File phpipam.changes of Package phpipam
-------------------------------------------------------------------
Thu Nov 28 09:22:25 UTC 2024 - ecsos <ecsos@opensuse.org>
- Update to 1.7.3
Bugfixes:
----------------------------
+ Backported PHP8 compatibility fixes;
+ Workaround PHP bug GH-16870 (#4339);
+ Request new IP hangs (#4346);
-------------------------------------------------------------------
Sat Nov 23 09:36:27 UTC 2024 - ecsos <ecsos@opensuse.org>
- Update to 1.7.2
Bugfixes:
----------------------------
+ Slow UI performance with bootstrap v3.4.1 (#4311);
-------------------------------------------------------------------
Mon Nov 18 06:27:59 UTC 2024 - ecsos <ecsos@opensuse.org>
- Update to 1.7.1
Bugfixes:
----------------------------
+ Backported PHP8 compatibility fixes;
+ Fixed passkeys upgrade queries;
+ MySQL no active transaction error during upgrades (#4319);
+ $config['disable_main_login_form'] shows blank page (#4317);
+ Unable to clear custom fields (#4313);
Security Fixes:
----------------------------
+ XSS - reflected via HTTP_X_FORWARDED_PORT;
-------------------------------------------------------------------
Thu Oct 31 11:23:41 UTC 2024 - ecsos <ecsos@opensuse.org>
- Update to 1.7.0
New features:
------------
+ php8.3 compatibility;
+ Added support for passkeys / passwordless logins;
+ API:
+ Added API changelog;
Bugfixes:
----------------------------
+ Fixed Use UTF-16LE encoding for XLS sheet names, and UTF-8 as input encoding (#3977);
+ Fixed Update login_form.php for installation inside subdir (#3954);
+ Fixed php8 constructor fix for radius class (#3985);
+ Fixed Force mac address update during status update scan (#3791);
+ Fixed RADIUS authentication fails on 1.6.0 (#3986);
+ Fixed cannot add NAT issue (#3993);
+ Fixed Various Linked Addresses issues (#3275, #4188, #4189, #3274);
+ Fixed Duplicates tool not finding ALL duplicates (#4161);
+ Fixes fetch_favourite_subnets function returns empty array instead of false (#4182);
+ Fixed Dashboard widget widths are not correct percentage (#4176);
+ Fixed remove_offline_addresses.php can't execute (#4173);
+ Fixed Searches do not properly organize results (#3917)
+ Fixed Expand/compress all folders not working properly (#3583);
+ Fixed Bug when adding a user to a group (#4137);
+ Fixed Password validation errors (#4099,#2423);
+ Fixed Ripe import results in jQuery error (#4007);
+ Fixed Ripe import crashes if too many subnets are found (#4180);
+ Fixed Devices with height 0 crash Rack image generation (#4193);
+ Fixed Custom field not working in Routing module (#4174);
+ Fixed Circuit Type showing differently in two windows (#4104);
+ Fixed Vault Item Custom Field not writable (#4058);
+ Fixed Undefined variable when adding nameserver (#4230);
+ Fixed Tag Management Color Picker (#3629);
+ Fixed Arrows for linked addresses do not match between themes (#4216);
* Fixed Captcha and invalid login checks (#3480, #4198);
+ Fixed 2FA TOTP validation issues (#3724);
Enhancements, changes:
----------------------------
+ Added support for redundant PowerDNS databases (#3981);
+ Added option to export data for VLAN,VRF and Devices directly from tools page;
+ Added option to disable OpenStreetMap address geoip lookups;
+ Added $api_stringify_results config.php option for <PHP81 API backwards compatibility;
+ Added support for newly added widgets to be sortable with jQuery (#4711);
+ Added support for using widget parameters; added recent_logins widget (#4184);
Security Fixes:
----------------------------
+ Upgraded jQuery to 3.7.1;
+ Upgraded bootstrap to 3.4.1;
+ Upgraded jQuery-ui to 1.13.3;
+ Cookies set without Secure attribute;
+ Multiple XSS injections (#4145,#4146,#4147,#4148,#4149.#4150,#4151);
+ HTML DOM XSS injection via filenames when uploading (#4160);
+ Escape loaded database strings by default, stored XSS defence;
+ Increase minimum 2FA secret length to 32 (160bit);
+ Disable /app/install/ helper scripts via config.php $disable_installer;
+ LDAP user searches sent without ssl/tls;
-------------------------------------------------------------------
Wed Oct 30 11:42:47 UTC 2024 - ecsos <ecsos@opensuse.org>
- Update to 1.6.1
Bugfixes:
----------------------------
+ Fixed RADIUS authentication fails on 1.6.0 (#3986);
+ Fixed cannot add NAT issue (#3993);
Security Fixes:
----------------------------
+ Multiple XSS injections (#4145,#4146,#4147,#4148,#4149.#4150,#4151);
+ HTML DOM XSS injection via filenames when uploading (#4160);
+ Disable /app/install/ helper scripts via config.php $disable_installer;
- Add /srv/www directories to filelist [bsc#1231027].
