{"id":361442,"date":"2023-11-23T17:14:45","date_gmt":"2023-11-23T17:14:45","guid":{"rendered":"https:\/\/pandorafms.com\/?p=361442"},"modified":"2023-11-24T11:46:19","modified_gmt":"2023-11-24T11:46:19","slug":"772-2-lts","status":"publish","type":"post","link":"https:\/\/pandorafms.com\/en\/patch-notes\/772-2-lts\/","title":{"rendered":"772.2 LTS"},"content":{"rendered":"

[et_pb_section fb_built=”1″ _builder_version=”4.22.0″ _module_preset=”default” custom_margin=”0px||||false|false” custom_padding=”0px||||false|false” global_colors_info=”{}”][et_pb_row _builder_version=”4.22.0″ _module_preset=”default” z_index=”0″ width=”100%” max_width=”900px” module_alignment=”left” custom_margin=”0px||0px||true|false” custom_padding=”0px||0px||true|false” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.21.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_text module_id=”1″ _builder_version=”4.22.0″ _module_preset=”default” z_index=”0″ custom_margin=”0px||0px||true|false” custom_padding=”0px||0px||true|false” hover_enabled=”0″ custom_css_main_element=”font-family:%22Pandora-Light%22;” locked=”off” global_colors_info=”{}” sticky_enabled=”0″]<\/p>\n

LTS Patches<\/h2>\n

We only release patches for Long Time Support (LTS) versions, except for some particular cases where we do so for Regular Rolling Release (RRR) versions. Security patches are developed as soon as possible after the vulnerability is detected.<\/p>\n

Patches for LTS versions usually include critical-bug troubleshooting and solutions to security problems.<\/p>\n

[\/et_pb_text][et_pb_divider color=”#eaeaea” divider_position=”center” divider_weight=”1px” admin_label=”=== SEPARADOR ===” module_id=”2″ _builder_version=”4.22.0″ _module_preset=”default” z_index=”0″ module_alignment=”center” custom_margin=”0px||0px||true|false” custom_padding=”25px||25px||true|false” border_color_all=”#eaeaea” locked=”off” global_colors_info=”{}”][\/et_pb_divider][et_pb_code admin_label=”Vulnerabilidades corregidas” _builder_version=”4.22.0″ _module_preset=”default” z_index=”0″ custom_margin=”0px||0px||true|false” custom_padding=”0px||0px||true|false” locked=”off” global_colors_info=”{}”]<\/p>\n

Fixed vulnerabilities<\/h2>\n

<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n
Case#<\/th>\n

<\/p>\n

GitLab#<\/th>\n

<\/p>\n

Description<\/th>\n

<\/tr>\n

<\/thead>\n

<\/p>\n

CVE-2023-41788<\/a> Thanks to Oliver Brooks.<\/pee><\/td>\n

<\/p>\n

11780<\/pee><\/td>\n

<\/p>\n

Limited the upload only to MIB files or for these to be compressed in a zip and to always belong to MIB type. Any other file type will be rejected.<\/pee><\/td>\n

<\/tr>\n

<\/p>\n

CVE-2023-41789<\/a> Thanks to Oliver Brooks.<\/pee><\/td>\n

<\/p>\n

11781<\/pee><\/td>\n

<\/p>\n

Limited the data entry in the software agents registry in order to prevent the insertion of non-monitoring code (XML data).<\/pee><\/td>\n

<\/tr>\n

<\/p>\n

CVE-2023-41790<\/a> Thanks to Oliver Brooks.<\/pee><\/td>\n

<\/p>\n

11786<\/pee><\/td>\n

<\/p>\n

Limited all cases to prevent files from being downloaded beyond those allowed (MIB repository, collections, etc.).<\/pee><\/td>\n

<\/tr>\n

<\/p>\n

CVE-2023-41792<\/a> Thanks to Oliver Brooks.<\/pee><\/td>\n

<\/p>\n

11787<\/pee><\/td>\n

<\/p>\n

Limited the insertion of code not belonging to the OID necessary for monitoring in the SNMP Trap editor<\/strong> .<\/pee><\/td>\n

<\/tr>\n

<\/p>\n

CVE-2023-41791<\/a> Thanks to Oliver Brooks.<\/pee><\/td>\n

<\/p>\n

11788<\/pee><\/p>\n
    <\/p>\n
  • Related: 11235<\/li>\n

    <\/ul>\n

    <\/td>\n

    <\/p>\n

Limited custom string translation so that only admin users can have access to them. Prevented the insertion of programming language commands detected by means of their syntax.<\/pee><\/td>\n

<\/tr>\n

<\/p>\n

CVE-2023-41810<\/a> Thanks to Oliver Brooks.<\/pee><\/td>\n

<\/p>\n

11794<\/pee><\/p>\n
    <\/p>\n
  • Related: 11943<\/li>\n

    <\/ul>\n

    <\/td>\n

    <\/p>\n

Fixed the insertion of stored cross site scripting<\/strong> in the PFMS Dashboard.<\/pee><\/td>\n

<\/tr>\n

<\/p>\n

CVE-2023-41811<\/a> Thanks to Oliver Brooks.<\/pee><\/td>\n

<\/p>\n

11795<\/pee><\/td>\n

<\/p>\n

Fixed the insertion of stored cross site scripting<\/strong> in the PFMS Site News.<\/pee><\/td>\n

