Skip to content

v2.37.1
Compare
Choose a tag to compare
@github-actions github-actions released this 05 Jun 17:38
· 869 commits to main since this release
v2.37.1
03b95b3
This commit was signed with the committer’s verified signature.
BupycHuk Nurlan Moldomurov
GPG key ID: BBCBF0D3F6C2F409
Learn about vigilant mode.

Percona Monitoring and Management 2.37.1

Release date: Jun 5, 2023
Installation: Installing Percona Monitoring and Management

Percona Monitoring and Management (PMM) is an open source database monitoring, management, and observability solution for MySQL, PostgreSQL, and MongoDB.

⚠️ Important
We recommend using the latest version of PMM. This ensures that you have access to the latest PMM features and that your environment runs on the latest version of the underlying components, such as VictoriaMetrics, with all the bug fixes in place.

Release Highlights

We have identified and fixed CVE-2023-34409 in PMM 2.37.1:

PMM-12182: PMM authentication bypass vulnerability

Workaround

If you are unable to update PMM you can resolve this issue as follows:

  1. Make changes to the NGINX configuration on the running PMM instance. To do so, create a Bash script with the code from this script on GitHub.

  2. Apply the code using this docker command on a server running the PMM Docker container (as root or using sudo):

    docker exec -it pmm-server bash -c 'curl -fsSL https://raw.githubusercontent.com/percona/pmm/main/scripts/authfix.sh  | /bin/bash '

  3. If you are running PMM via a virtual appliance (OVF or AMI), use SSH to shell into the PMM server and run this command:

    curl -fsSL https://raw.githubusercontent.com/percona/pmm/main/scripts/authfix.sh  | /bin/bash

For more details see, blogpost.

Assets 3
Loading