{ "release_id": "4.3-20241104063333", "date": "2024-11-04T06:33:33.058096+00:00", "type": "feature", "major_version": "4.3", "urgency": "high", "text": { "de": "# opsiconfd\nDer neue opsiconfd enthält viele Korrekturen und Optimierungen.\nÜber den neuen Konfigurations-Parameter `auth-allowed-groups` kann jetzt konfiguriert werden welche Benutzer-Gruppen sich am opsi-Service anmelden dürfen. Hierdurch wird die Sicherheit vor allem für Systeme mit LDAP-Anmeldung und ohne 2FA erhöht. Standardmäßig dürfen sich nur noch Mitglieder der in der opsi.conf konfigurierten Gruppen `admingroup` und `readonly` anmelden. \nDie Kommunikation mit Redis wurde stark optimiert, was die Systemlast deutlich reduziert.\nDer Health Check wurde grundlegend überarbeitet und die Ergebnisse werden nun zwischengespeichert.\n\n# opsi-configed\nDer neue opsi-configed wird für die Kompatibilität mit dem überarbeiteten Health Check benötigt.\n\n# opsi-WebGUI\nDie neue Version behebt eine schwere Sicherheitslücke und sollte daher zeitnah eingespielt werden.\n\n# opsi-client-agents\nDie neuen opsi-client-agents für Windows, Linux und macOS enthalten Fehlerbehebungen und neue Funktionen.\nBeim Auslösen von Produktaktionen kann nun von Fall zu Fall entschieden werden,\nob die Aktionen sichtbar sein sollen oder im Hintergrund ausgeführt werden.\n\n# opsi-setup-detector\n\n* Der Code zur Deinstallation von MSI-basierten Installationen basiert jetzt auf dem MSI-UpradeCode.\nDer MSI-UpradeCode ist produktspezifisch aber releaseunabhängig.\nDamit kann die deinstallation von alten installierten Versionen eines Produktes noch robuster gestaltet werden.\n(Dank an Johannes Schuh für die Hinweise)\nFür weitere Details siehe hier:\nhttps://docs.opsi.org/opsi-docs-de/4.3/clients/windows-client/softwareintegration.html#opsi-winclient-softwintegration-tutorial-deinstall-msi\n\n* Die Analyse von MSI-Dateien ist verbessert worden und liefert jetzt in vielen Fällen auch das korrekte Installationsverzeichnis.\n\n* Bei Setupdateien welche ein MSI beinhalten (Wrapper) wird versucht dieses MSI zu extrahieren und zu analysieren. Ist dies erfolgreich und der neue Konfigurationsparameter `preferMsiUninstall` ist `true`,\nso wird die Deinstallation basierend auf dem MSI zur Verfügung gestellt (siehe oben)\n\n* Die Standard-Engine für die Detektion des Setuptyps ist mit einer zweiten Engine verstärkt worden: 'Detect it easy'.\n\n* DesktopIcons: Bei der Behandlung von DesktopIcons wird nun der ProdukName (statt der ProduktId) standardmäßig zur Benennung verwendet.\n\n# opsi-utils\nDie neue opsi-utils-Version behebt einen Bug, bei dem opsi-set-rights nicht korrekt mit Symlinks umgegangen ist.\n", "en": "# opsiconfd\nThe new opsiconfd contains many fixes and optimizations.\nThe new configuration parameter `auth-allowed-groups` can now be used to configure which user groups are allowed to log on to the opsi service. This increases security, especially for systems with LDAP login and without 2FA. By default, only members of the groups `admingroup` and `readonly` configured in opsi.conf are now allowed to log in.\nCommunication with Redis has been greatly optimized, which significantly reduces the system load.\nThe health check has been fundamentally revised and the results are now cached.\n\n# opsi-configed\nThe new opsi-configed is needed for compatibility with the revised health check.\n\n# opsi-WebGUI\nThe new version fixes a serious security vulnerability and should therefore be installed promptly.\n\n# opsi-client-agents\nThe new opsi-client-agents for Windows, Linux and macOS contain bug fixes and new features.\nWhen triggering product actions, a decision can now be made on a case-by-case basis,\nwhether the actions should be visible or executed in the background.\n\n# opsi-setup-detector\n\n* The MSI uninstall code is now based on the MSI upgrade code.\nThe MSI upgrade code is product specific but release independent.\nThis allows a more stable uninstall of old versions.\n(Thanks to Johannes Schuh for the hints)\nFor more details see here:\nhttps://docs.opsi.org/opsi-docs-en/4.3/clients/windows-client/softwareintegration.html#opsi-winclient-softwintegration-tutorial-deinstall-msi\n\n* The analysis of MSI files has been improved and now also returns the correct installation directory in many cases.\n\n* For setup files that contain an MSI (wrapper), an attempt is made to extract and analyze this MSI.\nIf this is successful and the new configuration `preferMsiUninstall` is`true`, the uninstallation is made available based on the MSI (see above).