Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
home:ecsos:server
phpipam
phpipam.changes
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File phpipam.changes of Package phpipam
------------------------------------------------------------------- Wed Dec 13 12:20:46 UTC 2023 - ecsos <ecsos@opensuse.org> - UPdate to 1.6.0 Enhancements, changes: ---------------------------- + php8.3 compatibility; + MySQL 5.5.3+ is now required (support for utf8mb4); + Reverse-proxy users should review the new config.php $trust_x_forwarded_headers setting; Security Fixes: ---------------------------- + SQL injection in custom field enum/set types; + Directory traversal possible in RIPE query; + XSS (reflected) in 'bw-calulator-result.php'; + XSS (reflected) by invalid email address response; + XSS (reflected) by /app/tools/subnet-masks/popup.php (#3738); + XSS (stored) in user widget settings; + XSS and LDAP injection in ad-search-result.php; + XSS and LDAP injection in ad-search-group-result.php; + Restrict find_full_subnets.php to CLI; + Ensure confidentiality of database password; ------------------------------------------------------------------- Tue Mar 7 06:50:44 UTC 2023 - ecsos <ecsos@opensuse.org> - Update to 1.5.2 Bugfixes: ---------------------------- Fixed MySQL server has gone away error (#3759); Security Fixes: ---------------------------- + SQL injection in custom field enum/set types; + Directory traversal possible in RIPE query; + XSS (reflected) by /app/tools/subnet-masks/popup.php (#3738); + XSS (stored) in user widget settings; + XSS and LDAP injection in ad-search-group-result.php; ------------------------------------------------------------------- Mon Feb 13 10:50:53 UTC 2023 - ecsos <ecsos@opensuse.org> - Also remove subpackage apache when uninstalling the main package. ------------------------------------------------------------------- Sat Feb 4 11:36:54 UTC 2023 - ecsos <ecsos@opensuse.org> - Update to 1.5.1 Security Fixes: ---------------------------- + XSS (reflected) in 'bw-calulator-result.php'; + XSS (reflected) by invalid email address response; + XSS and LDAP injection in ad-search-result.php; + Restrict find_full_subnets.php to CLI; + Ensure confidentiality of database password; ------------------------------------------------------------------- Tue May 3 07:57:52 UTC 2022 - ecsos <ecsos@opensuse.org> - Update to 1.5.0 New features: ------------ + Mark subnet as isPool to allocate network and broadcast addresses; + Optionally hide section subnet menus; + L2 Domains user permissions; + Add scanPingType==none option to disable scanning; + Custom fields on IP request forms (#2956); + Added subnet free space map for each possible subnet mask; + Added Vaults (Certificate andf password storing); + Added Tools->Duplicate subnets & IP page; + Added config.php offline_mode to disable server-side Internet lookups (#3462); + Added MAC vendor lookup widget; Enhancements, changes: ---------------------------- + php7.4 compatibility; + SameSite attribute enabled for site cookies; + SAML2 + php-saml updated to 3.4.1 (#3055); + Removal of php-mcrypt dependancy; + Drop support for idpcertfingerprint; + MAP_SAML_USER and SAML_USERNAME config.php configuration moved to db; + php-saml protocol debugging; + Support for signed assertions; + SAML usernames can be extracted from assertion attributes (#2948); + JIT auto-provisioning of accounts (#3389); + Selectable mask for number of subnets/hosts in subnet masks; + Switch from Google Maps to OpenStreeMap and Nominatim; Bugfixes: ---------------------------- + Fixed upgrade queries issues from 1.3.x to 1.4+ (#3130); + Fixed boolean printout in footer (#2625); + Fixed BGP Admin isn't working (#2631); + do not show statistics in dashboard widget for disabled modules (#2602); + MySQL 8.0 compatibility. (#2646,#2239,#3036); + MariaDB Galera Cluster compatibility (#2498,#3413); + Permit non-numeric postcodes for customers (#2393); + Bandwidth calculator - 400 Bad Request (#1807,#2648); + Table layout not aligned (#2656,#3105,#3113); + Improve scanning requirement checks (#1183); + Date picker hidden (#2673); + PDNS Add/Edit DNS record not working for normal users (#2686); + Unable to save settings with link addresses = text custom field (#2702); + Kea MAC address display issue (#2704); + Returned custom fields to devices table (#2572); + Invalid scan agent key warning; + Subnet filter issue when IP contains 0 octet. (#2748); + Add VLAN button not working (#2741); + Incorrect subnet links in /tools/vrf/ view. (#2774); + Location data missing in exports. (#2833); + Check mysqldump path when exporting database; + Current rack position missing when editing a device. (#2545); + Permit colon in firewall zone interface names (#2737); + Fixed PowerDNS txt SPF editing (#1641); + Blank 'MAC' on SNMP-ARP and SNMP-MAC scans (#2911); + Incorrect network/broadcast calculation for IPv6 (#2879); + Increase allowed email and password lengths (#3021); + Wrong unit location for dual-sided racks (#3086); + Linked ip_addr shows integer notation (#3100); + Invalid scan type () error (#2785); + Invalid CSRF cookie editing rack items (#2556); + FPing discovery marks all addresses as alive (#2888); + Subnet usage calculation updated for nested subnets; + SNMP, number of discovered hosts exceed maximum warning (#3279); + Exclude IPv6 from Ping and Discovery scans (#3354); + Fix for SAML/2FA/login redirections (#3492, #3435, #3517); + php_sessions table doesn't exist error when upgrading (#3417); + Changelog data too long for column errors (#3376,#3398); + RFC 6265 compliant cookies (#3452); + Require unique subnets not working as intended (#3529); + API: + Fixed /user/ calls for SSL with app code (static app code); + Address IP field not displayed when using filter_by (#2934); + Addresses first_free & Subnets first/last_subnet thread safety (#2960); Security Fixes: ---------------------------- + SQL injections processing (#2738); + SQL injections processing (#2751); + All circuits map, PHP object injection (#2937); + Upgraded jQuery to 3.5.1 (#3119); + Stored XSS in instructions widgets (#3025, #3360); + PHP session ID fixation (#3342); + XSS (reflected) in IP calculator (#3351); + XSS in pass-change/result.php (#3373); + SQL injection in edit-bgp-mapping-search.php; + Stored XSS in the Site title parameter; + XSS while uploading CVS files; + XSS (reflected) in 'find subnets'; + Incorrect privilege assignments (#3506); + XXS (reflected) in ripe-arin-query; + XSS (reflected) in import previews; Translations: ---------------------------- + Update Traditional Chinese support to version 1.5 (#2658); + Update Simplified Chinese Translation (#2725); + Italian (it_IT) translation added (#2813); + Updated German translation (#2970, #3065); + Updated Russian translation (#3028, #3367); ------------------------------------------------------------------- Sun Apr 24 13:25:22 UTC 2022 - ecsos <ecsos@opensuse.org> - Update to 1.4.7 Bugfixes: ---------------------------- + Fix for SAML/2FA/login redirections (#3492, #3435, #3517) Security Fixes: ---------------------------- + XXS (reflected) in ripe-arin-query; + XSS (reflected) in import previews; ------------------------------------------------------------------- Sun Mar 27 07:14:51 UTC 2022 - ecsos <ecsos@opensuse.org> - Update to 1.4.6 Bugfixes: ---------------------------- + Require unique subnets not working as intended (#3529); Security Fixes: ---------------------------- + Incorrect privilege assignments (#3506); ------------------------------------------------------------------- Tue Jan 18 07:25:34 UTC 2022 - Eric Schirra <ecsos@opensuse.org> - Update to 1.4.5 Bugfixes: ---------------------------- + Fix for SAML/2FA login redirection after timeout (#3492); + php_sessions table doesn't exist error when upgrading (#3417); + RFC 6265 compliant cookies (#3452); Security Fixes: ---------------------------- + SQL injection in edit-bgp-mapping-search.php; + Stored XSS in the Site title parameter; + XSS while uploading CVS files; + XSS (reflected) in 'find subnets'; ------------------------------------------------------------------- Mon Aug 9 14:28:30 UTC 2021 - ecsos <ecsos@opensuse.org> - Update to 1.4.4 Bugfixes: ---------------------------- + Allow UTF-8 in instruction widgets (#3360); + Exclude IPv6 from Ping and Discovery scans (#3354); Security Fixes: ---------------------------- + XSS (reflected) in IP calculator (#3351); + XSS in pass-change/result.php (#3373); ------------------------------------------------------------------- Tue Jun 22 15:27:13 UTC 2021 - ecsos <ecsos@opensuse.org> - Run spec-cleaner. ------------------------------------------------------------------- Fri Jun 11 14:04:33 UTC 2021 - ecsos <ecsos@opensuse.org> - Update to 1.4.3 Bugfixes: ---------------------------- + FPing discovery marks all addresses as alive (#2888); + SNMP, number of discovered hosts exceed maximum warning (#3279); Security Fixes: ---------------------------- + PHP session ID fixation (#3342); ------------------------------------------------------------------- Thu