Changelog (Werks)
The software development of Checkmk is organized in so-called Werks. A Werk is any change or bug fix that has an influence on the user's experience. Each Werk has a unique ID, one of the levels Trivial Change, Prominent Change or Major Feature and one of the classes Bug Fix, Feature or Security Fix.
Whenever you make an update to a new Checkmk version please make sure that you have understood all incompatible changes. You might have to adapt your configuration.
Want to get notifications for new versions, new werks or subscribe to the security mailing list? Sign up here.
- #16746infoblox_service: Add support for NIOS 9.X
- #17012Check for predefined connections when deploying xinetd config
- #17016notification_rules: typo in field sort_order_for_bulk_notifications
- #17072Fix "Parsing of section rmon_stats failed" for Cisco SNMP devices
- #17076Fix float rule values not checking all validations
- #17155Microsoft Teams: Use workflows instead of connectors
- #17174REST API: removal of previously deprecated endpoints
- #16766mknotifyd: use site names in service description
- #16825parent scan: Deprecate command line tool in favor of REST API endpoint
- #16988Proxmox monitoring: Fix incorrect backup monitoring results
- #17029Synthetic monitoring: Tests with status NOT RUN, SKIP or NOT SET go stale
- #17056Don't show automation secret in the audit log (addresses CVE-2024-28830)
- #15327mk_oracle: Follow-up to privilege escalation fix
- #15328mk_oracle: Follow-up to privilege escalation fix: sqlnet.ora
- #15331postgres_stat_database_size: Don't discover 'access_to_shared_objects'
- #15844Microsoft SQL Server (Windows) ruleset is deprecated
- #16356Synthetic Monitoring: Incompatible overhauls
- #16680Ruleset API: Changes to available rule spec topics
- #16682Ruleset API: Fix migration with scaling of SimpleLevels
- #16683Licensing: Reset license state when updating from Enterprise to non-Enterprise
- #16689Decommission legacy check API
- #16756host_config: introduce include_links option for Show all hosts endpoint
- #16762check certificates: fix signature algorithm configuration
- #15515check_http: Soft deprecatation of old HTTP monitoring plug-in
- #15843mk_oracle(ps1): Follow-up to privilege escalation fix
- #16343rmk: Remove 'Load environment variables from file' field in Robotmk Scheduler bakery rule
- #16640Ruleset API: Improve custom validation
- #16642Ruleset API: Datamodel changes for Password FormSpec
- #16675Ruleset API: Remove unused evaluation type specification
- #16677Ruleset API: Rename PredictiveLevels.prefill_stddev_diff to prefill_stdev_diff
- #15514check_httpv2: Introduce a reworked way to test web sites
- #16382Cleanup SNMP version and bulkwalk rulesets
- #16503bulk discovery: remove mode parameter and introduce options
- #16609Publish permission handling for various components
- #16614Ignore CAs with negative serial numbers
- #16619Ruleset API: Ruleset validation
- #13629GCP GCE check plugins: Aligned service names
- #14729Add cmk/vsphere_vcenter host label
- #14951Windows agent drops support for Windows older than Windows 7/Server 2008 R2
- #15021Renaming of old Nutanix Services
- #15022Change of ruleset for prism_containers check plugin
- #15025User defined "PING IPv4/6" services are no longer overwritten on dual stack hosts
- #15069Fix Email HTML Injection
- #15078Merge the postgres_version check into postgres_instances
- #15179logwatch agent plugin: Always encode output in UTF-8
- #15189Don't log automation user credentials when generating performance graph diagnostics
- #15241Drop configuration variable 'ignored_checktypes'
- #15247Prefer enforced services over discovered ones if clustered
- #15250Deprecate configuration of check plugin default levels via .mk file
- #15281mssql_blocked_sessions: Levels now overwrite state
- #15288Remove HTMLGenerator.add_default_javascript function
- #15297mk_oracle.ps1: port changes made in werk 14839 to windows agent plugin
- #15311align quoting of synchronous and asynchronous MRPE
- #15317primekey_fan: rename service description to 'Primekey Fan'
- #15378timeperiod: day & time_ranges now load defaults when not included in the request
- #15379aux_tags: aux_tag_id must exist in order to update
- #15389cisco_meraki_org_licenses_overview: Use NAME/ID as item name
- #15391cisco_meraki_org_licenses_overview: Short service description
- #15417mk_logwatch: Correctly handle UNIX paths with non-UTF-8 characters
- #15422Agent Bakery: New default UNIX agent folder permissions
- #15436aux_tags: Deleting an aux tag now respects dependencies
- #15437folder_config: deleting the root folder via the rest-api no longer causes an internal server error
- #15439site_connection: Wrong configuration was being set when live proxy global settings was set to False
- #15463mk_filestats: Make combination of file grouping and single file aggregation more usable
- #15466autodiscovery: Show site changes made by Periodic service discovery
- #15468aws_lambda, aws_sns: Rename Lambda and SNS services
- #15513jolokia_generic: Fix missing MBean in service description
- #15545Introduce Python 3 compatibilty for mk_sap agent plugin
- #15549Crash: mssql_blocked_sessions using pre-1.6 MSSQL agent plugin
- #15551downtime: make the show downtimes endpoint more explicit
- #15553time_period: making time-related validation more strict
- #15562Drop unsupported distros
- #15591time_periods: etag now defined in the openapi schema for GET and PUT endpoints
- #15593agent: download agent by host returns a 404 when agent it not available
