{ "release_id": "4.3-202609", "date": "2026-09-30T09:11:50.489440+00:00", "type": "feature", "major_version": "4.3", "urgency": "medium", "text": { "de": "**Wichtige Hinweise:**\n\n- **Der OPSI Client Agent ist nur noch mit 64-Bit-Windows-Betriebssystemen kompatibel.**\n- **Der Control-Server des OPSI Client Agents auf Port 4441 ist aus Sicherheitsgründen standardmäßig nur noch lokal erreichbar.**\n\n# opsi-cli\n\nWindows x86 wird nicht mehr unterstützt. Die python-opsi-Bibliothek wurde aktualisiert, um die LD_LIBRARY_PATH-Behandlung zu korrigieren und damit Probleme beim Start des SSO-Browsers unter Linux zu beheben.\n\n# OPSI-WebGUI\n\nDieses Release erweitert die Client-Verwaltung um eine Hardware- und Software-Inventarisierung mit Statusanzeigen, KB-Update-Filterung und CSV-Export. Die globale Suche und Navigation für Server, Clients und Produkte unterstützt jetzt wiederverwendbare gespeicherte und favorisierte Suchen sowie erweiterte Filter. Quick Commands können für die Verwendung im Terminal gespeichert werden. Außerdem stehen kontextabhängige Tastenkürzel in der gesamten Anwendung zur Verfügung; mit Strg+Shift+? lassen sich die verfügbaren Tastenkürzel anzeigen.\n\nDie Client-Verwaltung bietet jetzt Host-Attribute für WAN-Modus, Smart Cache, Installation beim Herunterfahren und Health-Check-Überwachung sowie eine Aktion zum Auslösen von Timer-Events. Client-Ansichten und Zeilenaktionen können konfiguriert werden. Browser- und URL-Persistenz umfassen jetzt zusätzliche Filter und Einstellungen, darunter Client-Log-Abfragen, Einstellungen für Prozessaktionen und Panel-Größen.\n\nPerformance und Zuverlässigkeit wurden durch schnelleres Laden und effizientere Bulk-Operationen, eine bessere Darstellung von Aktionsanfragen, detailliertere API-Fehler sowie optimierte Messagebus-Aktualisierungen verbessert. Sicherheitsupdates umfassen aktualisierte Abhängigkeiten und eine verbesserte SBOM-Generierung.\n\nWeitere Informationen zu den neuen Funktionen und Verbesserungen finden Sie in unserem Blogbeitrag [OPSI-WebGUI: Die Highlights des September-Releases 2026](https://opsi.org/de/blog/opsi-webgui-september-2026-release/).\n\n# opsi-configed\n\nDie neue Version des opsi-configed behebt einige Fehler, die zwischenzeitlich aufgetreten sind. Alle uns bekannten Bugs sind behoben.\nAußerdem wurden die Abhängigkeiten und die Java-Laufzeit aktualisiert.\n\n# opsiconfd\n\n- Neue Metrik \"Pending product action requests\" zur Überwachung ausstehender Produktaktionsanforderungen.\n- Die Kompatibilität mit neuen Redis- und Grafana-Versionen wurde verbessert.\n- Bei der Erstellung von TLS-Zertifikaten für Clients werden Hostnamen, die durch die Name-Constraints der CA nicht erlaubt sind, nicht mehr in das Zertifikat aufgenommen.\n- Alle Abhängigkeiten wurden auf den neuesten Stand gebracht.\n\n# OPSI Client Agents\n\n- Der OPSI Client Agent für Windows ist nur noch mit 64-Bit-Betriebssystemen kompatibel.\n- Der Control-Server des OPSI Client Agents auf Port 4441 ist aus Sicherheitsgründen standardmäßig nur noch lokal erreichbar. Über den Host-Parameter `opsiclientd.control_server.interface` kann dieses Verhalten geändert werden.\n- Die Action-Warnung wird nun vor dem Caching von Produkten angezeigt, wenn das Event mit gecachten Produkten arbeitet.\n- Der `oca-installation-helper` wurde aktualisiert. Dabei wurden die Behandlung von Exit-Codes und OPSI-Sessions verbessert sowie Optionen ergänzt, um `opsi-client-agent` und `opsi-script` aus lokalen Quellen zu verwenden.\n- Der `opsi-login-blocker` wurde von C++ auf Rust portiert. Er arbeitet jetzt stabiler und ist dank Rusts Speichersicherheit weniger anfällig für Speicherfehler.\n- Die Erkennung laufender Windows-Updates wurde verbessert.\n- Für Events steht die neue Konfigurationsoption `wait_for_transfer_slot` zur Verfügung. Damit lässt sich konfigurieren, ob ein Event so lange wartet, bis ein freier Transfer-Slot auf dem OPSI-Depotserver zur Verfügung steht. Bei GUI-Startup-Events wird während des Wartens auch der Login blockiert.\n- Die Funktionalität des RPC `runOpsiScriptAsOpsiSetupUser` wurde wiederhergestellt.\n- Die ACLs der Verzeichnisse und Dateien des OPSI Client Agents enthalten nun ausschließlich Gruppen statt Benutzer. Hierdurch werden Warnungen von WDAC verhindert.\n- Zeitstempel für `ProductOnClient`-Objekte im WAN-Backend wurden korrigiert.\n\n# l-openssh\n\nDie neue Version des l-openssh hat 3 neue Properties:\n- `passwd_authentication` - Erlaubt SSH Passwort Authentifizierung\n- `enable_sftp` - Aktiviert SFTP Subsystem\n- `client_alive_interval` - Zeit in Sekunden zwischen Client Inaktivität und \"keepalive\" Nachricht (Standardmäßig 0)\n\n# l-system-update\n\nDie neue Version des l-system-update behebt Fehler für Debian/Redhat Update Reliabilität.