[checkmk-commits] [Checkmk/checkmk] ab75c9: 16716 SEC Mitigate timing-unsafe comparisons

Branch: refs/heads/master Home: https://github.com/Checkmk/checkmk Commit: ab75c931bc723b92383c7aeb312c8d4ce2d6a5bf https://github.com/Checkmk/checkmk/commit/ab75c931bc723b92383c7aeb312c8d4ce… Author: Leonardo Petrora <leonardo.petrora(a)checkmk.com> Date: 2024-06-26 (Wed, 26 Jun 2024) Changed paths: A .werks/16716.md M cmk/gui/wato/pages/automation.py Log Message: ----------- 16716 SEC Mitigate timing-unsafe comparisons A theorical brute force attack could be performed due to timing-unsafe secrets comparison. This fix changes the way secrets are verified in communication with the agent. CMK-17524 CMK-17525 Change-Id: Id0ce029a0ce48ac62942507f272d9bd88cf37f68 Commit: d8ae93adcce766e16dcbf1d2bf7284def2fe5e04 https://github.com/Checkmk/checkmk/commit/d8ae93adcce766e16dcbf1d2bf7284def… Author: René Slowenski <rene.slowenski(a)checkmk.com> Date: 2024-06-26 (Wed, 26 Jun 2024) Changed paths: M tests/testlib/utils.py Log Message: ----------- testlib.utils: Allow using Path objects in more helpers Change-Id: I6dd3427c47fa897a620bc585c06d4e308f393bd7 Commit: d8e501d99b509d7722a39be7ed294da4f5a58c62 https://github.com/Checkmk/checkmk/commit/d8e501d99b509d7722a39be7ed294da4f… Author: René Slowenski <rene.slowenski(a)checkmk.com> Date: 2024-06-26 (Wed, 26 Jun 2024) Changed paths: M tests/testlib/site.py Log Message: ----------- testlib.site: Fix error handler that writes process list The error handler that writes the process list on a partially running installation was broken and therefore hid important information. This change fixes that by writing the file as root instead of writing it as the site user. Change-Id: I29d25e79e068b3a3f58a10eb387d07662df6b634 Compare: https://github.com/Checkmk/checkmk/compare/e8224575ae5c...d8e501d99b50 To unsubscribe from these emails, change your notification settings at https://github.com/Checkmk/checkmk/settings/notifications