[checkmk-commits] [Checkmk/checkmk] acb9ca: 16990 SEC NagVis: Updated to 1.9.42 (fix security ...

Branch: refs/heads/2.1.0 Home: https://github.com/Checkmk/checkmk Commit: acb9ca6f2acf5cfdbb60db45e4baa39db3a6608e https://github.com/Checkmk/checkmk/commit/acb9ca6f2acf5cfdbb60db45e4baa39db… Author: Lukas Lengler <lukas.lengler(a)checkmk.com> Date: 2024-07-11 (Thu, 11 Jul 2024) Changed paths: A .werks/16990 R omd/packages/nagvis/nagvis-1.9.41.tar.gz A omd/packages/nagvis/nagvis-1.9.42.tar.gz M omd/packages/nagvis/nagvis.make Log Message: ----------- 16990 SEC NagVis: Updated to 1.9.42 (fix security issues) NagVis has been updated to version 1.9.42. This update fixes the following security issues: - Fix various XSS issues (CVSS score: 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) - Fix potential RCE - Fix insecure password hashing algorithm for dedicated NagVis users (CVSS score 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) - Fix leak of installation path in error messages - Fix Make cookie hash comparison timing safe Change-Id: I06f2bd7a955968a0c07d799d9b2aef5624cf32ff Commit: f42adb68c242602ea0439560593a8e5c88d314e0 https://github.com/Checkmk/checkmk/commit/f42adb68c242602ea0439560593a8e5c8… Author: Checkmk release system <noreply(a)checkmk.com> Date: 2024-07-15 (Mon, 15 Jul 2024) Changed paths: M agents/check_mk_agent.aix M agents/check_mk_agent.freebsd M agents/check_mk_agent.hpux M agents/check_mk_agent.linux M agents/check_mk_agent.macosx M agents/check_mk_agent.netbsd M agents/check_mk_agent.openbsd M agents/check_mk_agent.openvms M agents/check_mk_agent.openwrt M agents/check_mk_agent.solaris M agents/cmk-agent-ctl/src/constants.rs M agents/plugins/apache_status.py M agents/plugins/asmcmd.sh M agents/plugins/db2_mem M agents/plugins/dnsclient M agents/plugins/hpux_lunstats M agents/plugins/hpux_statgrab M agents/plugins/ibm_mq M agents/plugins/isc_dhcpd.py M agents/plugins/jar_signature M agents/plugins/kaspersky_av M agents/plugins/lnx_container_host_if.linux M agents/plugins/lnx_quota M agents/plugins/lvm M agents/plugins/mailman_lists M agents/plugins/mk_apt M agents/plugins/mk_ceph M agents/plugins/mk_cups_queues M agents/plugins/mk_db2.aix M agents/plugins/mk_db2.linux M agents/plugins/mk_docker.py M agents/plugins/mk_errpt.aix M agents/plugins/mk_filehandler M agents/plugins/mk_filestats.py M agents/plugins/mk_haproxy.freebsd M agents/plugins/mk_informix M agents/plugins/mk_inotify.py M agents/plugins/mk_inventory.aix M agents/plugins/mk_inventory.linux M agents/plugins/mk_inventory.solaris M agents/plugins/mk_iptables M agents/plugins/mk_jolokia.py M agents/plugins/mk_logins M agents/plugins/mk_logwatch.py M agents/plugins/mk_mongodb.py M agents/plugins/mk_mysql M agents/plugins/mk_nfsiostat M agents/plugins/mk_omreport M agents/plugins/mk_oracle M agents/plugins/mk_oracle_crs M agents/plugins/mk_postgres.py M agents/plugins/mk_redis M agents/plugins/mk_sap.aix M agents/plugins/mk_sap.py M agents/plugins/mk_sap_hana M agents/plugins/mk_saprouter M agents/plugins/mk_scaleio M agents/plugins/mk_site_object_counts M agents/plugins/mk_sshd_config M agents/plugins/mk_suseconnect M agents/plugins/mk_tinkerforge.py M agents/plugins/mk_tsm M agents/plugins/mk_zypper M agents/plugins/mtr.py M