openITCOCKPIT version 5.7.0 has been released! Packed with new features, such as grouping for Statuspages, a new host dependency tree, a new WebSocket backend, security updates and much more.
Security fixes
We discovered and fixed several security vulnerabilities. An attacker was able to assign it’s account to another user group which
could grant themselves elevated privileges. This affected the Master System and the Satellite Systems. In addition, we improved our Cookie handling.
openITCOCKPIT will not enforce SameSite=Lax for cookies.
Dropped Support for Ubuntu 22.04, Debian 12 and PHP 8.1
As mentioned in our last blog post we had to drop support for Ubuntu Jammy 22.04, Debian Bookworm 12 and PHP 8.1 in this release. This step is necessary as PHP 8.1 does not get security updates for more than 8 months by the time of writing this blog post. Unfortunately, this means that continuing to support Ubuntu 22.04 until its end of life in April 2027 would hold back the development of openITCOCKPIT for all users.
Please see our official upgrade instructions if you are still using an older release.
- Update Ubuntu Jammy (22.04) to Ubuntu Noble (24.04)
- Upgrade from Debian Bookworm (12) to Debian Trixie (13)
Please notice: Changing the PHP version through a third-party repository is not supported and will break the system.
In case you are using Enterprise Linux (RHEL, AlmaLinux, Rocky Linux), please see our instructions: