Releases: Icinga/icingaweb2
Icinga Web Version 2.10.1
nilmerg
Johannes Meyer
What's New in Version 2.10.1
It's a rather small update this time without any critical bugs. 🎉 So let's get straight to the fixes:
- Clicking anywhere on a list item in the dashboard now opens the primary link again, instead of nothing #4710
- The
Check NowandRemove Acknowledgementquick actions in an object's detail header are now working again #4711 - Clicking on the big number in the tactical overview if there are
UNKNOWNservices, showsUNKNOWNservices now #4714 - The contrast of text in the sidebar, while in light mode, has been increased #4720
- A theme without mode support, which is set globally, now also prevents users from configuring the mode #4723
Icinga Web Version 2.10.0
nilmerg
Johannes Meyer
What's New in Version 2.10.0
You can find all issues related to this release on our roadmap. Please make sure to also check the respective upgrading section in the documentation.
The Appearance of Dark and Light
We have already spoken a lot about the theme mode support that we were working on for some time now. It was planned for v2.9.0, but in respect of many modules and themes out there we gave it the deserved attention. Below is a glimpse of what this looks like.
Custom Variables Shown Unaltered – Or not
Icinga Web 2 had some bad habits when displaying custom variables in the UI. We've driven out the last one regarding names now. Uppercase characters are now shown as such. What Icinga Web 2 stopped doing though, can now be accomplished by modules. A new hook that enables modules to influence the rendering of custom variables has been introduced.
- CustomVarNames should not be converted to lowercase #4639
- Display the Director Caption of a Custom Variable #3479
Surprising Beauty in Exported Places
Anyone who already attempted to export a list of services to PDF has seen the degradation of details in recent years. Be it images, icons, colors or the general layout. We simply reached a technical limit with the builtin PDF export. That is why we made Icinga PDF Export. Icinga Web 2 has now a much enhanced compatibility with it. Exporting a list of services while Icinga PDF Export is set up, will now lead to a much better looking result.
Icinga Web Version 2.9.6
nilmerg
Johannes Meyer
What's New in Version 2.9.6
Notice: This is a security release. It is recommended to upgrade immediately.
Security Fixes
This release includes three security related fixes. The first is a path traversal issue that affects installations
of v2.9.0 and above. Another one allows admins to run arbitrary PHP code just by accessing the UI. The last one may
disclose unwanted details to restricted users. Please check the advisories on GitHub for more details.
- Path traversal in static library file requests for unauthenticated users GHSA-5p3f-rh28-8frw
- SSH resources allow arbitrary code execution for authenticated users GHSA-v9mv-h52f-7g63
- Unwanted disclosure of hosts and related data, linked to decommissioned services GHSA-qcmg-vr56-x9wf
Icinga Web Version 2.8.6
nilmerg
Johannes Meyer
What's New in Version 2.8.6
Notice: This is a security release. It is recommended to upgrade to this release if you don't plan to upgrade to v2.9.x.
Security Fixes
This release includes two security related fixes. Both were published as part of a security advisory on Github.
They allow admins to run arbitrary PHP code just by accessing the UI and may disclose unwanted details to
restricted users. Please check the respective advisory for details.
- SSH resources allow arbitrary code execution for authenticated users GHSA-v9mv-h52f-7g63
- Unwanted disclosure of hosts and related data, linked to decommissioned services GHSA-qcmg-vr56-x9wf
Icinga Web Version 2.9.5
Icinga Web Version 2.9.4
What's New in Version 2.9.4
You can also find all issues related to this release on our Roadmap.
Broken Preference Configuration
The preferences configuration broke with the release of v2.9 in some cases. Previously it was possible to access this
and the general configuration without any configuration at all on disk. This is now possible again. The preferences of
some users, which have a theme of a disabled module enabled, also showed an error. This doesn't happen anymore now.
- Config/Preferences not accessible without config.ini #4504
- "My Account" broken after Upgrade from 2.8.2 to 2.9.3 #4512
Notable Fixes in the UI
For a long time now, comments in lists had the bad habit to spread erratically if their content was large. They're
limited to two lines now in lists and are still shown in full glory in their respective detail area. While talking
of lines... Plugin output with subsequent empty lines erroneously showed only one of them. This is now fixed.
- Proposal for new Feature make comments collapsible #4515
- new line character is being removed in the plugin output #4522
Less Notable But No Less Important Fixes
We are actually very committed to provide a good experience for restricted users. So I'm happy to tell you that a nasty
bug is fixed that resulted in the focus being lost randomly. Third party integrations are also important to us, hence
I'm happy that this release fixes an issue where module specific JavaScript didn't load properly. Are you happy now?
Icinga Web Version 2.9.3
nilmerg
Johannes Meyer
What's New in Version 2.9.3
You can also find the issues related to this release on our Roadmap.
