17 May
2023
17 May
'23
2:03 p.m.
Branch: refs/heads/2.1.0
Home: https://github.com/Checkmk/checkmk
Commit: 5f39f0d82a0232813ad5b53e584aa1188baa5a9a
https://github.com/Checkmk/checkmk/commit/5f39f0d82a0232813ad5b53e584aa1188…
Author: Maximilian Wirtz <maximilian.wirtz(a)checkmk.com>
Date: 2023-05-15 (Mon, 15 May 2023)
Changed paths:
A .werks/15191
M cmk/gui/plugins/openapi/endpoints/service.py
M cmk/utils/livestatus_helpers/expressions.py
A tests/unit/cmk/utils/livestatus_helpers/test_expressions.py
Log Message:
-----------
15191 SEC Livestatus command injection in RestAPI
Prior to this Werk all RestAPI endpoints that use Livestatus
filter operators were susceptible to injection of Livestatus commands.
Any user authorized to use the affected RestAPI routes could hence
execute arbitrary Livestatus commands.
This issue was uncovered by internal review.
Affected Versions:
LI: 2.2.0 (beta)
LI: 2.1.0
LI: 2.0.0
Vulnerability Management:
We have rated the issue with a CVSS Score of 8.3 (High) with the
following CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H and
assigned CVE CVE-2023-31208.
Change-Id: I810b8cc2f920591a1aee2092c52f89d9fbfcbf59
Commit: 8ed44664c5459465b9ecd5e00eb76ca1b7ed617c
https://github.com/Checkmk/checkmk/commit/8ed44664c5459465b9ecd5e00eb76ca1b…
Author: Checkmk release system <feedback(a)checkmk.com>
Date: 2023-05-15 (Mon, 15 May 2023)
Changed paths:
M agents/check_mk_agent.aix
M agents/check_mk_agent.freebsd
M agents/check_mk_agent.hpux
M agents/check_mk_agent.linux
M agents/check_mk_agent.macosx
M agents/check_mk_agent.netbsd
M agents/check_mk_agent.openbsd
M agents/check_mk_agent.openvms
M agents/check_mk_agent.openwrt
M agents/check_mk_agent.solaris
M agents/cmk-agent-ctl/src/constants.rs
M agents/plugins/apache_status.py
M agents/plugins/asmcmd.sh
M agents/plugins/db2_mem
M agents/plugins/dnsclient
M agents/plugins/hpux_lunstats
M agents/plugins/hpux_statgrab
M agents/plugins/ibm_mq
M agents/plugins/isc_dhcpd.py
M agents/plugins/jar_signature
M agents/plugins/kaspersky_av
M agents/plugins/lnx_container_host_if.linux
M agents/plugins/lnx_quota
M agents/plugins/lvm
M agents/plugins/mailman_lists
M agents/plugins/mk_apt
M agents/plugins/mk_ceph
M agents/plugins/mk_cups_queues
M agents/plugins/mk_db2.aix
M agents/plugins/mk_db2.linux
M agents/plugins/mk_docker.py
M agents/plugins/mk_errpt.aix
M agents/plugins/mk_filehandler
M agents/plugins/mk_filestats.py
M agents/plugins/mk_haproxy.freebsd
M agents/plugins/mk_informix
M agents/plugins/mk_inotify.py
M agents/plugins/mk_inventory.aix
M agents/plugins/mk_inventory.linux
M agents/plugins/mk_inventory.solaris
M agents/plugins/mk_iptables
M agents/plugins/mk_jolokia.py
M agents/plugins/mk_logins
M agents/plugins/mk_logwatch.py
M agents/plugins/mk_mongodb.py
M agents/plugins/mk_mysql
M agents/plugins/mk_nfsiostat
M agents/plugins/mk_omreport
M agents/plugins/mk_oracle
M agents/plugins/mk_oracle_crs
M agents/plugins/mk_postgres.py
M agents/plugins/mk_redis
M agents/plugins/mk_sap.aix
M agents/plugins/mk_sap.py
M agents/plugins/mk_sap_hana
M agents/plugins/mk_saprouter
M agents/plugins/mk_scaleio
M agents/plugins/mk_site_object_counts
M agents/plugins/mk_sshd_config
M agents/plugins/mk_suseconnect
M agents/plugins/mk_tinkerforge.py
