Security Releases – Horizon 29.0.3, Meridians 2021.1.8, 2020.1.16, 2019.1.27
Today we released updates to all OpenNMS Meridian versions under active support, as well as Horizon 29, to address the Log4j2 "Log4Shell" vulnerability.
OpenNMS Products Affected by Apache Log4j Vulnerability CVE-2021-44228, CVE-2021-45046, and CVE-2021-45105 (updated Dec. 20, 2021)
Updates The log4j.formatMsgNoLookups work-around is no longer recommended. We are evaluating CVE-2021-45105 and at this time do not believe our products are affected. December 14, 2021: Horizon 26.1.2 and earlier versions. December 16, 2021: CVE-2021-45046. December 20, 2021: CVE-2021-45105. Note: Major text changes appear in red Background Serious remote code [...]
December 2021 Releases – Horizon 29.0.2, Meridians 2021.1.7, 2020.1.15, 2019.1.26
In December, we released updates to all OpenNMS Meridian versions under active support, as well as Horizon 29.
OpenNMS On the Horizon – Config API, OIA, VMware, Twin API, Collectd, Enlinkd, Karaf, Flows, BMP, JAAS, Sentinel, FeatherDS, Vue, Geomaps, Helm
Since last time, we worked on config management and validation, OIA, VMware collection, Twin API tracing, documentation, Collectd, IPC, Enlinkd, Karaf, flow thresholding, Pollerd, router config backup, discovery `exclude-url`, BMP telemetry RRDs, JAAS and Setinel, FeatherDS UI updates, Vue geomaps, smoke tests, and Helm.
OpenNMS On the Horizon – Docs, Karaf, Config Management, Twin API, Maven, VMware, Flows, Thresholding, Collectd, Enlinkd, OIA, Minion, FeatherDS UI, Geomap, REST
Since last time, we worked on docs, Karaf support and config migration in the config management API, the Twin API, Maven component mapping, integration test fixes, VMware support, flow thresholding, collector and Enlinkd improvements, OIA on the Minion, file editing in the new UI, the Vue geomap, requisition editing, and REST APIs.
OpenNMS On the Horizon – Config API, Docs, Twin API, SNMP Metadata, Maven, Zabbix, Sentinel, JAXB, Karaf, Collectd, Alarms, ALEC, Vue, Geomap, FeatherDS
Since last time, we worked on migrating configs to the database, documentation improvements, the Twin API, SNMP metadata, Maven, the Zabbix adapter, alarms in Sentinel, JAXB processing, Karaf, Collectd, Alarmd and ALEC collections, the Vue geomap, and the new FeatherDS UI.
OpenNMS Horizon 29.0.1 Released
Horizon 29.0.1 is a quick release outside of the normal schedule to address some bugs found in 29.0.0 mostly related to running as non-root, and Minion communication.
OpenNMS On the Horizon – Provisiond, Karaf, Enlinkd, LLDP, Config API, Docs, Sentinel, Twin API, Non-Root, Maven, Pollerd, IPv6, GeoIP, Flows, Azure, PostgreSQL, Kafka, Geomaps, FeatherDS, Vue, Helm
Since last time, we worked on Provisiond, Karaf, Enlinkd and LLDP, the config management API, documentation, Sentinel, the Twin API, running as non-root, Maven improvements, Pollerd, IPv6 in the GeoIP provisioning adapter, config validation, flows, Azure PostgreSQL support, Kafka, Geomaps, FeatherDS Vue UI, and Helm.
November 2021 Releases – Horizon 29.0.0, Meridians 2021.1.6, 2020.1.14, 2019.1.25
In November, we released updates to all OpenNMS Meridian versions under active support, and introduced a new major release of Horizon.
OpenNMS On the Horizon – Horizon 29, Zabbix, Karaf, Twin API, Documentation, Config API, SNMPv3, macOS, Schemas, gRPC, PostgreSQL, SQS, Minion, REST, JavaMail, GeoIP, LLDP, Healthcheck, Geomaps, Vue, featherDS
Since last time, we prepped for Horizon 29 and worked on Zabbix agent support, test fixes, Karaf, the Twin API, documentation, the config management API, SNMPv3 settings, macOS Monterey fixes, schema handling, gRPC, PostgreSQL, SQS, Minion, REST, JavaMail TLS, GeoIP provisioning, Enlinkd LLDP, healthcheck, the web config editor, vue Geomaps, and the new featherDS UI.