-------------------------------------------------------------------
Wed Dec 13 12:20:46 UTC 2023 - ecsos <ecsos@opensuse.org>
- UPdate to 1.6.0
Enhancements, changes:
----------------------------
+ php8.3 compatibility;
+ MySQL 5.5.3+ is now required (support for utf8mb4);
+ Reverse-proxy users should review the new config.php $trust_x_forwarded_headers setting;
Security Fixes:
----------------------------
+ SQL injection in custom field enum/set types;
+ Directory traversal possible in RIPE query;
+ XSS (reflected) in 'bw-calulator-result.php';
+ XSS (reflected) by invalid email address response;
+ XSS (reflected) by /app/tools/subnet-masks/popup.php (#3738);
+ XSS (stored) in user widget settings;
+ XSS and LDAP injection in ad-search-result.php;
+ XSS and LDAP injection in ad-search-group-result.php;
+ Restrict find_full_subnets.php to CLI;
+ Ensure confidentiality of database password;
-------------------------------------------------------------------
Tue Mar 7 06:50:44 UTC 2023 - ecsos <ecsos@opensuse.org>
- Update to 1.5.2
Bugfixes:
----------------------------
Fixed MySQL server has gone away error (#3759);
Security Fixes:
----------------------------
+ SQL injection in custom field enum/set types;
+ Directory traversal possible in RIPE query;
+ XSS (reflected) by /app/tools/subnet-masks/popup.php (#3738);
+ XSS (stored) in user widget settings;
+ XSS and LDAP injection in ad-search-group-result.php;
-------------------------------------------------------------------
Mon Feb 13 10:50:53 UTC 2023 - ecsos <ecsos@opensuse.org>
- Also remove subpackage apache when uninstalling the main package.
-------------------------------------------------------------------
Sat Feb 4 11:36:54 UTC 2023 - ecsos <ecsos@opensuse.org>
- Update to 1.5.1
Security Fixes:
----------------------------
+ XSS (reflected) in 'bw-calulator-result.php';
+ XSS (reflected) by invalid email address response;
+ XSS and LDAP injection in ad-search-result.php;
+ Restrict find_full_subnets.php to CLI;
+ Ensure confidentiality of database password;
-------------------------------------------------------------------
Tue May 3 07:57:52 UTC 2022 - ecsos <ecsos@opensuse.org>
- Update to 1.5.0
New features:
------------
+ Mark subnet as isPool to allocate network and broadcast addresses;
+ Optionally hide section subnet menus;
+ L2 Domains user permissions;
+ Add scanPingType==none option to disable scanning;
+ Custom fields on IP request forms (#2956);
+ Added subnet free space map for each possible subnet mask;
+ Added Vaults (Certificate andf password storing);
+ Added Tools->Duplicate subnets & IP page;
+ Added config.php offline_mode to disable server-side Internet lookups (#3462);
+ Added MAC vendor lookup widget;
Enhancements, changes:
----------------------------
+ php7.4 compatibility;
+ SameSite attribute enabled for site cookies;
+ SAML2
+ php-saml updated to 3.4.1 (#3055);
+ Removal of php-mcrypt dependancy;
+ Drop support for idpcertfingerprint;
+ MAP_SAML_USER and SAML_USERNAME config.php configuration moved to db;
+ php-saml protocol debugging;
+ Support for signed assertions;
+ SAML usernames can be extracted from assertion attributes (#2948);
+ JIT auto-provisioning of accounts (#3389);
+ Selectable mask for number of subnets/hosts in subnet masks;
+ Switch from Google Maps to OpenStreeMap and Nominatim;
Bugfixes:
----------------------------
+ Fixed upgrade queries issues from 1.3.x to 1.4+ (#3130);
+ Fixed boolean printout in footer (#2625);
+ Fixed BGP Admin isn't working (#2631);
+ do not show statistics in dashboard widget for disabled modules (#2602);
+ MySQL 8.0 compatibility. (#2646,#2239,#3036);
+ MariaDB Galera Cluster compatibility (#2498,#3413);
+ Permit non-numeric postcodes for customers (#2393);
+ Bandwidth calculator - 400 Bad Request (#1807,#2648);
+ Table layout not aligned (#2656,#3105,#3113);
+ Improve scanning requirement checks (#1183);
+ Date picker hidden (#2673);
+ PDNS Add/Edit DNS record not working for normal users (#2686);
+ Unable to save settings with link addresses = text custom field (#2702);
+ Kea MAC address display issue (#2704);
+ Returned custom fields to devices table (#2572);
+ Invalid scan agent key warning;
