanity integration test in cse The CSE now only allows push mode for the agent. The sanity check assumes that the agent is configured in pull mode. We now deactivate active in the CSE and set less aggressive timeouts in the CSE edition. Tests take a bit longer but will still pass. Change-Id: I8b74bd215bea4b6391f3adeec241ec3dfd275b36 Commit: bf4e0b9e47e2723c7305da2679bc00b2211c3017 https://github.com/Checkmk/checkmk/commit/bf4e0b9e47e2723c7305da2679bc00b22… Author: Moritz Kirschner <moritz.kirschner(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: A .werks/17076.md M cmk/gui/utils/rule_specs/legacy_converter.py M cmk/gui/valuespec/definitions.py M tests/unit/cmk/gui/utils/rulespecs/test_legacy_converter.py Log Message: ----------- 17076 Fix float valuespec ignoring its self._validate The Percentage form spec relied on the validate_value function of the float valuespec to report its validators.NumberInRange. However, the Float validate_value method was overwritten instead of its _validate_value method. Resulting in all valuespecs only checking its bounds and not its custom validation functions. This also fixes the assumption that the Percentage form spec continues to use the legacy Percentage default bounds. Change-Id: I476ec419c80784dc4cad85b5acd7b19cd60de856 Commit: 90c039bb448cff0d4a5f38e5dff7622901930b98 https://github.com/Checkmk/checkmk/commit/90c039bb448cff0d4a5f38e5dff762290… Author: Moritz Kirschner <moritz.kirschner(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: A .werks/17077.md M cmk/gui/plugins/wato/check_parameters/filesystem_utils.py M cmk/gui/plugins/wato/check_parameters/netapp_volumes.py M cmk/plugins/collection/agent_based/df_netapp.py Log Message: ----------- 17077 Allow filesystem service rule levels to go above 100% We have one monster "filesystem" rule which is being used all over the place. However, there have been quite a few support requests for single checks coming in asking us to remove the 101% limit for the used space level as they are monitoring virtualized file systems. However, making just some checks use a specialized rule set of is a lot of work and in the end it's easier to lift the restriction for the whole rule set, even if some cases values above 100% still might not be valid. Motivated by SUP-18744 Change-Id: I107a0c885ce03b2cfab7bcbfd2278896a040f3a4 Commit: 2f013261ee460de7f6cb87f6607aca27a517a0fe https://github.com/Checkmk/checkmk/commit/2f013261ee460de7f6cb87f6607aca27a… Author: Moritz Kirschner <moritz.kirschner(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: M cmk/gui/plugins/wato/check_parameters/filesystem_utils.py Log Message: ----------- Remove deprecated "levels_unbound" filesystem arg The standard levels option is unbound now anyway with Werk 17077. No rules need to be migrated since all levels report to the "levels" dict item. Change-Id: I3c13ebfb35d01d8a53f87ebd8ee2d5b422cb88e3 Commit: c7b9bd881ba782b16fb9a2dd692c5830b3150322 https://github.com/Checkmk/checkmk/commit/c7b9bd881ba782b16fb9a2dd692c5830b… Author: Lars Michelsen <lm(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: M cmk/gui/openapi/endpoints/parent_scan/__init__.py M tests/unit/cmk/gui/openapi/test_openapi_parent_scan.py Log Message: ----------- REST API: Fix AttributeError when starting parent scan Calling the "Start the parent scan background job" endpoint resulted in the following exception: 'HostAddress' object has no attribute 'site_id' Sadly the issue was not found by mypy because params is not well typed. This is a systematical issue of the REST API we need to solve at some point to get rid of this kind of issue. Change-Id: I4409053ada83a1487f85a62ee77f7c1be225f045 