Centreon Web 2.8.27

Enhancements

  • [ACL] Improve ACL access on downtime and hostgroup form - PR #6962
  • [API] API for commands arguments descriptions - PR #7196
  • [API] Add showinstance CLAPI command to Host #7199
  • [LDAP] manage multiple ldap group with same dn - PR #6714

Bug Fixes

  • [ACL] Host calculation with ACL is not correct - PR #6436
  • [API] Broker configuration accept accept id 0
  • [API] Unset service/contact relations if set option - PR #7115
  • [API] Use “Reach API *” to validate access to API - PR #7117
  • [Authentication] add sync with ldap groups upon login - PR #7057
  • [Backup] Fix scp export of configuration files backup - PR #7112
  • [Chart] fix graph export when a curve is only displayed in legend - PR #7009
  • [Centcore] Allow to set illegal characters for centcore (#7206)
  • [Configuration] fix export of cbd watchdog logs path - #6794, PR #6919
  • [Configuration] fix broken hostgroup form and massive change on host - PR #7105
  • [Downtimes] Pagination & filters corrections in recurrent Downtimes form - #6501, #6504, #6506, PR #6509
  • [Global] fix pagination when new header is enabled - PR #6687
  • [LDAP] fix ldap import due to var typo
  • [LDAP] Fix LDAP search when the ‘user group attribute’ field of ldap configuration is empty - PR #7057
  • [Monitoring] Fix columns on the list page - PR #6984
  • [UI] Fix a Javascript bug when the new header is selected - PR #6590
  • [UI] backport memory leak - PR #7003
  • [Visual notification] exclude services started by BA from BAM UI notification style - PR #6782

Documentation

  • Correct menu access to add/edit recurrent downtime - #6698
  • Correct the upgrape chapter - #6916
  • Improve prerequisite MySQL version to correct bug on partitioned tables - PR #6974
  • Quick Start improvements

Security

  • Add SQL and XSS protection of Administration Logs page - PR #7038
  • Avoid password macro to appear in cleartext - PR #7020
  • Clean dead code about escalation - PR #7200
  • Fix XSS vulnerability on hosts and services comments - PR #6953
  • Fix SQL injection and duplicate action on the host list page - PR #6961
  • Fix the XSS vulnerability on poller resource - PR #6982
  • Fix XSS vulnerability in the ACL group search field - PR #7032
  • Fix SQL injection for virtual metrics - PR #7061
  • Fix SQL injection and duplicate feature - PR #7069
  • Fix XSS vulnerability in media - PR 7089
  • Protect hostname resolver from XSS - PR #7043
  • Rce vulnerability fixed when using command’s testing feature (#7245)

Others

  • Change copyright calculation code and replace mailto link by a direct link to our website
  • Fix compatibility with PHP 5.3