Checkmk werks level1

checkmk-werks-lvl1@lists.checkmk.com

1 participants
15969 discussions

Checkmk Werk 14747: Fix duplicate history log while processing spoolfiles

by Ronny Bruska

ID: 14747 Title: Fix duplicate history log while processing spoolfiles Component: Notifications Level: 1 Class: Bug fix Version: 2.2.0i1 Werk #13114 fixed missing history log entries for direct local delivery of notifications. If notification spooling was used afterwards, there was a duplicate message logged. Now only one message will be logged also for spoolfiles.

2 years, 1 month

Checkmk Werk 14695: azure_traffic_manager: Monitor Azure Traffic Manager

by Sofia Colakovic

ID: 14695 Title: azure_traffic_manager: Monitor Azure Traffic Manager Component: Checks & agents Level: 1 Class: New feature Version: 2.2.0i1 It's now possible to monitor Azure Traffic Manager in Checkmk. Two new checks have been added: <ul> <li>Microsoft Azure Traffic Manager: Qps</li> <li>Microsoft Azure Traffic Manager: Probe State</li> </ul> The new services will be automatically discovered if you have an Azure Traffic Manager Profile in the resource group already monitored in Checkmk.

2 years, 1 month

Checkmk Werk 14433: KUBE: New workload resource: CronJobs

by LukaRacic

ID: 14433 Title: KUBE: New workload resource: CronJobs Component: Checks & agents Level: 1 Class: New feature Version: 2.2.0i1 This werk introduces CronJobs to the Kubernetes agent. Similar to other Kubernetes objects, Checkmk creates a piggyback host for each CronJob. The CronJob host supports: - Memory resources - CPU resources - Info

2 years, 1 month

Checkmk Werk 14384: Fix command injection in livestatus query headers

by Hannes Rantzsch

ID: 14384 Title: Fix command injection in livestatus query headers Component: Livestatus Level: 1 Class: Security fix Version: 2.2.0i1 Prior to this Werk it was possible to inject livestatus commands in Checkmk's livestatus wrapper and python API. Attackers could add additional commands in the AuthUser query header using newline characters. This allowed running arbitrary livestatus commands, including external commands to the core. The issue could only be exploited by attackers from localhost, where the tampered header could be injected in a request to graph data. We thank Stefan Schiller (SonarSource) for reporting this issue. Affected Versions: All currently supported versions are affected: 1.6, 2.0, and 2.1. Mitigations: Immediate mitigations are not available. Indicators of Compromise: Review the logs of Nagios / CMC for suspicious commands. Vulnerability Management: We have rated the issue with a CVSS Score of 6.8 (Medium) with the following CVSS vector: <tt>CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L</tt>. A CVE has been requested. Changes: This Werk adds sanitization for the AuthUser header field.

2 years, 1 month

Checkmk Werk 14744: Fix reload of graph dashlets in dashboards

by Ronny Bruska

ID: 14744 Title: Fix reload of graph dashlets in dashboards Component: Multisite Level: 1 Class: Bug fix Version: 2.2.0i1 Graph dashlets used in dashboards were not refreshed correctly since 2.1 if the graph used a timerange option with "The last".

2 years, 1 month

Checkmk Werk 14678: mk_docker is docker >=6.0.0 compatible

by External contributor

ID: 14678 Title: mk_docker is docker >=6.0.0 compatible Component: agents Level: 1 Class: Bug fix Version: 2.2.0i1 The mk_docker plugin now works with docker version 6 or later. Previously, the plugin would fail with a message that the module docker.version was not json serializable.

2 years, 1 month

Checkmk Werk 14680: Fix crash in heartbeat_crm plugin

by External contributor

ID: 14680 Title: Fix crash in heartbeat_crm plugin Component: Checks & agents Level: 1 Class: Bug fix Version: 2.2.0i1 The heartbeat_crm check would crash with a KeyError when the rule "Heartbeat CRM general status" was not set.

2 years, 1 month

Checkmk Werk 14385: Fix limited SSRF in agent-receiver API

by Hannes Rantzsch

ID: 14385 Title: Fix limited SSRF in agent-receiver API Component: Core & setup Level: 1 Class: Security fix Version: 2.2.0i1 Prior to this Werk attackers could use the host registration API for Server Side Request Forgery. An attacker would have been able to make the Checkmk server issue local requests to endpoints that should only be accessible from localhost. In order to exploit this vulnerability attackers would have needed the privileges to register hosts. This vulnerability was caused by insufficient sanitization of the hostname of the host to be registered. We thank Stefan Schiller (SonarSource) for reporting this issue. Affected Versions: 2.1 Mitigations: The affected API can be disabled using <tt>omd stop agent-receiver</tt>. Note however, that this makes it impossible to register new hosts. Vulnerability Management: We have rated the issue with a CVSS Score of 5.0 (Medium) with the following CVSS vector: <tt>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N</tt>. A CVE has been requested. Changes: This Werk adds validation for the hostname and ensures hostnames are escaped in requests to the REST API.

2 years, 1 month

Checkmk Werk 14677: Remove item_name and item_help keywords from CheckParameterRulespecWithItem

by Max Linke

ID: 14677 Title: Remove item_name and item_help keywords from CheckParameterRulespecWithItem Component: Setup Level: 1 Class: Bug fix Version: 2.2.0i1 This change might break existing MKPs. The CheckParameterRulespecWithItem class does not accept the item_name and item_help keywords any longer. Instead item_spec should be used. Before this werk the following was valid to register a new rulespec. C+: rulespec_registry.register( CheckParameterRulespecWithItem( check_group_name="a_check", item_name="fitting item name", item_help="inline help test", group=RulespecGroupCheckParametersApplications, parameter_valuespec=_parameter_valuespec_network, title=lambda: "A good title", ) ) C-: This should be rewritten as: C+: rulespec_registry.register( CheckParameterRulespecWithItem( check_group_name="a_check", item_spec=lambda: TextInput(title="fitting item name", help="inline help text"), group=RulespecGroupCheckParametersApplications, parameter_valuespec=_parameter_valuespec_network, title=lambda: "A good title", ) ) C-:

2 years, 1 month

Checkmk Werk 14766: mk_mongodb.py: mongodb_instace section shows information from a different host

by Lisa Pichler

ID: 14766 Title: mk_mongodb.py: mongodb_instace section shows information from a different host Component: Checks & agents Level: 1 Class: Bug fix Version: 2.2.0i1 The agent plugin "mk_mongodb.py" creates the section "mongodb_instance". In some cases, this section contains information from a different host (i.e. replica) from within the MongoDB cluster than the one on which the agent plugin is located. The problem was that the connection settings did not specify to connect to the host directly. Therefore, requests were distributed across the cluster by MongoDB. This has been fixed. If this fix is required, the agent plugin must be redeployed to the hosts.

2 years, 1 month

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

Checkmk werks level1