{"id":369797,"date":"2024-04-17T16:13:21","date_gmt":"2024-04-17T16:13:21","guid":{"rendered":"https:\/\/pandorafms.com\/?p=369797"},"modified":"2024-05-06T12:45:25","modified_gmt":"2024-05-06T12:45:25","slug":"772-4-lts","status":"publish","type":"post","link":"https:\/\/pandorafms.com\/en\/patch-notes\/772-4-lts\/","title":{"rendered":"772.4 LTS"},"content":{"rendered":"<p>[et_pb_section fb_built=&#8221;1&#8243; _builder_version=&#8221;4.22.0&#8243; _module_preset=&#8221;default&#8221; custom_margin=&#8221;0px||||false|false&#8221; custom_padding=&#8221;0px||||false|false&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_row _builder_version=&#8221;4.22.0&#8243; _module_preset=&#8221;default&#8221; z_index=&#8221;0&#8243; width=&#8221;100%&#8221; max_width=&#8221;900px&#8221; module_alignment=&#8221;left&#8221; custom_margin=&#8221;0px||0px||true|false&#8221; custom_padding=&#8221;0px||0px||true|false&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.21.0&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text module_id=&#8221;1&#8243; _builder_version=&#8221;4.22.0&#8243; _module_preset=&#8221;default&#8221; z_index=&#8221;0&#8243; custom_margin=&#8221;0px||0px||true|false&#8221; custom_padding=&#8221;0px||0px||true|false&#8221; custom_css_main_element=&#8221;font-family:%22Pandora-Light%22;&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h2>LTS Patches<\/h2>\n<p>We only release patches for Long Time Support (LTS) versions, except for some particular cases where we do so for Regular Rolling Release (RRR) versions. Security patches are developed as soon as possible after the vulnerability is detected.<\/p>\n<p>Patches for LTS versions usually include critical-bug troubleshooting and solutions to security problems.<\/p>\n<p>[\/et_pb_text][et_pb_divider color=&#8221;#eaeaea&#8221; divider_position=&#8221;center&#8221; divider_weight=&#8221;1px&#8221; admin_label=&#8221;=== SEPARADOR ===&#8221; module_id=&#8221;2&#8243; _builder_version=&#8221;4.22.0&#8243; _module_preset=&#8221;default&#8221; z_index=&#8221;0&#8243; module_alignment=&#8221;center&#8221; custom_margin=&#8221;0px||0px||true|false&#8221; custom_padding=&#8221;25px||25px||true|false&#8221; border_color_all=&#8221;#eaeaea&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;][\/et_pb_divider][et_pb_code admin_label=&#8221;Fallos corregidos&#8221; _builder_version=&#8221;4.22.0&#8243; _module_preset=&#8221;default&#8221; z_index=&#8221;0&#8243; custom_margin=&#8221;0px||0px||true|false&#8221; custom_padding=&#8221;0px||0px||true|false&#8221; hover_enabled=&#8221;0&#8243; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221; sticky_enabled=&#8221;0&#8243;]<\/p>\n<h2>Bug fixes<\/h2>\n<p><!-- [et_pb_line_break_holder] --><\/p>\n<table class=\"PandoTable6\" style=\"margin-top: 30px;\"><!-- [et_pb_line_break_holder] --><\/p>\n<thead><!-- [et_pb_line_break_holder] --><\/p>\n<tr><!-- [et_pb_line_break_holder] --><\/p>\n<th>Case#<\/th>\n<p><!-- [et_pb_line_break_holder] --><\/p>\n<th>GitLab#<\/th>\n<p><!-- [et_pb_line_break_holder] --><\/p>\n<th>Description<\/th>\n<p><!-- [et_pb_line_break_holder] --><\/tr>\n<p><!-- [et_pb_line_break_holder] --><\/thead>\n<p><!-- [et_pb_line_break_holder] --><\/p>\n<tbody><!-- [et_pb_line_break_holder] --><\/p>\n<tr><!-- [et_pb_line_break_holder] --><\/p>\n<td><!-- [et_pb_line_break_holder] --><pee>17097<\/pee><!-- [et_pb_line_break_holder] --><\/td>\n<p><!