\n\n# l-desktop\n\nDie neue Version des l-desktop hat eine neue Property:\n- `remove_gnome_initial_setup` - Entfernt gnome-initial-setup nach der Installation für GNOME oder Unity DE für Debian/Ubuntu\n\nSowie zusätzliche kleine Änderungen.\n\n# hwaudit\n\nDie neue hwaudit-Version behebt ein Problem mit synchronisation von BIOS-Informationen im WAN/VPN-Modus.", "en": "**Important Notes:**\n\n- **The OPSI Client Agent is now compatible with 64-bit Windows operating systems only.**\n- **For security reasons, the OPSI Client Agent control server on port 4441 is now only accessible locally by default.**\n\n# opsi-cli\n\nWindows x86 is no longer supported. The python-opsi library was updated to fix LD_LIBRARY_PATH handling, resolving SSO browser launch issues on Linux.\n\n# OPSI-WebGUI\n\nThis release adds hardware and software inventory for clients, with status indicators, KB update filtering, and CSV export. Scoped global search and navigation is now available for servers, clients, and products, with reusable saved and favorite searches and advanced filters. Quick Commands can be saved for terminal use, and context-aware keyboard shortcuts are available throughout the application, with Ctrl+Shift+? showing available shortcuts.\n\nClient management now includes host attributes for WAN mode, smart cache, install on shutdown, and health-check monitoring, plus timer event actions. Client panels and row actions are configurable. Browser and URL persistence now cover additional filters and settings, including client log queries, process action settings, and panel sizes.\n\nPerformance and reliability improvements include faster loading and bulk operations, better action-request visibility, improved API error details, and optimized Messagebus refreshes. Security updates include dependency updates and improved SBOM generation.\n\nFor more details on the new features and improvements, see our blog post [OPSI-WebGUI: September 2026 Release Highlights](https://opsi.org/en/blog/opsi-webgui-september-2026-release/).\n\n# opsi-configed\n\nThe new version of the opsi-configed fixes some issues that have appeared in the meantime. All known bugs are resolved.\nThe dependencies and the Java runtime have been updated.\n\n# opsiconfd\n\n- New metric \"Pending product action requests\" for monitoring pending product action requests.\n- Compatibility with new Redis and Grafana versions has been improved.\n- When creating TLS certificates for clients, hostnames that are not permitted by the CA name constraints are no longer added to the certificate.\n- All dependencies have been updated to the latest versions.\n\n# OPSI Client Agents\n\n- The OPSI Client Agent for Windows is now compatible with 64-bit operating systems only.\n- For security reasons, the OPSI Client Agent control server on port 4441 is now only accessible locally by default. This behavior can be changed using the host parameter `opsiclientd.control_server.interface`.\n- The action warning is now displayed before products are cached if the event uses cached products.\n- The `oca-installation-helper` has been updated. Exit code handling and OPSI session handling have been improved, and options have been added to use `opsi-client-agent` and `opsi-script` from local sources.\n- The `opsi-login-blocker` has been ported from C++ to Rust. It is now more stable and, thanks to Rust's memory safety, less prone to memory errors.\n- Detection of running Windows updates has been improved.\n- The new event configuration option `wait_for_transfer_slot` is now available. It can be used to configure whether an event waits until a free transfer slot is available on the OPSI depot server. For GUI startup events, login is also blocked while waiting.\n- The functionality of the RPC `runOpsiScriptAsOpsiSetupUser` has been restored.\n- The ACLs of the OPSI Client Agent directories and files now contain only groups instead of users. This prevents WDAC warnings.\n- Timestamps for `ProductOnClient` objects in the WAN backend have been corrected.\n\n# l-openssh\n\nThe new version of l-openssh includes 3 new properties:\n- `passwd_authentication` - Allows SSH password authentication\n- `enable_sftp` - Enables the SFTP subsystem\n- `client_alive_interval` - Time in seconds between client inactivity and keepalive message (default 0)\n\n# l-system-update\n\nThe new version of l-system-update includes bug-fixes for debian/redhat update reliability.\n\n# l-desktop\n\nThe new version of l-desktop includes new property:\n- `remove_gnome_initial_setup` - Removes gnome-initial-setup after install for GNOME or Unity DE on Debian/Ubuntu\n\nPlus additional small changes.