OpenNMS Horizon 33.0.8 (Golden Shower tree)

Release 33.0.8

Release 33.0.8 contains a bunch of bug fixes and an enhancement.

The codename for Horizon 33.0.8 is Golden Shower tree.

Task

• Alarm Resync (Issue NMS-16489)
• Update to Netty 4 (Issue NMS-16496)
• Update pgjdbc to version 42.5.5 (Postgres sql JDBC driver) (Issue NMS-16503)
• Update forked version of nekohtml parser to `>= 1.9.22.noko2`version of Nokogiri if applicable (Issue NMS-16504)
• Update Apache CXF to 4.0.4, 3.6.3 or 3.5.8 to fix CVE-2024-28752 (Issue NMS-16505)

Bug

• Snakeyaml vulnerable to Stack overflow leading to denial of service (Issue NMS-15169)

OpenNMS Horizon 33.0.7 (Pink powder puff)

Release 33.0.7

Release 33.0.7 contains a bunch of security updates.

The codename for Horizon 33.0.7 is Pink powder puff.

Bug

• Stored XSS on "Monitoring Locations" (Issue NMS-16443)
• Host Header Injection (Issue NMS-16450)
• [Web] - Missing Secure Flag on Session Cookie (Issue NMS-16451)

OpenNMS Horizon 33.0.6 (Mango)

Release 33.0.6

Release 33.0.6 contains a couple of bug fixes and an enhancement.

The codename for Horizon 33.0.6 is Mango.

Task

• Stalled threads in telemetryd parser (Issue NMS-16243)

Bug

• Cross-Frame Scripting-CWE ID : 1021 Web scan vulnerability (Issue NMS-16369)
• Address CVE-2020-15522 (Issue NMS-16384)
• Querying Alarms by alarmId leads to a page that loses context on refresh (Issue NMS-16417)
• NMS-16243 fix missing from 33.x release series (Issue NMS-16441)
• Stored XSS on "MIB Compiler" (Issue NMS-16444)
• Stored XSS on "Scheduled Outages" (Issue NMS-16445)
• Missing Access Control on "Grafana Endpoints" (Issue NMS-16446)
• Missing Access Control on "Geocoder Configuration" (Issue NMS-16447)
• Stored XSS on "Node Label" (Issue NMS-16448)
• Detailed server configuration in the error (Issue NMS-16449)
• Services are deleted and recreated on each provisioning run (Issue NMS-16458)

OpenNMS Horizon 33.0.5 (Black Pine)

Release 33.0.5

Release 33.0.5 contains a bug fix and an enhancement.

The codename for Horizon 33.0.5 is Black Pine.

Enhancement

• Update Provisiond scan to remove old primary IP inteface (Issue NMS-16347)

Bug

• Unable to set collection on detectors (Issue NMS-16360)

OpenNMS Horizon 33.0.4 (Anacahuita)

Release 33.0.4

Release 33.0.4 contains a bunch of bug fixes and enhancements.

The codename for Horizon 33.0.4 is Anacahuita.

Bug

• PostgreSQL monitor url parameter metadata cannot be resolved properly and collection fails consequently (Issue NMS-16374)
• Unable to display varbind’s form feed characters and other control characters in events (Issue NMS-16395)

Enhancement

• Allow fix-permissions and update-package-permissions scripts to set ownership for customized users (Issue NMS-16406)

OpenNMS Horizon 33.0.3 (Weeping European Beech)

Release 33.0.3

Release 33.0.3 contains a number of bug fixes and a documentation update.

The codename for Horizon 33.0.3 is Weeping European Beech.

Bug

• Running the config-tester -a throws an IllegalStateException for ActiveMQ context (Issue NMS-16355)
• CVE-2024-3094 investigation (Issue NMS-16396)
• Container image build fails with a wrong reference to deploy-base:ubi9-3.3.0.b265-jre-17 (Issue NMS-16399)

OpenNMS Horizon 33.0.2 (Old Man’s Beard)

Release 33.0.2

Release 33.0.2 contains a bunch of bug fixes and enhancements.