Commit: ea8c3c5799c967fed49cf65a135e1f4a8fe22b02 https://github.com/Checkmk/checkmk/commit/ea8c3c5799c967fed49cf65a135e1f4a8… Author: Lars Michelsen <lm(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: M cmk/gui/watolib/parent_scan.py M tests/unit/cmk/gui/conftest.py M tests/unit/cmk/gui/watolib/test_scan_parents_background_job.py Log Message: ----------- Prepare parent scan job for a spawned process * Previously the SuperUserContext was inherited with the fork from from the run_cron page. This needs to be initialized locally now. * The lambda is not compatible with the spawn mode, replace with partial * The `inline_background_jobs` missed some now needed mocks. * Lastly the final assert needs a fresh request context now. Change-Id: I072df33d6b5570a8fad8fee7a594f35f221c0506 Commit: 7d6a8291be690d201c46bb90527831dd99b1a8bd https://github.com/Checkmk/checkmk/commit/7d6a8291be690d201c46bb90527831dd9… Author: Jonas Scharpf <jonas.scharpf(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: M .werks/16878.md Log Message: ----------- Fix werk text formatting Change-Id: I9fe4ffabcf142273664a15824e963f7cfbe50914 Commit: 76d9efb2826b815085edb5b7a6f50944f1f21cdd https://github.com/Checkmk/checkmk/commit/76d9efb2826b815085edb5b7a6f50944f… Author: Gav <gavin.mcguigan(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: A cmk/gui/quick_setup/aws_stages.py Log Message: ----------- quick setup: implement aws first stage CMK-17738 Change-Id: I20c61b5e82f587f921e0f34fc0f70c6a19c61466 Commit: 60d50691f9acf418e0e85f165bc27bb860d27c88 https://github.com/Checkmk/checkmk/commit/60d50691f9acf418e0e85f165bc27bb86… Author: Mathias Laurin <mathias.laurin(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: M tests/unit/cmk/utils/test_version.py Log Message: ----------- Remove 1 useless monkeypatching Change-Id: Ic4893f1917eb7c5c35e5265eeca5fa46681baed8 Commit: 5d28702b96152e491c755af4d55a7c4b8fdc10e0 https://github.com/Checkmk/checkmk/commit/5d28702b96152e491c755af4d55a7c4b8… Author: Mathias Laurin <mathias.laurin(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: M cmk/utils/crash_reporting.py M tests/unit/cmk/base/test_base_crash_reporting.py M tests/unit/cmk/gui/test_gui_crash_reporting.py Log Message: ----------- crashreporting: Remove dead code CMK-18050 Change-Id: I7e49edca34f741ec65d524dccce41dc0a395be55 Commit: 08b43015a0a90eb41abd3cec594ccaa9f94d3ff6 https://github.com/Checkmk/checkmk/commit/08b43015a0a90eb41abd3cec594ccaa9f… Author: Mathias Laurin <mathias.laurin(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: M bin/check_mk M cmk/gui/crash_handler.py M cmk/utils/crash_reporting.py Log Message: ----------- crashreporting: Fixup typing CMK-18050 Change-Id: Ice992375514b0eedd2e0fe1a71ad791934f893e4 Commit: 266c55a1f22e0bb719eadbaa8e1d1fbba72287f6 https://github.com/Checkmk/checkmk/commit/266c55a1f22e0bb719eadbaa8e1d1fbba… Author: Mathias Laurin <mathias.laurin(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: M bin/check_mk M cmk/base/errorhandling/_crash.py M cmk/ec/main.py M cmk/gui/crash_handler.py M cmk/gui/wsgi/applications/rest_api.py M cmk/special_agents/v0_unstable/crash_reporting.py M cmk/utils/crash_reporting.py M tests/unit/cmk/base/test_base_crash_reporting.py M tests/unit/cmk/ec/test_ec_crash_reporting.py M tests/unit/cmk/utils/test_crash_reporting.py Log Message: ----------- crashreporting: Remove one dep on cmk.utils.paths CMK-18050 Change-Id: I8c0a445c5f22ef6125735703796834ae338d86db Commit: e1767086964fd7aaea9e265b797c4b16ac5c7ba2 https://github.com/Checkmk/checkmk/commit/e1767086964fd7aaea9e265b797c4b16a… Author: Solomon Jacobs <solomon.jacobs(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: A .werks/16431.md M omd/packages/omd/omdlib/main.py Log Message: ----------- 16431 FIX omd restore: Fix RuntimeError: Failed to determine site version SUP-18672 Change-Id: Ic212139fd8e2e38c2dfbb70c9db68812870d22d5 Commit: 40daf4d59827c8387f8361b7e9a891bd5abc4045 https://github.com/Checkmk/checkmk/commit/40daf4d59827c8387f8361b7e9a891bd5… Author: Dhananjay Shah <dhananjay.shah(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: M tests/gui_e2e/test_werks.py Log Message: ----------- gui-e2e: add `ignore_werks` list to `test_werks_available`. Werk 16878 doesn't render within 30 second timeout. CMK-18094 Change-Id: Iee9c5c9bd0d29b49f36e1df86686ba96b9fab2d0 Commit: a9209b01cc5807c96b97279110045ce846bc2682 https://github.com/Checkmk/checkmk/commit/a9209b01cc5807c96b97279110045ce84… Author: Gav <gavin.mcguigan(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: M cmk/gui/openapi/endpoints/activate_changes/__init__.py Log Message: ----------- activate_changes: catch unknown activation processes error before returning running activations Running activations have already been activated (in some cases) when we then ask for the activation details. This is causing the test to be flaky. CMK-18048 Change-Id: I2789e03a04a15ea6b4c95cd88ed1eb4286e51c8f Commit: 1a8f935e36772e0330b6aa84d6dfdeb38755d75a https://github.com/Checkmk/checkmk/commit/1a8f935e36772e0330b6aa84d6dfdeb38… Author: Ronny Bruska <ronny.bruska(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: A .werks/17060.md M cmk/gui/wato/_notification_parameter/_jira_issues.py M cmk/utils/notify_types.py Log Message: ----------- 17060 Jira: Add proxy option CMK-18096 Change-Id: Icb112771f3c2c539507310d45d7d3764c68f267e Commit: a684ae00d1ecfcbb0a5631a57d0249f7a03675d5 https://github.com/Checkmk/checkmk/commit/a684ae00d1ecfcbb0a5631a57d0249f7a… Author: Mathias Laurin <mathias.laurin(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: M bin/check_mk M cmk/base/errorhandling/_crash.py M cmk/ec/main.py M cmk/gui/crash_handler.py M cmk/gui/wsgi/applications/rest_api.py M cmk/special_agents/v0_unstable/crash_reporting.py M cmk/utils/crash_reporting.py M tests/unit/cmk/base/test_base_crash_reporting.py M tests/unit/cmk/ec/test_ec_crash_reporting.py M tests/unit/cmk/utils/test_crash_reporting.py Log Message: ----------- crashreporting: Remove dep on cmk.utils.{paths,version} CMK-18050 Change-Id: Ie01b9e1fd00f118e8b612f15cf69dd17b9541dc4 Commit: c809b16278127bac5936a7308e40293b4468a5cf https://github.com/Checkmk/checkmk/commit/c809b16278127bac5936a7308e40293b4… Author: Mathias Laurin <mathias.laurin(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: M tests/unit/cmk/base/test_base_crash_reporting.py M tests/unit/cmk/ec/test_ec_crash_reporting.py M tests/unit/cmk/utils/test_crash_reporting.py Log Message: ----------- crashreporting: Remove unnecessary monkeypatching CMK-18050 Change-Id: I73c7734cbdac676c097952f4d49d8b2bacb5afc0 Commit: ef6cd04f6941751133da046f2bf4ee255f9c98e7 https://github.com/Checkmk/checkmk/commit/ef6cd04f6941751133da046f2bf4ee255… Author: Simon Jess <simon.jess(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: A .werks/16753.md M cmk/gui/views/inventory/_data_sources.py M cmk/gui/views/join_service_rows.py Log Message: ----------- 16753 FIX HW/SW Inventory: Fix missing joined service columns if a service is assigned to a cluster Change-Id: I75b0bd6141ba2f4b715b8c06f8aeb844df1641f3 Commit: d2f4cc26e6105a6729c59da01d53462f890f3170 https://github.com/Checkmk/checkmk/commit/d2f4cc26e6105a6729c59da01d53462f8… Author: Lars Michelsen <lm(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: