Centreon Open Source

Introduction

You can find in this chapter all changelogs concerning Centreon Open Source.

It is very important when you update your system to refer to this section in order to learn about behavior changes or major changes that have been made on this version. This will let you know the impact of the installation of these versions on the features you use or the specific developments that you have built on your platform (modules, widgets, plugins).

If you have feature requests or want to report a bug, please go to our Github.

Read more about version 23.04 in our blog post.

Centreon Web

23.04.22

Release date: September 30, 2024

Bug fixes

• [API] Fixed access control for monitoring server configuration endpoints.
• [Authorization] Fixed an issue on ACL reloading.
• [Authentication] Fixed incorrect URL redirection issue with OpenID Connect.
• [Authentication] The task that deletes expired tokens is now scheduled more frequently.
• [Packaging] Fixed invalid permissions on the cron file that deletes outdated tokens.

Security fixes

• [Security] Fixed SQL injection vulnerability in host-monitoring widgets.
• [Security] Fixed SQLi in contacts form (CVE-2024-39843).
• [Security] Updated jQuery & jQuery-UI dependencies (CVE-2022-31160)

23.04.21

Release date: September 11, 2024

Security fixes

• [Security] Fixed SQLi in contacts form (CVE-2024-39843).

23.04.20

Release date: July 18, 2024

Bug fixes

• [Unattended] Backported recent bug fixes on the Unattended script (http services not restarting, it-edition-extensions installation, unattended issue on Oracle Linux distributions).

23.04.19

Release date: June 26, 2024

Bug fixes

• [API] Fixed API access control for monitoring endpoints.
• [Authentication] Fixed a random disconnection issue occurring with SAML authentication.
• [Configuration] Exporting the configuration no longer fails when a host severity and a service severity have the same name.
• [Configuration] Fixed mass change on services.
• [Unattended] Fixed default version used by the script.

Security fixes

• [Security] Fixed several SQLi issues.

23.04.18

Release date: May 27, 2024

Bug fixes

• [API] Fixed an issue affecting downtimes on services linked to a service group via a service template.
• [Configuration] Fixed an issue where the Service Categories configuration page could appear blank.
• [Packaging] Fixed symbolic link between /usr/lib/nagios/plugins and /usr/lib64/nagios/plugins.
• [UX] Fixed an issue where the top counter pop-up was not closed when users clicked outside of it.

Security fixes

• [Security] Fixed several SQLi issues.
• [Security] Fixed XSS in a configuration page.

23.04.17

Release date: April 10, 2024

Bug fixes

• [API V1] Fixed an issue that occurred when filtering Resources Status by criticality.

Security fixes

• [Security] Upgraded axios dependency.

23.04.16

Release date: March 13, 2024

Bug fixes

• [CLAPI] Fixed a decoding issue affecting the export of HTML entities.
• [Authentication] Fixed issue with SSO authentication.
• [CLAPI] Duplicates are no longer generated when exporting services and hosts.

Security fixes

• [Security] Improved allowed commands for Centreon Gorgone.

23.04.15

Release date: February 14, 2024

Bug fixes

• [UI] Fixed the display of inappropriate 404 error page when loading MAP homepage.

23.04.14

Release date: January 15, 2024

Bug fixes

• [API] Fixed a visibility issue with the configuration/users endpoint.
• [Authentication] Fixed hardcoded email value that blocked SSO authentication with OpenId Connect when parameter was not an email.
• [Configuration] Fixed error message displayed in configuration generation after upgrading to 23.04 version.
• [Event Logs] Fixed period in CSV export.
• [Installation] Fixed issue of poller ID appearing twice in Centreon Gorgone configuration.
• [Installation] Fixed installation issue occurring when database user already existed.
• [My Account] Made the name, login and password fields read-only for non-local users so as to prevent issues where users who had edited these properties were locked out of the platform.
• [Resource Status] Fixed bad host redirection in the services panel.
• [Resource Status] Fixed default sorting order in Resources status: from worst to best.
• [Web] Fixed an issue where inherited contacts/contact groups were not displayed in the notifications tab.

23.04.13

Release date: January 2, 2024

Security fixes

• [Security] Fixed an SQLi vulnerability (CVE-2024-0637, CVE-2024-23115, CVE-2024-23116, CVE-2024-23117, CVE-2024-23118, CVE-2024-23119).