agents/plugins/netstat.aix M agents/plugins/netstat.linux M agents/plugins/netstat.solaris M agents/plugins/nfsexports M agents/plugins/nfsexports.solaris M agents/plugins/nginx_status.py M agents/plugins/plesk_backups.py M agents/plugins/plesk_domains.py M agents/plugins/runas M agents/plugins/smart M agents/plugins/symantec_av M agents/plugins/unitrends_backup M agents/plugins/unitrends_replication.py M agents/plugins/vxvm M agents/plugins/websphere_mq M agents/plugins/zorp M agents/windows/plugins/ad_replication.bat M agents/windows/plugins/arcserve_backup.ps1 M agents/windows/plugins/citrix_farm.ps1 M agents/windows/plugins/citrix_licenses.vbs M agents/windows/plugins/citrix_xenapp.ps1 M agents/windows/plugins/hyperv_vms.ps1 M agents/windows/plugins/hyperv_vms_guestinfos.ps1 M agents/windows/plugins/iis_app_pool_state.ps1 M agents/windows/plugins/kaspersky_av_client.vbs M agents/windows/plugins/mcafee_av_client.bat M agents/windows/plugins/megaraid.bat M agents/windows/plugins/mk_dhcp_enabled.bat M agents/windows/plugins/mk_inventory.vbs M agents/windows/plugins/mk_msoffice.ps1 M agents/windows/plugins/mk_mysql.vbs M agents/windows/plugins/mk_oracle.ps1 M agents/windows/plugins/msexch_dag.ps1 M agents/windows/plugins/msexch_database.ps1 M agents/windows/plugins/mssql.vbs M agents/windows/plugins/netstat_an.bat M agents/windows/plugins/rds_licenses.vbs M agents/windows/plugins/rstcli.bat M agents/windows/plugins/sansymphony.ps1 M agents/windows/plugins/storcli.bat M agents/windows/plugins/tsm_checks.bat M agents/windows/plugins/veeam_backup_status.ps1 M agents/windows/plugins/win_dhcp_pools.bat M agents/windows/plugins/win_dmidecode.bat M agents/windows/plugins/win_license.bat M agents/windows/plugins/win_printers.ps1 M agents/windows/plugins/windows_broadcom_bonding.bat M agents/windows/plugins/windows_if.ps1 M agents/windows/plugins/windows_intel_bonding.bat M agents/windows/plugins/windows_multipath.vbs M agents/windows/plugins/windows_os_bonding.ps1 M agents/windows/plugins/windows_tasks.ps1 M agents/windows/plugins/windows_updates.vbs M agents/windows/plugins/wmic_if.bat M agents/wnx/src/common/wnx_version.h M bin/livedump M bin/mkbackup M bin/mkbench M cmk/utils/version.py M configure.ac M defines.make M docker/Dockerfile Log Message: ----------- Set version to 2.1.0p47 Commit: 51da6ffd8b19b8e392e013f0a0eec9b79272ddd7 https://github.com/Checkmk/checkmk/commit/51da6ffd8b19b8e392e013f0a0eec9b79… Author: Checkmk release system <noreply(a)checkmk.com> Date: 2024-07-15 (Mon, 15 Jul 2024) Changed paths: M .werks/17011 M .werks/17063 M .werks/17078 M .werks/17092 Log Message: ----------- Fixup werks versions to 2.1.0p47 Commit: 9c5e9dc1eae60c115fa4eb0b37be64837c1e5977 https://github.com/Checkmk/checkmk/commit/9c5e9dc1eae60c115fa4eb0b37be64837… Author: Moritz Kiemer <moritz.kiemer(a)checkmk.com> Date: 2024-07-15 (Mon, 15 Jul 2024) Changed paths: A .werks/17115 M cmk/base/check_legacy_includes/hp_proliant.py Log Message: ----------- 17115 FIX Adapt to changes in HPE iLO firmware Change-Id: I9b9c402fa05ed23469e488a11e7210a9c02a1f06 Compare: https://github.com/Checkmk/checkmk/compare/15f6fcb7e8e4...9c5e9dc1eae6 To unsubscribe from these emails, change your notification settings at https://github.com/Checkmk/checkmk/settings/notifications