<\/tr>\n

<\/p>\n

CVE-2023-41812<\/a> Thanks to Oliver Brooks.<\/pee><\/td>\n

<\/p>\n

11878<\/pee><\/td>\n

<\/p>\n

Limited the uploading of files with source code in the File repository manager<\/strong> that could be used to access other PFMS server areas.<\/pee><\/td>\n

<\/tr>\n

<\/p>\n

N\/A<\/pee><\/td>\n

<\/p>\n

12304<\/pee><\/td>\n

<\/p>\n

Fixed character encoding error when applying a monitoring policy written in Japanese language to an agent’s “remote_config” file.<\/pee><\/td>\n

<\/tr>\n

<\/p>\n

16494<\/pee><\/td>\n

<\/p>\n

12357<\/pee><\/td>\n

<\/p>\n

The “Previous” and “Next” buttons for results paging in SNMP Console<\/strong> have been corrected.<\/pee><\/td>\n

<\/tr>\n

<\/p>\n

N\/A<\/pee><\/p>\n12305<\/pee><\/p>\n
    <\/p>\n
  • Related: 11790, 11785 and 11782<\/li>\n

    <\/ul>\n

    <\/td>\n

    <\/p>\n

A warning has been inserted for the deactivation and change of GoTTY<\/strong> to be performed in version 774.<\/pee><\/td>\n

<\/tr>\n

<\/tbody>\n

<\/table>\n

[\/et_pb_code][et_pb_divider color=”#eaeaea” divider_position=”center” divider_weight=”1px” admin_label=”=== SEPARADOR ===” module_id=”2″ _builder_version=”4.22.0″ _module_preset=”default” z_index=”0″ module_alignment=”center” custom_margin=”0px||0px||true|false” custom_padding=”25px||25px||true|false” border_color_all=”#eaeaea” locked=”off” global_colors_info=”{}”][\/et_pb_divider][et_pb_code admin_label=”Fallos corregidos” _builder_version=”4.22.0″ _module_preset=”default” z_index=”0″ custom_margin=”0px||0px||true|false” custom_padding=”0px||0px||true|false” locked=”off” global_colors_info=”{}”]<\/p>\n

Bugs Fixed<\/h2>\n

<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n
Case#<\/th>\n

<\/p>\n

GitLab#<\/th>\n

<\/p>\n

Description<\/th>\n

<\/tr>\n

<\/thead>\n

<\/p>\n

16501<\/pee><\/td>\n

<\/p>\n

12360<\/pee><\/td>\n

<\/p>\n

Fixed a bug in a fixed URL in AJAX which prevented editing permissions in the authentication view of the “LDAP attributes”.<\/pee><\/td>\n

<\/tr>\n

<\/p>\n

N\/A<\/pee><\/td>\n

<\/p>\n

12002<\/pee><\/td>\n

<\/p>\n

Fixed the option to Edit modules in bulk in Bulk operations to enable or disable them. The error occurred because an SQL operation was performed without having the valid data for it.<\/pee><\/td>\n

<\/tr>\n

<\/p>\n

15741<\/pee><\/td>\n

<\/p>\n

11624<\/pee><\/td>\n

<\/p>\n

An error has been corrected both in nodes and in Command Center (Metaconsole) that prevented the display of legends in the generation of PDF graphs and in the API graphs.<\/pee><\/td>\n

<\/tr>\n

<\/p>\n

16635<\/pee><\/td>\n

<\/p>\n

12033<\/pee><\/td>\n

<\/p>\n

Fixed a bug when disabling the “Use real-time statistics” token, which caused the Tactical View and Server View to not display network modules.<\/pee><\/td>\n

<\/tr>\n

<\/p>\n

16168<\/pee><\/td>\n

<\/p>\n

11964<\/pee><\/td>\n

<\/p>\n

Fixed fields 4, 5 and 6 in SNMP alerts. Now with this correction, when editing an SNMP alert, these fields are saved in the correct order. <\/pee><\/td>\n

<\/tr>\n

<\/tbody>\n

<\/table>\n

[\/et_pb_code][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"

LTS Patches We only release patches for Long Time Support (LTS) versions, except for some particular cases where we do so for Regular Rolling Release (RRR) versions. Security patches are developed as soon as possible after the vulnerability is detected. Patches for LTS versions usually include critical-bug troubleshooting and solutions to security problems.<\/p>\n","protected":false},"author":13,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","_joinchat":[],"footnotes":""},"categories":[3416],"tags":[],"class_list":["post-361442","post","type-post","status-publish","format-standard","hentry","category-patch-notes"],"_links":{"self":[{"href":"https:\/\/pandorafms.com\/en\/wp-json\/wp\/v2\/posts\/361442","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pandorafms.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pandorafms.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pandorafms.com\/en\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/pandorafms.com\/en\/wp-json\/wp\/v2\/comments?post=361442"}],"version-history":[{"count":4,"href":"https:\/\/pandorafms.com\/en\/wp-json\/wp\/v2\/posts\/361442\/revisions"}],"predecessor-version":[{"id":361605,"href":"https:\/\/pandorafms.com\/en\/wp-json\/wp\/v2\/posts\/361442\/revisions\/361605"}],"wp:attachment":[{"href":"https:\/\/pandorafms.com\/en\/wp-json\/wp\/v2\/media?parent=361442"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pandorafms.com\/en\/wp-json\/wp\/v2\/categories?post=361442"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pandorafms.com\/en\/wp-json\/wp\/v2\/tags?post=361442"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}