\n\n# hwaudit\n\nThe new hwaudit version fixes a problem with synchronization of BIOS-Information in WAN/VPN-Mode" }, "components": [ { "name": "debian12", "type": "OPSI_PACKAGE", "version": "4.3.0.5-5", "removal": false, "changelog_url": "OPSI_PACKAGE/debian12/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "debian13", "type": "OPSI_PACKAGE", "version": "4.3.0.5-5", "removal": false, "changelog_url": "OPSI_PACKAGE/debian13/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "hwaudit", "type": "OPSI_PACKAGE", "version": "4.3.3.0-1", "removal": false, "changelog_url": "OPSI_PACKAGE/hwaudit/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "l-desktop", "type": "OPSI_PACKAGE", "version": "4.3.1.0-1", "removal": false, "changelog_url": "OPSI_PACKAGE/l-desktop/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "l-openssh", "type": "OPSI_PACKAGE", "version": "4.3.0.6-3", "removal": false, "changelog_url": "OPSI_PACKAGE/l-openssh/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "l-opsi-server", "type": "OPSI_PACKAGE", "version": "4.3.4.9-1", "removal": false, "changelog_url": "OPSI_PACKAGE/l-opsi-server/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "l-system-update", "type": "OPSI_PACKAGE", "version": "4.3.1.0-1", "removal": false, "changelog_url": "OPSI_PACKAGE/l-system-update/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "mint21", "type": "OPSI_PACKAGE", "version": "4.3.1.1-1", "removal": false, "changelog_url": "OPSI_PACKAGE/mint21/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "mint21-1", "type": "OPSI_PACKAGE", "version": "4.3.1.1-1", "removal": false, "changelog_url": "OPSI_PACKAGE/mint21-1/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "mint21-2", "type": "OPSI_PACKAGE", "version": "4.3.1.1-1", "removal": false, "changelog_url": "OPSI_PACKAGE/mint21-2/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "mint21-3", "type": "OPSI_PACKAGE", "version": "4.3.1.1-1", "removal": false, "changelog_url": "OPSI_PACKAGE/mint21-3/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "mint22", "type": "OPSI_PACKAGE", "version": "4.3.1.1-1", "removal": false, "changelog_url": "OPSI_PACKAGE/mint22/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "mint22-1", "type": "OPSI_PACKAGE", "version": "4.3.1.1-1", "removal": false, "changelog_url": "OPSI_PACKAGE/mint22-1/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "mint22-2", "type": "OPSI_PACKAGE", "version": "4.3.1.1-1", "removal": false, "changelog_url": "OPSI_PACKAGE/mint22-2/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-cli", "type": "TOOL", "version": "4.3.45.2", "removal": false, "changelog_url": "TOOL/opsi-cli/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-cli", "type": "OPSI_PACKAGE", "version": "4.3.45.2-1", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-cli/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-client-agent", "type": "OPSI_PACKAGE", "version": "4.3.26.2-1", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-client-agent/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-client-agent-msi", "type": "TOOL", "version": "4.3.26.2-1", "removal": false, "changelog_url": "TOOL/opsi-client-agent-msi/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-configed", "type": "OPSI_PACKAGE", "version": "4.3.24.13-1", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-configed/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-configed-portable", "type": "TOOL", "version": "4.3.24.13", "removal": false, "changelog_url": "TOOL/opsi-configed-portable/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-linux-client-agent", "type": "OPSI_PACKAGE", "version": "4.3.26.2-1", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-linux-client-agent/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-local-image-backup", "type": "OPSI_PACKAGE", "version": "4.3.0.2-2", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-local-image-backup/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-local-image-restore", "type": "OPSI_PACKAGE", "version": "4.3.0.2-2", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-local-image-restore/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-local-image-ubuntu", "type": "OPSI_PACKAGE", "version": "4.3.1.0-1", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-local-image-ubuntu/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-local-image-win10", "type": "OPSI_PACKAGE", "version": "4.3.1.0-2", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-local-image-win10/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-local-image-win10-capture", "type": "OPSI_PACKAGE", "version": "4.3.1.0-2", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-local-image-win10-capture/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-local-image-win10-x64", "type": "OPSI_PACKAGE", "version": "4.3.1.0-2", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-local-image-win10-x64/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-local-image-win10-x64-capture", "type": "OPSI_PACKAGE", "version": "4.3.1.0-2", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-local-image-win10-x64-capture/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