[Xymon] Xymon 4.3.29 Released - Important Security Update

[Japheth Cleaver]

On 8/5/2019 6:19 AM, Dirk Kastens wrote:
> Hi,
>
> I just upgraded our xymon server on Scientific Linux release 6.10 frpm 
> xymon 4.3.28 to 4.3.29.
>
> Two things are not working any longer:
>
> http authentication: I defined the login information in the file 
> /etc/xymon/netrc, which worked before the upgrade. Now the http test 
> are red with the message "Authorization Required".
>
> history files cannot be opened any more. When I click on the history 
> button of a test, I get an empty page with the message "Cannot open 
> history file"


Thanks,

For HTTP authentication, this is simple basic auth and not 
certificate-based or anything else?

For history file checking, can you verify that hosts with dashes in the 
name show this symptom while those with just alphanumerics (and periods) 
don't? I believe this may actually be the bug cause here.

-jc