M agents/plugins/mk_tsm
M agents/plugins/mk_zypper
M agents/plugins/mtr.py
M agents/plugins/netstat.aix
M agents/plugins/netstat.linux
M agents/plugins/netstat.solaris
M agents/plugins/nfsexports
M agents/plugins/nfsexports.solaris
M agents/plugins/nginx_status.py
M agents/plugins/plesk_backups.py
M agents/plugins/plesk_domains.py
M agents/plugins/runas
M agents/plugins/smart
M agents/plugins/symantec_av
M agents/plugins/unitrends_backup
M agents/plugins/unitrends_replication.py
M agents/plugins/vxvm
M agents/plugins/websphere_mq
M agents/plugins/zorp
M agents/windows/plugins/ad_replication.bat
M agents/windows/plugins/arcserve_backup.ps1
M agents/windows/plugins/citrix_farm.ps1
M agents/windows/plugins/citrix_licenses.vbs
M agents/windows/plugins/citrix_xenapp.ps1
M agents/windows/plugins/hyperv_vms.ps1
M agents/windows/plugins/hyperv_vms_guestinfos.ps1
M agents/windows/plugins/iis_app_pool_state.ps1
M agents/windows/plugins/kaspersky_av_client.vbs
M agents/windows/plugins/mcafee_av_client.bat
M agents/windows/plugins/megaraid.bat
M agents/windows/plugins/mk_dhcp_enabled.bat
M agents/windows/plugins/mk_inventory.vbs
M agents/windows/plugins/mk_msoffice.ps1
M agents/windows/plugins/mk_mysql.vbs
M agents/windows/plugins/mk_oracle.ps1
M agents/windows/plugins/msexch_dag.ps1
M agents/windows/plugins/msexch_database.ps1
M agents/windows/plugins/mssql.vbs
M agents/windows/plugins/netstat_an.bat
M agents/windows/plugins/rds_licenses.vbs
M agents/windows/plugins/rstcli.bat
M agents/windows/plugins/sansymphony.ps1
M agents/windows/plugins/storcli.bat
M agents/windows/plugins/tsm_checks.bat
M agents/windows/plugins/veeam_backup_status.ps1
M agents/windows/plugins/win_dhcp_pools.bat
M agents/windows/plugins/win_dmidecode.bat
M agents/windows/plugins/win_license.bat
M agents/windows/plugins/win_printers.ps1
M agents/windows/plugins/windows_broadcom_bonding.bat
M agents/windows/plugins/windows_if.ps1
M agents/windows/plugins/windows_intel_bonding.bat
M agents/windows/plugins/windows_multipath.vbs
M agents/windows/plugins/windows_os_bonding.ps1
M agents/windows/plugins/windows_tasks.ps1
M agents/windows/plugins/windows_updates.vbs
M agents/windows/plugins/wmic_if.bat
M agents/wnx/src/common/wnx_version.h
M bin/livedump
M bin/mkbackup
M bin/mkbench
M cmk/utils/version.py
M configure.ac
M defines.make
M docker/Dockerfile
Log Message:
-----------
Set version to 2.1.0p29
Commit: 279e29280bff3c002258cbbbf650efea171ab353
https://github.com/Checkmk/checkmk/commit/279e29280bff3c002258cbbbf650efea1…
Author: Kenneth Okoh <kenneth.okoh(a)checkmk.com>
Date: 2023-05-16 (Tue, 16 May 2023)
Changed paths:
M .werks/10174
M .werks/10447
M .werks/12326
M .werks/13750
M .werks/14084
M .werks/14098
M .werks/7341
M agents/cfg_examples/dnsclient.cfg
M agents/wnx/install/Product.wxs
A agents/wnx/install/checkmk.ico
R agents/wnx/install/tribe29.ico
M agents/wnx/msb.ps1
M agents/wnx/scripts/tools/findagentmsi.ps1
M agents/wnx/scripts/tools/is_installed.cmd
M agents/wnx/test_files/msibuild/msi/check_mk_agent.msi
M checks/check_mail
Log Message:
-----------
Rebranding: Remove most of the remaining "tribe29" references
References to *.lan.tribe29.com stay in place for now and will be
removed once the respective systems are migrated to checkmk.net
