SNClient 0.48 was released

Tags:

A new version of SNClient was released. This post combines v0.45 - v0.48 because there had been issues with the version numbering in github actions.

The release v0.45 contains fixes for a command injection vulnerability which allows to bypass the default nasty chars detection. So an update is recommended.

Special thanks to Christopher Kreft who discovered the command injections vulnerability and helped a lot with testing and providing patches.

Breaking Changes

  • none

Features

  • add newlines to default nasty characters
  • add support for control characters in nasty characters
  • add new option allow control characters which prevents using ascii control characters in arguments
  • add rss watcher task which kills the agent in case of memory leaks

Changed

  • check_http: support additional header
  • check_http: add limits to buffer size and wait time
  • check_mailq: fix always showing empty result
  • check_os_updates: fix checking updates as non-root user
  • check_drivesize: fix drive specific thresholds
  • update node exporter to 1.12.1
  • update windows exporter to 0.31.8
  • update golang build chain to 1.26.5
  • linux: merge lib into usr/lib
  • http includes: verify ownership of temp files
  • nrpe: prevent too large data packages
  • prometheus: fix potential high cardinality for unknown paths
  • check_cpu/check_load: add cores metric when used in conditions
  • check_dns: support multiple queries over given nameservers and search domains
  • check_dns: add warning/critical thresholds and query/global timeout args
  • check_drivesize: fixed an issue with network mounted drives
  • check_files: add support for symlinks + junctions, added follow-symlinks option
  • check_files: fixed an issue which incorrectly also matched the parent directory
  • check_files: add max-files option to set the number of maximum files
  • check_files: add ‘max files limit’ config option to set a upper limit for max-files
  • check_logfile: fix crash when using line-split
  • check_logfile: add max line limit when reading log files
  • check_logfile: improve output, better error handling when logfile is not readable
  • check_ping: fix ipv6 switch
  • check_ping: add timeout option for each packet
  • test mode: show warning when using unknown attributes in filter or conditions
  • devuan / debian: bring back sysV init script to support non-systemd systems
  • exporter exporter: add file watcher to reload exporter yml automatically

Bugfixes

  • fix showing 0.01 as version when building release builds
  • fix github release builds action
  • fix flags parsing on windows
  • fix command injection in linux (CVE not yet assigned)
  • fix auto updates when running as snclient user

Download

https://github.com/consol-monitoring/snclient/releases/tag/v0.48