Staying remembered on RHEL/CentOS 7 now possible
RHEL/CentOS 7 still relies on OpenSSL v1.0.2 by default. A change in v2.9.1 resulted in an error in combination with
this when ticking Stay Logged In during authentication. Staying logged in now works fine also on this platform.
- Stay Logged In - Unknown cipher algorithm #4493
Missing icons with SLES/OpenSUSE 15
If you're running Icinga Web 2 Version 2.9.x on a SLES/OpenSUSE 15.x, you may have noticed some missing icons in the UI.
This is due to a missing PHP extension fileinfo. By upgrading to this release using packages, this dependency will now
be installed automatically.
- Missing fileinfo php extension on SLES/OpenSUSE 15+ #4503
Child downtimes for services are now removed automatically
With Icinga v2.13, Icinga Web 2 will now make sure that service downtimes that were created automatically are also
removed automatically. This will only work for downtimes you create with the All Services option after upgrading
to this release. It will not work for downtimes created with earlier versions of Icinga Web 2.
- If appropriate, set the API parameter all_services for schedule-downtime #4501
Icinga Web Version 2.9.2
nilmerg
Johannes Meyer
What's New in Version 2.9.2
💡 This is a hotfix release. v2.9.1 included a change that wasn't compatible with PostgreSQL again. This has been fixed in this release. (#4490)
💡 I have included all the v2.9.1 release notes here again, for visibility reasons. So from here on, it's these notes now.
You can find all issues related to v2.9.1 on our Roadmap.
Please make sure to also check the respective upgrading section in the documentation.
This release is accompanied by the minor releases v2.7.6 and v2.8.4 which include the fix for the flattened custom variables.
Pancakes everywhere
One of the security fixes included in v2.7.5, v2.8.3 and v2.9.0 went rampant and let you see similarities between custom
variables and pancakes. These are gone now. Also, the login allowed some users to bake pancakes on their CPUs. However,
we'd still recommend not to. What we do recommend, is to use graphical details to ease recognition. A pancake 🥞 in
performance data labels for example.
- Nested custom variables are flattened #4439
- Disable login orb animation and all orbs for themes #4468
- SVG chart library doesn't process input as UTF-8 #4462
Staying remembered too difficult
We all have sometimes difficulties remembering people we rarely meet. Especially obvious is this on those that slip
through because they don't do the same things we do. With v2.9.0 this has happened for PostgreSQL, PHP v5.6-v7.0 and
setup wizard users. Now they get their deserved attention, and Icinga Web 2 will remember them just like all others.
- RememberMe not working with only PostgreSQL #4441
- RememberMe compatibility with php version 5.6+ #4472
- RememberMe fails after running the wizard for grants #4434
Being picky pays off
A custom datetime picker was introduced with v2.9.0. It had it's issues, but we didn't anticipate that much headwind.
After careful reconsideration, we chose to only show the custom datetime picker for Firefox and IE users. Other browsers
have their own capable enough native implementation which, in Chrome's case, may even be superior. If it is now used,
it also closes automatically and doesn't swallow unrelated key presses.
Icinga Web Version 2.9.1
nilmerg
Johannes Meyer
What's New in Version 2.9.1
You can find all issues related to this release on our Roadmap.
Please make sure to also check the respective upgrading section in the documentation.
This release is accompanied by the minor releases v2.7.6 and v2.8.4 which include the fix for the flattened custom variables.
Pancakes everywhere
One of the security fixes included in v2.7.5, v2.8.3 and v2.9.0 went rampant and let you see similarities between custom
variables and pancakes. These are gone now. Also, the login allowed some users to bake pancakes on their CPUs. However,
we'd still recommend not to. What we do recommend, is to use graphical details to ease recognition. A pancake 🥞 in
performance data labels for example.
- Nested custom variables are flattened #4439
- Disable login orb animation and all orbs for themes #4468
- SVG chart library doesn't process input as UTF-8 #4462
Staying remembered too difficult
We all have sometimes difficulties remembering people we rarely meet. Especially obvious is this on those that slip
through because they don't do the same things we do. With v2.9.0 this has happened for PostgreSQL, PHP v5.6-v7.0 and
setup wizard users. Now they get their deserved attention, and Icinga Web 2 will remember them just like all others.
- RememberMe not working with only PostgreSQL #4441
- RememberMe compatibility with php version 5.6+ #4472
- RememberMe fails after running the wizard for grants #4434
Being picky pays off
A custom datetime picker was introduced with v2.9.0. It had it's issues, but we didn't anticipate that much headwind.
After careful reconsideration, we chose to only show the custom datetime picker for Firefox and IE users. Other browsers
have their own capable enough native implementation which, in Chrome's case, may even be superior. If it is now used,
it also closes automatically and doesn't swallow unrelated key presses.