CMK-12940
Change-Id: Id2342eefaeb8bc6c39ccb75f122696b032deb246
Commit: 76841d11aa89e39905332029a11f8399637827ac
https://github.com/Checkmk/checkmk/commit/76841d11aa89e39905332029a11f83996…
Author: Kenneth Okoh <kenneth.okoh(a)checkmk.com>
Date: 2023-05-16 (Tue, 16 May 2023)
Changed paths:
M tests/unit/checks/generictests/datasets/azure_usagedetails.py
Log Message:
-----------
Rebranding: Remove "tribe29" references from tests/* (II)
CMK-12940
Change-Id: I7e0273e84b4ff65686cd320f32755b945b1dd5e3
Commit: f565b495ac870c2568e22e86351422508c0149e1
https://github.com/Checkmk/checkmk/commit/f565b495ac870c2568e22e86351422508…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2023-05-16 (Tue, 16 May 2023)
Changed paths:
M docker/Dockerfile
M docker/Makefile
Log Message:
-----------
Remove last DOCKER_BUILDKIT=0
* "--network" is somehow not supported by the new builder, see
https://github.com/moby/buildkit/issues/978
* anyway, during our builds this process does not makes much sense anymore (especially as
we don't find release candidates on the download servers)
* if you've used this locally, just provide the package manually
Change-Id: Ic6af45d28ec7d154c11f17f9f2b291e626fba928
JIRA-Ref: CMK-12974
Commit: 3d0157168ac239f5713af3b0238eaed0a0f021f6
https://github.com/Checkmk/checkmk/commit/3d0157168ac239f5713af3b0238eaed0a…
Author: Kenneth Okoh <kenneth.okoh(a)checkmk.com>
Date: 2023-05-16 (Tue, 16 May 2023)
Changed paths:
M .werks/13810
M .werks/15115
M cmk/gui/plugins/openapi/endpoints/downtime.py
M doc/helpers/headrify
M docker/Dockerfile
Log Message:
-----------
Rebranding: Remove more "tribe29" references
CMK-12940
Change-Id: I4d8fd08f5eead7ae0be4a772400a6eba214e1ce8
Commit: dc896be2b7111c27d71f571f7cbfeda983cbea1f
https://github.com/Checkmk/checkmk/commit/dc896be2b7111c27d71f571f7cbfeda98…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2023-05-16 (Tue, 16 May 2023)
Changed paths:
M docker/Dockerfile
M docker/Makefile
Log Message:
-----------
Revert "Remove last DOCKER_BUILDKIT=0"
This reverts commit f565b495ac870c2568e22e86351422508c0149e1.
Commit: 460ab8e3673768a9cafe17cc7747167f4579f9e3
https://github.com/Checkmk/checkmk/commit/460ab8e3673768a9cafe17cc7747167f4…
Author: Timotheus Bachinger <timotheus.bachinger(a)tribe29.com>
Date: 2023-05-16 (Tue, 16 May 2023)
Changed paths:
A .werks/15561
M omd/distros/ALMALINUX_9.mk
M omd/packages/lasso/lasso.make
M omd/packages/mod_auth_mellon/mod_auth_mellon.make
Log Message:
-----------
15561 FIX Use system mod_auth_mellon under RHEL 9
If you're using SAML authentication with mod_auth_mellon under RHEL9, you might be
affected by this werk.
We're now not shipping mod_auth_mellon/lasso anymore with checkmk but require this
during the installation of the checkmk package.
SUP-13624
Change-Id: I131a79cc5af2aa431fe41b7250a177b39d800f70
Commit: 4d3013f9d1ef03d606ff7ab4e27f8468efaf8cb8
https://github.com/Checkmk/checkmk/commit/4d3013f9d1ef03d606ff7ab4e27f8468e…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2023-05-16 (Tue, 16 May 2023)
Changed paths:
M docker/Dockerfile
M docker/Makefile
M tests/docker/test_docker.py
Log Message:
-----------
Remove last DOCKER_BUILDKIT=0 (attempt #2)
This reverts commit 120cde899a3d42c029b3109d4d74707e868b0b3d.
