Xymon 4.3.29 Released - Important Security Update

On 8/5/2019 6:19 AM, Dirk Kastens wrote:

Hi,

I just upgraded our xymon server on Scientific Linux release 6.10 frpm xymon 4.3.28 to 4.3.29.

Two things are not working any longer:

http authentication: I defined the login information in the file /etc/xymon/netrc, which worked before the upgrade. Now the http test are red with the message "Authorization Required".

history files cannot be opened any more. When I click on the history button of a test, I get an empty page with the message "Cannot open history file"

Thanks,

For HTTP authentication, this is simple basic auth and not certificate-based or anything else?

For history file checking, can you verify that hosts with dashes in the name show this symptom while those with just alphanumerics (and periods) don't? I believe this may actually be the bug cause here.

-jc