ID: 0824
Title: Valuespecs: Fixed several possible HTML injections in valuespecs
Component: WATO
Level: 1
Class: Security Fix
Version: 1.2.5i4
Several HTML injections in valuespecs of different types (mostly used in WATO)
were missing good escaping of values. This has been added to prevent HTML
code injections which could be used for XSS attacks. This only affects WATO
and logged in users which are permitted to use WATO and open the page
(e.g. the list of rules) which displays the values.
ID: 0823
Title: mk_sap: Fixed some wrong calculated values (decimal numbers)
Component: Checks & Agents
Level: 1
Class: Bug Fix
Version: 1.2.5i4
The values provided by SAP seem to be integers with a second value
which can be used to tell the asking program the number of decimals.
e.g. when this value states 2, a load value of 901 is converted to
9.01. This value has not been used in the past which lead to odd
check results.
ID: 1003
Title: ibm_svc_enclosure: support new firmware, also check fan modules
Component: Checks & Agents
Level: 1
Class: New Feature
Version: 1.2.5i4
ID: 1002
Title: Fix crash when debugging notifications with non-Ascii characters
Component: Notifications
Level: 2
Class: Bug Fix
Version: 1.2.5i4
When full notification debugging was enabled then notifications with
a non-Ascii character would raise an exception and not be sent.
ID: 0940
Title: Fixed various core SIGSEGV when using malformed livestatus queries
Component: Core & Setup
Level: 2
Class: Security Fix
Version: 1.2.5i4
Some malformed livestatus queries could crash the monitoring core.
This happened whenever the value field for certain keys was missing.<br>
For example
C+:
lq "GET hosts\nColumnHeaders:\n"
lq "GET hosts\nAnd:\n"
lq "GET hosts\nKeepalive:\n
C-:
ID: 0821
Title: Reducing size of auth.php (needed for authorisation in NagVis) in large environments
Component: WATO
Level: 1
Class: Bug Fix
Version: 1.2.5i4
In environments with a large user base or a large folder structure, the auth.php file which
is being generated while modifying users, roles and activating the pending changes, the file
could get very large. This change reduces the size of the file in such a case dramatically.
ID: 0623
Title: fsc_fans: upper levels for fan RPMs are now optional also for the check
Component: Checks & Agents
Level: 1
Class: Bug Fix
Version: 1.2.5i4