Releases: OpenNMS/opennms
OpenNMS Horizon 30.0.3 (Chipmunk)
Release 30.0.3
Release 30.0.3 contains quite a few bug fixes as well as number of small features and security fixes.
The codename for Horizon 30.0.3 is Chipmunk.
Bug
- snmpCollect being reset to C even if a policy sets it to N (Issue NMS-14576)
- Stored XSS (Issue NMS-14591)
- change or remove how Docker SSH keys are generated (Issue NMS-14643)
- Thresholding blocks threads under load (Issue NMS-14645)
- Appliance: Minion fails to come up with 30.0.2 and bleeding image (Issue NMS-14655)
- Graph page doesn’t escape <> in resource labels (Issue NMS-14657)
Story
- PassiveStatusd (Issue NMS-8567)
- Provisiond (Issue NMS-8569)
- Please update the copyright year on the docs page! (Issue NMS-13911)
- Add KPIs for user and group counts to datachoices telemetry (Issue NMS-14487)
- Set up basic Java CLI app to read/process MOS CDR files (Issue NMS-14575)
- Add KPI for DCB device count by sysObjectID (Issue NMS-14579)
- Add KPIs for open notifications and outages to datachoices telemetry (Issue NMS-14623)
- Add KPI for application count to datachoices telemetry (Issue NMS-14624)
- Official docs readiness for Cortex TSS plugin release (Issue NMS-14667)
- Upgrade dom4j to latest version (Issue NMS-14696)
Task
- provisiond config partial update (Issue NMS-14310)
- Change OIA name to OpenNMS Plugin API (Issue NMS-14475)
- Remove footer content from opennms/docs (Issue NMS-14637)
Enhancement
- Migrate Notification wiki pages into docs (Issue NMS-13584)
- Rest API v2 for obtaining a list of SNMP interfaces doesn’t return back node id (Issue NMS-14449)
- Add smoke test for new KPIs (Issue NMS-14627)
Upgrade
- Update Vue UI Packages (Issue NMS-14651)
OpenNMS Horizon 30.0.2 (Gopher)
Release 30.0.2
Release 30.0.2 contains quite a few bug fixes as well as number of small features.
We have made a number of improvements to the documentation, including reworking the section on events and adding information on configuring SNMP traps and varbinds.
OpenNMS has extended the anonymous metrics we optionally collect to help us improve the project, such as CPU and memory sizing of the platform, and statistics like number of events and flows. Click the gears icon and choose Additional Tools -> Data Choices or edit $OPENNMS_HOME/etc/org.opennms.features.datachoices.cfg to see what is included and to change your opt-in settings. Note that we continue to anonymize the data for internal use only to inform project direction. We do not share it with third parties.
The codename for Horizon 30.0.2 is Gopher.
Bug
- Clearing an alarm brings alarm not found message (Issue NMS-12981)
- [Web] - Weak Password Policy (Issue NMS-13981)
- [Web] - Password field with autocomplete enabled on Login page (Issue NMS-13983)
- JVM MemoryPool data collection not working (Issue NMS-14041)
- Update guava dependency to 25.1 (Issue NMS-14209)
- Scripts invoke sudo even if running as root (Issue NMS-14410)
- Flow Thresholding: persist zero traffic rate (Issue NMS-14429)
- Documentation references invalid docker version for latest horizon version release (Issue NMS-14431)
- Kafka metrics producer considers zero values optional (Issue NMS-14469)
- Kafka metrics producer persists unpersisted collectionsets (Issue NMS-14470)
- New UI: Link to license points to gnu.org/licenses instead of a specific license (Issue NMS-14523)
- WebMonitor does not track the response time (Issue NMS-14535)
- Event / Alarms filtering no longer works (Issue NMS-14542)
- Grafana dashboard reports do not run (Issue NMS-14544)
- Clicking on the Count # in the Alarm does not bring up the associated Events (Issue NMS-14549)
- Mappings are not correctly handled in the JSON Collection Handler (Issue NMS-14559)
- Fix docs references to editing org.apache.karaf.features.cfg (Issue NMS-14566)
- Spring Framework CVE-2022-22950 Remediation (Issue NMS-14568)
