Update changelog and add doc entry

NagVis · Aug 29, 2022 · 719f7d8 · 719f7d8
1 parent b63db43
commit 719f7d8
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 0 deletions.
diff --git a/ChangeLog b/ChangeLog
@@ -11,6 +11,12 @@ Worldmap:
 
 Security:
   * FIX: Fix SSRF (triggerable by admin users) in geomap.php (#319 Thanks to dontqwerty)
+  * FIX: Fix arbitrary file read in (#322 Thanks to Shortfinga)
+  * FIX: Fix type juggling vulnerability in cookie hash processing (#321 Thanks to Shortfinga)
+  * Add option to enable compatibility with Checkmk 2.2 cookies. This needs to
+    be enable with a new configuration option (logon_multisite_cookie_version).
+    This setting will automatically be enabled when NagVis is shipped together
+    with Checkmk. (#323 Thanks to Shortfinga)
 
 1.9.33
 Frontend:

diff --git a/docs/en_US/nagvis_config_format_description.html b/docs/en_US/nagvis_config_format_description.html
@@ -219,6 +219,11 @@ <h2>Description of the sections in detail</h2>
             <td>Guest</td>
             <td>Same as the above &quot;logonenvcreaterole&quot; option. Only used by the LogonMultisite module.</td>
         </tr>
+        <tr>
+            <td>logon_multisite_cookie_version</td>
+            <td>0</td>
+            <td>When you use Checkmk 2.2 or newer, you need to set this to <tt>1</tt>. Only used by the LogonMultisite module.</td>
+        </tr>
 
         <tr>
             <td>multisite_snapin_layout</td>