23.04.12

Release date: December 21, 2023

Security fixes

• [Security] Prevented a command injection.

23.04.11

Release date: November 30, 2023

Bug fixes

• [Resources Status] Fixed the issue that automatically disabled the option to access the UI when user clicked on the compact/extended button.

23.04.10

Release date: November 17, 2023

Enhancements

• [API] Added the possibility to search for a service in hostGroups/serviceGroups endpoints.
• [Configuration] Added the support of BBDO 3.0.1 for Centreon Broker configuration.

Bug fixes

• [API] Fixed an issue with Broker output types when creating an output using CLAPI.
• [API] Fixed a security issue concerning some API responses.
• [Authentication] Fixed authentication conditions that did not work with multiple values (SAML/OpenID Connect).
• [Authentication] The "Reach Centreon Front-end" option is now automatically enabled for imported users authenticated through SSO.
• [Authentication] Fixed an issue with the retrieval of attributes used to identify users.
• [Authentication] Removed incorrect log message.
• [Core] Fixed access to pages when Symfony debug mode was enabled.
• [Event Logs] Fixed pagination.
• [Install] Fixed SQL permissions to allow the "centreon" database user to use MBI.
• [Install] Fixed an SQL issue occurring during the update process.
• [Monitoring] Fixed a display issue on Firefox that occurred when the Information column in the Resources Status page contained a single quote.
• [Packaging] Fixed an issue where centreontrapd was configured for a poller rather than for a central on Debian.
• [Recurrent Downtimes] Fixed an issue that occurred when a downtime period contained a service group and this service group was linked to a service template.
• [Ressources Status] Fixed an issue that occurred when using an h.alias filter on the list of resources.
• [Resources Status] Fixed an issue where the "monitoring server" filter did not display all pollers authorized by the user's ACLs.
• [UX] Fixed an issue where top menus in the banner were not closed after clicking on a link.

Security fixes

• [Security] Fixed SQLi in a method.
• Fixed potential XSS vulnerability in the list of discovered hosts (CVE-2023-51633).

23.04.9

Release date: October 05, 2023

Enhancements

• [Install] Improved the unattended.sh file to manage updates, Debian 11 OS and language packages.

Bug fixes

• [Authentication] Fixed an LDAP connection issue due to DN case.
• [Configuration] Fixed the visibility of services when a user with ACLs duplicates a host.
• [Monitoring] Fixed CSV export when metric name is a SQL keyword.
• [Resources Status] Fixed the list of pollers filter by removing deleted pollers.
• [Resource Status] Fixed the inline check action that was sending a simple check instead of a forced check.
• [UI] Renamed "massive change" to "mass change" in the "more actions" selection box.

23.04.8

Release date: September 22, 2023

Enhancements

• [Anomaly Detection] Added a feature flag to hide the period exclusion interface.
• [Authentication] Removed password fields from profile page for accounts using delegated authentication.
• [Configuration] Added feature flag to vault configuration endpoints.
• [Core] Added feature flag system.

Bug fixes

• [Anomaly Detection] Business Activities are no longer listed as services in the configuration form.
• [Authentication] Fixed access to the Centreon UI when a default page is configured for the user and authentication uses SSO (OIDC/SAML).
• [CLAPI] Fixed a PHP warning that was displayed when using getparam on a service.
• [CLAPI] Fixed the export of severities to make it possible to reimport them.
• [CLAPI] Removed the possibility to link a regular resource with a template.
• [Configuration] Fixed custom macro inheritance for hosts.
• [Resources Status] Fixed filters on hostgroups and categories that weren't returning hosts.
• [Security] Fixed SLQi in centreonLogAction.class.php.

23.04.7

Release date: August 31, 2023

Enhancements

• [Authentication] Removed password fields if contact is not local type.
• [Core] Updated the database schema for resources table.
• [Tools] Added a script to delete duplicate entries in the host_service_relations table.