Story
- Please update the copyright year on the docs page! (Issue NMS-13911)
- DCB: Add Rest End point for deletion of Device Configs (Issue NMS-14287)
- Add KPIs for CPU count and memory size to datachoices telemetry (Issue NMS-14482)
- Add KPIs for polls, metrics, events, and flows to datachoices telemetry (Issue NMS-14483)
- Add KPIs for business service count to datachoices telemetry (Issue NMS-14485)
- Add KPIs for count of total requisition and requisitions with custom FSD to datachoices telemetry (Issue NMS-14486)
- Add KPIs for notification entities to datachoices telemetry (Issue NMS-14488)
- Add KPIs for Sink, RPC, and Time-series strategies to datachoices telemetry (Issue NMS-14491)
- Add KPI item for RDBMS type and version to datachoices telemetry (Issue NMS-14492)
- Fix stock graphite-telemetry-interface.groovy script file (Issue NMS-14564)
Task
- Update XSD URL (Issue NMS-14150)
- How to merge config on upgrade using Git (Issue NMS-14281)
- Document allowed characters in service-names (Issue NMS-14423)
- Add documentation to describe negate search terms in alarms advanced search (Issue NMS-14437)
- JDBCQueryDetector documentation (Issue NMS-14453)
- JDBStoredProcedureDetector documentation (Issue NMS-14454)
- Release work (July 13) (Issue NMS-14458)
Enhancement
- Update PG installation documentation to use SCRAM (Issue NMS-13057)
- Upgrade Kafka components to 3.2.0 (Issue NMS-13953)
- Debugging DCB scripts is a pain (Issue NMS-14120)
- Update Events Documentation (Issue NMS-14212)
- Migrate Trap configuration wiki to docs (Issue NMS-14323)
- Document SNMP oid varbind pattern matching and varbind expansion to create unique events (Issue NMS-14346)
- SNMP Interface Poller doc updates (Issue NMS-14412)
- Negate search terms in event advanced search (Issue NMS-14476)
- Update documentation for policy matching (Issue NMS-14528)
- Add option to not store DCB script output (Issue NMS-14537)
- Add datacollection definition for Eventd processing times (Issue NMS-14554)
- Fix outdated MySQL / MariaDB JDBC collection config (Issue NMS-14571)
- simplify assembly tarballs (Issue NMS-14572)
Upgrade
- Upgrade to Feather 0.10.15 (Issue NMS-14547)
OpenNMS Horizon 30.0.1 (Chinchilla)
Release 30.0.1
Release 30.0.1 contains a number of bug fixes as well as a number of new features including support for encrypting credentials.
For a high-level overview of what has changed in Horizon 30, see What’s New in OpenNMS Horizon 30.
The codename for Horizon 30.0.1 is Chinchilla.
Bug
- Error responses are not handled correctly when handling ElasticSearch responses (Issue NMS-13785)
- Tag Netflow v9 packets as Ingress on the INPUT_SNMP ifindex and Egress on the OUTPUT_SNMP ifindex (Issue NMS-14279)
- MIB compiler creates datacollections that fail to validate (Issue NMS-14314)
- Bridge Topology Discovery Mismatch (Issue NMS-14322)
- Grafana Panel Internal Server Error when lasteventid is Null for an Alarm when Using HELM (Issue NMS-14331)
- Replace old logo references in some files/reports with the new logo (Issue NMS-14372)
- Topology UI Error when deleting a graphml (Issue NMS-14379)
- Link to SCV UI is missing from OG UI admin landing page (Issue NMS-14393)
- runas=root entry in opennms.conf gets duplicated (Issue NMS-14396)
- Kafka Consumer stops commits when overloaded (Issue NMS-14415)
- Appliance: Minion fails to come up with 30.x and bleeding image (Issue NMS-14441)
- External Requisition UI: foreignSource not set for VMware requisition (Issue NMS-14478)
- Pollerd take a long time to start on systems with large inventories (Issue NMS-14524)
New Feature
Story
- SNMP MIB imports to handle OPAQUE data type implementation (Issue NMS-14018)
- Support for SSH Key Authentication (Issue NMS-14119)
- Add KPIs to datachoices telemetry for Provisiond config items (Issue NMS-14233)
- DCB: UI : Configs without service name shouldn’t have option for Backup (Issue NMS-14300)
