Edit

Centreon Core

Introduction

You can find in this chapter all changelogs concerning Centreon Core.

It is very important when you update your system to refer to this section in order to learn about behavior changes or major changes that have been made on this version. This will let you know the impact of the installation of these versions on the features you use or the specific developments that you have built on your platform (modules, widgets, plugins).

If you have feature requests or want to report a bug, please go to our Github

Centreon Web

20.10.15

Release date: December 23, 2021

Bug fixes

  • [API] Fixed the value of acknowledgement's stickiness set by the API. A value of 1 was set instead of 2. Based on PR #10028.
  • [Authentication] Fixed LDAP OU quote connection breaking
  • [CLAPI] Fixed an issue preventing ACLs from applying on services created with CLAPI
  • [Configuration] Fixed an issue that caused the Anomaly Detection services to lose their graphs when they were renamed
  • [Configuration] Fixed an issue that prevented users from removing the SNMP community (and other fields) from the host form
  • [Configuration] Fixed unwanted writes into unexisting file when exporting Traps config at the same time as a trap arrives. Based on PR #9973. Fixes issue #4236
  • [Install] Fixed installation with MySQL 5.7 on step 7 of installation wizard

20.10.14

Release date: November 29, 2021

Bug fixes

  • [Authentication] Fixed PHP error when debug is enabled with OIDC authentication
  • [CLAPI] Fixed LDAP configuration ID for export and import
  • [Configuration] Fixed Centreon Broker configuration that could be empty or deleted
  • [Core] Remove PHP warning in logs
  • [Resources Status] Fixed access to action URLs
  • [Resources Status] Fixed access to actions buttons
  • [UX] Non admin user do not have the same submenu subsections

20.10.13

Release date: November 15, 2021

Enhancements

  • [CEIP] Product Adoption component integration
  • [Core] Add Feature Flipping for Resources Status vs Legacy Pages
  • [Core] Compatibility PHP 7.4

Bug fixes

  • [Authentication] Fixed user information retrieval method for OpenId
  • [CLAPI] Fixed recurrent downtimes exported with CLAPI that could not be imported with CLAPI
  • [Configuration] Avoid blocking configuration generation when users don't have notifications enabled
  • [Configuration] Fixed reset untouched values using massive changes on hosts
  • [Configuration] Fixed empty string parameter for LUA output in Broker configuration
  • [Custom Views] Fixed sharing of views with LDAP groups
  • [Discovery] Fixed an issue causing error messages when filling credentials in a Host Discovery job
  • [Downtime] Fixed display of planned downtimes when one downtime is started
  • [Downtime] Fixed the adding of a downtime on a resource from the French GUI
  • [Knowledge Base] Get correct link from template. Based on PR #10066
  • [UX] Fixed menus by no longer displaying orphaned items

Security fixes

  • CSRF - delete any command
  • CSRF - delete any poller
  • CSRF - delete any host
  • CSRF - delete any SNMP trap
  • CSRF - delete any service
  • CSRF - delete any contactGroup
  • CSRF vulnerability allowing to delete any user
  • CSRF vulnerability allowing to delete many kinds of objects

20.10.12

October 5, 2021

Security fixes

  • Fixed session on account deletion

20.10.11

September 14, 2021

Bugfixes

  • [ACL] Fixed missing ACL actions on CLAPI import
  • [Configuration] Fixed ineffective massive change on 'Reach API configuration' option on remote server
  • [Downtimes] Prevent the user from creating downtimes with start date, end date and duration after 2037
  • [Platform Topology] Fixed an error that occurred when an FQDN was used as parent address

Security fixes

  • [Install] Rights applied to "centreon.conf.php" and "conf.pm"
  • [OpenId] Secret tokens obfuscation
  • [Resource status] Fixed error based SQLi on resources GET's endpoint