Apr 15 15:13:09 UTC 2021 - ecsos <ecsos@opensuse.org> - Fix tumbleweed build error: broken symbolic link to cs_CZ.UTF8 (Too many levels of symbolic links). ------------------------------------------------------------------- Mon Feb 8 21:54:09 UTC 2021 - ecsos <ecsos@opensuse.org> - Update to 4.1.2 Enhancements, changes: ---------------------------- + SameSite attribute enabled for site cookies; Bugfixes: ---------------------------- + Fix generated functions/upgrade_queries.php queries (#3130); + Table layout not aligned (#3105,#3113); + Invalid scan type () error (#2785); + Invalid CSRF cookie editing rack items (#2556); + MySQL 8.0 compatibility (#3036); Security Fixes: ---------------------------- + Upgraded jQuery to 3.5.1 (#3119); + Stored XSS in instructions widgets (#3025); ------------------------------------------------------------------- Mon Dec 14 12:35:41 UTC 2020 - ecsos <ecsos@opensuse.org> - Put apache configuration files in separate subpackage. - Put language files in separate subpackage. - Put apache macros in apache phpipam.conf file. ------------------------------------------------------------------- Thu Jul 23 17:50:24 UTC 2020 - ecsos <ecsos@opensuse.org> - Download new source, because the first source has errors in db/SCHEMA.sql and functions/upgrade_queries.php. ------------------------------------------------------------------- Thu Jul 23 06:39:24 UTC 2020 - ecsos <ecsos@opensuse.org> - Update to 1.4.1 Bugfixes: ---------------------------- + Fixed upgrade queries issues from 1.3.2 to 1.4; + Fixed boolean printout in footer (#2625); + Fixed BGP Admin isn't working (#2631); + MySQL 8.0 compatibility. (#2646,#2239); + Table layout not aligned (#2656); + Improve scanning requirement checks (#1183); + PDNS Add/Edit DNS record not working for normal users (#2686); + Unable to save settings with link addresses = text custom field (#2702); + Kea MAC address display issue (#2704); + Returned custom fields to devices table (#2572); + Invalid scan agent key warning; + Subnet filter issue when IP contains 0 octet. (#2748); + Add VLAN button not working (#2741); + Incorrect subnet links in /tools/vrf/ view. (#2774); + Location data missing in exports. (#2833); + Check mysqldump path when exporting database; + Current rack position missing when editing a device. (#2545); + Misc html fixes (#3026,#3081,#3082); + API: + Fixed /user/ calls for SSL with app code (static app code); + Address IP field not displayed when using filter_by (#2934); + Addresses first_free & Subnets first/last_subnet thread safety (#2960); Security Fixes: ---------------------------- + SQL injections processing (#2738); + SQL injections processing (#2751); + All circuits map, PHP object injection (#2937); - Run spec-cleaner. ------------------------------------------------------------------- Sun Jul 14 09:22:25 UTC 2019 - ecsos@opensuse.org - Update to 1.4.0 New features: ------------ + Configurable password policy; + Sessions can be now stored in database (#516); + Two-factor authentication - otp (Google Authenticator); + Customers module (#694); + Routing module (BGP) (#2135); + Search for free subnet inside whole section; Enhancements, changes: ---------------------------- + Circuits enhancements (Virtual Circuits); + Dropped support for 32bit systems; + PHP 5.4 is now required; + Added compressed actions dropdown; + SNMP module no longer requires MIB files; + Performance enhancements running under Azure/Amazon; + Added option to disable user (#1327); + Added policy NAT option; + Added custom NAT fields; + Rack module enhancements (#1325): + Dynamic rack sizes; + Top-down / Bottom-up racks; + Custom rack devices independent of devices (power, patch panel); + Customized user permissions for modules: + VLAN module; + VRF module; + PowerDNS module; + Circuits module; + Customers module; + Devices module; + Rack module; + NAT module; + PSTN module; + Locations module; + API: + New API security type - SSL with app code (static app code); + New config.php option $api_allow_unsafe to allow non-SSL API queries; + Added last access field to api; + Add Mac Search for Addresses controller (#2005); + New overlapping API call; + New global API parameter filter_match = full,partial,regex; + Add Tools API customers submodule; + Fix filtered results to always return data as array (#2558); + Widgets: + New user instruction widget (#2383); Translations: ---------------------------- + Japanese (ja_JP) translation added; + Traditional Chinese (zh_TW) translation added; Bugfixes: ---------------------------- + Fix appended " U" in Rack description (#2046); + Fix Bandwidth calculator - 400 Bad Request. (#1807); + Fix bad DNS reverse zone for /23 subnet (#666); + Fix Add missing standard field (#2153); + Fix Consistency of VARCHAR Size on 'owner' column across tables (#2136); + Fix Subnet details - Filter button missing when compressed range is used (#2353); + Fix slow page load times with linked addresses (#2324); + Fix " - is required" error when adding IPs with an empty IP filter set (#2334); + Fix column 'masterSubnetId' cannot be null error when adding subnets (#1977); + Fix logical circuits add/delete errors (#2381); + Fix adding new VLANs to an empty L2Domain (#2400); + Fix Nested child subnets with "na" permissions visible (#2223); + Fix translations containing apostrophes break functionality (#2504); + Set requestedAuthnContext to false for SAML (#2457); + API: + Fix inconsistent API success value returned (#2045); + Fix filter_by functionality (#2392); + Fix PATCH functionality (#2470, #2481); Security Fixes: ---------------------------- + Hide SNMP community (#2197); + Hide LDAP/AD/Radius username / password and secret from logs and syslog (#2006); + XSS in phpipamredirect cookie (#2338); + XSS in print-user.php, CSRF in user-edit.php (#2326); + Possible SQL injection in nat/item-add-submit.php (#2344); + Fixed possible file inclusion in editing authentication methods; + XSS in subnet-scan-telnet.php, CSRF in subnet-scan-execute.php (#2327); - Rebase phpipam-configpath.patch ------------------------------------------------------------------- Thu Aug 30 21:07:23 UTC 2018 - ecsos@opensuse.org - update to 1.3.2 Enhancements, changes: ---------------------------- + php 7.2 full support; + new dark theme; + url_rewrite has changed, please use new rewrite scheme (https://phpipam.net/news/new_rewrite_scheme/); + Search for matching subnet in all VRFs feature enabled when importing addresses; + Added new config option to show custom fields separated from standard fields when editing IP address; + Added Required fields subpage to define IP address fields that must be filled in; + Performance + bug fixes (#1660, #1657); + MasterSubnet dropdown list is dynamically generated via AJAX call; + Bandwidth calculator; + Support 8U rack sizes. (#1891); + API: + New last_subnet API calls (#1655); + OpenSSL replacement for mcrypt; Translations: ---------------------------- + German translation updated to verson 1.3.1; + French translations updated. (#1881); Bugfixes: ---------------------------- + Fixed uncaught error if vlan number exceeds max permitted (#1455); + Fixed Illegal string offset 'dns_name' in pingCheck.php errors (#1461); + Performance fix for subnet_dropdown_print_available (#1562); + Fixed logo updater for apache v2.4 (#1582); + Fixed section names containing spaces are not included in exports (#1566); + Allow DNS wildcard records (#1571); + Fixed slow mac address vendor decoding for subnet detail view (#1658); + Performance fix for detecting overlapping subnets. (#1052, #1426, #1533); + Performance fix for slow mac address vendor decoding (#1658); + Performance fix for subnet API first_subnet & all_subnets calls; + Performance fix for delegating subnet permissions; + Convert to UTF-8 encoding on import/export to preserve dialectics (#1659, #1700, #1728); + Importing IPs loose Mac Addresses (#1607); + Section names containing spaces are not included in exports. (#1566); + Bug with section and dashboard (#1593); + Fixed improper contents in plain text part of notification e-mails (#1707); + Reduce size of email notifications (#1643); + PHP 5.3 compatibility fixes (#1594, #1730); + PHP 7.2 compatibility fixes (#1683, #1714); + Fixed notification e-mails contain a broken link. (#1708); + Allow dots to be used in domain names. (#1747); + Use multi-byte compatible functions when shortening text. (#1753); + Scan subnet reports/selects invalid php path. (#1757); + Small code refactoring (#1699); + Rack device start position overwritten. (#1545); + Sections with folders returns no subnets using API. (#1883); + Add custom_ prefix to Prefix controller custom fields. (#1836); + Non-Admins missing the button to Add circuit. (#1902); + Wrong field name of deviceTypes table when checking device type. (#1910); + SNMPv3 improvements; + Misc IPv6 fixes; Security Fixes: ---------------------------- + Code injection in Name field. (#1667); + XSS (reflected) in SubnetID param. (#1702); + CSRF enables open mail relay. (#1703); + Reflected XSS requiring