The codename for Horizon 33.0.2 is Old Man’s Beard.

Bug

• Access Denied when deleting a node with admin user (Issue NMS-15746)
• Device config upload failed with org.apache.sshd.common.SshException: EdDSA provider not supported (Issue NMS-16131)
• Event parameters with <> not rendering in event/alarm views (Issue NMS-16157)
• Hikari CP leaking threads (Issue NMS-16345)
• LdapMonitor does not work when a Minion is the poller (Issue NMS-16349)
• The script showing the Karaf process status in our container image requires "ps" (Issue NMS-16356)
• VMware credentials exposed in provisiond log file (Issue NMS-16357)
• Collectd can’t persist time series data and throwing a NPE with "java.util.List.size()" because "rraList" is null (Issue NMS-16358)

Enhancement

• Update install script to clear Karaf cache (Issue NMS-16226)
• Add option to import-requisition command to block until import is done (Issue NMS-16343)
• Rename User Data Collection feature to Product Update Enrollment (Issue NMS-16353)
• Configurable option for Kafka Producer CollectionSet buffer size (Issue NMS-16366)

OpenNMS Horizon 33.0.1 (Coast Redwood)

Release 33.0.1

Release 33.0.1 is a re-release of 33.0.0, reverting the async poller changes and fixing a packaging issue.

The codename for Horizon 33.0.1 is Coast Redwood.

Bug

• Issue installing on Debian 11 Reported by Customer (Issue NMS-16309)
• REVERT: enable async polling by default (Issue NMS-15738)
• Missing information in downtime model docs (Issue NMS-10133)
• R-Core fails to install following the Horizon 30 Install Docs (Issue NMS-14777)
• Surveillance Dashboard shows acknowledged Alarms (Issue NMS-15448)
• Access Denied when deleting a node with admin user (Issue NMS-15746)
• Typo in Configuring Minion via confd README (Issue NMS-15901)
• "Dismiss" in Usage Statistics Sharing Notice is misleading (Issue NMS-16027)
• Links in node table open both in current tab and in a new tab (Issue NMS-16047)
• Fix Geographical Map after vue-leaflet upgrade (Issue NMS-16065)
• Top of page search displays Show nodes with severity multiple times (Issue NMS-16067)
• Device config upload failed with org.apache.sshd.common.SshException: EdDSA provider not supported (Issue NMS-16131)
• Data choices plugin throws a NPE when user clicks on show collected data. (Issue NMS-16151)
• Event parameters with <> not rendering in event/alarm views (Issue NMS-16157)
• Users with ROLE_READONLY can add, modify, and delete alarm memos (Issue NMS-16162)
• Docs: Meridian plugins reference wrong package names (Issue NMS-16164)
• Fix resource types for default Postgres collection (Issue NMS-16165)
• Service detail page displays wrong collectd package (Issue NMS-16167)
• enlinkd logging hibernate errors (lack of unique index) (Issue NMS-16199)
• Zookeeper 3.4.6 version mismatch in Meridian 2021 (Issue NMS-16209)
• upgrade ActiveMQ to latest 5.15.x (Issue NMS-16218)
• Documentation build failing: cannot find antora/xref-validator (Issue NMS-16227)
• Node structure: fix sorting (Issue NMS-16246)
• OpenConfig Connector parameter frequency in incorrect unit (Issue NMS-16253)
• Container flag -t does not pass correct arguments (Issue NMS-16265)
• Cortex plugin does not start automatically (Issue NMS-16272)