Bug fixes

• [Administration] Fixed pagination in the Data menu.
• [API] Removed the author_id parameter from downtime endpoint to use authenticated user as author.
• [Authentication] Fixed groups mapping when groups roles were changed in the Identity Provider (OpenID Connect/SAML).
• [Authentication] Fixed roles mapping when user roles were changed in the Identity Provider (OpenID Connect/SAML).
• [Authentication] Fixed wrong error message displayed for SAML authentication.
• [Core] Fixed an issue by removing the call to custom login page when the IT Edition module is not installed.
• [Graphs] Fixed the display of graphs layout when there is no data.
• [Packaging] Added missing PHP files to Debian packaging.
• [Packaging] Fixed an issue with incorrect rrdtool.log ownership that prevented graphs from being displayed on Debian.
• [Resources Status] Fixed the display of inverted curves in the graph panel.

23.04.6

Release date: July 28, 2023

Bug fixes

• [Core] Removed unnecessary data in custom_configuration column for SAML provider.
• [Install] Increased size of metric_name column to 1021.
• [Resources Status] Fixed CSV export when metric name contained SQL keyword.
• Added the missing parameters to handle new Broker logging options (thanks to a community member's contribution).

23.04.5

Release date: July 10, 2023

Enhancements

• [Authentication] User attributes received from the Identity Provider are now added to the Centreon login file when debug is enabled.
• [CEIP] Improved the retrieval of Operating System name and version.
• [Configuration] Improved the icon size to adapt to resources.
• [UX] Improved the Service Check Timeout tooltip in Configuration > Pollers > Engine configuration > Log options.

Bug fixes

• [ACL] Fixed an issue when a recurrent downtime is edited by a user under ACL.
• [API] Fixed an API issue for the Centreon modules management.
• [Authentication] Fixed an issue in the groups mapping management with OpenID Connect.
• [Authentication] Fixed an issue in groups mapping relations with SAML.
• [Authentication] Fixed an issue with JWT decoding when encoded in base64url.
• [Authentication] Fixed a "URL not found" error message when logging out.
• [Authentication] Fixed the user's logout when the refresh token has expired for OIDC sessions.
• [Backup] Fixed partial backup that was not working in AlmaLinux 8 and Debian 11.
• [Configuration] Fixed deletion/activation/deactivation/duplication of a contact when made with a French profile.
• [Install] Fixed missing central ID in Centreon Gorgone configuration file.
• [Install] Fixed permissions issue on Symfony cache.
• [Install] Fixed rights on centreon_traps directory for Debian.
• [Install] Fixed rights on logs directory for Debian.
• [ResourcesStatus] Fixed CSV export when metric name contains SQL keyword.
• [ResourcesStatus] Fixed the search in filter that was not working.
• [ResourcesStatus] Fixed filters definition to display all services including Anomaly Detection and Meta Services from top counter links.
• [ResourcesStatus] Fixed a bug in the disacknowledgment process that made the user interface display the wrong acknowledgement comment.
• [ResourcesStatus] Fixed an issue on filter combination in Resources Status.
• [UI] Fixed the column name display in the acknowledgment description pop-up.
• [UX] Fixed a space issue between buttons.
• [Web] Fixed the About page display.

23.04.4

Release date: June 20, 2023

Bug fixes

• [Update] Fixed a topology_url_substitute error caused by a missing request in update scripts that resulted in a blank screen after an update from 23.04.1.

23.04.3

Release date: June 19, 2023

Security fixes

• [Security] Fixed the base URI change detection mechanism.

23.04.2

Release date: June 7, 2023

Enhancements

• [Administration] Added a button to unblock users through the user interface (for local authentication).
• [Authentication] Fixed the custom endpoint definition for OpenID Connect.
• [Install] Removed PHP warning during the installation wizard.
• [Packaging] Improved the default configuration for Debian packages.
• [UX] Removed UI slowdown when browser has no internet access with CEIP enabled.

Bug fixes

• [API] Fixed code errors and messages to improve the password renewal endpoint.
• [Authentication] Fixed the custom endpoint call with OpenID Connect.
• [Authentication] Fixed the HTTP method for custom endpoints for OpenID.
• [Authentication] Removed the password expiration policy for LDAP authentication.
• [Configuration] Fixed a bug in trap relations with services by host groups.
• [Core] Fixed the display of error messages regarding the connection to DBMS.
• [Install] Fixed the snmptrapd configuration for Debian.
• [LDAP] Fixed the LDAP groups listing in the contactgroups form.
• [ResourceStatus] Fixed a filtering issue for hosts in pending state.
• [ResourceStatus] Fixed the h.name filter that was not returning hosts.
• [UI] Fixed a bug that prevented non-admin users from selecting Host Groups in some areas of Centreon (e.g. Host Discovery mappers).
• [UI] Fixed the refresh icon positioning in Administration > ACL > Reload ACL menu.
• [UI] Uniformized the buttons size on legacy pages.

