ID: 11860
Title: Password dialogs now handle passwords more securely
Component: Setup
Level: 2
Class: Security fix
Version: 2.1.0i1
Previous Checkmk versions did not handle passwords well in some edit dialogs.
Especially in the setup (WATO) it was possible to access saved passwords in
some places, which should not be possible.
The dialogs now ensure that these accesses from passwords entered once and
stored on the checkmk server are no longer easily possible.
ID: 11837
Title: Windows agent firewall rule applies to all three Windows network profiles
Component: Checks & agents
Level: 2
Class: Security fix
Version: 2.1.0i1
With this realease Windows agent opens firewall for all three Windows network profile:
Private, Domain and Public.
ID: 11827
Title: Windows agent firewall rule applies to all three Windows network profiles
Component: Checks & agents
Level: 2
Class: Security fix
Version: 2.1.0i1
With this realease Windows agent opens firewall for all three Windows network profile:
Private, Domain and Public.
ID: 10130
Title: Fixed performance bug in monitoring history cache
Component: Core & setup
Level: 2
Class: Bug fix
Version: 2.1.0i1
During startup, the CMC caches information from the monitoring history up to
a given horizon in the past. This caching had a performance bug (quadratic
complexity), resulting in caching times of several days or even more,
depending on the content of the monitoring history. This has been fixed,
caching time is now linear in the size of the monitoring history.
ID: 11756
Title: Fix errors after form submissions when using web server authentication
Component: Multisite
Level: 2
Class: Bug fix
Version: 2.1.0i1
When using the web server level authentication (Basic, digest, kerberos, ...),
several form submissions raised an error like this: "AttributeError ('NoneType'
object has no attribute 'session_info')". This was caused by an incomplete session
initialization when using this kind of authentication.
ID: 11768
Title: Missing inventory data
Component: HW/SW Inventory
Level: 2
Class: Bug fix
Version: 2.1.0i1
In Checkmk versions 2.0.0i1 and 2.0.0b1 the HW/SW-Inventory was missing virtually all
data in certain timing conditions.
ID: 11787
Title: Kubernetes: add support for newer versions
Component: Checks & agents
Level: 2
Class: Bug fix
Version: 2.1.0i1
This werk adds support for new versions of Kubernetes.
Filesystem and interface check plugins are not available
at the moment and will result in vanished services. We
are working on an alternative solution to fix this issue.
ID: 11469
Title: Windows agent removes legacy agent on install if this is requested by WATO
Component: Checks & agents
Level: 2
Class: Bug fix
Version: 2.1.0i1
Previously, Windows agent tried to remove the legacy agent too early, i.e. before full config file from WATO
had been deployed in the target system, thus ignoring the rule "Remove legacy agent".
With this release the error has been fixed.
ID: 11747
Title: Fix stored XSS triggered by received syslog messages
Component: Event Console
Level: 2
Class: Security fix
Version: 2.1.0i1
You are only affected by this issue in case you use the Event Console.
An attacker could send messages to the Event Console, e.g. via syslog,
containing arbitrary HTML code. This was executed in the browser context of any
user viewing the event in the Checkmk user interface.
The information is now properly escaped in a generic way to prevent these
issues.
ID: 10129
Title: Fixed WaitObject regression in Livestatus queries
Component: Livestatus
Level: 3
Class: Bug fix
Version: 2.1.0i1
There are 2 Livestatus tables consisting only of a single row:
"status" and "eventconsolestatus". You can't specify a WaitObject
for them (they have no primary key), so you leave this header out
when using WaitCondition/WaitTimeout/... on these single-row tables.
This special case was broken in early 2.0 versions and has been fixed.