+ Subnet filter issue when IP contains 0 octet. (#2748);
+ Add VLAN button not working (#2741);
+ Incorrect subnet links in /tools/vrf/ view. (#2774);
+ Location data missing in exports. (#2833);
+ Check mysqldump path when exporting database;
+ Current rack position missing when editing a device. (#2545);
+ Permit colon in firewall zone interface names (#2737);
+ Fixed PowerDNS txt SPF editing (#1641);
+ Blank 'MAC' on SNMP-ARP and SNMP-MAC scans (#2911);
+ Incorrect network/broadcast calculation for IPv6 (#2879);
+ Increase allowed email and password lengths (#3021);
+ Wrong unit location for dual-sided racks (#3086);
+ Linked ip_addr shows integer notation (#3100);
+ Invalid scan type () error (#2785);
+ Invalid CSRF cookie editing rack items (#2556);
+ FPing discovery marks all addresses as alive (#2888);
+ Subnet usage calculation updated for nested subnets;
+ SNMP, number of discovered hosts exceed maximum warning (#3279);
+ Exclude IPv6 from Ping and Discovery scans (#3354);
+ Fix for SAML/2FA/login redirections (#3492, #3435, #3517);
+ php_sessions table doesn't exist error when upgrading (#3417);
+ Changelog data too long for column errors (#3376,#3398);
+ RFC 6265 compliant cookies (#3452);
+ Require unique subnets not working as intended (#3529);
+ API:
+ Fixed /user/ calls for SSL with app code (static app code);
+ Address IP field not displayed when using filter_by (#2934);
+ Addresses first_free & Subnets first/last_subnet thread safety (#2960);
Security Fixes:
----------------------------
+ SQL injections processing (#2738);
+ SQL injections processing (#2751);
+ All circuits map, PHP object injection (#2937);
+ Upgraded jQuery to 3.5.1 (#3119);
+ Stored XSS in instructions widgets (#3025, #3360);
+ PHP session ID fixation (#3342);
+ XSS (reflected) in IP calculator (#3351);
+ XSS in pass-change/result.php (#3373);
+ SQL injection in edit-bgp-mapping-search.php;
+ Stored XSS in the Site title parameter;
+ XSS while uploading CVS files;
+ XSS (reflected) in 'find subnets';
+ Incorrect privilege assignments (#3506);
+ XXS (reflected) in ripe-arin-query;
+ XSS (reflected) in import previews;
Translations:
----------------------------
+ Update Traditional Chinese support to version 1.5 (#2658);
+ Update Simplified Chinese Translation (#2725);
+ Italian (it_IT) translation added (#2813);
+ Updated German translation (#2970, #3065);
+ Updated Russian translation (#3028, #3367);
-------------------------------------------------------------------
Sun Apr 24 13:25:22 UTC 2022 - ecsos <ecsos@opensuse.org>
- Update to 1.4.7
Bugfixes:
----------------------------
+ Fix for SAML/2FA/login redirections (#3492, #3435, #3517)
Security Fixes:
----------------------------
+ XXS (reflected) in ripe-arin-query;
+ XSS (reflected) in import previews;
-------------------------------------------------------------------
Sun Mar 27 07:14:51 UTC 2022 - ecsos <ecsos@opensuse.org>
- Update to 1.4.6
Bugfixes:
----------------------------
+ Require unique subnets not working as intended (#3529);
Security Fixes:
----------------------------
+ Incorrect privilege assignments (#3506);
-------------------------------------------------------------------
Tue Jan 18 07:25:34 UTC 2022 - Eric Schirra <ecsos@opensuse.org>
- Update to 1.4.5
Bugfixes:
----------------------------
+ Fix for SAML/2FA login redirection after timeout (#3492);
+ php_sessions table doesn't exist error when upgrading (#3417);
+ RFC 6265 compliant cookies (#3452);
Security Fixes:
----------------------------
+ SQL injection in edit-bgp-mapping-search.php;
+ Stored XSS in the Site title parameter;
+ XSS while uploading CVS files;
+ XSS (reflected) in 'find subnets';
-------------------------------------------------------------------
Mon Aug 9 14:28:30 UTC 2021 - ecsos <ecsos@opensuse.org>
- Update to 1.4.4
Bugfixes:
----------------------------
+ Allow UTF-8 in instruction widgets (#3360);
+ Exclude IPv6 from Ping and Discovery scans (#3354);
Security Fixes:
----------------------------
+ XSS (reflected) in IP calculator (#3351);
+ XSS in pass-change/result.php (#3373);
-------------------------------------------------------------------
Tue Jun 22 15:27:13 UTC 2021 - ecsos <ecsos@opensuse.org>
- Run spec-cleaner.