user interaction on search. (#1705); + XSS reflected via CSRF in preview.php. (#1706); + Reflected XSS via CSV upload. (#1742); + Reflected XSS on 'mac' parameter. (#1903); ------------------------------------------------------------------- Sat Feb 3 12:13:47 UTC 2018 - ecsos@opensuse.org - update to 1.3.1 New features: ------------ + Circuits module (circuits, providers, map, ...) (#731); Enhancements, changes: ---------------------------- + Racks: + Automatic location assignment when device added to rack (#1230); + Rack map showing map of all racks in location; + Rack back side; + Compact menu layout (per-user setting, showing only icons); + Network to network static nat; + Selectable logo size (from config.php) (#952); + Added default option for permissions propagations (#1351); + API: + Added Circuits controller; + Encrypyted requests can now also be form-encoded (#1191); + Introduce mcrypt AES compatibility (#1516); + Fixed field ip not displayed when filters applied (#1529); + New resolve hostnames option for subnet (#1222): + Updates hostnames via pingCheck.php script (if parameter set for subnet); + Updates hostnames via resolveIPaddresses.php script (if parameter set for subnet); + On-the-fly empty hostname update if resolved (if parameter set for subnet and enabled globally); + Added this infor to tools > scanned networks; + Added custom_ prefix to custom field names to avoid duplication with custom fields (#1387); + Added option to hide IP requests for unauthenticated users on login page (#1394); + Performance optimizations for locations and subnet usage calculation; + Added user groups custom fields; Translations: ---------------------------- + French translation updated to verson 1.3; + German translation updated to verson 1.3; Bugfixes: ---------------------------- + Fixed RACK images not displayed if not root location (#1204); + Fixed import gateway ip (#1240); + Fixed JSON_UNESCAPED_UNICODE for PHP 5.3 (#1135, #1245); + Rename class Thread to PingThread to avoid naming conflict with pthreads Thread class (#1254); + Fixed custom fields integer on subnet (#1266); + Fixed Import Ip-adress doesnt update location (#1284); + Fixed json_error for logo upload (#1256); + Fixed CSRF error when moving orphaned addresses (#1303); + Fixed VRF fetching via API by Id; + Fixed map issues when quotes are in name/description (#1384); + Fixed item not removed from NAT when deleted (#1378); + Fixed Error when error_reporting = E_ALL about strict standards when importing IP addresses (#1372); + Fixed Apostrophe errors in text custom fields (#1375); + Fixed API error when creating address under folder (#1507); + Fixed SNMPv3 (#1119); Security Fixes: ---------------------------- + Fixed XSS issues (#1403, #1521, #1500); ------------------------------------------------------------------- Tue Aug 15 12:25:50 UTC 2017 - ecsos@opensuse.org - change spec to use php7 also ------------------------------------------------------------------- Tue Jun 20 17:09:10 UTC 2017 - ecsos@opensuse.org - update to 1.3 New features: ------------ + Multicast module (RFC1112, RFC2464) with IP to MAC mapping and multicast networks overview; + Threshold module for subnets; + Racks module (Rack drawing) for devices; + Address linking by selected field; + Custom logo for site and mails; + PSTN number management module; + SNMP module: + Subnets discovery from route table (all subnets, nested subnets, add new subnet); + Hosts discovery scans via ARP check/interface check; + Hosts discovery scans via ARP + MAC address check (detects interface); + VLAN discovery; + VRF discovery; + Status update scans via ARP check; + NAT module + Source / static / destination NAT; + Linking subnet to NAT + Show bindings under tools and next to IP address / subnet + Locations module + Map devices / racks / subnets to location; + Google maps integration; + SAML2 authentication (SSO) Enhancements, changes: ---------------------------- + Folders can now contain addresses; + API: - Api v1 removed; + If subnet gateway defined gatewayId is returned in subnet details; + Automatically added nameservers to subnet results; + Added subnet usage result for each subnet in section; + Added custom fields for all controllers; + New subnets automatically get parent permissions; + Added IP calculation to subnet; + Changed all not_found when searching objects to 404 and all invalid parameters to 409 (conflict); + If new item is created id will be available in response field “id”; + New parameter $time_response in api/index.php that