Blog Category: News
April 2022 Releases – Horizon 29.0.9, Meridians 2022.1.2, 2021.1.14, 2020.1.22, 2019.1.33
In April, we released updates to all OpenNMS Meridian versions under active support, as well as Horizon 29.
OpenNMS + SpringShell CVE-2022-22965
OpenNMS and the Spring Core Remote Code Execution Vulnerability (SpringShell) CVE-2022-22965A serious remote code execution (RCE) vulnerability exists in some versions of the Spring Framework, which is used by OpenNMS Meridian and Horizon. OpenNMS Meridian and Horizon are not known to be vulnerable because the published exploit for this RCE requires: All Attributes Required for [...]
New Releases – Horizon 29.0.8, Meridians 2021.1.13, 2020.1.21, 2019.1.32
Today we released updates to all OpenNMS Meridian versions under active support, as well as Horizon 29.
March 2022 Releases – Horizon 29.0.7, Meridians 2021.1.12, 2020.1.20, 2019.1.31
In March, we released updates to all OpenNMS Meridian versions under active support, as well as Horizon 29.
February 2022 Releases – Horizon 29.0.6, Meridians 2021.1.11, 2020.1.19, 2019.1.30
In February, we released updates to all OpenNMS Meridian versions under active support, as well as Horizon 29.
January 2022 Releases – Horizon 29.0.5, Meridians 2021.1.10, 2020.1.18, 2019.1.29
In January, we released updates to all OpenNMS Meridian versions under active support, as well as Horizon 29.
Security Releases – Horizon 29.0.4, Meridian 2021.1.9, 2020.1.17, 2019.1.28
(deep breath) Today we released off-cycle updates to all OpenNMS Meridian versions under active support, as well as Horizon 29, to address additional Log4j2 "Log4Shell" vulnerabilities.
Security Releases – Horizon 29.0.3, Meridians 2021.1.8, 2020.1.16, 2019.1.27
Today we released updates to all OpenNMS Meridian versions under active support, as well as Horizon 29, to address the Log4j2 "Log4Shell" vulnerability.
OpenNMS Products Affected by Apache Log4j Vulnerability CVE-2021-44228, CVE-2021-45046, and CVE-2021-45105 (updated Dec. 20, 2021)
Serious remote code execution (RCE) and denial of service (DOS) vulnerabilities in Apache Log4j could affect customers running some OpenNMS products. These vulnerabilities could allow an attacker to shut down or compromise your system by causing OpenNMS to log specially crafted messages into system log files for malicious purposes. Apache Log4j could interpret one of those [...]
December 2021 Releases – Horizon 29.0.2, Meridians 2021.1.7, 2020.1.15, 2019.1.26
In December, we released updates to all OpenNMS Meridian versions under active support, as well as Horizon 29.