{"id":366607,"date":"2024-02-07T00:29:46","date_gmt":"2024-02-07T00:29:46","guid":{"rendered":"https:\/\/pandorafms.com\/?p=366607"},"modified":"2024-04-10T14:45:43","modified_gmt":"2024-04-10T14:45:43","slug":"772-3-lts","status":"publish","type":"post","link":"https:\/\/pandorafms.com\/en\/patch-notes\/772-3-lts\/","title":{"rendered":"772.3 LTS"},"content":{"rendered":"

[et_pb_section fb_built=”1″ _builder_version=”4.22.0″ _module_preset=”default” custom_margin=”0px||||false|false” custom_padding=”0px||||false|false” global_colors_info=”{}”][et_pb_row _builder_version=”4.22.0″ _module_preset=”default” z_index=”0″ width=”100%” max_width=”900px” module_alignment=”left” custom_margin=”0px||0px||true|false” custom_padding=”0px||0px||true|false” locked=”off” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.21.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_text module_id=”1″ _builder_version=”4.22.0″ _module_preset=”default” z_index=”0″ custom_margin=”0px||0px||true|false” custom_padding=”0px||0px||true|false” custom_css_main_element=”font-family:%22Pandora-Light%22;” locked=”off” global_colors_info=”{}”]<\/p>\n

LTS Patches<\/h2>\n

We only release patches for Long Time Support (LTS) versions, except for some particular cases where we do so for Regular Rolling Release (RRR) versions. Security patches are developed as soon as possible after the vulnerability is detected.<\/p>\n

Patches for LTS versions usually include critical-bug troubleshooting and solutions to security problems.<\/p>\n

[\/et_pb_text][et_pb_divider color=”#eaeaea” divider_position=”center” divider_weight=”1px” admin_label=”=== SEPARADOR ===” module_id=”2″ _builder_version=”4.22.0″ _module_preset=”default” z_index=”0″ module_alignment=”center” custom_margin=”0px||0px||true|false” custom_padding=”25px||25px||true|false” border_color_all=”#eaeaea” locked=”off” global_colors_info=”{}”][\/et_pb_divider][et_pb_code admin_label=”Fallos corregidos” _builder_version=”4.22.0″ _module_preset=”default” z_index=”0″ custom_margin=”0px||0px||true|false” custom_padding=”0px||0px||true|false” locked=”off” global_colors_info=”{}”]<\/p>\n

Bugs Fixed<\/h2>\n

<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n
Case#<\/th>\n

<\/p>\n

GitLab#<\/th>\n

<\/p>\n

Description<\/th>\n

<\/tr>\n

<\/thead>\n

<\/p>\n

N\/A<\/pee><\/td>\n

<\/p>\n

12592<\/pee><\/td>\n

<\/p>\n

Fixed Integria IMS integration (Pandora ITSM<\/strong>) at user level with Pandora FMS in its corresponding settings section.<\/pee><\/td>\n

<\/tr>\n

<\/p>\n

N\/A<\/pee><\/td>\n

<\/p>\n

12768<\/pee><\/td>\n

<\/p>\n

Fixed: If a user with reading permissions (in this case the Operator read<\/strong> profile) does not belong to a group they will not be able to see the inventory of an agent belonging to that group.<\/i><\/pee><\/td>\n

<\/tr>\n

<\/p>\n

N\/A<\/pee><\/td>\n

<\/p>\n

12775<\/pee><\/p>\n
    <\/p>\n
  • Related: 11589 and 12382<\/li>\n

    <\/ul>\n

    <\/td>\n

    <\/p>\n

Fixed report export in XML format.<\/pee><\/td>\n

<\/tr>\n

<\/tbody>\n

<\/table>\n

[\/et_pb_code][et_pb_divider color=”#eaeaea” divider_position=”center” divider_weight=”1px” admin_label=”=== SEPARADOR ===” module_id=”2″ _builder_version=”4.22.0″ _module_preset=”default” z_index=”0″ module_alignment=”center” custom_margin=”0px||0px||true|false” custom_padding=”25px||25px||true|false” border_color_all=”#eaeaea” locked=”off” global_colors_info=”{}”][\/et_pb_divider][et_pb_code admin_label=”Vulnerabilidades corregidas” _builder_version=”4.22.0″ _module_preset=”default” z_index=”0″ custom_margin=”0px||0px||true|false” custom_padding=”0px||0px||true|false” locked=”off” global_colors_info=”{}”]<\/p>\n