Enhancement

• Add var-bind section into notification docs (Issue NMS-13273)
• Provisiond threads description discrepancies (Issue NMS-14766)
• Metadata DSL: Add metadata interpolation capability onto more threshold fields (Issue NMS-15667)
• enable async polling by default (Issue NMS-15738)
• Switch our Docker base to UBI (Issue NMS-15788)
• Docs: Add install note on DNS resolution (Issue NMS-15792)
• Extend PageSequenceMonitor to allow basic auth credentials (Issue NMS-15802)
• Expand BlueCat DNS Data Collection (Issue NMS-15865)
• Add confd support to Sentinel container (Issue NMS-16149)
• Docs: Remove deprecated resourcecli section (Issue NMS-16216)
• Update install script to clear Karaf cache (Issue NMS-16226)
• Upgrade to latest Karaf 4.3 (Issue NMS-16249)
• Deprecate VMware 3-5 collection/graphs (Issue NMS-16266)
• Fix formatting in snmp-graph.properties.d files (Issue NMS-16269)
• Docs: Update install docs for monitoring database connection (Issue NMS-16286)
• Update container confd to default Postgres SSL to prefer (Issue NMS-16287)

Task

• Metadata DSL: Elasticsearch Integration (Issue NMS-15752)
• Update UI for Admin password change prompt (Issue NMS-15780)
• Create Initial Node Structure Page (Issue NMS-16037)
• Update UI dependencies to latest Vue3, feather, etc. (Issue NMS-16045)
• Node structure page: Union/Intersection category filter switch (Issue NMS-16058)
• Node structure: add unit tests (Issue NMS-16060)
• Structured Node List: Add smoke test (Issue NMS-16061)
• Structured node list: Export CSV/XLS (Issue NMS-16064)
• Unzip command is missing from UBI images (Issue NMS-16087)
• Convert Menu store to pinia (Issue NMS-16092)
• Structured node list: UX Updates (Issue NMS-16103)
• Structured node list: handle legacy query strings (Issue NMS-16116)
• Structured node list: UX updates Part 2 (Issue NMS-16123)
• Structured node list: Merge feature branch to develop (Issue NMS-16124)
• Convert NodeStructure store to pinia (Issue NMS-16125)
• Node structure: Add management IP address (Issue NMS-16126)
• Node structure: Make preferences persistent (Issue NMS-16130)
• Convert Node store to pinia (Issue NMS-16136)
• Update Vue UI README with dev workflow instructions (Issue NMS-16142)
• Convert more stores to pinia (Issue NMS-16144)
• Convert auth, usageStats and other stores to pinia (Issue NMS-16154)
• Convert deviceStore etc to pinia, remove vuex from project (Issue NMS-16156)
• DOCS: Document structured node list (Issue NMS-16210)
• Docs: Remove reference to opennms-cloud-plugin plugin (Issue NMS-16231)
• Stalled threads in telemetryd parser (Issue NMS-16243)

New Feature

• Metadata DSL: VMware Integration (Issue NMS-15753)
• Metadata DSL: WSMAN Integration (Issue NMS-15754)
• Metadata DSL: TL1D Integration (Issue NMS-15755)
• Metadata DSL: JMX Data-collection (Issue NMS-15756)
• Metadata DSL: XML Data-collection (Issue NMS-15757)
• Metadata DSL: HTTP/HTTPS Data-collection (Issue NMS-15758)
• Metadata DSL: Notification Credentials (Issue NMS-15759)
• Metadata DSL: Ticketer Plugins (Issue NMS-15760)
• Metadata DSL: Trapd Configuration (Issue NMS-15761)
• Metadata DSL: JCIFS Monitor (Issue NMS-15762)
• Metadata DSL: IFTTT Configuration (Issue NMS-15763)
• Metadata DSL: Repository Configuration (Issue NMS-15764)
• Metadata DSL: [OPTIONAL] Consistent *-config.xml Configurations (Issue NMS-15765)
• Metadata DSL: Evaluate feasability to support metadata in Drools rules (Issue NMS-15766)
• Metadata DSL: Change default poller and collectd configuration files to reflect ability to use metadata (Issue NMS-16016)
• Metadata DSL: snmp-config.xml & SNMP Profiles (Issue NMS-16028...

OpenNMS Horizon 32.0.6 (Breakcore)

Release 32.0.6

Release 32.0.6 contains a bunch of changes including UI cleanups, a number of access/role fixes, and other bug fixes, plus a ton of documentation updates and a new feature to show news and tips from an RSS feed in the UI.