-- [et_pb_line_break_holder] --><\/p>\n<td><!-- [et_pb_line_break_holder] --><pee>12909<\/pee><!-- [et_pb_line_break_holder] --><\/td>\n<p><!-- [et_pb_line_break_holder] --><\/p>\n<td><!-- [et_pb_line_break_holder] -->  <pee>Fixed monitoring policy creation with <i>pluginserver<\/i> modules, so that all specified fields are saved in the database.<\/pee><!-- [et_pb_line_break_holder] --><\/td>\n<p><!-- [et_pb_line_break_holder] --><\/tr>\n<p><!-- [et_pb_line_break_holder] --><\/p>\n<tr><!-- [et_pb_line_break_holder] --><\/p>\n<td><!-- [et_pb_line_break_holder] --><pee>16084<\/pee><!-- [et_pb_line_break_holder] --><\/td>\n<p><!-- [et_pb_line_break_holder] --><\/p>\n<td><!-- [et_pb_line_break_holder] --><pee>12401<\/pee><!-- [et_pb_line_break_holder] --><\/td>\n<p><!-- [et_pb_line_break_holder] --><\/p>\n<td><!-- [et_pb_line_break_holder] --><pee>Fixed failures with negative values in SNMP queries.<\/pee><!-- [et_pb_line_break_holder] --><\/td>\n<p><!-- [et_pb_line_break_holder] --><\/tr>\n<p><!-- [et_pb_line_break_holder] --><\/tbody>\n<p><!-- [et_pb_line_break_holder] --><\/table>\n<p>[\/et_pb_code][et_pb_divider color=&#8221;#eaeaea&#8221; divider_position=&#8221;center&#8221; divider_weight=&#8221;1px&#8221; admin_label=&#8221;=== SEPARADOR ===&#8221; module_id=&#8221;2&#8243; _builder_version=&#8221;4.22.0&#8243; _module_preset=&#8221;default&#8221; z_index=&#8221;0&#8243; module_alignment=&#8221;center&#8221; custom_margin=&#8221;0px||0px||true|false&#8221; custom_padding=&#8221;25px||25px||true|false&#8221; border_color_all=&#8221;#eaeaea&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;][\/et_pb_divider][et_pb_code admin_label=&#8221;Vulnerabilidades corregidas&#8221; _builder_version=&#8221;4.22.0&#8243; _module_preset=&#8221;default&#8221; z_index=&#8221;0&#8243; custom_margin=&#8221;0px||0px||true|false&#8221; custom_padding=&#8221;0px||0px||true|false&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h2>Fixed vulnerabilities<\/h2>\n<p><!-- [et_pb_line_break_holder] --><\/p>\n<table class=\"PandoTable6\" style=\"margin-top: 30px;\"><!-- [et_pb_line_break_holder] --><\/p>\n<thead><!-- [et_pb_line_break_holder] --><\/p>\n<tr><!-- [et_pb_line_break_holder] --><\/p>\n<th>Case#<\/th>\n<p><!-- [et_pb_line_break_holder] --><\/p>\n<th>GitLab#<\/th>\n<p><!-- [et_pb_line_break_holder] --><\/p>\n<th>Description<\/th>\n<p><!-- [et_pb_line_break_holder] --><\/tr>\n<p><!-- [et_pb_line_break_holder] --><\/thead>\n<p><!-- [et_pb_line_break_holder] --><\/p>\n<tbody><!-- [et_pb_line_break_holder] --><\/p>\n<tr><!-- [et_pb_line_break_holder] --><\/p>\n<td><!-- [et_pb_line_break_holder] --><pee><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2023-41793\" target=\"_blank\" rel=\"noopener\">CVE-2023-41793<\/a> Thanks to Aleksey Solovev.<\/pee><!-- [et_pb_line_break_holder] --><\/td>\n<p><!-- [et_pb_line_break_holder] --><\/p>\n<td><!-- [et_pb_line_break_holder] --><pee>12751<\/pee><!-- [et_pb_line_break_holder] --><\/td>\n<p><!-- [et_pb_line_break_holder] --><\/p>\n<td><!-- [et_pb_line_break_holder] --><pee>Fixed and prevented the the possibility of hosting files outside the dedicated directory in resource upload for <i>plugins<\/i> for this purpose. As a result arbitrary code execution on the server is prevented.<\/pee><!-- [et_pb_line_break_holder] --><\/td>\n<p><!-- [et_pb_line_break_holder] --><\/tr>\n<p><!-- [et_pb_line_break_holder] --><\/p>\n<tr><!