M cmk/gui/background_job/_base.py M cmk/gui/background_job/_process.py M tests/unit/cmk/gui/conftest.py M tests/unit/cmk/gui/test_background_job.py Log Message: ----------- Change background jobs to use spawn instead of fork method With the previous fork approach we traded fast job startup against correctess and ultimately robustness. Doing that we took over part(!) of the resources held by the origin process and had to clean up various things and reinitialize some of them to have a sane execution environment. However, we can not guarantee this for each and every dependency we load into the UI code. Since we are using threading in a few places and have the one or the other native dependency, we can not be sure that the fork method does not cause any trouble. This change now changes the method to the spawn method. It does a fork, followed by an exec which load a clean Python environment and executes the target function. This comes with some additional overhead when launching a background job, but this seems to be acceptable for the jobs we currently have. As a side effect we can now get rid of the special cleanup actions, like disabling of the timeout manager, cleaning up of file handles and so on. A few cleanups are done in this commit. Some follow in separate commits. Change-Id: I165b0f439940d6aeac597de744689ca433c27257 Commit: a8bfd334d7bd406e461c8f496e0d1f1193c59648 https://github.com/Checkmk/checkmk/commit/a8bfd334d7bd406e461c8f496e0d1f119… Author: Lars Michelsen <lm(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: M cmk/gui/background_job/_base.py M cmk/gui/background_job/_interface.py M cmk/gui/background_job/_process.py Log Message: ----------- Consolidate job parameter handling Change-Id: I260fc6ec195ebd30bb5b5ce1676b25b7e4da01fc Commit: 9af4d4b16587eb77b922ba5bfdf06c9a20e56f3a https://github.com/Checkmk/checkmk/commit/9af4d4b16587eb77b922ba5bfdf06c9a2… Author: Dhananjay Shah <dhananjay.shah(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: M tests/gui_e2e/test_login.py Log Message: ----------- gui-e2e: remove redundant test-cases. * `test_login_works` <> `test_dashboard::test_dashboard_sanity_check` * `test_logout_works` <> `test_menu_user::test_user_logout` Change-Id: I71869cb04590840843b27e6a64935db2f1812911 Commit: 866409e8db69f50789ede13bff8d57f0f701227a https://github.com/Checkmk/checkmk/commit/866409e8db69f50789ede13bff8d57f0f… Author: Checkmk release system <feedback(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: M tests/update/base_versions.json Log Message: ----------- Include 2.3.0p8 in base-versions list for update-test Commit: ab561c1b92006245adb8d493591eb6bdac6706a7 https://github.com/Checkmk/checkmk/commit/ab561c1b92006245adb8d493591eb6bda… Author: Hannes Rantzsch <hannes.rantzsch(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: A .werks/17090.md M cmk/gui/backup/handler.py M cmk/gui/bi/_config.py M cmk/gui/custom_icons/_modes.py M cmk/gui/key_mgmt.py M cmk/gui/mkeventd/wato.py M cmk/gui/wato/pages/_simple_modes.py M cmk/gui/wato/pages/audit_log.py M cmk/gui/wato/pages/bulk_discovery.py M cmk/gui/wato/pages/bulk_edit.py M cmk/gui/wato/pages/bulk_import.py M cmk/gui/wato/pages/diagnostics.py M cmk/gui/wato/pages/folders.py M cmk/gui/wato/pages/global_settings.py M cmk/gui/wato/pages/groups.py M cmk/gui/wato/pages/host_diagnose.py M cmk/gui/wato/pages/host_rename.py M cmk/gui/wato/pages/ldap.py M cmk/gui/wato/pages/notifications.py M cmk/gui/wato/pages/parentscan.py M cmk/gui/wato/pages/read_only.py M cmk/gui/wato/pages/roles.py M cmk/gui/wato/pages/rulesets.py M cmk/gui/wato/pages/search.py M cmk/gui/wato/pages/sites.py M