CVE-2024-22114

User with no permission to any of the Hosts can access and view host count & other statistics through System Information Widget in Global View Dashboard.

User with no permission to any of the Hosts can access and view host count & other statistics through System Information Widget in Global View Dashboard.

User with no permission to any of the Hosts can access and view host count & other statistics through System Information Widget in Global View Dashboard.

User with no permission to any of the Hosts can access and view host count & other statistics through System Information Widget in Global View Dashboard.

User with no permission to any of the Hosts can access and view host count & other statistics through System Information Widget in Global View Dashboard.

User with no permission to any of the Hosts can access and view host count & other statistics through System Information Widget in Global View Dashboard.

User with no permission to any of the Hosts can access and view host count & other statistics through System Information Widget in Global View Dashboard.

This update for zabbix fixes the following issues:

Zabbix was updated to 6.0.33:

• this version fixes CVE-2024-36461 and CVE-2024-22114

• New Features and Improvements

  • ZBXNEXT-9000 Changed query table for ASM disk group metrics in Oracle Database plugin and Oracle by ODBC template Agent Templates
  • ZBXNEXT-9217 Added AWS Lambda by HTTP template Templates
  • ZBXNEXT-9293 Updated max supported MySQL version to 9.0 Proxy Server
  • ZBXNEXT-8657 Updated Zabbix health templates with new visualization Templates
  • ZBXNEXT-9143 Added index on auditlog recordsetid Server
  • ZBXNEXT-9081 Added Small Computer System Interface (SCSI) device type support to Zabbix agent 2 Smart plugin Agent
  • ZBXNEXT-6445 Added recovery expression for fuzzytime triggers in Linux and Windows templates, removed fuzzytime triggers from active agent templates Templates
  • ZBXNEXT-9201 Updated max supported MySQL version to 8.4 Proxy Server
  • ZBXNEXT-9225 Updated max supported TimescaleDB version to 2.15 Server
  • ZBXNEXT-9226 Updated max supported MariaDB version to 11.4 Proxy Server
  • ZBXNEXT-8868 Added discovery and template for Azure VM Scale Sets Templates

• Bug Fixes

  • BX-24947 Fixed PHP runtime errors while processing frontend notifications Frontend
  • ZBX-24824 Improved loadable plugin connection broker Agent
  • ZBX-24583 Fixed inability to export/import web scenario with digest authentication API
  • ZBX-23905 Fixed double scroll in script dialogs Frontend
  • ZBX-18767 Fixed word breaks in flexible text input fields and trigger expressions Frontend
  • ZBX-24909 Fixed resolving of macro functions in the 'Item value' widget Frontend
  • ZBX-24859 Fixed JavaScript in S3 buckets discovery rule Templates
  • ZBX-24617 Fixed hardcoded region in AWS by HTTP template Templates
  • ZBX-24524 Fixed 'New values per second' statistic to include dependent items in calculation Proxy Server
  • ZBX-24821 Made 'execute_on' value being recorded in audit only for shell scripts Server
  • ZBX-23312 Fixed discovery edit form being saved incorrectly after dcheck update Frontend
  • ZBX-24773 Fixed duplicate item preprocessing in Kubernetes Kubelet by HTTP template Templates
  • ZBX-24514 Fixed standalone Zabbix server and Zabbix proxy not stopping when database is read-only Proxy Server
  • ZBX-23936 Fixed state and styling of readonly fields Frontend
  • ZBX-24520 Fixed an issue with incorrect translations used in several frontend places Frontend
  • ZBX-21815 Fixed issue with undefined offset for media type when it was deleted before saving the user Frontend
  • ZBX-24108 Fixed error in dashboard if Map widget contains map element that user doesn't have access to Frontend
  • ZBX-24569 Fixed old and added new items to Azure Virtual Machine template Templates
  • ZBX-24537 Fixed tags subfilter in Latest data kiosk mode Frontend
  • ZBX-24167 Fixed template linkage when item prototype collision is found Server
  • ZBX-23770 Improved monitoring user permissions documentation for Zabbix agent 2 Oracle plugin and Oracle by ODBC template Documentation
  • ZBX-24565 Removed redundant kernel header include, fixed musl compatibility issues (thanks to Alpine Linux maintainers for spotting this)
  • ZBX-24610 Fixed interface field appearance for discovered items without interface set Frontend
  • ZBX-24562 Fixed incorrect problem order in Problems by severity widget's hintbox Frontend
  • ZBX-23751 Fixed inability to pass an action filter condition without an 'operator' property, implying a default value of 'Equal' API
  • ZBX-21429 Prevented ability to disable all UI element access via role.update API API
  • ZBX-19271 Fixed inconsistent tag row rendering in different edit forms Frontend
  • ZBX-24539 Fixed incorrect threshold in trigger expression of Check Point Next Generation Firewall by SNMP template Templates
  • ZBX-24667 Fixed vm.memory.size[pused] item on Solaris Agent
  • ZBX-23781 Added storage volumes check in HPE iLO by HTTP…