ID: 5261
Title: Improve agent bakery robustness when baking new agents
Component: agents
Level: 1
Class: Bug fix
Version: 1.5.0i1
Depending on the complexity of the underlying configuration ruleset, some agents accidently could be marked as to be rebaked although there is no config change for them.
This is now mitigated by applying a more robust hashing algorithm for the agent config hashes.
After updating, no further action is required to apply the fix. Notably, no re-bake of existing agents is required.
ID: 5427
Title: Fixed different XSS issues triggerd from BI aggregation/rule titles/descriptions
Component: BI
Level: 1
Class: Security fix
Version: 1.5.0i1
Different fields in the BI configuration (titles, ...) could be used to inject JS code
into the WATO dialogs and the BI status views. This could be triggered by users with
permission to administrate WATO.
ID: 5351
Title: check_http: Use HTTPS instead of HTTP in service description for SSL/TLS connections
Component: Checks & agents
Level: 1
Class: New feature
Version: 1.5.0i1
For Check HTTP checks the service description now uses HTTPS instead of
HTTP if a connection via SSL/TLS is used. This makes it easy to distinguish
if a Check uses HTTP or HTTPS for a connection.
This feature is automatically enabled for new Check_MK installations.
If you upgrade an existing Check_MK installation you have to enable it
in the global settings via the option "Use new service descriptions"
in the section "Execution of checks". Be aware that the change may effect
existing rules, performance data (if present), and the availability
history.
ID: 5425
Title: Fixed broken bookmark list management for users with non ascii characters in User IDs
Component: Multisite
Level: 1
Class: Bug fix
Version: 1.5.0i1
ID: 5423
Title: Fixed exception on "Catalog of check plugins page"
Component: WATO
Level: 1
Class: Bug fix
Version: 1.5.0i1
The exception was caused by man pages having an empty "catalog:" header declaration.
ID: 5424
Title: Fixed possible exception during logout when having cookies with invalid format for other sites
Component: Multisite
Level: 1
Class: Bug fix
Version: 1.5.0i1