Product Updates

Hello fellow watchers,Pretty interesting release this month, it really highlights how Centreon is a very adaptive monitoring system with trendy connectors, and some that just a few will ever need!  New monitoring packs available  Eight new connectors are joining the family! This month’s release includes security-oriented templates and plugins to help you track your devices’ health and performance (Thales Mistral VS9, PineApp Mail Secure).It also includes network and communications features, with the new Avaya Communication Manager Pack, Enterasys SNMP, and PICOS, which is shipped embedded in Pica virtual switches. Because energy management is crucial– and now that, given the current energy crisis, a closer look at energy consumption is more than called for– you can monitor your on-site Himoinsa power devices with a brand new connector. Enhancements Great enhancements this month! The Azure Management Costs pack now includes compliance checking modes and extends monitoring use cases to FinOps. Check the detailed post on this topic.New Generic SNMP discovery is available! Scanning the network with the existing rule was great, but we thought it’d be interesting if we could discover all IP addresses and VLANs for a given host to then check each of them with ICMP. So now, you can achieve this  with this pack,thanks to this new discovery provider.See beyond the storage pool dimension: You can now monitor LUNs configured on Huawei OceanStor. Enhancements impacting current configurations  After a first security update at the beginning of the year, allowing you to get passwords from vaults and encrypt your cache files, we are again enhancing security to further prevent malicious users from running unauthorized commands on monitored systems. This security update required rewriting and modernizing some connectors’ code. So if you are using some of the connectors shown above, make sure to run a careful update and that you are always using the latest version of both plugins and packs. Bugfixes Several fixes are shipped with this release:  the missing Aggregates service template was added to the NetApp Ontap Rest API connector Some mode names were corrected in Windows NSClient 0.5 connector’s command definitions Removed typos in Mikrotik SNMP uptime command.  In latest Centreon versions (>= 22.04), IP-Label Ekara host discovery provider now correctly obfuscates sensitive macros . If you use some of the packs shown above, you should consider upgrading. Bug fixes may have more or less impact depending on how you use them. To know if a quick upgrade is required, simply check the release note. Centreon Plugins Indeed, all connectors above are fueled by awesome underlying open-source plugins, if you want to know everything about what happen within its codebase (more than 30 pull-requests from 7+ contributors)  that hasn’t necessarily impacted IT-100 and IT Edition packages, feel free to check these links: Bug fixes Enhancement Breaking changes In the next days, I won’t be part of Centreon headcount anymore. What a great adventure it has been and how blessed I feel to have worked with such a wide and wonderful community these past ten years. Thank you all, I wish you the best. 

SummaryAn exploit for a critical vulnerability (CVE-2022-37454) impacting PHP and other middleware was publicly released on October 20, 2022.A detailed description of the vulnerability can be found on Red Hat Customer Portal.The Centreon Security Group has conducted an initial assessment across the codebase to determine the impact of this vulnerability.   ImpactsNot specified by publisher Data Privacy Breach Affected systemsPHP 8.0.x versions prior to 8.0.25 PHP 8.1.x versions prior to 8.1.12 State of investigationRed Hat is currently under investigation on potential effects.Centreon doesn’t use SHA-3 mechanism, so no Centreon Editions is impacted.However, PHP versions 8.0.25 and 8.1.12 are already available with fixes to this vulnerability, so PHP can be updated on your Centreon platforms using following commands:For all supported Centreon versions (21.10 to 22.10) on Enterprise Linux 7 et 8:yum update php\*systemctl restart php-fpmFor Centreon 22.04 on Debian 11:apt updateapt upgrade phpsystemctl restart php8.0-fpmFor Centreon 22.10 on Debian 11:apt updateapt upgrade phpsystemctl restart php8.1-fpm This advisory will be updated as additional information becomes available. Please make sure to subscribe to updates.

A new update for Centreon web 22.10 is available. Click the version button in Product Updates to access detailed release notes:centreon-web-22.10.1

