CVE-2018-18839

** DISPUTED ** An issue was discovered in Netdata 1.10.0. Full Path Disclosure (FPD) exists via api/v1/alarms. NOTE: the vendor says "is intentional."

This update for netdata fixes the following issues:

• Update to 1.29.3 Release v1.29.3 is a patch release to improve the stability of the Netdata Agent. We discovered a bug that when proc.plugin attempts to collect the operstate parameter for a virtual network interface. If the chart is obsoleted, the Netdata Agent crashes. This release also contains additional bug fixes and improvements. Bug fixes

  • Fix proc.plugin to invalidate RRDSETVAR pointers on obsoletion.

• Update to 1.29.2 Release v1.29.2 is a patch release to improve the stability of the Netdata Agent. We discovered that an improvement introduced in v1.29.0 could inadvertently set all os_* host labels to unknown, which could affect users who leverage these host labels to organize their nodes, deploy health entities, or export metrics to external time-series databases. This bug has been fixed. This release also contains additional bug fixes and improvements. Improvements

  • Make the Opsgenie API URL configurable.
  • Add k8s_cluster_id host label.
  • Enable apps.plugin aggregation debug messages.
  • Add configuration parameter to disable stock alarms.
  • Add ACLK proxy setting as host label.
  • Add freeswitch to apps_groups.conf.
  • Simplify thread creation and remove unnecessary variables in the eBPF plugin. Bug fixes
  • Fix the context filtering on the data query endpoint.
  • Fix container/host detection in the system-info.sh script.
  • Add a small delay to the ipv4_tcp_resets alarms.
  • Fix collecting operstate for virtual network interfaces.
  • Fix sendmail unrecognized option F error.
  • Fix so that raw binary data should never be printed.
  • Change KSM memory chart type to stacked.
  • Allow the REMOVED alarm status via ACLK if the previous status was WARN/CRIT.
  • Reduce excessive logging in the ACLK.

• Changes in 1.29.1 Release v1.29.1 is a hotfix release to address a crash in the Netdata Agent. A locking bug in one of the internal collectors in Netdata could cause it to crash during shutdown in a way that would result in the Netdata Agent taking an excessively long time to exit. Bug fixes

  • Fix crash during shutdown of cgroups internal plugin.

• Update to 1.29.0 (go.d.plugin 0.27.0) The v1.29.0 release of the Netdata Agent is a maintenance release that brings incremental but necessary improvements that make your monitoring experience more robust. We've pushed improvements and bug fixes to the installation and update scripts, enriched our library of collectors, and focused on fixing bugs reported by the community. At a glance Netdata now collects and meaningfully organizes metrics from both the Couchbase JSON document database and the nginx-module-vts module for exposing metrics about NGINX virtual hosts. We've also migrated more collectors from Python to Go in our continued efforts to make data collection faster and more robust. The newest effort includes our Redis, Pika, and Energi Core Wallet collectors. On the dashboard, we improved the responsiveness of panning forward and backward through historical metrics data by preventing unnecessary updates and reducing the number of calls. The charts should also now immediately update when you stop panning. Improvements

  • Reduce the number of alarm updates on ACLK.
  • Remove unused entries from structures.
  • Improve the retry/backoff during claiming.
  • Support multiple chart label keys in data queries.
  • Truncate excessive information from titles for apps and cgroups collectors.
  • Use mguid instead of hostname in the ACLK collector list.
  • Cleanup and minor fixes to eBPF collector.
  • Add _is_k8s_node label to the host labels.
  • Move ACLK into a legacy subfolder.
  • Exclude autofs by default in the diskspace plugin.
  • Mark internal functions as static in health code.
  • Remove unused struct in health code.
  • Add support for per series styling for dygraphs. Dashboard
  • Fix minor vulnerability alert by updating socket-io dependency.
  • Fix dygraph panning…

This update for netdata fixes the following issues:

• Update to 1.29.3 Release v1.29.3 is a patch release to improve the stability of the Netdata Agent. We discovered a bug that when proc.plugin attempts to collect the operstate parameter for a virtual network interface. If the chart is obsoleted, the Netdata Agent crashes. This release also contains additional bug fixes and improvements. Bug fixes

  • Fix proc.plugin to invalidate RRDSETVAR pointers on obsoletion.

• Update to 1.29.2 Release v1.29.2 is a patch release to improve the stability of the Netdata Agent. We discovered that an improvement introduced in v1.29.0 could inadvertently set all os_* host labels to unknown, which could affect users who leverage these host labels to organize their nodes, deploy health entities, or export metrics to external time-series databases. This bug has been fixed. This release also contains additional bug fixes and improvements. Improvements

  • Make the Opsgenie API URL configurable.
  • Add k8s_cluster_id host label.
  • Enable apps.plugin aggregation debug messages.
  • Add configuration parameter to disable stock alarms.
  • Add ACLK proxy setting as host label.
  • Add freeswitch to apps_groups.conf.
  • Simplify thread creation and remove unnecessary variables in the eBPF plugin. Bug fixes
  • Fix the context filtering on the data query endpoint.
  • Fix container/host detection in the system-info.sh script.
  • Add a small delay to the ipv4_tcp_resets alarms.
  • Fix collecting operstate for virtual network interfaces.
  • Fix sendmail unrecognized option F error.
  • Fix so that raw binary data should never be printed.
  • Change KSM memory chart type to stacked.
  • Allow the REMOVED alarm status via ACLK if the previous status was WARN/CRIT.
  • Reduce excessive logging in the ACLK.