20.10.10

July 30, 2021

Enhancements

  • [Authentication] Improve centreonAuth.SSO.class for OpenId connection

Bugfixes

  • [Administration] LDAP search fails
  • [Configuration] Changing a Remote Server's IP address converts it into a simple Poller
  • [Configuration] Editing service template removes relations with servicegroups
  • [Configuration] Only first servicegroup linked to a service template is exported
  • [Core] Unserialize in CentreonUtils is blocked by QualityGate
  • [Core] Update copyright date
  • [Graph] Can't get a graph with autologin key
  • [LDAP] Fixed LDAP auto-sync is always skipped
  • [LDAP] LDAP's My account issue
  • [Platform Topology] CLAPI's add Instance doesn't add a poller into the platform_topology table
  • [Platform Topology] JSON Schema isn't validated in the POST endpoint
  • [Platform Topology] Removed unused variable in registerServerTopology.sh
  • [Resources Status] No route found for "GET /centreon/api/beta/monitoring/resources/undefineds/133"
  • [i18n] Fix typo in error message

20.10.9

June 30, 2021

Bugfixes

  • [APIv2] Use poller's page ACL rights on Topology API endpoints
  • [Configuration] InfluxDB configuration columns are deleted in Broker form
  • [Downtime] Can not remove/delete periods when configuring recurrent downtime
  • [Platform Topology] Update Exception handling

Security fixe

  • [Configuration] Input sent to unserialize() are not sanitized
  • [Configuration] SQL Injection on commands
  • [Configuration] SQL Injection on host dependency
  • [Configuration] SQL Injection on hostgroup dependency
  • [Configuration] SQL Injection on metaservice
  • [Configuration] SQL Injection on metaservice dependency
  • [Configuration] SQL Injection on service categories
  • [Configuration] SQL Injection on service dependency
  • [Configuration] SQL Injection on servicegroup
  • [Configuration] SQL Injection on servicegroup dependency
  • [Configuration] SQL Injection on timeperiod
  • [Configuration] XSS Stored on checks command
  • [Core] Manage security acknowledgement

20.10.8

June 7, 2021

Bugfixes

  • [APIv1] Cannot send external commands anymore
  • [APIv2] Can not authenticate using API when database name and database username are different from default
  • [APIv2] DELETE downtime on host not functionnal
  • [APIv2] Unable to use v2 api (internal server error)
  • [Administration] Broker statistics for pollers are not shown
  • [Anomaly] host_id is null is stream connector flow
  • [Configuration] Change default values for Centreon Engine
  • [Configuration] Unable to add a Poller with the Wizard
  • [Core] Avoid 404 redirection
  • [Install] Cannot update when you have no metaservices
  • [LDAP] Adding new user from LDAP results in Request Entity Too Large error
  • [Reporting] Dashboard can't display reporting for service (query too long)
  • [Resources Status] "Filter by Host" filter is not emptied between searches
  • [Resources Status] Action ACL not working
  • [Resources Status] Apply ACL in command line block
  • [Resources Status] Manage not filled curves

Security fixes

  • [Administration] Import of JS in image files
  • [Administration] Insecure media file upload
  • [Administration] SQL Injection on ACL actions
  • [Administration] SQL Injection on ACL resources
  • [Administration] SQL Injection on reload ACL
  • [Configuration] SQL Injection on MediaWiki
  • [Configuration] SQL Injection on SNMP trap manufacturer
  • [Configuration] SQL Injection on poller form
  • [Configuration] Unserialize() are not sanitized in Centreon Broker wizard
  • [Configuration] Unserialize() are not sanitized in poller wizard
  • [Configuration] XSS reflected on Graph performance curves
  • [Configuration] XSS reflected on SNMP trap
  • [Configuration] XSS reflected on internal API broker configuration
  • [Graph] SQL Injection on Graph component templates
  • [Graph] SQL Injection on Graph generate image
  • [Install] Packaging, remove . gitignore files
  • [Reporting] SQL Injection on reporting export

Performance

  • [ACL] ACL are computed every time for BV
  • [Generation] Bulk insert in index_data during config generation
  • [Purge] Purge of index_data is taking too long because of suboptimal SQL query

