Checkmk werks level1

checkmk-werks-lvl1@lists.checkmk.com

1 participants
15969 discussions

Checkmk Werk 14485: Fix session cookie validation on RestAPI

by Maximilian Wirtz

ID: 14485 Title: Fix session cookie validation on RestAPI Component: REST API Level: 1 Class: Security fix Version: 2.2.0i1 Before this Werk expired sessions were still valid on the RestAPI, since the RestAPI only vaildated the Cookie signature. An attacker who was able to steal a session cookie could use that cookie on the RestAPI even after the session expired. Some actions though require access to the user session, these action fail due to the expired session. Some actions do not access the session and are therefore possible. Affected Versions: All versions with the RestAPI are affected: 2.0, and 2.1. Mitigations: Immediate mitigations are not available. Indicators of Compromise: Review Apache and web.log for suspicious logs. Vulnerability Management: We have rated the issue with a CVSS Score of 5.6 (Medium) with the following CVSS vector: <tt>CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L</tt>. A CVE has been requested.

2 years

Checkmk Werk 14763: domino_tasks: state becomes UNKNOWN instead of STALE when data is missing

by Lisa Pichler

ID: 14763 Title: domino_tasks: state becomes UNKNOWN instead of STALE when data is missing Component: Checks & agents Level: 1 Class: Bug fix Version: 2.2.0i1 The check "domino_tasks" shows state UNKNOWN along with the message "Item not found in monitoring data", even though there is no data available for this check. The check now becomes STALE when no data is available.

2 years

Checkmk Werk 14556: mk_postgres: support Latin-1 server encoding

by Solomon Jacobs

ID: 14556 Title: mk_postgres: support Latin-1 server encoding Component: Checks & agents Level: 1 Class: Bug fix Version: 2.2.0i1 Previously, any Postgresgl server with encoding Latin-1 would be rejected by the agent <tt>mk_postgres.py<\tt>. This is because some of the SQL queries sent by the agent contained utf-8 only characters. With this werk, the agent supports Latin-1 encoding.

2 years

Checkmk Werk 14749: Fix TypeError on export of graph collections as PDF

by Ronny Bruska

ID: 14749 Title: Fix TypeError on export of graph collections as PDF Component: Reporting & Availability Level: 1 Class: Bug fix Version: 2.2.0i1 If you exported a graph collection via "Export" - "This collection as PDF", the error "TypeError: string indices must be integers" occurred.

2 years

Checkmk Werk 14735: Agent Bakery: Cleanup orphaned packages

by Andreas Umbreit

ID: 14735 Title: Agent Bakery: Cleanup orphaned packages Component: agents Level: 1 Class: Bug fix Version: 2.2.0i1 When narrowing down packages using the "Agent bakery packages" agent ruleset, it may happen that a host is assigned to two different agent packages after baking. This may happen when you start using the abovementioned rule. On baking, this will result in a new agent package for the matched hosts. If nothing else happens to the package that the hosts were assigned to previously, the now-unselected platforms will remain for the previous package. As they are explicitly unwanted by setting the rule, these orphaned packages are now cleaned up.

2 years

Checkmk Werk 14720: Fix <ii>Percentage of service problems</ii> dashlet in custom dashboards

by Joerg Herbel

ID: 14720 Title: Fix <ii>Percentage of service problems</ii> dashlet in custom dashboards Component: Multisite Level: 1 Class: Bug fix Version: 2.2.0i1 Depending on the current configuration, the dashlet <ii>Percentage of service problems</ii> reported "Sorry, you cannot create combined graphs for more than 100 objects" when used in custom dashboards. This regression was introduced with werk <a href="https://checkmk.com/werk/14423">#14423</a>. Note that this werk only affects custom dashboards, not builtin dashboards such as the main dashboard. It is possible that werk #14423 results in the error message also being displayed in the main dashboard, on which this werk has no impact. Note that this probably means that the <ii>Percentage of total service problems</ii> graph in the main dashboard was showing wrong values prior to werk #14423.

2 years

Checkmk Werk 13734: mk_oracle: Do not empty cache if the plugin is triggered from multiple sites

by Simon Jess

ID: 13734 Title: mk_oracle: Do not empty cache if the plugin is triggered from multiple sites Component: Checks & agents Level: 1 Class: Bug fix Version: 2.2.0i1

2 years

Checkmk Werk 14679: apache_status plugin falls back on ss if netstat is not installed

by External contributor

ID: 14679 Title: apache_status plugin falls back on ss if netstat is not installed Component: agents Level: 1 Class: Bug fix Version: 2.2.0i1 If netstat is not installed the apache status plugin will fallback to ss.

2 years

Checkmk Werk 14292: Fix possible broken web access after updating to 2.1.0p10

by Lars Michelsen

ID: 14292 Title: Fix possible broken web access after updating to 2.1.0p10 Component: Site Management Level: 1 Class: Bug fix Version: 2.2.0i1 Checkmk 2.1.0p10 changed the handling of the apache configuration with werk #14290. This change introduced a new issue which could break the system apache configuration in case a sites apache configuration was not yet updated to the new system apache configuration. The problem appears because as of 2.1.0p10 the file <tt>etc/apache/apache-own.conf</tt> was removed from all sites. However, this file must only be removed for sites which already updated the apache config. In case you experience this issue, you can either update your apache configuration with <tt>omd update-apache-config [SITE_ID]</tt> or restore your old <tt>etc/apache/apache-own.conf</tt> in your site and restart the system apache again.

2 years

Checkmk Werk 14555: KUBE: kube_pod_containers replaces \n in check summary

by Solomon Jacobs

ID: 14555 Title: KUBE: kube_pod_containers replaces \n in check summary Component: Checks & agents Level: 1 Class: Bug fix Version: 2.2.0i1 Previously, the check kube_pod_containers would crash with C+: raise ValueError("'\\n' not allowed in 'summary'") C-: This was because any linebreak in the detailed description of the container state was written to the checks summary. With this werk, linebreaks are replaced with '; '.

2 years

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

Checkmk werks level1