\n \n* The standard engine to detect the type of a setup file has been enhanced by a second engine: 'Detect it easy'.\n\n* DesktopIcons: $productName$ is used as default for the desktop icon name.\n\n# opsi-utils\nThe new opsi-utils version fixes a bug where opsi-set-rights did not handle symlinks correctly.\n" }, "components": [ { "name": "debian", "type": "OPSI_PACKAGE", "version": "4.3.0.2-2", "removal": false, "changelog_url": "OPSI_PACKAGE/debian/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "hwaudit", "type": "OPSI_PACKAGE", "version": "4.3.0.0-1", "removal": false, "changelog_url": "OPSI_PACKAGE/hwaudit/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "l-desktop", "type": "OPSI_PACKAGE", "version": "4.3.0.1-1", "removal": false, "changelog_url": "OPSI_PACKAGE/l-desktop/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "l-opsi-server", "type": "OPSI_PACKAGE", "version": "4.3.0.7-4", "removal": false, "changelog_url": "OPSI_PACKAGE/l-opsi-server/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-cli", "type": "TOOL", "version": "4.3.11.4", "removal": false, "changelog_url": "TOOL/opsi-cli/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-cli", "type": "OPSI_PACKAGE", "version": "4.3.11.4-1", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-cli/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-client-agent", "type": "OPSI_PACKAGE", "version": "4.3.4.11-1", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-client-agent/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-client-agent-msi", "type": "TOOL", "version": "4.3.4.11", "removal": false, "changelog_url": "TOOL/opsi-client-agent-msi/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-configed", "type": "OPSI_PACKAGE", "version": "4.3.3.19-1", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-configed/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-configed-portable", "type": "TOOL", "version": "4.3.3.19", "removal": false, "changelog_url": "TOOL/opsi-configed-portable/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-linux-bootimage", "type": "SERVER_PACKAGE", "version": "20240715", "removal": false, "changelog_url": "SERVER_PACKAGE/opsi-linux-bootimage/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-linux-bootimage.iso", "type": "TOOL", "version": "20240715", "removal": false, "changelog_url": "TOOL/opsi-linux-bootimage.iso/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-linux-client-agent", "type": "OPSI_PACKAGE", "version": "4.3.4.11-1", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-linux-client-agent/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-local-image-ubuntu", "type": "OPSI_PACKAGE", "version": "4.3.0.2-2", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-local-image-ubuntu/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-logviewer-portable", "type": "TOOL", "version": "4.3.3.19", "removal": false, "changelog_url": "TOOL/opsi-logviewer-portable/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-mac-client-agent", "type": "OPSI_PACKAGE", "version": "4.3.4.11-1", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-mac-client-agent/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-quickinstall.zip", "type": "TOOL", "version": "4.3.0.7-4", "removal": false, "changelog_url": "TOOL/opsi-quickinstall.zip/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-setup-detector", "type": "OPSI_PACKAGE", "version": "4.3.3.2-3", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-setup-detector/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-setup-detector-setup.exe", "type": "TOOL", "version": "4.3.3.2-3", "removal": false, "changelog_url": "TOOL/opsi-setup-detector-setup.exe/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-utils", "type": "SERVER_PACKAGE", "version": "4.3.10.6", "removal": false, "changelog_url": "SERVER_PACKAGE/opsi-utils/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsiconfd", "type": "SERVER_PACKAGE", "version": "4.3.24.8", "removal": false, "changelog_url": "SERVER_PACKAGE/opsiconfd/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-webgui", "type": "SERVER_PACKAGE", "version": "4.3.39", "removal": false, "changelog_url": "SERVER_PACKAGE/opsi-webgui/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "ubuntu", "type": "OPSI_PACKAGE", "version": "4.3.0.2-2", "removal": false, "changelog_url": "OPSI_PACKAGE/ubuntu/changelog.txt", "version_text_de": "", "version_text_en": "" } ] }