* "--network" is somehow not supported by the new builder, see
https://github.com/moby/buildkit/issues/978
* anyway, during our builds this process does not makes much sense anymore (especially as
we don't find release candidates on the download servers)
* if you've used this locally, just provide the package manually
Change-Id: Iab8a5a3108d84064fc14dab1e5bf44d7884d7cc0
JIRA-Ref: CMK-12974
Commit: d179ed72ad3e0b1ef1645e8d939b6bc0515e3131
https://github.com/Checkmk/checkmk/commit/d179ed72ad3e0b1ef1645e8d939b6bc05…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2023-05-16 (Tue, 16 May 2023)
Changed paths:
M docker/Dockerfile
M docker/Makefile
M tests/docker/test_docker.py
Log Message:
-----------
Revert "Remove last DOCKER_BUILDKIT=0 (attempt #2)"
This reverts commit 4d3013f9d1ef03d606ff7ab4e27f8468efaf8cb8.
Commit: c478f3e9fb14233982255cfc2d259cb1416a9b01
https://github.com/Checkmk/checkmk/commit/c478f3e9fb14233982255cfc2d259cb14…
Author: Ronny Bruska <ronny.bruska(a)checkmk.com>
Date: 2023-05-17 (Wed, 17 May 2023)
Changed paths:
M cmk/gui/pagetypes.py
Log Message:
-----------
Fix link 'Save & go to...' for pagetypes
CMK-13187
Change-Id: I3e0dd1fe5b5a9f51bc76e3e838e6a6279c8c1e18
Commit: 0c86f509c0deb7b82b3b2cb1a8e7c2df08918922
https://github.com/Checkmk/checkmk/commit/0c86f509c0deb7b82b3b2cb1a8e7c2df0…
Author: Joerg Herbel <joerg.herbel(a)checkmk.com>
Date: 2023-05-17 (Wed, 17 May 2023)
Changed paths:
A .werks/15848
M agents/plugins/mk_oracle
Log Message:
-----------
15848 FIX <tt>mk_oracle</tt>: Fix asynchronous execution on
<tt>systemd</tt> systems and direct call from the command line
CMK-13246
Change-Id: I0cbd0aea0121900dc2cabd8b59989bfcfee4371a
Commit: 0e3e692270d29a8dc0039b07079ee691bb551563
https://github.com/Checkmk/checkmk/commit/0e3e692270d29a8dc0039b07079ee691b…
Author: Wontek Hong <wontek.hong(a)tribe29.com>
Date: 2023-05-17 (Wed, 17 May 2023)
Changed paths:
A .werks/15654
M checkman/windows_tasks
M checks/windows_tasks
M cmk/gui/plugins/wato/check_parameters/windows_tasks.py
M tests/unit/cmk/gui/plugins/wato/check_parameters/test_plugin_vs_wato.py
Log Message:
-----------
15654 windows_tasks: allow discovery to decide if disabled tasks are included or not
The Windows Tasks rule allowed the user to map not 'enabled' tasks to a specific
state.
However, tasks which were 'disabled' during discovery were completely ignored and
could therefore not benefit from this rule. This led to confusion as to what group was
targeted by the specification 'not enabled'. This werk, therefore, introduces an
appropriate
discovery rule which allows the user to control if initially 'disabled' tasks are
supposed
to be monitored or not.
SUP-14018
Change-Id: I9bab674a57b2825a4195f678aa0281c565c801b9
Commit: c26a8b51ceedaa2c8bc4902b391daee41017ba3e
https://github.com/Checkmk/checkmk/commit/c26a8b51ceedaa2c8bc4902b391daee41…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2023-05-17 (Wed, 17 May 2023)
Changed paths:
A .werks/15563
M omd/distros/ALMALINUX_9.mk
Log Message:
-----------
15563 FIX Add missing perl-lib to almalinux9
CMK-13466
Change-Id: I39258ac8af6ae29f633463f011274e81e4b1382c
Change-Id: Ib1716091cdbab172e616c3e62ac8505cc9320af1
Compare: https://github.com/Checkmk/checkmk/compare/84fb96d1e6bb...c26a8b51ceed