20.10.7

May 7, 2021

Enhancements

  • [Custom Views] Add regex filtering to widget compare field

Bugfixes

  • [Configuration] Can not delete Remote Server from UI
  • [Configuration] Central's Engine configuration is set to use aggressive host checking
  • [Configuration] Hosts/services templates become simple hosts/services
  • [Configuration] Unable to create Meta service with high amount of metrics
  • [Configuration] Wrong number of services/pages to display
  • [Graph] Graphics are not displayable in the interface
  • [Monitoring] Cancelled BA downtime from Downtime menu
  • [Monitoring] Export event logs with filter on output is broken
  • [Platform Topology] API: remote / poller to central with proxy
  • [Platform Topology] Remove all topology when Remote => Central Conversion
  • [Platform Topology] Script: Unable to register a remote on a Central
  • [Platform Topology] Unable to replace 127.0.0.1 by real IP in poller form when already saved in platform_topology
  • [Purge] Script can't drop several partitions
  • [Resources Status] Be able to sort by Parent name in listing
  • [Resources Status] Manage notes on resources for Notes URL
  • [Resources Status] Missing french translations
  • [Resources Status] Service link to multiple hosts or service by hostgroup won't be listed
  • [UI] Centreon blank page on all menu with firefox < 78

Security fixes

  • [Administration] User can install or delete modules with no ACL rights
  • [Configuration] Cross-site Scripting (XSS) Stored/Persistent in Dependency/Notification form
  • [Configuration] SQL injection in user additional information
  • [Configuration] Stored XSS in host Alias for host form
  • [Core] Predictable anti-CSRF token
  • [Graph] SQL Injection on graph periods
  • [Graph] SQL Injection on graph split
  • [Lib] Update centreon vulnerable packages
  • [Resources Status / Service Details] Passwords are displayed in command line
  • [Resources Status / Service Details] Passwords field for EXTRAOPTIONS is not hidden in command line

Performance

  • [Core] Replace "WITH RECURSIVE" MySQL calls with PHP-based recursion loops

20.10.6

April 20, 2021

Bugfixes

  • [ACL] Use ACL Action to generate traps
  • [About] Update about page with current team
  • [Administration] Cannot list Pollers in Platform Status pages
  • [Configuration] Error while adding a Remote Server and attaching a poller to it via wizard
  • [Configuration] Poller attached to remote is not fully removed from database when deleted using the from
  • [Core/API/v1] Can't filter on criticality
  • [Core] Configuration output can lead to an empty broker configuration
  • [Core] Update centreon copyright dates
  • [Extensions Manager] No popup when removing extension
  • [Graph] Adapt graph scale for b/s unit
  • [Graphs] Colors of labels don't match colors of curves (old library)
  • [Install] During installation, web installer can not be executed fully
  • [Platform Topology] Distant Poller attached behind a Remote Server does not receive conf
  • [Platform Topology] Missing current node IP address in register script
  • [Platform Topology] Register script concatenates default values to values from the template
  • [Platform Topology] Script target address not parsed correctly.
  • [Platform Topology] Enhance register script displaying
  • [Reporting] Dashboard is slow to display with large service groups
  • [Resources Status] Bad urls for mediawiki
  • [Resources Status] Macros in "URL" and "Action URL"
  • [Resources Status] Missing french translations
  • [UX] Remove "deprecated" from menu for deprecated monitoring pages

Security fixes

  • [Core] XSS in index.php and index.html
  • [Library] Update jQuery to version sup or equal 3.5.1

Performance

  • [API/Topology] Refacto PlatformTopology 20.10

20.10.5

April 1, 2021

Bugfixes

  • [Lib] Update moment-timezone to manage new timezones
  • [Resources Status] Error when getting the command line for Meta Service detail

Security fixes

  • [APIv2] API realtime rights give API configuration rights

20.10.4

February 25, 2021

Enhancements

  • [Configuration] Add the 'instance_heartbeat_interval' parameter in Engine configuration
  • [Configuration] Improve access to the list of pollers
  • [Core] Performance improvements for partitioning
  • [Core] Update PHP 7.3 compatibility
  • [Core] Use Gorgone to dispatch downtimes locally
  • [Status Details] Display of comments in the host details page
  • [Top counters] Displayed values for services don't consider host acknowledgements

Bugfixes

  • [CLAPI] No control on dependencies relations
  • [Configuration/] "Conf Changed" yes is green instead of red in pollers listing
  • [Configuration] Creation forms generate status code 400 errors
  • [Configuration] Non-admin users can't create host/service
  • [Resources Status] Display order of events in timeline
  • [Resources Status] Panel does not display radius
  • [Resources Status] Unexpected behavior when setting a DT with an empty comment field

