Checkmk werks level2 December 2020

checkmk-werks-lvl2@lists.checkmk.com

5 participants
10 discussions

Checkmk Werk 11860: Password dialogs now handle passwords more securely

by Lars Michelsen

ID: 11860 Title: Password dialogs now handle passwords more securely Component: Setup Level: 2 Class: Security fix Version: 2.1.0i1 Previous Checkmk versions did not handle passwords well in some edit dialogs. Especially in the setup (WATO) it was possible to access saved passwords in some places, which should not be possible. The dialogs now ensure that these accesses from passwords entered once and stored on the checkmk server are no longer easily possible.

3 years, 8 months

Checkmk Werk 11837: Windows agent firewall rule applies to all three Windows network profiles

by Sergey Kipnis

ID: 11837 Title: Windows agent firewall rule applies to all three Windows network profiles Component: Checks & agents Level: 2 Class: Security fix Version: 2.1.0i1 With this realease Windows agent opens firewall for all three Windows network profile: Private, Domain and Public.

3 years, 8 months

Checkmk Werk 11827: Windows agent firewall rule applies to all three Windows network profiles

by Sergey Kipnis

ID: 11827 Title: Windows agent firewall rule applies to all three Windows network profiles Component: Checks & agents Level: 2 Class: Security fix Version: 2.1.0i1 With this realease Windows agent opens firewall for all three Windows network profile: Private, Domain and Public.

3 years, 8 months

Checkmk Werk 10130: Fixed performance bug in monitoring history cache

by Sven Panne

ID: 10130 Title: Fixed performance bug in monitoring history cache Component: Core & setup Level: 2 Class: Bug fix Version: 2.1.0i1 During startup, the CMC caches information from the monitoring history up to a given horizon in the past. This caching had a performance bug (quadratic complexity), resulting in caching times of several days or even more, depending on the content of the monitoring history. This has been fixed, caching time is now linear in the size of the monitoring history.

3 years, 9 months

Checkmk Werk 11756: Fix errors after form submissions when using web server authentication

by Lars Michelsen

ID: 11756 Title: Fix errors after form submissions when using web server authentication Component: Multisite Level: 2 Class: Bug fix Version: 2.1.0i1 When using the web server level authentication (Basic, digest, kerberos, ...), several form submissions raised an error like this: "AttributeError ('NoneType' object has no attribute 'session_info')". This was caused by an incomplete session initialization when using this kind of authentication.

3 years, 9 months

Checkmk Werk 11768: Missing inventory data

by Moritz Kiemer

ID: 11768 Title: Missing inventory data Component: HW/SW Inventory Level: 2 Class: Bug fix Version: 2.1.0i1 In Checkmk versions 2.0.0i1 and 2.0.0b1 the HW/SW-Inventory was missing virtually all data in certain timing conditions.

3 years, 9 months

Checkmk Werk 11787: Kubernetes: add support for newer versions

by Tom Baerwinkel

ID: 11787 Title: Kubernetes: add support for newer versions Component: Checks & agents Level: 2 Class: Bug fix Version: 2.1.0i1 This werk adds support for new versions of Kubernetes. Filesystem and interface check plugins are not available at the moment and will result in vanished services. We are working on an alternative solution to fix this issue.

3 years, 9 months

Checkmk Werk 11469: Windows agent removes legacy agent on install if this is requested by WATO

by Sergey Kipnis

ID: 11469 Title: Windows agent removes legacy agent on install if this is requested by WATO Component: Checks & agents Level: 2 Class: Bug fix Version: 2.1.0i1 Previously, Windows agent tried to remove the legacy agent too early, i.e. before full config file from WATO had been deployed in the target system, thus ignoring the rule "Remove legacy agent". With this release the error has been fixed.

3 years, 9 months

Checkmk Werk 11747: Fix stored XSS triggered by received syslog messages

by Lars Michelsen

ID: 11747 Title: Fix stored XSS triggered by received syslog messages Component: Event Console Level: 2 Class: Security fix Version: 2.1.0i1 You are only affected by this issue in case you use the Event Console. An attacker could send messages to the Event Console, e.g. via syslog, containing arbitrary HTML code. This was executed in the browser context of any user viewing the event in the Checkmk user interface. The information is now properly escaped in a generic way to prevent these issues.

3 years, 9 months

Checkmk Werk 10129: Fixed WaitObject regression in Livestatus queries

by Sven Panne

ID: 10129 Title: Fixed WaitObject regression in Livestatus queries Component: Livestatus Level: 3 Class: Bug fix Version: 2.1.0i1 There are 2 Livestatus tables consisting only of a single row: "status" and "eventconsolestatus". You can't specify a WaitObject for them (they have no primary key), so you leave this header out when using WaitCondition/WaitTimeout/... on these single-row tables. This special case was broken in early 2.0 versions and has been fixed.

3 years, 9 months

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

Checkmk werks level2 December 2020