23.04.1

Release date: May 26, 2023

Bug fixes

• [Administration] Removed deprecated "Image Directory" option which deleted warning messages when generating configuration.
• [Authentication] Fixed retrieval of information for applying conditions, roles and groups with OpenID Connect.

23.04.0

Release date: April 26, 2023

New features

• [API] We have started extending Centreon's Configuration REST API. The first endpoints available in this release allow you to manage:
  • Time periods.
  • Host groups.
  • Host categories.
  • Host severities.
  • Service groups.
  • Service categories.
  • Service severities.
• [Authentication] Added SAML authentication. With SAML, you can:
  • Use conditions to access Centreon.
  • Import users automatically.
  • Manage groups manually or automatically.
  • Manage roles manually or automatically.
• [Installation] Removed Enterprise Linux version 7 and added version 9.
• [Resources Status] Added extended mode for Resources Status listing display.
• [Resources Status] You can now switch between extended and compact mode in the Resources Status page.
• [Resources Status] Both simple and forced check options are provided in Resources Status.
• [Resources Status] Various user interface improvements in Resources Status :
  • Aligned column contents with labels.
  • The icon that allows you to reorder columns is now displayed only on mouseover.
  • The columns displayed by default have been changed.
  • Listing pagination icons are now displayed at the same time as the resource details panel.
• [Terminology] Renamed “problems” to “alerts” in Resources Status.
• [Terminology] Renamed “Plugin Pack” to “Monitoring Connectors” in the user interface.
• [UI] Improved Top Counter responsiveness.
• [UI] Applied new Centreon branding.
• [UX] Added German translation.
• [Widgets] Added the possibility to select a Meta-Service in the graph monitoring widget.

Centreon Collect

23.04.15

Release date: September 30, 2024

Bug fixes

• [Broker] If a plugin sends the same metric several times, an error log from broker explains the issue and only the first occurrence of the metric is kept.
• [Engine] Fixed issues with the output of external commands.

23.04.14

Release date: July 17, 2024

Bug fixes

• [Broker] Fixed an issue that occurred when inserting too large metrics into the database, which resulted in an error log.
• [Broker] Added support for the default connection method to MySQL 8.0.35.

23.04.13

Release date: June 20, 2024

Enhancements

• [Engine] Added a new centengine parameter (send_recovery_notifications_anyways) to force sending a recovery notification even when the resource is outside of its notification period. This aims at keeping third-party tools up-to-date at any time when they are fed notifications.
• [Engine] Engine can now handle extra configuration files to complement/overload the centengine.cfg file. This enhancement allows you to keep a custom configuration unchanged when exporting the configuration.

23.04.12

Release date: May 27, 2024

Bug Fixes

• [Broker] Fixed an issue that caused MySQL errors in Broker logs, due to attempts to insert relations between BAs and disabled time periods.
• [Packaging] Added symbolic link from /usr/lib64/nagios/plugins to /usr/lib/nagios/plugins.

23.04.11

Release date: April 08, 2024

Bug Fixes

• [Collect] To limit dependencies, perl-interpretor is now used instead of perl in the centreon-connector-perl package (rpm).
• [Collect] To limit dependencies, perl-base is now used instead of perl in the centreon-connector-perl package (deb).

23.04.10

Release date: March 19, 2024

Centreon Broker

Bug fixes

• [Broker] BA initialization could result in KPIs having incoherent statuses. This was breaking the statuses of the BAs.

23.04.9

Release date: March 6, 2024

Centreon Broker

Enhancements

• [Broker] When Broker is restarted or reloaded, BAM creates a cache with the BA states to be able to restore them when reloaded.

Bug fixes

• [Engine] Removed the unnecessary check of Anomaly Detection configuration files during the configuration test before deployment.