- DCB: Script files are not shown in File Editor UI (Issue NMS-14411)
- Add support for replaying packet captures to telemetryd (Issue NMS-14465)
- Prefer ingressPhysicalInterface over INPUT_SNMP when processing flows (Issue NMS-14467)
- Add KPI for list of enabled service daemons to datachoices telemetry (Issue NMS-14489)
Task
- Test DCB UI (Issue NMS-14265)
- Update documentation for changes to types of configs (Issue NMS-14311)
- Add terms to glossary (Issue NMS-14347)
- Add terms to glossary #2 (Issue NMS-14348)
- Add terms to glossary #3 (Issue NMS-14349)
- Add terms to glossary #4 (Issue NMS-14350)
- Add terms to glossary #5 (Issue NMS-14351)
Enhancement
- event nodeCategoryMembershipChanged should be more verbose (Issue NMS-10634)
- Guide to monitor essential Microsoft Active Directory Services (Issue NMS-11793)
- There should be documentation for the reports (Issue NMS-11810)
- Wild cards for flow classifiations are not explained (Issue NMS-12421)
- Create JdbcDetector documentation (Issue NMS-13427)
- Authentication related WEB-INF files should also exist in etc-pristine (Issue NMS-13834)
- Negate search terms in alarms advanced search (Issue NMS-14043)
- Support writing to multiple TSDB in parallel (Issue NMS-14197)
- Enlinkd Topology Map Layers Documentation (Issue NMS-14325)
- Karaf scv-list command to see what entries exist (Issue NMS-14385)
- upgrade JNA to 5 (Issue NMS-14417)
- Add script to manipulate flows (Issue NMS-14468)
Upgrade
- Update all Vue UI packages to latest (Issue NMS-14460)
OpenNMS Horizon 29.0.11 (Hawk)
Release 29.0.11 contains a number of bug fixes and enhancements.
For a high-level overview of what has changed in Horizon 29, see What’s New in OpenNMS Horizon 29.
The codename for Horizon 29.0.11 is Hawk.
Bug
- Admin guide lacks a chapter on logging (Issue NMS-8861)
- Error responses are not handled correctly when handling ElasticSearch responses (Issue NMS-13785)
- [Web] - WebServer Fingerprinting (Issue NMS-13987)
- Telemetryd does not shut down gracefully (Issue NMS-14003)
- Event/Alarm advanced search not passing search terms (Issue NMS-14161)
- Users with ROLE_USER face Access Denied when accessing Resource Graphs from Reports Section (Issue NMS-14193)
- Exception when searching assets (Issue NMS-14240)
- Rogue opennms-tools/phonebook/pom.xml (Issue NMS-14266)
- Remove "Commercial Support" ticket lookup from web ui support section (Issue NMS-14280)
- Kafka-Producer Alarm Resync Failing Post Entire Kafka Cluster Outage (Issue NMS-14321)
- Replace old logo references in some files/reports with the new logo (Issue NMS-14372)
- runas=root entry in opennms.conf gets duplicated (Issue NMS-14396)
- Kafka Consumer stops commits when overloaded (Issue NMS-14415)
Story
- Document how to upgrade OpenNMS (Issue NMS-13692)
- Add new KPIs to datachoices telemetry (Issue NMS-14203)
Task
- LoopMonitor & detector (Issue NMS-11042)
- Document PassiveServiceMonitor (Issue NMS-11052)
- WmiMonitor (Issue NMS-11065)
- Circle ci caching OIA issue (Issue NMS-14291)
Enhancement
- Add a note to remember delete the browsers cache when upgrading OpenNMS (Issue NMS-8504)
- there is no documentation on the instrumentation log reader (Issue NMS-10393)
- event nodeCategoryMembershipChanged should be more verbose (Issue NMS-10634)
- Migrate External Auth into docs (Issue NMS-13574)
- Document how to set up SSL with Jetty (Issue NMS-13684)
- DCB: Error reporting needs love (Issue NMS-14128)
- Correct errors on Business Service Monitoring docs (Issue NMS-14337)
- Snmp Link Up does not clear Snmp Link Down (Issue NMS-14378)
- upgrade JNA to 5 (Issue NMS-14417)
OpenNMS Horizon 30.0.0 (Nutria)
Release 30.0.0 is the first in the Horizon 30 series, introducing a number of new features, most notably a preview of a new web UI, and the ability to back up infrastructure device configs.