-------------------------------------------------------------------
Fri Jun 11 14:04:33 UTC 2021 - ecsos <ecsos@opensuse.org>
- Update to 1.4.3
Bugfixes:
----------------------------
+ FPing discovery marks all addresses as alive (#2888);
+ SNMP, number of discovered hosts exceed maximum warning (#3279);
Security Fixes:
----------------------------
+ PHP session ID fixation (#3342);
-------------------------------------------------------------------
Thu Apr 15 15:13:09 UTC 2021 - ecsos <ecsos@opensuse.org>
- Fix tumbleweed build error: broken symbolic link to cs_CZ.UTF8
(Too many levels of symbolic links).
-------------------------------------------------------------------
Mon Feb 8 21:54:09 UTC 2021 - ecsos <ecsos@opensuse.org>
- Update to 4.1.2
Enhancements, changes:
----------------------------
+ SameSite attribute enabled for site cookies;
Bugfixes:
----------------------------
+ Fix generated functions/upgrade_queries.php queries (#3130);
+ Table layout not aligned (#3105,#3113);
+ Invalid scan type () error (#2785);
+ Invalid CSRF cookie editing rack items (#2556);
+ MySQL 8.0 compatibility (#3036);
Security Fixes:
----------------------------
+ Upgraded jQuery to 3.5.1 (#3119);
+ Stored XSS in instructions widgets (#3025);
-------------------------------------------------------------------
Mon Dec 14 12:35:41 UTC 2020 - ecsos <ecsos@opensuse.org>
- Put apache configuration files in separate subpackage.
- Put language files in separate subpackage.
- Put apache macros in apache phpipam.conf file.
-------------------------------------------------------------------
Thu Jul 23 17:50:24 UTC 2020 - ecsos <ecsos@opensuse.org>
- Download new source, because the first source has errors in
db/SCHEMA.sql and functions/upgrade_queries.php.
-------------------------------------------------------------------
Thu Jul 23 06:39:24 UTC 2020 - ecsos <ecsos@opensuse.org>
- Update to 1.4.1
Bugfixes:
----------------------------
+ Fixed upgrade queries issues from 1.3.2 to 1.4;
+ Fixed boolean printout in footer (#2625);
+ Fixed BGP Admin isn't working (#2631);
+ MySQL 8.0 compatibility. (#2646,#2239);
+ Table layout not aligned (#2656);
+ Improve scanning requirement checks (#1183);
+ PDNS Add/Edit DNS record not working for normal users (#2686);
+ Unable to save settings with link addresses = text custom field (#2702);
+ Kea MAC address display issue (#2704);
+ Returned custom fields to devices table (#2572);
+ Invalid scan agent key warning;
+ Subnet filter issue when IP contains 0 octet. (#2748);
+ Add VLAN button not working (#2741);
+ Incorrect subnet links in /tools/vrf/ view. (#2774);
+ Location data missing in exports. (#2833);
+ Check mysqldump path when exporting database;
+ Current rack position missing when editing a device. (#2545);
+ Misc html fixes (#3026,#3081,#3082);
+ API:
+ Fixed /user/ calls for SSL with app code (static app code);
+ Address IP field not displayed when using filter_by (#2934);
+ Addresses first_free & Subnets first/last_subnet thread safety (#2960);
Security Fixes:
----------------------------
+ SQL injections processing (#2738);
+ SQL injections processing (#2751);
+ All circuits map, PHP object injection (#2937);
- Run spec-cleaner.