Security fixes

  • [Administration] Cross-site Scripting (XSS) Stored/Persistent in "ACL > Resources Access" - CVE-2020-22425
  • [Administration] XSS stored in the LDAP form
  • [Apache] Remove deprecated TLS ciphers
  • [Authentication] Session is active longer than expected
  • [Authentication] User enumeration in login page
  • [Configuration] Cross-site Scripting (XSS) Reflected in "Configuration > Hosts"
  • [Core] Vulnerable handlebars.js library
  • [Reporting] Cross-site Scripting (XSS) Reflected in "Dashboard > Hosts"

20.10.3

February 8, 2021

Enhancements

  • [API] Add endpoint for Topology/enableRemote
  • [API] Add Delete method for Topology/enableRemote
  • [Core] [Refactor the script to register new server in bash instead of PHP

Bugfixes

  • [Administration] ACL Menus Access - Lines alignment
  • [Administration] ACL Menus Access - Unable to select subgroup access options
  • [CLAPI] APPLYCFG on a Poller behind a Remote Server doesn't trigger sync task for the RS itself
  • [CLAPI] Cancel RTACKNOWLEDGEMENT doesn't work for services
  • [CLAPI] Create user with language
  • [CLAPI] Import fails on password type macros
  • [CLAPI] Show RTACKNOWLEDGEMENT for a service only shows first one to have been defined
  • [Update] Central IP is override by 127.0.0.1 in platform_topology table

Security fixes

  • [ACL/Access Groups] Cross-site Scripting (XSS) Stored/Persistent for search
  • [ACL/Actions Access] Cross-site Scripting (XSS) Stored/Persistent for search
  • [ACL/Resources Access] Cross-site Scripting (XSS) Stored/Persistent for search
  • [API] Missing access control mechanism in rest API v1
  • [Configuration > Servicegroups] Leak of technical information
  • [Configuration/H/HTPL/S/STPL] Password in plain text
  • [Core] Centreon token is vulnerable against replay attack
  • [Core] Token usage is not mandatory
  • [Media] PHP warning about missing tmp dir used during media upload

20.10.2

January 12, 2021

Known behaviours:

  • The "url notes" and "url actions" links now visible in the "Resources Status" page do not translate macros, for example $HOSTNAME$.

Enhancements

  • [API] Add normalizers for data found in concordanceArray
  • [API] Get topology of servers of a Centreon Platform
  • [Configuration] Add a special variable for trap OID
  • [Configuration] Add pool size parameter in configuration for Centreon Broker
  • [Resources Status] Add alias & fqdn in host detail panels
  • [Resources Status] Add URL link button from host and service extended information configuration

Bugfixes

  • [Authentication] New LDAP configurations are broken
  • [CLAPI] Export does not export default contactgroup linked to a LDAP configuration
  • [Configuration] PHP Warning while creating a Centreon Engine configuration
  • [Configuration] Unable to save log level in Centreon Engine form
  • [Knowledge Base] Access to mediawiki is very slow
  • [Resources Status] Display issue when resource has a configured icon
  • [Resources Status] Incorrect default downtime duration
  • [Resources Status] Useless impacted_resources_count property

Security fixes

  • [Apache] Support for the HTTP TRACE
  • [Apache] Uncorrect HTTPS declaration of SSLCipherSuite in Centreon example file
  • [Authentication] Reach Centreon Front-end parameter ineffective
  • [Configuration] Cross-site Scripting (XSS) Stored/Persistent in Connectors & commands form
  • [Configuration] Cross-site Scripting (XSS) Stored/Persistent in Contact Groups form
  • [Configuration] XSS in updateContactParam.php & commonJS.php
  • [Media] Unrestricted file upload

20.10.1

November 25, 2020

Enhancements

  • [API] Improve registration script
  • [Performance] Disable UI notification mechanism if not needed by user

Bugfixes

  • [API] Rework POST generated API request for PlatformTopology
  • [API] Service groups search not working
  • [Administration] "show deprecated pages" option does not work anymore
  • [Administration] 'options' table for centreon database is sometimes empty
  • [Configuration] Radio buttons for "InfluxDB - Storage - InfluxDB" output not working properly for Centreon Broker form
  • [Core] Perl lib db query bad looping parameters
  • [Core] Too much rows in extended_service_informations tables
  • [Event View] Cannot search with regex using "+" character
  • [Event logs] Inoperative filters when exporting
  • [Graphs] Performance graph legend does not update dynamically
  • [Reporting] Dashboard won't build when having service by hostgroup
  • [Resources Status] Cannot search multiple times in hostgroup filter
  • [Resources Status] Infinite scroll + refresh button duplicates events in timeline
  • [Resources Status] Services listing blinking in details panel
  • [Resources Status] Timeline tab content blinks while browsing resources