For a high-level overview of what has changed in Horizon 30, see What’s New in OpenNMS Horizon 30.
The codename for Horizon 30.0.0 is Nutria.
OpenNMS Horizon 29.0.10 (Duck)
Release 29.0.10 contains a number of security dependency updates, plus a bunch of other bug fixes and documentation improvements.
While the dependency changes should not affect how the OpenNMS runtime works, this release contains a larger than usual number of changes to "plumbing" to facilitate these dependency updates. We strongly recommend that you do more than the usual amount of testing before deploying this update to a production environment.
For a high-level overview of what has changed in Horizon 29, see What’s New in OpenNMS Horizon 29.
The codename for Horizon 29.0.10 is Duck.
Bug
- install script fails if an OpenNMS directory contains root-owned lost+found directory (Issue NMS-14032)
- Provisiond Fails to Start when wrong data is successfully POSTed via REST to hardwareInventory endpoint (Issue NMS-14085)
- Grafana box renders raw JS when Grafana behind reverse proxy with SSO (Issue NMS-14109)
- CVE-2022-22965: Spring RCE in Data Bindings (Issue NMS-14134)
- Minions Trapd Listener Fails to Bind to udp/162 when broker is down (Issue NMS-14148)
- Fix formatting in alarmd documentation (Issue NMS-14182)
- Dependabot: update Vaadin to the latest 8.x (Issue NMS-14192)
- Upgrade groovy-all dependency (Issue NMS-14208)
- make sure license-maven-plugin is re-enabled in foundation and release branches (Issue NMS-14217)
- Upgrade jackson-mapper-asl dependency (Issue NMS-14252)
Enhancement
- Basic upgrade procedure (Issue NMS-13971)
- Document housekeeping tasks before upgrade (Issue NMS-13972)
- IPFIX: Also support ingressPhysicalInterface and egressPhysicalInterface for input and output ifIndex (Issue NMS-14169)
- Cleanup Ticketer docs formatting (Issue NMS-14172)
- Expand XmlCollector documented parameters (Issue NMS-14256)
- Restructure Collector docs file path (Issue NMS-14258)
OpenNMS Horizon 29.0.9 (Kiwi)
Release 29.0.9 contains a bunch of bug fixes and enhancements, including improvements for running in containers, code cleanups, and improved documentation.
For a high-level overview of what has changed in Horizon 29, see What’s New in OpenNMS Horizon 29.
The codename for Horizon 29.0.9 is Kiwi.
Bug
- Documentation for all pollers misses RRD config parameter (Issue NMS-11747)
- Resolve SonarCloud High priority Security Hotspots (Issue NMS-14002)
- Can’t set capabilities in Minion systemd unit (Issue NMS-14016)
- Scriptd helpers ignore community setting (Issue NMS-14045)
- Wrong wiki URL in debian installer (Issue NMS-14053)
- Build from source documentation needs a minor correction (Issue NMS-14088)
- Hostname command is missing when running in a container (Issue NMS-14100)
- Fix for NMS-13887 did not make it to Core (Issue NMS-14117)
- Update docs for binding ports <1024 (Issue NMS-14162)
Enhancement
OpenNMS Horizon 29.0.8 (Chickadee)
Release 29.0.8 contains a few small bug fixes mostly relating to upgrades, as well as a bug in graphing, and an improvement to support pre-auth HTTP headers.
For a high-level overview of what has changed in Horizon 29, see What’s New in OpenNMS Horizon 29.
The codename for Horizon 29.0.8 is Chickadee.