-------------------------------------------------------------------
Sun Jul 14 09:22:25 UTC 2019 - ecsos@opensuse.org
- Update to 1.4.0
New features:
------------
+ Configurable password policy;
+ Sessions can be now stored in database (#516);
+ Two-factor authentication - otp (Google Authenticator);
+ Customers module (#694);
+ Routing module (BGP) (#2135);
+ Search for free subnet inside whole section;
Enhancements, changes:
----------------------------
+ Circuits enhancements (Virtual Circuits);
+ Dropped support for 32bit systems;
+ PHP 5.4 is now required;
+ Added compressed actions dropdown;
+ SNMP module no longer requires MIB files;
+ Performance enhancements running under Azure/Amazon;
+ Added option to disable user (#1327);
+ Added policy NAT option;
+ Added custom NAT fields;
+ Rack module enhancements (#1325):
+ Dynamic rack sizes;
+ Top-down / Bottom-up racks;
+ Custom rack devices independent of devices (power, patch panel);
+ Customized user permissions for modules:
+ VLAN module;
+ VRF module;
+ PowerDNS module;
+ Circuits module;
+ Customers module;
+ Devices module;
+ Rack module;
+ NAT module;
+ PSTN module;
+ Locations module;
+ API:
+ New API security type - SSL with app code (static app code);
+ New config.php option $api_allow_unsafe to allow non-SSL API queries;
+ Added last access field to api;
+ Add Mac Search for Addresses controller (#2005);
+ New overlapping API call;
+ New global API parameter filter_match = full,partial,regex;
+ Add Tools API customers submodule;
+ Fix filtered results to always return data as array (#2558);
+ Widgets:
+ New user instruction widget (#2383);
Translations:
----------------------------
+ Japanese (ja_JP) translation added;
+ Traditional Chinese (zh_TW) translation added;
Bugfixes:
----------------------------
+ Fix appended " U" in Rack description (#2046);
+ Fix Bandwidth calculator - 400 Bad Request. (#1807);
+ Fix bad DNS reverse zone for /23 subnet (#666);
+ Fix Add missing standard field (#2153);
+ Fix Consistency of VARCHAR Size on 'owner' column across tables (#2136);
+ Fix Subnet details - Filter button missing when compressed range is used (#2353);
+ Fix slow page load times with linked addresses (#2324);
+ Fix " - is required" error when adding IPs with an empty IP filter set (#2334);
+ Fix column 'masterSubnetId' cannot be null error when adding subnets (#1977);
+ Fix logical circuits add/delete errors (#2381);
+ Fix adding new VLANs to an empty L2Domain (#2400);
+ Fix Nested child subnets with "na" permissions visible (#2223);
+ Fix translations containing apostrophes break functionality (#2504);
+ Set requestedAuthnContext to false for SAML (#2457);
+ API:
+ Fix inconsistent API success value returned (#2045);
+ Fix filter_by functionality (#2392);
+ Fix PATCH functionality (#2470, #2481);
Security Fixes:
----------------------------
+ Hide SNMP community (#2197);
+ Hide LDAP/AD/Radius username / password and secret from logs and syslog (#2006);
+ XSS in phpipamredirect cookie (#2338);
+ XSS in print-user.php, CSRF in user-edit.php (#2326);
+ Possible SQL injection in nat/item-add-submit.php (#2344);
+ Fixed possible file inclusion in editing authentication methods;
+ XSS in subnet-scan-telnet.php, CSRF in subnet-scan-execute.php (#2327);
- Rebase phpipam-configpath.patch
-------------------------------------------------------------------
Thu Aug 30 21:07:23 UTC 2018 - ecsos@opensuse.org
- update to 1.3.2
Enhancements, changes:
----------------------------
+ php 7.2 full support;
+ new dark theme;
+ url_rewrite has changed, please use new rewrite scheme (https://phpipam.net/news/new_rewrite_scheme/);
+ Search for matching subnet in all VRFs feature enabled when importing addresses;
+ Added new config option to show custom fields separated from standard fields when editing IP address;
+ Added Required fields subpage to define IP address fields that must be filled in;
+ Performance + bug fixes (#1660, #1657);
+ MasterSubnet dropdown list is dynamically generated via AJAX call;
+ Bandwidth calculator;
+ Support 8U rack sizes. (#1891);
+ API:
+ New last_subnet API calls (#1655);
+ OpenSSL replacement for mcrypt;
Translations:
----------------------------
+ German translation updated to verson 1.3.1;
+ French translations updated. (#1881);
Bugfixes:
----------------------------
+ Fixed uncaught error if vlan number exceeds max permitted (#1455);
+ Fixed Illegal string offset 'dns_name' in pingCheck.php errors (#1461);
+ Performance fix for subnet_dropdown_print_available (#1562);
+ Fixed logo updater for apache v2.4 (#1582);
+ Fixed section names containing spaces are not included in exports (#1566);
+ Allow DNS wildcard records (#1571);
+ Fixed slow mac address vendor decoding for subnet detail view (#1658);
+ Performance fix for detecting overlapping subnets. (#1052, #1426, #1533);
+ Performance fix for slow mac address vendor decoding (#1658);
+ Performance fix for subnet API first_subnet & all_subnets calls;