• Changes in 1.29.1 Release v1.29.1 is a hotfix release to address a crash in the Netdata Agent. A locking bug in one of the internal collectors in Netdata could cause it to crash during shutdown in a way that would result in the Netdata Agent taking an excessively long time to exit. Bug fixes

  • Fix crash during shutdown of cgroups internal plugin.

• Update to 1.29.0 (go.d.plugin 0.27.0) The v1.29.0 release of the Netdata Agent is a maintenance release that brings incremental but necessary improvements that make your monitoring experience more robust. We've pushed improvements and bug fixes to the installation and update scripts, enriched our library of collectors, and focused on fixing bugs reported by the community. At a glance Netdata now collects and meaningfully organizes metrics from both the Couchbase JSON document database and the nginx-module-vts module for exposing metrics about NGINX virtual hosts. We've also migrated more collectors from Python to Go in our continued efforts to make data collection faster and more robust. The newest effort includes our Redis, Pika, and Energi Core Wallet collectors. On the dashboard, we improved the responsiveness of panning forward and backward through historical metrics data by preventing unnecessary updates and reducing the number of calls. The charts should also now immediately update when you stop panning. Improvements

  • Reduce the number of alarm updates on ACLK.
  • Remove unused entries from structures.
  • Improve the retry/backoff during claiming.
  • Support multiple chart label keys in data queries.
  • Truncate excessive information from titles for apps and cgroups collectors.
  • Use mguid instead of hostname in the ACLK collector list.
  • Cleanup and minor fixes to eBPF collector.
  • Add _is_k8s_node label to the host labels.
  • Move ACLK into a legacy subfolder.
  • Exclude autofs by default in the diskspace plugin.
  • Mark internal functions as static in health code.
  • Remove unused struct in health code.
  • Add support for per series styling for dygraphs. Dashboard
  • Fix minor vulnerability alert by updating socket-io dependency.
  • Fix dygraph panning…

This update for netdata fixes the following issues:

Update to 1.31.0 (go.d.plugin 0.29.0)

The v1.31.0 release of Netdata comes with re-packaged and redesigned elements of the dashboard to help you focus on your metrics, even more Linux kernel insights via eBPF, on-node machine learning to help you find anomalies, and much more. This release contains 10 new collectors, 54 improvements (7 in the dashboard), 31 documentation updates, and 29 bug fixes. At a glance We re-packaged and redesigned portions of the dashboard to improve the overall experience. Part of this effort is better handling of dashboard code during installation—anyone using third-party packages (such as the Netdata Homebrew formula) will start seeing new features and the new designs starting today. The timeframe picker has moved to the top panel, and just to its right are two counters with live CRITICAL and WARNING alarm statuses for your node. Click on either of these two open the alarms modal. We've also pushed a number of powerful new collectors, including directory cache monitoring via eBPF. By monitoring directory cache, developers and SREs alike can find opportunities to optimize memory usage and reduce disk-intensive operations. Our new Z-scores and changefinder collectors use machine learning to let you know, at a glance, when key metrics start to behave oddly. We'd love to get feedback on these sophisticated, subjective new brand of collectors!

Improvements

• Automatically trigger Helmchart PR on Agent release. (gh#netdata/netdata#11084)
• Implement ACLK env endpoint. (gh#netdata/netdata#10833)
• Implement new HTTPS client for ACLK. (gh#netdata/netdata#10805)
• Update ACLK passwd endpoint to match specifications of the new architecture. (gh#netdata/netdata#10859)
• Implement ACLK new backoff (TBEB) architecture. (gh#netdata/netdata#10941)
• Add functionality to store node_id for a host. (gh#netdata/netdata#11059)
• Remove version negotiation from ACLK-NG. (gh#netdata/netdata#10980)
• Persist claim IDs in local database for parent and children. (gh#netdata/netdata#10993)
• Provide more agent analytics to PostHog. (gh#netdata/netdata#11020)
• Reduce logging when sending agent analytics. (gh#netdata/netdata#11091)
• Remove error message on Netdata restart. (gh#netdata/netdata#8685)
• Add a timeout when sending anonymous statistics using curl. (gh#netdata/netdata#11010)
• Improve dash-example.html. (gh#netdata/netdata#10870)
• Add host_cloud_enabled attribute to analytics. (gh#netdata/netdata#11100)

Dashboard

• Bundle the react dashboard code into the agent repo directly. (gh#netdata/netdata#11139)

• Add dashboard info strings for systemdunits collector. (gh#netdata/netdata#10904)

• Update dashboard version to v2.17.0. (gh#netdata/netdata#10856)

  • Top bar, side panel and overall navigation has been redesigned.
  • Top bar now includes a light bulb icon with news/features and the number of CRITICAL or WARNING alarms.
  • Documentation and settings buttons moved to the sidebar.
  • Improved rendering of sign in/sign up option button along with an operational status option (under user settings).
  • In the left panel, nodes show a status badge and are now searchable if there are more than 4.

Health

• Improvements

  • Add charts configuration option to templates. (gh#netdata/netdata#11054)
  • Add new attributes to health configuration files. (gh#netdata/netdata#10961)
  • Add inconsistent state to the mysql_galera_cluster_state alarm. (gh#netdata/netdata#10945)
  • Add systemdunits collector alarms. (gh#netdata/netdata#10906)
  • Use average instead of sum in VerneMQ alarms. (gh#netdata/netdata#11037)
  • Check configuration for CUSTOM and MSTEAM. (gh#netdata/netdata#11113)
  • Reduce alarms notifications dump logging. (gh#netdata/netdata#11116)

• Bug fixes

  • Add…

These are all security issues fixed in the netdata-1.31.0-1.3 package on the GA media of openSUSE Tumbleweed.