Release 29.0.6 contains a number of bug fixes, including security fixes related to Grafana PDF reports and Protobuf, as well as a few enhancements.
For a high-level overview of what has changed in Horizon 29, see What’s New in OpenNMS Horizon 29.
Thanks to Sahil Tikoo from Etisalat for reporting the Grafana endpoint issue.
A note about security issues: we have traditionally created CVEs in a pretty ad-hoc manner. We are in the process of formalizing how we’ll be doing so going into the future.
The codename for Horizon 29.0.6 is Dodo.
Bug
- config-tester doesn’t find malformed resourceTypes (Issue NMS-13723)
- Event configuration UI fails to persist logmsg dest changes (Issue NMS-13729)
- Outdated javascript library (Issue NMS-13848)
- fix-karaf-setup.sh should honor RUNAS (Issue NMS-13881)
- Remote RMI is broken in 29.0.x (Issue NMS-13887)
- org.opennms.core.commands never got added to Karaf build (Issue NMS-13910)
- grafana endpoint can be used to port-scan internal resources (Issue NMS-13917)
- Minion fails to marshall requisition with JAXB error: Class [org.opennms.netmgt.model.PrimaryTypeAdapter] not found (Issue NMS-13927)
- Kafka Minions with JMS disabled log errors loading JMS bundles (Issue NMS-13929)
- "full" report type in Support → System Report inserts "%n%n" between entries instead of newlines (Issue NMS-13948)
- Unsynchronized access to service factories in TelemetryServiceRegistryImpl (Issue NMS-13961)