The codename for Horizon 32.0.6 is Breakcore.

Bug

• Missing information in downtime model docs (Issue NMS-10133)
• R-Core fails to install following the Horizon 30 Install Docs (Issue NMS-14777)
• Surveillance Dashboard shows acknowledged Alarms (Issue NMS-15448)
• Access Denied when deleting a node with admin user (Issue NMS-15746)
• Event parameters with <> not rendering in event/alarm views (Issue NMS-16157)
• Users with ROLE_READONLY can add, modify, and delete alarm memos (Issue NMS-16162)
• Events: filter and advanced search / method GET is not supported (Issue NMS-16232)
• VmwareCimMonitor/VmwareCimCollector not working anymore (Issue NMS-16236)
• OpenConfig Connector parameter frequency in incorrect unit (Issue NMS-16253)
• Container flag -t does not pass correct arguments (Issue NMS-16265)
• OpenConfig server logs invalid sample interval unit ?s when frequency is set to 4 digits or higher (Issue NMS-16280)
• LegacyDatetimeFormatterTest.testParse fails to parse date time when locale is set to en_CA-UTF-8 (Issue NMS-16288)

Enhancement

• Add command to Karaf shell to manually trigger Metadata Adapter (Issue NMS-13922)
• Karaf command to display event details (Issue NMS-15130)
• Add debug logging to SNMP Property Extenders on match failure (Issue NMS-15743)
• Remove plugin opennms-cloud-plugin from installation (Issue NMS-16219)
• Update install script to clear Karaf cache (Issue NMS-16226)
• Docs: Remove reference to opennms-cloud-plugin plugin (Issue NMS-16231)
• OpenShift: Document the impact of disabling allowPrivilegeEscalation (Issue NMS-16239)
• RSS Feeds Panel showing OpenNMS Blog content (Issue NMS-16250)
• Document RSS feature (Issue NMS-16255)
• Docs: Create documentation on how to create graph definitions (Issue NMS-16258)
• News Feed: UI Panel and REST Service (Issue NMS-16282)
• Docs: Update install docs for monitoring database connection (Issue NMS-16286)
• Update container confd to default Postgres SSL to prefer (Issue NMS-16287)

OpenNMS Horizon 32.0.5 (Deep Swedish Rock)

Release 32.0.5

Release 32.0.5 contains a bunch of security updates to Drools, Hibernate, Jetty, and more, plus a number of other bug fixes and a slew of documentation updates.

The codename for Horizon 32.0.5 is Deep Swedish Rock.

Enhancement

• BMP docs could use some TLC (Issue NMS-13891)
• Provisiond threads description discrepancies (Issue NMS-14766)
• OpenShift: Documentation (Issue NMS-16108)
• Backport Drools 8.x to foundation 2023 to address a couple of CVEs (Issue NMS-16179)
• Integrate hibernate-core related patch from Debian (Issue NMS-16181)
• Version bump of json for CVE-2023-5072 (Issue NMS-16191)
• Version bump of jetty to 9.4.53 version (Issue NMS-16192)
• Bump to the latest netty 4 version (Issue NMS-16193)
• Version bump of snappy java (Issue NMS-16194)
• Docs: Remove deprecated resourcecli section (Issue NMS-16216)
• Post install/upgrade instructions on how to join OpenNMS Community (Issue NMS-16213)

Bug

• Local Geo Map (using gwt.openlayers.url) working in version 29.0.1 is not anymore in 31.0.3-1 (Issue NMS-15400)
• Access Denied when deleting a node with admin user (Issue NMS-15746)
• Map dashlet for Ops Boards references old map systems (Issue NMS-16044)
• Reports → Chart page does not load graphs (Issue NMS-16085)
• Event parameters with <> not rendering in event/alarm views (Issue NMS-16157)
• Add Basic Auth to OpenConfig gNMI for Call Credentials (Issue NMS-16158)