 SummaryA zero-day exploit for a vulnerability code-named Text4Shell (CVE-2022-42889) was publicly released on October 12th 2022. The Centreon Security Group has conducted an initial assessment across the codebase to determine the impact of this vulnerability.  The vulnerability is embedded in a java component named Apache-commons-text, in versions from 1.5 to 1.10. It can only be exploited in a very specific context. ImpactCentreon components that could have been affected are the ones that uses Java code: Centreon MAP server Centreon MBI AS400 plugin No other component (including opensource) is affected.No Centreon Cloud service is affected. State of investigationMAP, MBI and AS400 plugin do not use this dependency in any version.If this library is present on your Centreon environment you need to check which software uses it. MAP, MBI and AS400 plugin are not affected by Text4Shell. ---- UPDATE 11/08/2022 17.00 ---- The library commons-text-1.9.jar is actually retrieved indirectly by one of our MAP software dependencies.Even if present on the file system, this library is not used by any component of Centreon.Therefore, there is no way the flaw can be exploited through the Centreon product.We will generate new versions of MAP with the commons text library removed.However if you would like your vulnerability scanners to not raise a false positive, there is no harm in simply deleting the library file located in /usr/share/centreon/www/modules/centreon-map4-web-client/editor/WEB-INF/lib/  

Released during the Fall of 2022, Centreon software version 22.10 is applicable to both Centreon Cloud (the SaaS version of the platform) and Centreon On-Premises (for Self-Hosted deployments). Centreon 22.10 is also applicable to all software editions: Open Source, IT Edition, Business Edition and MSP Edition.This is 22.10 in a nutshell:User Authorization with OpenID Connect Monitoring Configuration, with Auto-Discovery More productivity with a better User Experience Platform Architecture and Operations Stay tuned for a new MAP user experience  So, what’s new with Centreon Platform 22.10? This is what you will discover by clicking on the button below 😉  Read more/EN       Read more/FR     

A new update for Centreon mbi 22.04 is available. Click the version button in Product Updates to access detailed release notes:centreon-mbi-22.04.3

New monitoring packs available   Three newcomers this month:  You can finally monitor your vCenter appliance using SNMP, including memory consumption Aruba Orchestrator, if you manage your WAN network migration to SD-Wan using this tool, check this pack and discover all your assets painlessly.  There’s already a stream connector to send monitoring data to Splunk and now there’s a dedicated pack to monitor the health of  its main components, ensuring that your indexes are correctly ingesting data. You may only want to run a SPL query and trigger an alert based on the number of matches.  Enhancements  The Centreon Base Pack has been  enhanced, that’s a rare occurrence. No need to run an update unless you want to add extra options and parameters to Ping probes.  The Kadiska integration is extended once more, with added discovery capabilities, new metrics, and new way to display Watcher metrics, splitting them according to sites or gateways or tracking WFA (work from anywhere) performance.  The Alcatel Omniswitch integration has been enhanced to support more hardware series within this single pack.  Windows packs include a new Update service, whatever the protocol you’re using to monitor your servers. Enhancements impacting current configurations   A great part of the Fujitsu Eternus DX Pack  was rewritten. This enhanced pack now supports more hardware series and more flexible SSH connections. It may impact some configurations so be careful when upgrading it.  Bugfixes   Many packs were subjected to fixes this month of p, mainly to account for a regression found in discovery jobs, a consequence of the recent Amazon Secure Token Service update.  Minor typos were corrected in the HP 3PAR and Azure AD  packs. If you use one of the packs above, you should consider upgrading. Bug fixes may have more or less impact depending on how you use these packs. To know if a quick upgrade is required, simply check the release note.

An internal audit has identified security vulnerabilities in Centreon MBI and Centreon Web.Centreon is unaware of situations where these could have been exploited.These vulnerabilities have a low likelihood of being exploited but have a severe impact if exploited which results in a high risk.It is therefore highly recommended to apply the provided product updates as early as possible. Who is impacted?Your Centreon platform is vulnerable if Centreon MBI has been installed.Centreon Cloud platforms are not impacted. Applying the fixFixes have been provided for all supported versions and it is recommended to update both Centreon Web and Centreon MBI: Centreon Web 22.04.7 and Centreon MBI 22.04.2 Centreon Web 21.10.13 and Centreon MBI 21.10.2 Centreon Web 21.04.20 and Centreon MBI 21.04.5 These versions include cumulative fixes from prior updates. If you are running an unsupported version, it is strongly recommended that you upgrade your platform to 22.04.