- #15594folder: create folder endpoint now requires a name with min length of 1
- #15595aux_tag: editing a builtin aux tag is not allowed
- #15598group_config: deleting a non-existing group no longer has a 400 response
- #15615Disallow Specifying Invalid Ports in Rulesets
- #15630hr_fs: Don't Discover Services without Mount Information
- #15643nvidia_smi: Show Use full PCI bus ID
- #15646KUBE: Extend 'Node conditions' Rule
- #15649windows_tasks: Display Correct Scheduled Task State
- #15657Agent controller: Changes in the output format of the status command
- #15662Bug fixes for cmk.gui.plugins.metrics.utils.indexed_color
- #15679host_config: moving a host to a different folder only permitted if user has permission
- #15680downtimes: duration field changed from seconds to minutes
- #15693Disable SHA1 signatures for agents
- #15694Remove mod_auth_mellon
- #15696Linux agent: timing problem with 5 minute check interval
- #15699Deprecate Agent Updater v1.6.0
- #15703Linux agent updater - Fix missing libcrypt.so.1
- #15728mk_oracle: revert werk 15210
- #15741Set Default Password Policy
- #15847cisco_qos: Handle metric units consistently & drop averaged metrics
- #15860systemtime (windows): no longer account for fetcher/checker delay
- #15879host_config: introduction of background job for host_rename endpoint
- #15884activate_changes: If-Match header now required on the activate changes endpoint
- #15888folder_config: update endpoint now requires which update option you want
- #15889password_store: pattern for password store identifiers should be the same as the gui
- #15890user: read permissions are now checked in the request schema before delete/edit/create user
- #15897mk_mysql: Make Checkmk the sole provider of mysql configuration
- #15928Fix visibility of cloned view, dashboard and report extensions
- #15960permissions: allow guest users Host read access on monitoring endpoints
- #15966downtimes: add site property to the downtimes endpoints
- #15967event console: add site property to the event console endpoints
- #15968host_config: update endpoint now only allows one of replace, update or delete
- #15973Remove deprecated host label "resource_group" for Azure Resource Group hosts
- #16025Update PHP version in SLES15SP3 from 7 to 8
- #16047Changed host labels for Azure Resource Groups and Virtual Machine
- #16051comments: add site property to the comments endpoints
- #16066Add more host labels for agent based discovery on Linux
- #16071Notification spooler: Fix ignored timing settings for specific methods
- #16072Add wato audit log to logrotate cronjob
- #16076Agent Bakery: "Bake revision" is now configurable
- #16098notification rules: match_folder value now matches correctly to available folders
- #16100licensing: the 'settings' field is now required for license configuration
- #16101host_config: host names no longer allow newline characters
- #16102aux_tag_id: aux tag ids no longer allow newline characters
- #16104group_id: group ids no longer allow newline characters
- #16112Refer to a time period by its name instead of its alias in the REST API
- #16125Remove Python 3.4 as an option for Windows Agent
- #16130host_tag_group: host tag group field 'ident' no longer allows newline characters
- #16131timeperiods: 'name' field no longer allows newline characters
- #16133folders: 'name' field no longer allows newline characters
- #16137user_config: allow update of custom user attributes
- #16144Ignore piggybacked host names starting with a period
- #16151group_config: bulk updating requires the attributes field
- #16156downtimes: site_id only required when deleting downtimes by_id
- #16157rules: value_raw now a required field for create and update
- #16159linux-bonding: introduce check for expected bonding mode
- #16163jar_signature: Prevent privilege escalation to root
- #16220Change factory setting for "Lock user accounts after N logon failures"
- #16222Automationuser login must not open full session
- #16225Ignore certificates with negative serial numbers
- #16227Disabled automation users could still authenticate
- #16233Cease to provide builds for Ubuntu 23.04 (Lunar Lobster)
- #16258jolokia_metrics_app_sess: incorrectly applied lower levels
- #16261Split up rule "Mails in outgoing mail queue"
- #16273Local privilege escalation in agent plugin 'mk_tsm'
- #16274Unusable services for "HPE Proliant Servers: Raid Status"
- #16277Split up rule "Main memory usage of simple devices"
- #16287rule_notification: match_hosttag now accepts custom tag ids
- #16313Fix tree of folders snapin filter for statistics dashlets
- #16319Reduce context/search filter for "Metrics graph of a single service"
- #16325netapp_ontap_psu: fix discovery ruleset
- #16333if_lancom: Switch port discovery does not work for Lancom routers when the router description is configured to be used for the Service Description
- #16337mk_inventory: Fix for lnx_video when multiple graphics cards are available
- #16359Remove deprecated windows plugins
- #16364tag_group: change the identification field from 'ident' to 'id'
- #16367audit_log: Deprecate 'delete' method and replace it for 'archive'
- #16384notification rule: allow for non builtin service levels
- #16470Fix pagetypes being falsely shown as public
- #16521bi_rule: schema update to match the api docs
- #16522comment: site_id only required when deleting comments by id
- #16523event_console: site_id only required when deleting ec events by_id
- #16549Agent updates failing on Solaris 10