Fixed vulnerabilities<\/h2>\n

<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n<\/p>\n
Case#<\/th>\n

<\/p>\n

GitLab#<\/th>\n

<\/p>\n

Description<\/th>\n

<\/tr>\n

<\/thead>\n

<\/p>\n

CVE-2023-41814<\/a> Thanks to Gabriel Weitzel.<\/pee><\/td>\n

<\/p>\n

12043<\/pee><\/td>\n

<\/p>\n

Fixed the insertion of JavaScript code (possible XSS) in Pandora FMS notification system messages.<\/pee><\/td>\n

<\/tr>\n

<\/p>\n

CVE-2023-41815<\/a> Thanks to Osama Yousef.<\/pee><\/td>\n

<\/p>\n

12121<\/pee><\/td>\n

<\/p>\n

Fixed XSS code insertion for directory names in the File manager<\/strong> of PFMS Web Console.<\/pee><\/td>\n

<\/tr>\n

<\/p>\n

CVE-2023-44088<\/a> Thanks to Osama Yousef.<\/pee><\/td>\n

<\/p>\n

12122<\/pee><\/td>\n

<\/p>\n

Fixed SQL and\/or JS code insertion for the file name of an image in the option for uploading an image as background when creating a new PFMS visual console.<\/pee><\/td>\n

<\/tr>\n

<\/p>\n

CVE-2023-44089<\/a> Thanks to Osama Yousef.<\/pee><\/td>\n

<\/p>\n

12123<\/pee><\/td>\n

<\/p>\n

Fixed JavaScript code insertion in the name of a visual console when creating it (menu Topology maps \u2192 Visual console \u2192 visual console list<\/strong>).<\/pee><\/td>\n

<\/tr>\n

<\/p>\n

CVE-2023-44092<\/a> Thanks to Aleksey Solovev.<\/pee><\/td>\n

<\/p>\n

12753<\/pee><\/td>\n

<\/p>\n

Fixed and prevented the possibility of an attack by operating system command insertion<\/a> in PFMS event responses.<\/pee><\/td>\n

<\/tr>\n

<\/tbody>\n

<\/table>\n

[\/et_pb_code][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"

LTS Patches We only release patches for Long Time Support (LTS) versions, except for some particular cases where we do so for Regular Rolling Release (RRR) versions. Security patches are developed as soon as possible after the vulnerability is detected. Patches for LTS versions usually include critical-bug troubleshooting and solutions to security problems.<\/p>\n","protected":false},"author":13,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","_joinchat":[],"footnotes":""},"categories":[3416],"tags":[],"class_list":["post-366607","post","type-post","status-publish","format-standard","hentry","category-patch-notes"],"_links":{"self":[{"href":"https:\/\/pandorafms.com\/en\/wp-json\/wp\/v2\/posts\/366607","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pandorafms.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pandorafms.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pandorafms.com\/en\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/pandorafms.com\/en\/wp-json\/wp\/v2\/comments?post=366607"}],"version-history":[{"count":2,"href":"https:\/\/pandorafms.com\/en\/wp-json\/wp\/v2\/posts\/366607\/revisions"}],"predecessor-version":[{"id":369800,"href":"https:\/\/pandorafms.com\/en\/wp-json\/wp\/v2\/posts\/366607\/revisions\/369800"}],"wp:attachment":[{"href":"https:\/\/pandorafms.com\/en\/wp-json\/wp\/v2\/media?parent=366607"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pandorafms.com\/en\/wp-json\/wp\/v2\/categories?post=366607"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pandorafms.com\/en\/wp-json\/wp\/v2\/tags?post=366607"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}