+ Performance fix for delegating subnet permissions;
+ Convert to UTF-8 encoding on import/export to preserve dialectics (#1659, #1700, #1728);
+ Importing IPs loose Mac Addresses (#1607);
+ Section names containing spaces are not included in exports. (#1566);
+ Bug with section and dashboard (#1593);
+ Fixed improper contents in plain text part of notification e-mails (#1707);
+ Reduce size of email notifications (#1643);
+ PHP 5.3 compatibility fixes (#1594, #1730);
+ PHP 7.2 compatibility fixes (#1683, #1714);
+ Fixed notification e-mails contain a broken link. (#1708);
+ Allow dots to be used in domain names. (#1747);
+ Use multi-byte compatible functions when shortening text. (#1753);
+ Scan subnet reports/selects invalid php path. (#1757);
+ Small code refactoring (#1699);
+ Rack device start position overwritten. (#1545);
+ Sections with folders returns no subnets using API. (#1883);
+ Add custom_ prefix to Prefix controller custom fields. (#1836);
+ Non-Admins missing the button to Add circuit. (#1902);
+ Wrong field name of deviceTypes table when checking device type. (#1910);
+ SNMPv3 improvements;
+ Misc IPv6 fixes;
Security Fixes:
----------------------------
+ Code injection in Name field. (#1667);
+ XSS (reflected) in SubnetID param. (#1702);
+ CSRF enables open mail relay. (#1703);
+ Reflected XSS requiring user interaction on search. (#1705);
+ XSS reflected via CSRF in preview.php. (#1706);
+ Reflected XSS via CSV upload. (#1742);
+ Reflected XSS on 'mac' parameter. (#1903);
-------------------------------------------------------------------
Sat Feb 3 12:13:47 UTC 2018 - ecsos@opensuse.org
- update to 1.3.1
New features:
------------
+ Circuits module (circuits, providers, map, ...) (#731);
Enhancements, changes:
----------------------------
+ Racks:
+ Automatic location assignment when device added to rack (#1230);
+ Rack map showing map of all racks in location;
+ Rack back side;
+ Compact menu layout (per-user setting, showing only icons);
+ Network to network static nat;
+ Selectable logo size (from config.php) (#952);
+ Added default option for permissions propagations (#1351);
+ API:
+ Added Circuits controller;
+ Encrypyted requests can now also be form-encoded (#1191);
+ Introduce mcrypt AES compatibility (#1516);
+ Fixed field ip not displayed when filters applied (#1529);
+ New resolve hostnames option for subnet (#1222):
+ Updates hostnames via pingCheck.php script (if parameter set for subnet);
+ Updates hostnames via resolveIPaddresses.php script (if parameter set for subnet);
+ On-the-fly empty hostname update if resolved (if parameter set for subnet and enabled globally);
+ Added this infor to tools > scanned networks;
+ Added custom_ prefix to custom field names to avoid duplication with custom fields (#1387);
+ Added option to hide IP requests for unauthenticated users on login page (#1394);
+ Performance optimizations for locations and subnet usage calculation;
+ Added user groups custom fields;
Translations:
----------------------------
+ French translation updated to verson 1.3;
+ German translation updated to verson 1.3;
Bugfixes:
----------------------------
+ Fixed RACK images not displayed if not root location (#1204);
+ Fixed import gateway ip (#1240);
+ Fixed JSON_UNESCAPED_UNICODE for PHP 5.3 (#1135, #1245);
+ Rename class Thread to PingThread to avoid naming conflict with pthreads Thread class (#1254);
+ Fixed custom fields integer on subnet (#1266);
+ Fixed Import Ip-adress doesnt update location (#1284);
+ Fixed json_error for logo upload (#1256);
+ Fixed CSRF error when moving orphaned addresses (#1303);
+ Fixed VRF fetching via API by Id;
+ Fixed map issues when quotes are in name/description (#1384);
+ Fixed item not removed from NAT when deleted (#1378);
+ Fixed Error when error_reporting = E_ALL about strict standards when importing IP addresses (#1372);
+ Fixed Apostrophe errors in text custom fields (#1375);
+ Fixed API error when creating address under folder (#1507);
+ Fixed SNMPv3 (#1119);
Security Fixes:
----------------------------
+ Fixed XSS issues (#1403, #1521, #1500);
-------------------------------------------------------------------
Tue Aug 15 12:25:50 UTC 2017 - ecsos@opensuse.org
- change spec to use php7 also
-------------------------------------------------------------------
Tue Jun 20 17:09:10 UTC 2017 - ecsos@opensuse.org
- update to 1.3
New features:
------------
+ Multicast module (RFC1112, RFC2464) with IP to MAC mapping and multicast networks overview;
+ Threshold module for subnets;
+ Racks module (Rack drawing) for devices;
+ Address linking by selected field;
+ Custom logo for site and mails;
+ PSTN number management module;
+ SNMP module:
+ Subnets discovery from route table (all subnets, nested subnets, add new subnet);
+ Hosts discovery scans via ARP check/interface check;
+ Hosts discovery scans via ARP + MAC address check (detects interface);
+ VLAN discovery;
+ VRF discovery;
+ Status update scans via ARP check;