cmk/gui/wato/pages/tags.py M cmk/gui/wato/pages/timeperiods.py M cmk/gui/wato/pages/user_migrate.py M cmk/gui/wato/pages/users.py M packages/cmk-frontend/src/js/modules/forms.ts Log Message: ----------- 17090 SEC Fix Various CSRF Issues This Werk adds priviously missing CSRF-Token validation to various endpoints in WATO. The lack of CSRF-Token validation could allow an attacker to perform actions on behalf of a user without their consent, by tricking the user into visiting clicking on a malicious link. This vulnerability was identified during a commissioned penetration test conducted by PS Positive Security GmbH. *Affected Versions*: * 2.3.0 * 2.2.0 * 2.1.0 * 2.0.0 (EOL) *Vulnerability Management*: We have rated the issue with a CVSS Score of 8.8 High (`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`) and assigned `CVE-2024-28828`. Change-Id: Ib12128b873b7d06140e48fb66147e7a2599dd6f9 Commit: 26332221ae4612bc4a56608e3be2807419fb4cba https://github.com/Checkmk/checkmk/commit/26332221ae4612bc4a56608e3be280741… Author: David Gervasoni <david.gervasoni(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: R cmk/base/legacy_checks/mknotifyd.py A cmk/plugins/collection/agent_based/mknotifyd.py R tests/unit/checks/generictests/datasets/mknotifyd_2019-04-12_15-51-12_5cb097d06ea82_regression.py R tests/unit/checks/generictests/datasets/mknotifyd_with_deferred_corrupted.py R tests/unit/checks/generictests/datasets/mknotifyd_with_timestamp.py M tests/unit/checks/test_generic_legacy_conversion.py A tests/unit/cmk/plugins/collection/agent_based/test_mknotifyd.py Log Message: ----------- mknotifyd: migrate to new API Change-Id: Ie72eead2790865d85a6c9127368de9969f2f47ca Commit: 291ec346f7f3cf2aef833250534170eb5f26ddc1 https://github.com/Checkmk/checkmk/commit/291ec346f7f3cf2aef833250534170eb5… Author: David Gervasoni <david.gervasoni(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: M cmk/plugins/collection/agent_based/mknotifyd.py M tests/unit/cmk/plugins/collection/agent_based/test_mknotifyd.py Log Message: ----------- mknotifyd: refactoring II Change-Id: Ic2acc0849c336b151602b59cc4c2429cfc408af6 Commit: 3cba2643a4eacebffef1f6cab06cd7c8e6c5377e https://github.com/Checkmk/checkmk/commit/3cba2643a4eacebffef1f6cab06cd7c8e… Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: A .werks/16845.md M agents/wnx/include/wnx/cfg_details.h M agents/wnx/include/wnx/cma_core.h M agents/wnx/src/common/wtools.cpp M agents/wnx/src/engine/cfg.cpp M agents/wnx/src/engine/cma_core.cpp M agents/wnx/watest/test-yaml.cpp Log Message: ----------- 16845 SEC fix a privilege escalation vulnerability in the Checkmk Windows Agent This Werk fixes a privilege escalation vulnerability in the Checkmk Windows Agent. Prior to this Werk, it was possible for authenticated users on the monitored Windows host to execute commands as administrator account that is used to run the Agent, allowing them to elevate their privileges. The reason for this issue were excessive write permissions on the `ProgramData\checkmk\agent` directory. Note that you must update Checkmk as well as the agent in order to apply this fix. This issue was found in a commissioned penetration test conducted by modzero GmbH. *Affected Versions*: * 2.3.0 * 2.2.0 * 2.1.0 *Mitigations*: If updating is not possible, you can manually remove write access for non-admin users on the `ProgramData\checkmk\agent` folder. To do this, navigate to the folder's property settings and make sure to verify the special permissions and advanced permission settings in addition to the basic permission settings. *Vulnerability Management*: We have rated the issue with a CVSS Score of 8.8 