will return execution time in field “time"; + Extensive first_free subnet calls search speedup; + POST transaction locking; + All first_free and first_address responses are now "data" instead of "ip" and "subnet" for consistency; + Subnet splitting now copies over custom fields values by default (user custom_fields=no to revert); + Added API option to nest custom_fields to assure correct structure; + Added option to show/hide links in api by default for each app; + Changed API http response codes; + New methods: + users: GET /user/expires/ // returns token expiration date GET /user/token-expires/ // returns token expiration date GET /user/users/ // returns all users (rwa app permissions required) GET /user/admins/ // returns all admin users (rwa app permissions required) + addresses: GET /addresses/first_free/{subnetId}/ // returns first available address (subnetId can be provided with parameters) GET /addresses/{ip}/{subnetId}/ // returns IP address from subnet GET /addresses/search/{hostname}/ // Will search addresses by hostname DELETE /addresses/{ip}/{subnetId}/ // deletes IP address from subnet POST /addresses/first_free/{subnetId}/ // will search for first free address in subnet, creating new address + subnets: GET /subnets/{id}/addresses/{ip}/ // returns IP address from subnet GET /subnets/{id}/first_free/ // returns first free address in subnet GET /subnets/{id}/first_subnet/{mask}/ // returns first available subnets with specified mask GET /subnets/{id}/all_subnets/{mask}/ // returns all available subnets with specified mask POST /subnets/{id}/first_subnet/{mask}/ // creates first free subnet under master with specified mask DELETE /subnets/{id}/permissions/ // removes permissions PATCH /subnets/{id}/permissions/ // sets subnet permissions (?grouname1=ro&groupname2=3&43=1) + New controller Prefix; + New controller Devices; + New subcontrollers: + /tools/nat/ + /tools/racks/ + /tools/locations/ + Widgets: + New threshold widget; + New inactive hosts widget; + New Locations widget; + PowerDNS: + Default domain for PTR records (if hostname is not set); + When removing IP address additional option that removes all associated PDNS records (ip and hostname); + Permit normal users to manage VLANs / VRFs; + Inactive (offline) hosts tools page; + MAC address normalization; + jQuery tables; + Permission delegation now only delegates changes not whole permission set; + Users with RWA permission can manage IP requests and receive IP request mails + changelog mails for subnet; + IPv4 subnet link to IPv6 for dual-stack info; + Removed inacessible DNS servers if timeout to prevent page load timeouts; + Added option to only show supernets to limit pageload [#844 #816 #736]; + Added last scan info to subnet details; + Added option to update address tags when address state change occurs (pingCheck) [#840]; + Added mantaneance mode; + Added inactive addresses removal script; + Subnet overlapping now checked also inside folders to prevernt duplicates; + Subnet overlapping now checked also between sections if VRF defined; + Added new settings directive that requires unique subnets accross sections; + Added index check in verify database to detect and fix possible missing DB indexes; + Added MAC address vendor display option; Bugfixes: ---------------------------- + PowerDNS regenerate PTR records now only updates current subnet (before whole zone); + Fixed visual bug on 32-bit systems; + Normal users with RWA permissions can scan subnets; + Changed default timestamp from 0000-00-00 00:00:00 to 1970-01-01 00:00:01 to avoid SQL install errors if strict mode; + Fixed https access on non-standard ports; + Extended username to 255 chars for LDAP logins; + Fixed search export invalid encoding and data may have been lost XLS file error; + Fixed invalid character encoding in API responses; + PowerDNS records cannot be created on slave zone; + Fixed subnet resizing bug if subnet contained slaves; + Added separate CSRF cookies for each address/subnet/pstn object; + Deleted items are now shown and searchable from changelog; - rebase patch phpipam-configpath.patch ------------------------------------------------------------------- Mon Feb 22 22:05:23 UTC 2016 - ecsos@opensuse.org - update to 1.2.1 Enhancements: ---------------------------- + French translation updated to verson 1.2; + German translation updated to verson 1.2; Bugfixes: -------- + Fixed upgrade bug that selected invalid auth method for AD/LDAP users; + Fixed LDAP problems after 1.2 upgrade; + Fixed PowerDNS Slave with