+ NAT module
+ Source / static / destination NAT;
+ Linking subnet to NAT
+ Show bindings under tools and next to IP address / subnet
+ Locations module
+ Map devices / racks / subnets to location;
+ Google maps integration;
+ SAML2 authentication (SSO)
Enhancements, changes:
----------------------------
+ Folders can now contain addresses;
+ API:
- Api v1 removed;
+ If subnet gateway defined gatewayId is returned in subnet details;
+ Automatically added nameservers to subnet results;
+ Added subnet usage result for each subnet in section;
+ Added custom fields for all controllers;
+ New subnets automatically get parent permissions;
+ Added IP calculation to subnet;
+ Changed all not_found when searching objects to 404 and all invalid parameters to 409 (conflict);
+ If new item is created id will be available in response field “id”;
+ New parameter $time_response in api/index.php that will return execution time in field “time";
+ Extensive first_free subnet calls search speedup;
+ POST transaction locking;
+ All first_free and first_address responses are now "data" instead of "ip" and "subnet" for consistency;
+ Subnet splitting now copies over custom fields values by default (user custom_fields=no to revert);
+ Added API option to nest custom_fields to assure correct structure;
+ Added option to show/hide links in api by default for each app;
+ Changed API http response codes;
+ New methods:
+ users:
GET /user/expires/ // returns token expiration date
GET /user/token-expires/ // returns token expiration date
GET /user/users/ // returns all users (rwa app permissions required)
GET /user/admins/ // returns all admin users (rwa app permissions required)
+ addresses:
GET /addresses/first_free/{subnetId}/ // returns first available address (subnetId can be provided with parameters)
GET /addresses/{ip}/{subnetId}/ // returns IP address from subnet
GET /addresses/search/{hostname}/ // Will search addresses by hostname
DELETE /addresses/{ip}/{subnetId}/ // deletes IP address from subnet
POST /addresses/first_free/{subnetId}/ // will search for first free address in subnet, creating new address
+ subnets:
GET /subnets/{id}/addresses/{ip}/ // returns IP address from subnet
GET /subnets/{id}/first_free/ // returns first free address in subnet
GET /subnets/{id}/first_subnet/{mask}/ // returns first available subnets with specified mask
GET /subnets/{id}/all_subnets/{mask}/ // returns all available subnets with specified mask
POST /subnets/{id}/first_subnet/{mask}/ // creates first free subnet under master with specified mask
DELETE /subnets/{id}/permissions/ // removes permissions
PATCH /subnets/{id}/permissions/ // sets subnet permissions (?grouname1=ro&groupname2=3&43=1)
+ New controller Prefix;
+ New controller Devices;
+ New subcontrollers:
+ /tools/nat/
+ /tools/racks/
+ /tools/locations/
+ Widgets:
+ New threshold widget;
+ New inactive hosts widget;
+ New Locations widget;
+ PowerDNS:
+ Default domain for PTR records (if hostname is not set);
+ When removing IP address additional option that removes all associated PDNS records (ip and hostname);
+ Permit normal users to manage VLANs / VRFs;
+ Inactive (offline) hosts tools page;
+ MAC address normalization;
+ jQuery tables;
+ Permission delegation now only delegates changes not whole permission set;
+ Users with RWA permission can manage IP requests and receive IP request mails + changelog mails for subnet;
+ IPv4 subnet link to IPv6 for dual-stack info;
+ Removed inacessible DNS servers if timeout to prevent page load timeouts;
+ Added option to only show supernets to limit pageload [#844 #816 #736];
+ Added last scan info to subnet details;
+ Added option to update address tags when address state change occurs (pingCheck) [#840];
+ Added mantaneance mode;
+ Added inactive addresses removal script;
+ Subnet overlapping now checked also inside folders to prevernt duplicates;
+ Subnet overlapping now checked also between sections if VRF defined;
+ Added new settings directive that requires unique subnets accross sections;
+ Added index check in verify database to detect and fix possible missing DB indexes;
+ Added MAC address vendor display option;
Bugfixes:
----------------------------
+ PowerDNS regenerate PTR records now only updates current subnet (before whole zone);
+ Fixed visual bug on 32-bit systems;
+ Normal users with RWA permissions can scan subnets;
+ Changed default timestamp from 0000-00-00 00:00:00 to 1970-01-01 00:00:01 to avoid SQL install errors if strict mode;
+ Fixed https access on non-standard ports;
+ Extended username to 255 chars for LDAP logins;
+ Fixed search export invalid encoding and data may have been lost XLS file error;
+ Fixed invalid character encoding in API responses;
+ PowerDNS records cannot be created on slave zone;
+ Fixed subnet resizing bug if subnet contained slaves;
+ Added separate CSRF cookies for each address/subnet/pstn object;
+ Deleted items are now shown and searchable from changelog;