23.04.8

Release date: February 14, 2024

Centreon Broker

Enhancements

• [Broker] Broker now drops metrics whose names are longer than 1000 characters to avoid errors in the database. An error is logged when it occurs.

Bug fixes

• [Broker] Fixed an issue causing hostgroups to fail to appear if they had been used before and emptied of their hosts and then populated again.
• [Broker] Fixed the permissions of the RRD files produced by the rebuild mechanism when RRDcached is used.
• [Broker] Fixed some incorrect statuses in Broker's statistics retrieved by the broker-stats.json file.
• [Broker] Semicolons are no longer considered as the beginning of a comment in Engine's configuration files. This is because comments were not useful in these files, and they prevented the use of semicolons in macros (e.g., passwords).
• [Install] Fixed an issue in the installation process that emptied the retention.dat file, causing the temporary loss of all resources' statuses and the permanent loss of current acknowledgements and downtimes.

23.04.7

Release date: January 11, 2024

Centreon Broker

Bug fixes

• [Broker] Fixed a bug occurring when a Business Activity was updated after a status change for a KPI with a BA type.
• [Install] Fixed rights on SSH directory for Debian.

23.04.6

Release date: December 15, 2023

Centreon Broker

Enhancements

• Broker now drops metrics whose names are longer than 1000 characters to avoid errors in the database. An error is logged when it occurs.

Bug fixes

• Fixed a bug that made Broker crash when rebuilding RRD files for unexisting metrics.

23.04.5

Release date: November 20, 2023

Centreon Broker

Bug fixes

• Fixed a stability issue that could make Broker crash when BAM was enabled and the database was too slow.
• Event propagation in BAM has been improved and should be faster.

23.04.4

Release date: September 26, 2023

Centreon Broker

Bug fixes

• Fixed a bug that caused RRD graphs to not display properly when the check interval was longer than 15 minutes.
• Fixed a bug that caused services and hosts to lose their status at cbd startup.

23.04.3

Release date: September 7, 2023

Centreon Broker

Bug fixes

• [Compatibility] Fixed an issue that prevented Broker from inserting relations in table during BAM reporting calculation.
• Fixed an issue that could cause a crash when many pollers were sending check results to a Broker instance.

23.04.2

Release date: July 26, 2023

Centreon Broker

Bug fixes

• Boolean rules optimized to work faster.

23.04.1

Release date: July 5, 2023

Centreon Broker

Enhancements

• In MariaDB, data in the data_bin table are now inserted with a bulk prepared statement.
• The check_command field had been removed from Broker (host|service)_status events, making it temporarily unavailable for LUA stream connectors. It is now available in Broker's cache.
• Improved the evaluation process of BAM KPIs based on boolean expressions: if an OK result is part of an OR operation, or a CRITICAL result is part of an AND operation, Broker will return the results without waiting for the other members of the operation.
• New performance counters have been added to the gRPC API in order to track the longest queries and statements.

Bug fixes

• Changed the default value of deletion_time for acknowledgements to null to avoid displaying abnormal dates in the interface.
• Fixed a bug that mainly occurred at backup time: a crash could occur when MariaDB was restarted.
• Fixed an exception-catching issue that caused Broker to fail inserting resources when the check_attempt was too high for the database column type.
• Fixed the date displayed for last_check and other columns in Resources Status for pending resources.
• Fixed the rebuilding of RRD databases that could result in incomplete graphs when duplicate values were present in data_bin. The duplicates are now skipped to avoid this.

Centreon Engine

Bug fixes

• [Packaging] Added the /var/log/centreon-engine/archives directory that was missing on Debian installations.
• Fixed the handling of RTDOWNTIMES external commands. The duration is not required anymore for fixed downtimes.
• Restored the $ADMINEMAIL$ and $ADMINPAGER$ global macros.

23.04.0

Release date: April 26, 2023

Centreon Engine

Compatibility

Compatibility with other 23.04 components.

Centreon Broker

Enhancements

• Converted all BBDO messages to Protobuf: the BBDO v2 protocol was entirely based on buffers with a static structure. We converted all the event message types into Protobuf classes, in order to easily add new fields or new message types in the future.

Centreon Gorgone

23.04.16

Release date: September 30, 2024

Bug fixes

• [Gorgone] Added a partition for the Gorgone MBI mod_bi_metriccentileweeklyvalue and mod_bi_metriccentilemonthlyvalue tables, which are required by the ETL to run correctly.
• [Gorgone] Fixed an issue affecting CPU load when a poller was not responding.
• [Gorgone] Fixed an issue stopping the nmap discovery provider from working after a Gorgone whitelist was created.
• [Gorgone] The password of an MBI database user can now include special characters.

23.04.15

Release date: June 26, 2024

Bug fixes

• Fixed gorgone whitelist for HA architecture.

23.04.14

Release date: May 27, 2024

Bug fixes

• Fixed a path issue on systemctl (Gorgone whitelist).
• Fixed a minor issue where unnecessary error messages were displayed.
• [Packaging] Fixed inconsistent system permissions on /var/log/centreon-engine/centengine.log.

23.04.13

Release date: April 10, 2024

Bug fixes

Fixed a bug affecting service auto discovery, where only half of the host was correctly discovered.

23.04.12

Release date: March 28, 2024

Enhancements

• Moved Gorgone whitelists to a dedicated file.

23.04.11

Release date: March 13, 2024

Bug fixes

• Added the Auto Discovery patterns to the default commands whitelist.
• Improved list of allowed commands for Auto Discovery.
• Fixed a missing dependency.

[Security] Improved Centreon Gorgone allowed commands.

23.04.10

Release date: February 14, 2024

Security fixes

[Security] Enabled whitelist of Centreon Gorgone commands by default to manage Centreon Engine and Broker processes in order to limit escalations of potential future vulnerabilities.

23.04.9

Release date: December 22, 2023

Bug fixes

• [Gorgone] Created package to install SELinux rules.
• [Gorgone] Fixed a stability issue causing the kernel to kill the gorgoned process.

23.04.8

Release date: November 17, 2023

No changes for this module in this version.

23.04.7

Release date: October 5, 2023

No changes for this module in this version.

23.04.6

Release date: September 7, 2023

Bug fixes

• [Core] Fixed recurring unexpected disconnections between pollers using pull/pullws mode.

23.04.5

Release date: August 02, 2023

Bug fixes

• [Compatibility] Fixed an issue with cipher encoding that could break Gorgone internal communication messages on MBI server.

23.04.4

Release date: July 28, 2023

Bug fixes

• [Packaging] Improved packaging by adding gorgone_key_thumbprint.pl script and perl-Mojolicious dependency.

Bug fixes

• [Compatibility]Fixed -d option to manage database entries in centreonBIETL script.
• [Core] Fixed recurring unexpected disconnection between pollers.

23.04.3

Release date: June 22, 2023

Bug fixes

• [Core] Fixed a recurring unexpected disconnection between pollers caused by an internal key rotation.

23.04.2

Release date: June 7, 2023

Enhancements

• [Packaging] Improved the default configuration for Debian packages.

Bug fixes

• Fixed a recurring unexpected disconnection between pollers.

23.04.1

Release date: May 26, 2023

Bug fixes

• [Server] Fixed an SQL query that prevented the process from starting.

23.04.0

Release date: April 26, 2023

Compatibility

Compatibility with other 23.04 components.

Centreon High Availability

23.04.0

Release date: April 26, 2023

Compatibility

Compatibility with other 23.04 components.

Centreon DSM

23.04.2

Release date: July 10, 2023

Bug fixes

• Fixed an unreplaced variable in cron definition.

23.04.1

Release date: June 7, 2023

Enhancements

• [Packaging] Improved the default configuration for Debian packages.

23.04.0

Release date: April 26, 2023

Compatibility

Compatibility with other 23.04 components.

Centreon Open Tickets

23.04.3

Release date: February 14, 2024

Enhancements

• [Open Tickets] Add EasyVista connector.

23.04.2

Release date: July 28, 2023

Bug fixes

• Fixed a Broker query.

23.04.1

Release date: June 7, 2023

New feature

• [Widget] Added the possibility to filter by poller.

Bug fixes

• [API] Fixed an auto close issue in the API endpoint.

23.04.0

Release date: April 26, 2023

Enhancements

• Added Schedule Check option & auto close popup capability