Checkmk werks level1 August 2023

checkmk-werks-lvl1@lists.checkmk.com

1 participants
78 discussions

Checkmk Werk 16041: New permissions "Discard changes" and "Discard foreign changes"

by Checkmk werks level 1

ID: 16041 Title: New permissions "Discard changes" and "Discard foreign changes" Component: Setup Level: 1 Class: New feature Version: 2.3.0b1 We introduce two new permissions that let administrators allow/disallow users to discard changes. LI: "Discard changes" lets a user discard their own pending changes; defaults to "yes" for the role "normal monitoring user". LI: "Discard foreign changes" lets a user discard other users' pending changes (foreign changes); defaults to "no" for the role "normal monitoring user". You can find the two permissions for any role under <ii>Setup > Users > Roles & permissions</tt> in the section "Setup".

1 year, 1 month

Checkmk Werk 15868: cpu_loads, blade_bx_load, wmi_cpuload: Configurable levels for other load averaging types

by Checkmk werks level 1

ID: 15868 Title: cpu_loads, blade_bx_load, wmi_cpuload: Configurable levels for other load averaging types Component: Checks & agents Level: 1 Class: New feature Version: 2.3.0b1 The check plugins LI: CPU load (<tt>cpu_loads</tt>) LI: Primergy BX600 Blade Enclosure: CPU Load (<tt>blade_bx_load</tt>) LI: Windows CPU Load (<tt>wmi_cpuload</tt>) show and allow configuration of levels for the 15 minutes average of the CPU load. These plugins now also show (in the service details only) the one and five minutes average of the load, and allow configuration of levels for them.

1 year, 1 month

Checkmk Werk 15862: Monitor Pure Storage FlashArrays

by Checkmk werks level 1

ID: 15862 Title: Monitor Pure Storage FlashArrays Component: Checks & agents Level: 1 Class: New feature Version: 2.3.0b1 This Werk adds services monitoring "Pure Storage FlashArrays". Configuring a special agent by the same name lets you monitor the devices using the plugins LI: Pure Storage FlashArray: Ethernet Port LI: Pure Storage FlashArray: Internal Alerts LI: Pure Storage FlashArray: Overall Capacity LI: Pure Storage FlashArray: Volume Capacity LI: Pure Storage FlashArray: Fibre Channel Port LI: Pure Storage FlashArray: InfiniBand Port LI: Pure Storage FlashArray: Storage Bay LI: Pure Storage FlashArray: Fan For details please refer to the corresponding plugin manpages.

1 year, 1 month

Checkmk Werk 16015: ldap: resolve error when saving LDAP connection config with global customer

by Checkmk werks level 1

ID: 16015 Title: ldap: resolve error when saving LDAP connection config with global customer Component: Setup Level: 1 Class: Bug fix Version: 2.2.0p8 Prior to this werk, Checkmk raised an error whenever the user attempted to create a LDAP connection config with the customer option set to "Global". This werk resolves this issue.

1 year, 1 month

Checkmk Werk 14612: CheckMK Server discovers wrong items as service

by Checkmk werks level 1

ID: 14612 Title: CheckMK Server discovers wrong items as service Component: Checks & agents Level: 1 Class: Bug fix Version: 2.2.0p8 Due to missing grouping delimiter `Failed Fencing Actions` the `heartbeat_crm` would discover invalid items as service. This change adds the missing delimiter making `heartbeat_crm` discover valid items only.

1 year, 1 month

Checkmk Werk 15705: Warning about agent updater rule on CME remote site update

by Checkmk werks level 1

ID: 15705 Title: Warning about agent updater rule on CME remote site update Component: Setup Level: 1 Class: Bug fix Version: 2.3.0b1 When updating a remote site in a distributed site setup using the Checkmk Managed Services Edition, the update process may issue a warning like this: C+: -| WARNING: Invalid rule configuration detected (Ruleset: agent_config:cmk_update_agent, Title: Agent updater (Linux, Windows, Solaris), Folder: , -| Rule nr: 1, Exception: -----BEGIN CERTIFICATE----- -| MII... -| ...HqQ== -| -----END CERTIFICATE----- -| is not an allowed value) -| Detected 1 issue(s) in configured rules. -| To correct these issues, we recommend to open the affected rules in the GUI. -| Upon attempting to save them, any problematic fields will be highlighted. C-: The root cause for this warning is that on the CME remote site, the underlying agent signing certificates are not available, so the ruleset referring to them can't be verified. As a workaround you can safely ignore this warning, since the cmk_update_agent rule is never used on a remote site. However, from now on the warning won't be displayed any longer.

1 year, 1 month

Checkmk Werk 15691: Fix XSS in business intelligence

by Checkmk werks level 1

ID: 15691 Title: Fix XSS in business intelligence Component: Setup Level: 1 Class: Security fix Version: 2.3.0b1 Prior to this Werk it was possible to inject HTML or Javascript (Reflected XSS). A legitimate user tricked to click on a prepared link would then run arbitrary Javascript code in a valid session. This vulnerability is only triggerable if another Business Intelligence BI pack (next to the default) was created. We found this vulnerability internally. Affected Versions: LI: 2.2.0 LI: 2.1.0 LI: 2.0.0 LI: 1.6.0 (probably older versions as well) Indicators of Compromise: To check for exploitation one can check the site apache access log <tt>var/log/apache/access_log</tt> for entries like <tt>/$SITENAME/check_mk/wato.py?mode=bi_aggregations&bulk_moveto=</tt>. The order of the URL paramters can be changed by an attacker. Potential injected code would be in the parameter <tt>bulk_moveto</tt>. Vulnerability Management: We have rated the issue with a CVSS Score of 5.4 (Medium) with the following CVSS vector: <tt>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N</tt>. We assigned CVE-2023-23548 to this vulnerability. Changes: This Werk introduces escaping for the vulnerable parameter.

1 year, 1 month

Checkmk Werk 15931: Enable scrolling for sidebar element dashlets

by Checkmk werks level 1

ID: 15931 Title: Enable scrolling for sidebar element dashlets Component: Multisite Level: 1 Class: Bug fix Version: 2.3.0b1 Scrolling was not possible in sidebar element dashlets, e.g. the quicksearch snapin.

1 year, 1 month

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

Checkmk werks level1 August 2023