-- [et_pb_line_break_holder] --><\/p>\n<td><!-- [et_pb_line_break_holder] --><pee><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2023-44091\" target=\"_blank\" rel=\"noopener\">CVE-2023-44091<\/a> Thanks to Aleksey Solovev.<\/pee><!-- [et_pb_line_break_holder] --><\/td>\n<p><!-- [et_pb_line_break_holder] --><\/p>\n<td><!-- [et_pb_line_break_holder] --><pee>12752<\/pee><!-- [et_pb_line_break_holder] --><\/p>\n<ul>\n<li>Related: 10902 and 12750<\/li>\n<\/ul>\n<p><!-- [et_pb_line_break_holder] --><\/td>\n<p><!-- [et_pb_line_break_holder] --><\/p>\n<td><!-- [et_pb_line_break_holder] --><pee>Fixed and avoided the possibility of a <a href=\"https:\/\/www.sqlinjection.net\/time-based\/\" target=\"_blank\" rel=\"noopener\">timed time attack by SQL injection<\/a> in PFMS API 1.0.<\/pee><!-- [et_pb_line_break_holder] --><\/td>\n<p><!-- [et_pb_line_break_holder] --><\/tr>\n<p><!-- [et_pb_line_break_holder] --><\/p>\n<tr><!-- [et_pb_line_break_holder] --><\/p>\n<td><!-- [et_pb_line_break_holder] --><pee><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2023-44090\" target=\"_blank\" rel=\"noopener\">CVE-2023-44090<\/a> Thanks to Aleksey Solovev.<\/pee><!-- [et_pb_line_break_holder] --><\/td>\n<p><!-- [et_pb_line_break_holder] --><\/p>\n<td><!-- [et_pb_line_break_holder] --><pee>12798<\/pee><!-- [et_pb_line_break_holder] --><\/td>\n<p><!-- [et_pb_line_break_holder] --><\/p>\n<td><!-- [et_pb_line_break_holder] --><pee>Fixed the possibility of code injection in the corresponding SQL in the extension to connect to Grafana.<\/pee><!-- [et_pb_line_break_holder] --><\/td>\n<p><!-- [et_pb_line_break_holder] --><\/tr>\n<p><!-- [et_pb_line_break_holder] --><\/tbody>\n<p><!-- [et_pb_line_break_holder] --><\/table>\n<p>[\/et_pb_code][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"<p>LTS Patches We only release patches for Long Time Support (LTS) versions, except for some particular cases where we do so for Regular Rolling Release (RRR) versions. Security patches are developed as soon as possible after the vulnerability is detected. Patches for LTS versions usually include critical-bug troubleshooting and solutions to security problems.<\/p>\n","protected":false},"author":13,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","_joinchat":[],"footnotes":""},"categories":[3416],"tags":[],"class_list":["post-369797","post","type-post","status-publish","format-standard","hentry","category-patch-notes"],"_links":{"self":[{"href":"https:\/\/pandorafms.com\/en\/wp-json\/wp\/v2\/posts\/369797","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pandorafms.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pandorafms.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pandorafms.com\/en\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/pandorafms.com\/en\/wp-json\/wp\/v2\/comments?post=369797"}],"version-history":[{"count":7,"href":"https:\/\/pandorafms.com\/en\/wp-json\/wp\/v2\/posts\/369797\/revisions"}],"predecessor-version":[{"id":370725,"href":"https:\/\/pandorafms.com\/en\/wp-json\/wp\/v2\/posts\/369797\/revisions\/370725"}],"wp:attachment":[{"href":"https:\/\/pandorafms.com\/en\/wp-json\/wp\/v2\/media?parent=369797"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pandorafms.com\/en\/wp-json\/wp\/v2\/categories?post=369797"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pandorafms.com\/en\/wp-json\/wp\/v2\/tags?post=369797"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}