-local-image-win11-x64", "type": "OPSI_PACKAGE", "version": "4.3.1.0-2", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-local-image-win11-x64/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-local-image-win11-x64-capture", "type": "OPSI_PACKAGE", "version": "4.3.1.0-2", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-local-image-win11-x64-capture/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-logviewer-portable", "type": "TOOL", "version": "4.3.24.13", "removal": false, "changelog_url": "TOOL/opsi-logviewer-portable/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-mac-client-agent", "type": "OPSI_PACKAGE", "version": "4.3.26.2-1", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-mac-client-agent/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-script", "type": "OPSI_PACKAGE", "version": "4.12.21.1-11", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-script/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-utils", "type": "SERVER_PACKAGE", "version": "4.3.31.1", "removal": false, "changelog_url": "SERVER_PACKAGE/opsi-utils/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-vhd-control", "type": "OPSI_PACKAGE", "version": "4.3.0.5-1", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-vhd-control/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-vhd-win10-x64", "type": "OPSI_PACKAGE", "version": "4.3.1.0-2", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-vhd-win10-x64/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-vhd-win11-x64", "type": "OPSI_PACKAGE", "version": "4.3.1.0-2", "removal": false, "changelog_url": "OPSI_PACKAGE/opsi-vhd-win11-x64/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-webgui", "type": "SERVER_PACKAGE", "version": "4.3.48.15", "removal": false, "changelog_url": "SERVER_PACKAGE/opsi-webgui/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsi-webgui.zip", "type": "TOOL", "version": "4.3.48.15", "removal": false, "changelog_url": "TOOL/opsi-webgui.zip/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "opsiconfd", "type": "SERVER_PACKAGE", "version": "4.3.59.1", "removal": false, "changelog_url": "SERVER_PACKAGE/opsiconfd/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "ubuntu24-04", "type": "OPSI_PACKAGE", "version": "4.3.1.6-1", "removal": false, "changelog_url": "OPSI_PACKAGE/ubuntu24-04/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "ubuntu26-04", "type": "OPSI_PACKAGE", "version": "4.3.1.6-1", "removal": false, "changelog_url": "OPSI_PACKAGE/ubuntu26-04/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "win10", "type": "OPSI_PACKAGE", "version": "4.3.1.0-2", "removal": false, "changelog_url": "OPSI_PACKAGE/win10/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "win10-captured", "type": "OPSI_PACKAGE", "version": "4.3.1.0-2", "removal": false, "changelog_url": "OPSI_PACKAGE/win10-captured/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "win10-x64", "type": "OPSI_PACKAGE", "version": "4.3.1.0-2", "removal": false, "changelog_url": "OPSI_PACKAGE/win10-x64/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "win10-x64-captured", "type": "OPSI_PACKAGE", "version": "4.3.1.0-2", "removal": false, "changelog_url": "OPSI_PACKAGE/win10-x64-captured/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "win11-x64", "type": "OPSI_PACKAGE", "version": "4.3.1.0-2", "removal": false, "changelog_url": "OPSI_PACKAGE/win11-x64/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "win11-x64-captured", "type": "OPSI_PACKAGE", "version": "4.3.1.0-2", "removal": false, "changelog_url": "OPSI_PACKAGE/win11-x64-captured/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "win2012", "type": "OPSI_PACKAGE", "version": "4.3.0.2-14", "removal": false, "changelog_url": "", "version_text_de": "", "version_text_en": "" }, { "name": "win2012-r2", "type": "OPSI_PACKAGE", "version": "4.3.0.2-14", "removal": false, "changelog_url": "", "version_text_de": "", "version_text_en": "" }, { "name": "win2016", "type": "OPSI_PACKAGE", "version": "4.3.1.0-2", "removal": false, "changelog_url": "OPSI_PACKAGE/win2016/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "win2019", "type": "OPSI_PACKAGE", "version": "4.3.1.0-2", "removal": false, "changelog_url": "OPSI_PACKAGE/win2019/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "win2022", "type": "OPSI_PACKAGE", "version": "4.3.1.0-2", "removal": false, "changelog_url": "OPSI_PACKAGE/win2022/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "win2025", "type": "OPSI_PACKAGE", "version": "4.3.1.0-2", "removal": false, "changelog_url": "OPSI_PACKAGE/win2025/changelog.txt", "version_text_de": "", "version_text_en": "" }, { "name": "windows11-upgrade", "type": "OPSI_PACKAGE", "version": "25h2-3", "removal": false, "changelog_url": "OPSI_PACKAGE/windows11-upgrade/changelog.txt", "version_text_de": "", "version_text_en": "" } ] }