High (`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H`) and assigned `CVE-2024-28827`. Change-Id: I7f410d9ea98c2a7f7af084160842924bca07b5e6 Commit: 3621c393ff03d3cf04248ae4688592713828885e https://github.com/Checkmk/checkmk/commit/3621c393ff03d3cf04248ae4688592713… Author: Sofia Colakovic <sofia.colakovic(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: A .werks/16863.md M cmk/special_agents/agent_proxmox_ve.py M tests/unit/cmk/special_agents/test_agent_proxmox_ve.py Log Message: ----------- 16863 FIX proxmox: Fix log parsing crash for Proxmox versions 3.2.4 and newer The backup log format changed in Proxmox version 3.2.4 which resulted in a crash in the Proxmox special agent. The special agent can now handle both old and the new format of backup log messages. SUP-19222 Change-Id: I57c0108b20874b8d3fb5841f8827779ed1504d3a Commit: b72a722d7f2910b6079141bdba27f6332576f4e4 https://github.com/Checkmk/checkmk/commit/b72a722d7f2910b6079141bdba27f6332… Author: Solomon Jacobs <solomon.jacobs(a)checkmk.com> Date: 2024-07-02 (Tue, 02 Jul 2024) Changed paths: M cmk/plugins/collection/agent_based/inventory_kube_pod.py M cmk/plugins/collection/agent_based/kube_cluster_api_health.py M cmk/plugins/collection/agent_based/kube_cluster_info.py M cmk/plugins/collection/agent_based/kube_collector_info.py M cmk/plugins/collection/agent_based/kube_cronjob_info.py M cmk/plugins/collection/agent_based/kube_cronjob_status.py M cmk/plugins/collection/agent_based/kube_daemonset_info.py M cmk/plugins/collection/agent_based/kube_deployment_conditions.py M cmk/plugins/collection/agent_based/kube_deployment_info.py M cmk/plugins/collection/agent_based/kube_namespace_info.py M cmk/plugins/collection/agent_based/kube_node_container_count.py M cmk/plugins/collection/agent_based/kube_node_info.py M cmk/plugins/collection/agent_based/kube_node_kubelet.py M cmk/plugins/collection/agent_based/kube_persistent_volume_claim.py M cmk/plugins/collection/agent_based/kube_pod_conditions.py M cmk/plugins/collection/agent_based/kube_pod_containers.py M cmk/plugins/collection/agent_based/kube_pod_info.py M cmk/plugins/collection/agent_based/kube_pod_phase.py M cmk/plugins/collection/agent_based/kube_pod_resources.py M cmk/plugins/collection/agent_based/kube_replicas.py M cmk/plugins/collection/agent_based/kube_statefulset_info.py M cmk/plugins/lib/kube_resources.py M tests/unit/cmk/plugins/collection/agent_based/test_kube_pod_restarts.py Log Message: ----------- don't combine json with pydantic The feature set of pydantic and json are different. This can lead to subtle bugs, see Werk 16435. Change-Id: Ibe97189b445f6d24b8b927bd00d43c924113b253 Compare: https://github.com/Checkmk/checkmk/compare/cff7cd6381bd...b72a722d7f29 To unsubscribe from these emails, change your notification settings at https://github.com/Checkmk/checkmk/settings/notifications

5 days, 20 hours

[Checkmk/checkmk] 105ffe: fix typo

by Checkmk git commit messages

Branch: refs/heads/2.3.0 Home: https://github.com/Checkmk/checkmk Commit: 105ffefff92eebcad2d3fd1cd7abb4c1eee58115 https://github.com/Checkmk/checkmk/commit/105ffefff92eebcad2d3fd1cd7abb4c1e… Author: Solomon Jacobs <solomon.jacobs(a)checkmk.com> Date: 2024-07-01 (Mon, 01 Jul 2024) Changed paths: M .werks/16434.md Log Message: ----------- fix typo Change-Id: I7e911498dde3150f21f996791de8f8430cccffae (cherry picked from commit cff7cd6381bd06cfd7a643dc73edcd0fc2e27c2a) To unsubscribe from these emails, change your notification settings at https://github.com/Checkmk/checkmk/settings/notifications

6 days, 20 hours

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

Checkmk git commits July 2024