Security fixes

  • [Apache] Lack of click diversion protection (Clickjacking)
  • [Core] Update moment.js library

20.10.0

October 21, 2020

Known behaviours:

  • If a Central is configured to communicate with a Remote Server using SSH, reloading the configuration will raise the following error in Gorgone's log:

    ERROR - [sshclient] Unsupported action 'ADDIMPORTTASKWITHPARENT'

    This is due to the fact that the data export/import process between those two servers does not call the Remote Server API (the HTTP flow is then not needed anymore).

    The call is now made through Gorgone, as for the files copy action, and requires the communication to use ZMQ.

Enhancements

  • [API] Possibility to Register servers (Remote Server, Poller, Centreon Map)
  • [Configuration/Wizard] Add possibility to select registered poller
  • [Authentication] Replace Keycloak to generic OAuth2 / OpenId Connect
  • [Event Logs] Display anomaly detection as regular service
  • [Monitoring/Resources Status] Add shortcuts for hosts and services details
  • [Monitoring/Resources Status] Add timeline for hosts and services details
  • [Monitoring/Resources Status] Be able to filter on status output
  • [Monitoring/Resources Status] Add possibility to save/manage filters
  • [Monitoring/Resources Status] Add possibility to submit result for resources
  • [Monitoring/Resources Status] Redirect all realtime links to Resources Status page
  • [Remote Server] Replace HTTP flow by Gorgone between Central and Remote Servers

Centreon Engine

20.10.7

October 20, 2021

Bug fixes

  • Badly designed mutex could cause deadlocks in centreon-clib
  • [Anomaly_Detection] Units were not provided in the perfdata for lower_thresholds and upper_thresholds of Anomaly Detection services
  • Fixed an issue that could cause deadlocks in the logs production
  • Sending values of date_start, date_end and duration of downtimes higher than 2^31 (Tue Jan 19 04:14:08 CET 2038) could block broker's inserts into the database. They are now limited to 2037-12-31 23:59:59.
  • No recovery notification was sent if service went from CRITICAL to WARNING to OK state and user deactivated WARNING notification

From Community

  • Notifications were sent for services of a soft down host despite "Soft Service Dependencies" option being set to "yes" (fixes issue #286)

20.10.6

July 15, 2021

Bugfixes

  • Recovery notifications forgotten when engine is stopped during incident
  • Engine sends service status twice when a check is forced
  • Compilation issues on Raspberry Pi

20.10.5

June 4, 2021

This version requires Centreon Clib version to be 20.10.2 or higher. This version requires Centreon-Connector version to be 20.10.1 or higher.

Bugfixes

  • Engine cpu usage increased to 100% when check_period is set to none
  • Engine/broker build migrated from Bintray to ConanCenter

20.10.4

April 29, 2021

Bugfixes

  • Avoid sending erratic timestamps
  • Bad memory access on hostgroupname/servicegroupname macros
  • Host "Hard State Duration" shows N/A when no associated to services
  • Limit downtime start date, end date and duration
  • SERVICEGROUPNAME macro doesn't appear in notifications

20.10.3

April 28, 2021

This version requires Centreon Broker version to be 20.10.4 or higher.

Bugfixes

  • Recovery notifications were not sent when exiting from downtime
  • Recovery notifications are not sent when entering in notification timeperiod
  • Hosts and services actively checked had their statuses returned to Broker twice
  • $TIMET$ macro displayed time instead of epoch
  • Flapping was not detected
  • SERVICENOTESURL macro value was encoded in notifications
  • Engine did not respect user's defined notification periods
  • Engine stopped working without logging an error

20.10.2

January 20, 2021

This version requires Centreon Broker version to be 20.10.3 or higher.

Bugfixes

Notification macros

The macros in which notification information can be found have been fixed (ie $NOTIFICATION$, $HOSTNOTIFICATION$, $SERVICENOTIFICATION*$)

Enhancements

Instance updates

There is a minimal delay specified in seconds between two instance updates. By default, its value is 30s. It can be set with the variable instance_heartbeat_interval in the centengine.cfg file.