Bug
- Upgrading opennms ignores RUNAS when setting ownership on logs directory (Issue NMS-14000)
- Minion installation from Debian packages failed with missing dir /var/lib/minion/data/tmp (Issue NMS-14019)
- OpenNMS points to the wrong URL when trying to generate graphs (Issue NMS-14057)
Enhancement
- Add support for pre-authorization via HTTP header (to be used with pre-authentication) (Issue NMS-14059)
OpenNMS Horizon 29.0.7 (Pileated Woodpecker)
Release 29.0.7 contains a bunch of bug and security fixes, plus a few small enhancements and documentation improvements.
For a high-level overview of what has changed in Horizon 29, see What’s New in OpenNMS Horizon 29.
The codename for Horizon 29.0.7 is Pileated Woodpecker.
Bug
- opennms user credentials wrongly exposed (Issue NMS-12146)
- show-event-config displays unexpected content after adding new event definitions (Issue NMS-12863)
- Install script fails when using Azure PostgreSQL Services (Issue NMS-13715)
- In default installation the ActiveMQ Total Enqueued Messages throw divde error exceptions (Issue NMS-13737)
- Remove requirements/logic from Dockerfile/Entrypoint/Confd about the OpenNMS HTTP URL from the Minion and Sentinel due to Twin API (Issue NMS-13768)
- Systemd startup uses legacy SysV init script (Issue NMS-13783)
- Telemetryd error occurring when testing with hsflowd (Issue NMS-13795)
- OpenNMS Availability Chart Shouldn’t Include Time Before Connected (Issue NMS-13822)
- Support → System Report exposes credentials in plain text (Issue NMS-13831)
- Cross site scripting - Reflected (Issue NMS-13835)
- TLS: Diffie-Hellman Key Exchange Insufficient DH Group Strength Vulnerability (Issue NMS-13845)
- Password field with autocomplete enabled (Issue NMS-13847)
- Remote RMI is broken in 29.0.x (Issue NMS-13887)
- Unable to modify node/interface/service metadata through requisition after initial synchronization (Issue NMS-13890)
- When examining the service status of the opennms -v, the service is stopped. (Issue NMS-13900)
- Web UI redirects to http even with base-url set to https (Issue NMS-13901)
- Prevent REST API from allowing multiple primary SNMP interfaces on a single node (Issue NMS-13939)
- Instrument Provisiond Thread Pools (Issue NMS-13969)
- SNMP Detector configuration page excludes useSnmpProfiles and ttl options (Issue NMS-13997)
- install script fails if an OpenNMS directory contains root-owned lost+found directory (Issue NMS-14032)
- Web UI copyright year needs updating (Issue NMS-14037)
Enhancement
OpenNMS Horizon 29.0.6 (Dodo)
Release 29.0.6 contains a number of bug fixes, including security fixes related to Grafana PDF reports and Protobuf, as well as a few enhancements.
For a high-level overview of what has changed in Horizon 29, see What’s New in OpenNMS Horizon 29.
Thanks to Sahil Tikoo from Etisalat for reporting the Grafana endpoint issue.
A note about security issues: we have traditionally created CVEs in a pretty ad-hoc manner. We are in the process of formalizing how we’ll be doing so going into the future.
The codename for Horizon 29.0.6 is Dodo.
Bug
- config-tester doesn’t find malformed resourceTypes (Issue NMS-13723)
- Event configuration UI fails to persist logmsg dest changes (Issue NMS-13729)
- Outdated javascript library (Issue NMS-13848)
- fix-karaf-setup.sh should honor RUNAS (Issue NMS-13881)
- Remote RMI is broken in 29.0.x (Issue NMS-13887)
- org.opennms.core.commands never got added to Karaf build (Issue NMS-13910)
- grafana endpoint can be used to port-scan internal resources (Issue NMS-13917)
- Minion fails to marshall requisition with JAXB error: Class [org.opennms.netmgt.model.PrimaryTypeAdapter] not found (Issue NMS-13927)
- Kafka Minions with JMS disabled log errors loading JMS bundles (Issue NMS-13929)
- "full" report type in Support → System Report inserts "%n%n" between entries instead of newlines (Issue NMS-13948)
- Unsynchronized access to service factories in TelemetryServiceRegistryImpl (Issue NMS-13961)