- rebase patch phpipam-configpath.patch
-------------------------------------------------------------------
Mon Feb 22 22:05:23 UTC 2016 - ecsos@opensuse.org
- update to 1.2.1
Enhancements:
----------------------------
+ French translation updated to verson 1.2;
+ German translation updated to verson 1.2;
Bugfixes:
--------
+ Fixed upgrade bug that selected invalid auth method for
AD/LDAP users;
+ Fixed LDAP problems after 1.2 upgrade;
+ Fixed PowerDNS Slave with multiple masters delimiter error;
+ Fixed owerDNS PTR records not being updated automatically;
+ Fixed csrf cookie bug when editing folder;
+ Fixed csrf cookie bug when truncationg subnet;
+ Fixed invalid code for API crypt method;
+ Fixed strange headings font display in Firefox;
+ Fixed invalid proxy settings in config.dist.php;
+ Fixed search same hostnames in db link form address table;
+ Fixed import subnet bug caused by fw object;
+ Fixed Subnet Import (Preview button > no action);
Security Fixes:
----------------------------
+ Fixed security issues introduced in 1.2;
-------------------------------------------------------------------
Sat Feb 6 00:14:11 UTC 2016 - ecsos@opensuse.org
- update to 1.2
New features:
------------
+ Added multiple simultaneous authentication methods
(Apache, AD, LDAP, Radius, NetIQ);
+ Added fping scanning support;
+ Added selectable scanning type (ping/pear/fping);
+ Added L2 domains;
+ Added option to define address as default GW for subnet;
+ Added customizable address tags with compressed option;
+ Added temporary subnet / address shares;
+ Added quick subnet masks;
+ Added nameserver sets per subnets (jonashauge);
+ Added optional syslog as log location;
+ REST API:
+ documentation: http://phpipam.net/api-documentation/
+ API v2, old v1 support added
+ Complete rewrite of all API calls;
+ New security models (crypt, ssl, none);
+ Support for custom fields;
+ JSON / XML output
+ Full read/write controllers (Sections, Subnets/Folders,
Addresses, Vlans, Vrfs);
+ PowerDNS integration:
+ Automatic reverse records creation (PTR) - IPv4 and IPv6;
+ Automatic SOA, NS record creation;
+ DNS domain management;
+ Added Scan agents to scan subnets remotely;
+ Added firewall zone mappings and module;
+ Added per-subnet DNS resolvers;
+ Added option to mark subnet as utilized (full);
Enhancements:
----------------------------
+ All tables are now InnoDB by default;
+ Upgraded jQuery to 2.1.3;
+ All functions rewritten to classes/methods;
+ Parametized all SQL queries, moved from MySQLI to PDO;
+ Added VLAN/VRF to search and to search results export;
+ Redesigned admin and tools menu;
+ Added scanned/discovered subnets to tools for faster overview;
+ Per-user display settings;
+ New widget - tools shortcuts;
+ New widget - IP calculator;
+ New widget - request IP address;
+ Clickable links for subnet fields;
+ Custom VRF fields;
+ Subnets can be now linked to devices;
+ Import/export enhancements;
+ Fast user switching for admins to impersonate user;
+ Opened folders and subnets in tree menu are saved on page
reload;
+ RWA users can now process IP requests;
+ Added auto-suggest for possible slave subnets;
+ SSL option for MySQL connections;
+ Enum custom field support;
+ Added password reset script;
+ Set sections to display VRF in;
Security Fixes:
----------------------------
+ Parametized all MySQL querries;
+ Fixed plainpass being logged on user update;
+ Fixed XSS exploit on /error/;
+ Added CSRF protection to forms;
Translations:
----------------------------
+ Added Czech translation;
Bugfixes:
----------------------------
+ Fixed bug with SSL/TLS smtp servers;
+ Fixed visual subnet display issues on 32bit systems;
+ Fixed IPv6 split subnets bug;
+ Fixed /31 ping bug scanning out of boundaries;
+ Fixed nested broadcast not counted to used percentage;
+ Fixed invalid redirect after timeout;
+ Fixed discovery script index overridden;
+ Fixed dashboard graphs links to subnets;
+ Fixed Invalid ID on subnet scan of large subnets;
-------------------------------------------------------------------
Mon Apr 20 21:57:43 UTC 2015 - ecsos@opensuse.org
- clean spec file
- move code from .htaccess files into phpipam.conf
-------------------------------------------------------------------
Sat Apr 18 09:44:00 UTC 2015 - ecsos@opensuse.org
- update to 1.1.010
+ Fixed login fails with LDAP when escape characters are in
password;
+ Fixed login not working with spaces in password for AD login;
+ Fixed Ivalid action when adding vlans from subnet popup menu;
+ Fixed custom fields not appearing properly on IP request
editing;
+ Fixed Invalid ID error for IP address details on sorting;
+ Fixed warnings if no VLAN search results are present;
+ Fixed test mail not sending;
+ Fixed unable to login if $phpsessname not defined;
+ Fixed unable to login after upgrade;
-------------------------------------------------------------------
Wed Mar 12 16:31:17 UTC 2015 - ecsos@opensuse.org
- initial version 1.1