20.10.1

December 16, 2020

Bugfixes

Stalking option

The stalking option works again, it has been fixed. Make sure you are not enabling volatile option at the same time to really get an output stalking.

Macros filters

Macros can be filtered. This was possible before and there was a regression breaking this functionality. So now, we can activate the macros filtering and then we can specify which macros to send to broker.

Notifications

Host/service status field 'Last Notification' was filled when state was HARD even if no notification is configured nor sent.

20.10.0

October 21, 2020

Known behaviours:

  • If Engine on a Poller or Remote Server is not upgraded to 20.10, configuration files copied from an upgraded Central by Gorgone using ZMQ communication will not be readable by Engine process, resulting to this error in Engine log:

    Error: Parsing of global configuration failed: Can't open file '/etc/centreon-engine/centengine.cfg'

    This is due to stricter rights on those files.

    As always, we strongly recommend to upgrade all components to match the Central server's version.

    However, during an upgrade process, it is possible to manually add the user centreon-engine to the centreon-gorgone group with the following command:

    usermod -a -G centreon-gorgone centreon-engine

Bugfixes

  • Contains all fixes up to version 20.04.7

Centreon Broker

20.10.10

Release date: January 13, 2022

Bug fixes

  • The central broker's cache generation loaded too much data and took too much time when BAM was activated
  • When a single metric is deleted, the corresponding RRD file is now removed
  • Fixed an issue causing BAM Business Activities (best status) to remain in an OK state when the OK KPIs were removed

20.10.9

October 27, 2021

Bug fixes

  • Fixed a deadlock issue that blocked engine when all debug options were enabled

20.10.8

October 20, 2021

Improvements

  • A TCP keepalive check has been added to the acceptor side of broker connections to avoid keeping dead connections

Bug fixes

  • Fixed an issue that occasionally caused the LUA cache to disappear when reloading cbd
  • In case of retention on one side of a tcp connection, the connection could get interrupted because of an issue in the flush() function
  • Database connection error flag was not reset in conflict manager once an error occurred (even after successful connection) and could block the insertion into the database
  • The index_id column of table metrics was cast in int32 instead of int64
  • Resolved conflicts that could appear between hostgroups when connections_count > 1
  • Deleting graph from the WUI did not actually delete RRD files

20.10.7

August 30, 2021

Bugfixes

  • Fixed a deadlock in broker with a reversed TCP output when cbd receives SIGTERM
  • Fixed "MySQL server has gone away" error causing failure in BAM events computation, and data loss in BAM availability statistics

20.10.6

July 15, 2021

Bugfixes

  • A deadlock occasionally appears when broker is stopped right after it started
  • A core dump occasionally appears when Engine is stopped
  • Sometimes Engine cannot reconnect to the central broker when cbd is restarted
  • When many pollers attempt to connect to the central broker, the last ones may fail to connect
  • Timeranges of timeperiods can't be parsed if they end with \r or \n
  • Compilation issues on Raspberry Pi
  • TLS query not understood by GNUTLS on Redhat 8

Enhancements

  • Move BBDO serialized events logs from debug to trace

20.10.5

June 4, 2021

Security

  • Avoid SQL injections with custom variables
  • Remove SSL and deprecated cipher suites

Bugfixes

  • Engine/broker build migrated from Bintray to ConanCenter
  • BBDO compatibility broken after minor update 20.10.4, blocking the actualization of monitoring data
  • Metaservices used as KPIs did not impact BAs (Centreon BAM)
  • CRITICAL impact applied instead of UNKNOWN for BAs used as KPIs (Centreon BAM)
  • Broker was slow to restart because of suboptimal queries processing downtimes and comment
  • Limit the values of downtimes' start date, end date and duration to fit the database columns' types

20.10.4

April 28, 2021

Broker

  • Add TLS handshake in broker debug logs
  • Allow point as a valid character for ouput's name
  • Broker hangs when stopped alone (without watchdog)
  • Cast index_data.id to unsigned int 64
  • Connection interruption not detected by Central (one peer retention mode)
  • Harden SIGTERM handling when shutting down
  • Insert NULL instead of Nan or Inf for metrics data
  • Provide host_id and service_id in logs when metrics fail to be inserted in database
  • Rebuild of RRD not working
  • Study ARM compilation
  • TLS common name check impossible if it is too long

Engine

  • Engine stops working without error

Security

  • Strengthen TLS / SSL exchanges

20.10.3

January 20, 2021

Bugfixes

Conflict manager and comments

It is possible to lock the database during comments insertion. This new version fixes that.