A new update for Centreon mbi 21.04 is available. Click the version button in Product Updates to access detailed release notes:centreon-mbi-21.04.5

A new update for Centreon mbi 21.10 is available. Click the version button in Product Updates to access detailed release notes:centreon-mbi-21.10.2

A new update for Centreon mbi 22.04 is available. Click the version button in Product Updates to access detailed release notes:centreon-mbi-22.04.2

A new update for Centreon web 21.04 is available. Click the version button in Product Updates to access detailed release notes:centreon-web-21.04.20

A new update for Centreon web 21.10 is available. Click the version button in Product Updates to access detailed release notes:centreon-web-21.10.13

A new update for Centreon web 22.04 is available. Click the version button in Product Updates to access detailed release notes:centreon-web-22.04.7

A new update for Centreon map 21.10 is available. Click the version button in Product Updates to access detailed release notes:centreon-map-21.10.6

A new update for Centreon web 21.10 is available. Click the version button in Product Updates to access detailed release notes:centreon-web-21.10.12

A new update for Centreon web 21.10 is available. Click the version button in Product Updates to access detailed release notes:centreon-web-21.10.11

A new update for Centreon web 21.04 is available. Click the version button in Product Updates to access detailed release notes:centreon-web-21.04.19

A new update for Centreon web 22.04 is available. Click the version button in Product Updates to access detailed release notes:centreon-web-22.04.6

A new update to Centreon Web 22.04 is available. Click the version button in Product Updates to access detailed release notes:centreon-web-22.04.6

It's been close to 5 months now since we released Centreon 22.04.Thousands of platforms around the world have been upgraded and there have been some minor updates to address early adopter findings. We will be releasing 22.10 in a few weeks, but if you prefer staying on the n-1 version, now is the right time to consider an upgrade to 22.04. 22.04 brings many improvements, as well as important security and functional fixes. Key fixes in Service Pack 1 include:Centreon Web Fixed some security vulnerabilities Several fixes in Resources Status (export graphs, detail panel) Added OpenID Connect auto-import and OpenID Connect roles management Improved database storage to avoid blocking Broker when maximum values are reached MBI Fixed an issue related to the new password policy that would prevent reports from being generated. BAM Fixed failure at module installation when 24x7 timeperiod is missing  MAP Services not accessible in desktop client in case of high number of notifications Complete release notes as well as upgrade procedure are available in the Centreon Documentation. If you are using a commercial edition of Centreon, please check the maintenance table below to ensure you remain fully supported:  Version End of support State Centreon 22.04 05/2024 Supported Centreon 21.10 11/2023 Supported Centreon 21.04 10/2022 Will soon be unsupported Centreon 20.10 04/2022 No longer supported Centreon 20.04 10/2021 No longer supported Centreon 19.10 04/2021 No longer supported Centreon 19.04 10/2020 No longer supported Centreon 18.10 04/2020 No longer supported   If you have already deployed 22.04, please check the table below for versions of individual components included in Service Pack 1.  Component Minimum version in SP1 Centreon Web 22.04.6 Centreon Collect 22.04.1 Centreon Gorgone 22.04.1 Centreon MAP 22.04.1 Centreon BAM 22.04.2 Centreon MBI 22.04.1 Centreon Autodiscovery 22.04.1 Centreon Plugin Pack Manager 22.04.0 Centreon License Manager 22.04.0 Centreon anomaly Detection 22.04.0 Centreon High availability 22.04.0 Centreon DSM 22.04.0 Centreon Open Tickets 22.04.0  

A new update for Centreon collect 21.10 is available. Click the version button in Product Updates to access detailed release notes:centreon-collect-21.10.3

A new update for Centreon gorgone 22.04 is available. Click the version button in Product Updates to access detailed release notes:centreon-gorgone-22.04.1

A new update for Centreon gorgone 21.10 is available. Click the version button in Product Updates to access detailed release notes:centreon-gorgone-21.10.3

Always with the intent to provide the most flexible monitoring possible and let the user choose what kind of monitoring fits its needs in terms of deployment, customization, and security, we continue to leverage Prometheus & Node Exporter capabilities. What’s new?  Target Discovery       When working with DevOps teams, they often set up a Prometheus to watch over metrics generated by their applications and orchestrators instrumenting it during the whole deployment lifecycle.  The Prometheus targets can now be discovered and mapped to a host in Centreon, and you can leverage labels to apply the right template or organize your configuration (Groups, Categories) thanks to the Host Discovery mappers.  Windows Monitoring        The Prometheus community is maintaining a Windows Exporter that let you easily deploy a lightweight exporter to monitor basic and more advanced Windows systems and apps’ metrics.When comparing this solution against existing NSClient++ or WSMan, here is what you should keep in mind:  doesn’t allow to run of custom scripts enable user-friendly Windows network interface monitoring is easier to deploy  leverage Windows performance counters by design, therefore, could provide code-level monitoring of .NET applications The Pack comes with service discovery rules to make your deployment faster. Regarding metrics, we only implemented the default ones:If you’re interested in some more specific metrics from this list, just drop a comment below and we’ll add them to our backlog.