Patch Notes

777.3 LTS

LTS Patches

We only release patches for Long Time Support (LTS) versions, except for some particular cases where we do so for Regular Rolling Release (RRR) versions. Security patches are developed as soon as possible after the vulnerability is detected.

Patches for LTS versions usually include critical-bug troubleshooting and solutions to security problems.

Bug fixes

FIX LTS#	GitLab#	Description
13921, 13936	13909	Fixed the update of the history database data structure, if enabled at the time of applying the patch.
14079	14078	Fixed node identification as well as that of their general agent data for the centralization and application of the license of use in a Command Center (Metaconsole) environment.
14256	12827	Fixed event reports (modules, agents and groups) so that, if configured, they obtain data from the history database and are consolidated into a single document.
14258	14257	Fixed Custom graphs generation in the process of obtaining the modules of an agent.
14261	14260	Fixed the tree view for when data is received with entities.
14278	14272	Fixed data display in the Log viewer for users without sufficient group rights. They will only be able to access the records of the groups the user belongs to.
14279	13842	Fixed the graphical representation for modules in an unknown state (negative values).
14350	13336, 14335	Fixed MIB data entry (SNMP) both normally and in a compressed manner.
14387	14381	Fixed graph filtering in the Command Center (Metaconsole) so that it obtains the corresponding node identifier.
14409	14403	Adjusted and fixed the SAP license so that it only intervenes in the SAP monitoring work, thus leaving the other tasks of PFMS Discovery without any restriction.
14522	N/A	Fixed critical module display in the tree view of the Command Center (Metaconsole).
14534	14533	Fixed node update with the Command Center centralized as a repository.

Improvements and small changes

FIX LTS#	GitLab#	Description
14004	13052	New design of Warp Update 2.0: It includes improvements such as the Command Center (Metaconsole) as a repository for node updates and better integration with Discovery PFMS feature library.
14077	11664	Internal fields for agents and modules (JSON and XML) for exclusive use for the Discovery PFMS and Dataserver PFMS.

Known changes and limitations

FIX LTS#	GitLab#	Description
14002	13039	Switched licensing (PFMS server, Web Console and Satellite server) to a unified way, now discriminating by number of agents in one, NMS, RMM and SAP.
14003	12982	Renewed the information dialog box of the user license both in nodes and in the Command Center (Metaconsole).
14156	14028	Changed agent access in the Command Center (Metaconsole), by right-clicking and then primary-clicking. Replaced the system with a CTRL click with primary button.

Fixed vulnerabilities

FIX LTS#	GitLab#	Description
14385	14342	Fixed token display by any registered user in PFMS API 1.0.
14687 CVE-2024-35308 Thanks to: i[@]qvq.im	14684	Fixed arbitrary reading of operating system file by a user logged into the PFMS Web Console (plugins section).
14688 CVE-2024-9987 Thanks to: i[@]qvq.im	14685	The read-only access of CSV data of a module of any agent by a user registered in the PFMS Web Console (console extensions section) has been corrected.

FIX LTS#

GitLab#

Description

14385

14342

Fixed token display by any registered user in PFMS API 1.0.

14687

CVE-2024-35308 Thanks to: i[@]qvq.im

14684

Fixed arbitrary reading of operating system file by a user logged into the PFMS Web Console (plugins section).

14688

CVE-2024-9987 Thanks to: i[@]qvq.im

14685

The read-only access of CSV data of a module of any agent by a user registered in the PFMS Web Console (console extensions section) has been corrected.

For information on minimum system requirements, please visit the installation section in the official documentation.

How to update Pandora FMS

Automatic update: Use the Update Manager in Pandora FMS console (requires internet connection).
Manual update: Upload OUM update files in Pandora FMS console.
Package installation: Download and install packages (rpm, deb...) and update the console from the web.

To update the server, use RPM packages or tarball manually. The latest version includes MR 79, which should be applied according to the indications of the official documentation.

More information about downloads:

See our Wiki for detailed instructions on each upgrade process.

Other resources of interest

Official documentation

Plugin library

Technical support

Legal information

This document cannot in any case be reproduced or modified, decompiled, disassembled, published or distributed in whole or in part, or translated to any electronic or other means without the prior written consent of Pandora FMS. All rights, titles and interests in and towards the software, services and documentation will be the exclusive property of Pandora FMS, its affiliates, and/or respective licensees.

PANDORA FMS DISCLAIMS ALL LIABILITY FOR WARRANTIES, CONDITIONS, OR OTHER TERMS, EXPRESS OR IMPLIED, LEGAL OR NOT, OVER THE DOCUMENTATION, INCLUDING WITHOUT LIMITATION THE NON-INFRINGEMENT, ACCURACY, COMPLETENESS, OR CONTENT OF ANY INFORMATION ON ANY CONTENT. IN NO EVENT SHALL PANDORA FMS, ITS SUPPLIERS OR LICENSORS BE LIABLE FOR ANY DAMAGES, WHETHER ARISING FROM CONTRACT, INJURY OR BASED ON ANY OTHER LEGAL THEORY, EVEN IF PANDORA FMS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

All registered trademarks of Pandora FMS are the exclusive property of Pandora FMS SLU or its affiliates, registered with the United States Patent and Trademark Office (U.S. Patent and Trademark Office), as well as with the European Patent and Trademark Office. They may be registered or pending registration in other countries. All other brands mentioned herein are used for identification purposes only and are trademarks of (and may be registered trademarks) of their respective companies.