BAM reporting dimensions computation

If there are retention files, dimensions computation could fail because of conflicts between new block computation and old ones (the ones in the retention). There was also an issue of concurrent access to tables during dimensions computation.

BAM availabilities rebuild

When availabilities are rebuilt, durations can be doubled. This new version fixes this issue.

Enhancements

Logs

Logs are sent to the database in bulk as we already do for customvariables.

Lua

There is a new API available for the Lua connector. To use it, scripts must declare a global variable broker_api_version=2. From the user's point of view, Stream Connectors should work almost the same. In isolate cases, we could see scripts that do not work with this new API, then you can always work with Broker API version 1, by setting the variable to 1 or by removing this variable declaration in the script. Why should we use the v2 version? Because it is faster, really faster.

TCP connections

If the connection between two peers is flapping, it may be difficult for one to reconnect to the other and this could lead to many CLOSE_WAIT on the acceptor side. This new version fixes this issue.

20.10.2

December 16, 2020

Known behaviours:

  • If TLS encryption is configured to use private key/certificate couple for IPv4/6 input/output endpoints, both ends must be updated to ensure communication.

  • If you use Centreon MAP with TLS encryption, make sure to update MAP server to version >= 20.10.2.

Bugfixes

TLS

Credentials were not loaded by the TLS connector anymore. This is fixed with this new version.

Custom variables

They were updated several times in the database. It is fixed now.

Build

GnuTLS requirement now matches compilation version.

BAM

Reporting events were not stored into database because of truncated Business Activities names causing duplicate entry errors.

20.10.1

November 25, 2020

Bugfixes

Build

Build on Centos8 fixed.

Retention files

The splitter class is now thread safe and does not need external locks anymore. It is also far less strict and allows some reading and some writing at the same time.

TCP

Writing on a tcp stream could slow down in case of many retention files. The issue was essentially in the flush internal function.

Enhancements

TCP connections

TCP streams are really faster, especially when Broker has retention files and there are a lot of traffic.

SQL and storage streams

Those streams have several improvements:

  • Events exchanges are much faster, especially when Broker has retention files.
  • Several queries have been changed to insert data in bulk, it is the case for custom variables and metrics.
  • There are cases where those streams could crash that have been also fixed.

Statistics

The thread pool has now its own statistics. For now, we have two informations that are the number of threads it contains and its latency in milliseconds that is the duration we have to wait to see a task executed. We post a task to the thread pool at time T1, it is executed by the thread pool at time T2, the latency is T2 - T1.

Command line argument

It is now possible to set the cbd pool size directly on the command line with the –pool_size X argument or -s X.

20.10.0

October 21, 2020

Known behaviours:

  • If Broker on a Poller or Remote Server is not upgraded to 20.10 (or with a version prior to 20.04.9), the communication between said Poller or Remote Server and an upgraded Central may not work.

    As always, we strongly recommend to upgrade all components to match the Central server's version.

    However, during an upgrade process, communication can be maintained by making sure Broker's configurations match the following conditions:

    • TLS encryption and compression are either set to Auto or No on Central input,
    • TLS encryption and compression are either set to Auto or No on Poller or Remote Server output.

    If the reversed connection mode (one peer retention) is used, the Broker upgrade is mandatory.

Bugfixes

  • Contains all fixes up to version 20.04.9

Centreon CLib

20.10.5

October 27, 2021

Bug fixes

  • Fixed a deadlock issue that blocked engine when all debug options were enabled

20.10.4

October 20, 2021

Bug fixes

  • Fixed an issue in centreon-clib that caused deadlocks when a process was killed
  • Badly designed mutex could cause deadlocks in centreon-clib
  • Fixed an issue that could cause deadlocks in the logs production

20.10.3

July 15, 2021

Bug fixes

  • Libraries are loaded lazily now. This allows not having to check all link issues during loading.

