MIRACLE ZBX 1.8.19-1
MIRACLE ZBX 1.8.19-1
2014/03/06
サービス終了時に、約4秒以上終了に時間が掛かる場合にプロセスを強制終了しており、収集したメモリ上のデータが DB へ全て書き込まれないまま終了していたため、5分間は待機して強制終了しないよう変更。
- 認証設定において『HTTP』を使用している際に発生するユーザー詐称可能な脆弱性をバックポートし修正(ZBX-7703)
- MIRACLE ZBX のベースとしているソフトウェアを Zabbix 1.8.19 へアップデート
変更内容は以下 Changelog からの引用を参照
Changelog in 1.8.19:
[ZBX-7479] fixed remote command execution from Zabbix server if flexible user parameters are configured; thanks to Recurity Labs Team for the report (Sasha)
[ZBXNEXT-1256] changed example directory size user parameter to return bytes (Richlv)
[ZBX-7156] fixed string value escaping in profiles (Eduard)
[ZBX-4658] fixed system.boottime and system.uptime returning bogus values on Solaris when agent is compiled as a 64-bit binary (asaveljevs)
[ZBX-7119] fixed data collection stopping after no data maintenance until configuration cache is updated (asaveljevs)
[ZBX-7074] fixed incorrectly parsed trigger expression in trigger wizard (Vitalij)
[ZBXNEXT-1256] changed example directory size user parameter to return bytes (Richlv)
[ZBX-7156] fixed string value escaping in profiles (Eduard)
[ZBX-4658] fixed system.boottime and system.uptime returning bogus values on Solaris when agent is compiled as a 64-bit binary (asaveljevs)
[ZBX-7119] fixed data collection stopping after no data maintenance until configuration cache is updated (asaveljevs)
[ZBX-7074] fixed incorrectly parsed trigger expression in trigger wizard (Vitalij)
Changelog in 1.8.19:
[ZBX-7091] fixed SQL injection vulnerabilities in page filtering; thanks to Bernhard Schildendorfer from SEC Consult for the report (Eduard, Pavels)
[ZBX-7091] fixed SQL injection vulnerabilities in dashboard favourite managing; thanks to Lincoln, a member of Corelan Team, for the report (Eduard, Pavels)
[ZBX-6249] fixed data loss in proxy "Data sender" process caused by unfinished transactions; thanks to MATSUDA Daiki for patch (Andris)
[ZBX-6830] fixed dynamic item checkbox in Configuration > Screens (Ivo)
[ZBX-5924] fixed curl verify host option setting in ez texting (wiper)
[ZBX-7091] fixed SQL injection vulnerabilities in dashboard favourite managing; thanks to Lincoln, a member of Corelan Team, for the report (Eduard, Pavels)
[ZBX-6249] fixed data loss in proxy "Data sender" process caused by unfinished transactions; thanks to MATSUDA Daiki for patch (Andris)
[ZBX-6830] fixed dynamic item checkbox in Configuration > Screens (Ivo)
[ZBX-5924] fixed curl verify host option setting in ez texting (wiper)