multiple masters delimiter error; + Fixed owerDNS PTR records not being updated automatically; + Fixed csrf cookie bug when editing folder; + Fixed csrf cookie bug when truncationg subnet; + Fixed invalid code for API crypt method; + Fixed strange headings font display in Firefox; + Fixed invalid proxy settings in config.dist.php; + Fixed search same hostnames in db link form address table; + Fixed import subnet bug caused by fw object; + Fixed Subnet Import (Preview button > no action); Security Fixes: ---------------------------- + Fixed security issues introduced in 1.2; ------------------------------------------------------------------- Sat Feb 6 00:14:11 UTC 2016 - ecsos@opensuse.org - update to 1.2 New features: ------------ + Added multiple simultaneous authentication methods (Apache, AD, LDAP, Radius, NetIQ); + Added fping scanning support; + Added selectable scanning type (ping/pear/fping); + Added L2 domains; + Added option to define address as default GW for subnet; + Added customizable address tags with compressed option; + Added temporary subnet / address shares; + Added quick subnet masks; + Added nameserver sets per subnets (jonashauge); + Added optional syslog as log location; + REST API: + documentation: http://phpipam.net/api-documentation/ + API v2, old v1 support added + Complete rewrite of all API calls; + New security models (crypt, ssl, none); + Support for custom fields; + JSON / XML output + Full read/write controllers (Sections, Subnets/Folders, Addresses, Vlans, Vrfs); + PowerDNS integration: + Automatic reverse records creation (PTR) - IPv4 and IPv6; + Automatic SOA, NS record creation; + DNS domain management; + Added Scan agents to scan subnets remotely; + Added firewall zone mappings and module; + Added per-subnet DNS resolvers; + Added option to mark subnet as utilized (full); Enhancements: ---------------------------- + All tables are now InnoDB by default; + Upgraded jQuery to 2.1.3; + All functions rewritten to classes/methods; + Parametized all SQL queries, moved from MySQLI to PDO; + Added VLAN/VRF to search and to search results export; + Redesigned admin and tools menu; + Added scanned/discovered subnets to tools for faster overview; + Per-user display settings; + New widget - tools shortcuts; + New widget - IP calculator; + New widget - request IP address; + Clickable links for subnet fields; + Custom VRF fields; + Subnets can be now linked to devices; + Import/export enhancements; + Fast user switching for admins to impersonate user; + Opened folders and subnets in tree menu are saved on page reload; + RWA users can now process IP requests; + Added auto-suggest for possible slave subnets; + SSL option for MySQL connections; + Enum custom field support; + Added password reset script; + Set sections to display VRF in; Security Fixes: ---------------------------- + Parametized all MySQL querries; + Fixed plainpass being logged on user update; + Fixed XSS exploit on /error/; + Added CSRF protection to forms; Translations: ---------------------------- + Added Czech translation; Bugfixes: ---------------------------- + Fixed bug with SSL/TLS smtp servers; + Fixed visual subnet display issues on 32bit systems; + Fixed IPv6 split subnets bug; + Fixed /31 ping bug scanning out of boundaries; + Fixed nested broadcast not counted to used percentage; + Fixed invalid redirect after timeout; + Fixed discovery script index overridden; + Fixed dashboard graphs links to subnets; + Fixed Invalid ID on subnet scan of large subnets; ------------------------------------------------------------------- Mon Apr 20 21:57:43 UTC 2015 - ecsos@opensuse.org - clean spec file - move code from .htaccess files into phpipam.conf ------------------------------------------------------------------- Sat Apr 18 09:44:00 UTC 2015 - ecsos@opensuse.org - update to 1.1.010 + Fixed login fails with LDAP when escape characters are in password; + Fixed login not working with spaces in password for AD login; + Fixed Ivalid action when adding vlans from subnet popup menu; + Fixed custom fields not appearing properly on IP request editing; + Fixed Invalid ID error for IP address details on sorting; + Fixed warnings if no VLAN search results are present; + Fixed test mail not sending; + Fixed unable to login if $phpsessname not defined; + Fixed unable to login after upgrade; ------------------------------------------------------------------- Wed Mar 12 16:31:17 UTC 2015 - ecsos@opensuse.org - initial version 1.1
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