20.10.2

June 4, 2021

Enhancements

  • Compilation in C++14 with conan-center: bintray has stopped. We had to switch to conan-center. And then our conan dependencies had to be upgraded and then we had to switch to C++14. So here is the corresponding compilation.

20.10.1

April 28, 2021

Bugfixes

  • Start/Stop process_manager mechanism is rewritten and much simpler. The consequences are that there are less deadlocks in the processes management.
  • The simple cases that are addition, subtraction and some other cases, have had their computations simplified, that is to say less computations, so faster.

20.10.0

October 21, 2020

Bugfixes

  • A possible deadlock was removed when a process is added and at the same time a process is removed because in timeout.

Centreon Connector Perl

20.10.3

October 20, 2021

Bug fixes

  • Badly designed mutex could cause deadlocks in centreon-clib
  • Fixed an issue that could cause deadlocks in the logs production

20.10.2

July 15, 2021

  • Provide compatibility with centreon-clib 20.10.3

20.10.1

June 4, 2021

  • Engine/broker build migrated from Bintray to ConanCenter.

20.10.0

  • Compatibility with other 20.10 components.

Centreon Connector SSH

20.10.3

October 20, 2021

Bug fixes

  • Badly designed mutex could cause deadlocks in centreon-clib
  • Fixed an issue that could cause deadlocks in the logs production

20.10.2

July 15, 2021

  • Provide compatibility with centreon-clib 20.10.3

20.10.1

June 4, 2021

  • Engine/broker build migrated from Bintray to ConanCenter.

20.10.0

  • Compatibility with other 20.10 components.

Centreon Gorgone

20.10.6

Release date: December 15, 2021

Bugfixes

  • Make Gorgone’s private key readable by centreon-gorgone only
  • Fixed export of configuration files on a poller with Debian 11
  • Fixed error in log for autodiscovery module
  • Merge YAML libraries to use only one
  • Fixed uninitialized value using pull mode

20.10.5

September 7, 2021

Enhancements

  • Add endpoint to ask gorgoned to resync pollers configuration
  • Add Centreon platform audit module
  • Allow to define the list of the commands that can be run through the Action module

Bugfixes

  • Fixed only returns no_log when asking associated logs of a token through API

20.10.4

June 10, 2021

Bugfixes

  • [Anomaly] Host ID was null in detection filters

Enhancements

  • Add logging option to better handle logs that could cause SQLite database to grow too large
  • Added dependency for perl-Libssh-Session-0.8

20.10.3

March 4, 2021

Enhancements

  • [core] Bulk external commands sent to Engine

20.10.2

January 29, 2021

Bugfixes

  • [zmqclient] Harden communication to avoid "Protocol not good" errors
  • [zmqclient] Increment ZMQ_LINGER period for some modules
  • [zmqclient] Lot of ESTABLISHED connections on server side when network is flapping
  • [sshclient] Command actions badly encoded lead to badly encoded messages in web UI (downtimes, acknowledgements)
  • [sshclient] Uncaught messages lead to problems with statistics collection and Autodiscovery module.

Enhancements

  • [anomalydetection] Reduce time interval between prediction downloads

20.10.1

December 17, 2020

Bugfixes

  • [proxy] gorgone-proxy processes stucked when stopping gorgoned
  • [core] Rare case of database handler wrongly instantiated due to race condition issue
  • [core] Hardened management of message encoding/decoding
  • [autodiscovery] Handle Centreon API modules version endpoint empty response
  • [autodiscovery] Uncatched error when reaching Host Discovery global timeout
  • [autodiscovery] Discovered services state flapped between enabled and disabled
  • [autodiscovery] Service discovery email sending not working properly when having services with space in their name
  • [autodiscovery] Service discovery email sending not working with groups of contacts

Enhancements

  • [proxy] Force TCP reconnection after 3 ping timeout
  • [zmqclient] ID is not necessary anymore in end targets configuration (ie Pollers)

20.10.0

October 21, 2020

Bugfixes

  • Contains all fixes up to version 20.04.6

Enhancements

  • [module] Add new core/pipeline module
  • [module] Add new centreon/judge module
  • [core] Add listener system
  • [autodiscovery] Refacto centreon/autodiscovery module to use listener system
  • [autodiscovery] Add service discovery in centreon/autodiscovery module
← Products lifecycle policyCommercial Extensions →