🛡️ openSUSE-SU-2021:1603-1 — netdata (CVE-2018-18836 +3 more)
Description
Security update for netdata
This update for netdata fixes the following issues:
Update to 1.31.0 (go.d.plugin 0.29.0)
The v1.31.0 release of Netdata comes with re-packaged and
redesigned elements of the dashboard to help you focus on your
metrics, even more Linux kernel insights via eBPF, on-node machine
learning to help you find anomalies, and much more.
This release contains 10 new collectors, 54 improvements (7 in the
dashboard), 31 documentation updates, and 29 bug fixes.
At a glance
We re-packaged and redesigned portions of the dashboard to improve
the overall experience. Part of this effort is better handling of
dashboard code during installation—anyone using third-party
packages (such as the Netdata Homebrew formula) will start seeing
new features and the new designs starting today. The timeframe
picker has moved to the top panel, and just to its right are two
counters with live CRITICAL and WARNING alarm statuses for your
node. Click on either of these two open the alarms modal.
We've also pushed a number of powerful new collectors, including
directory cache monitoring via eBPF. By monitoring directory cache,
developers and SREs alike can find opportunities to optimize memory
usage and reduce disk-intensive operations.
Our new Z-scores and changefinder collectors use machine learning
to let you know, at a glance, when key metrics start to behave
oddly. We'd love to get feedback on these sophisticated, subjective
new brand of collectors!
Improvements
- Automatically trigger Helmchart PR on Agent release.
(gh#netdata/netdata#11084)
- Implement ACLK env endpoint. (gh#netdata/netdata#10833)
- Implement new HTTPS client for ACLK. (gh#netdata/netdata#10805)
- Update ACLK passwd endpoint to match specifications of the new
architecture. (gh#netdata/netdata#10859)
- Implement ACLK new backoff (TBEB) architecture.
(gh#netdata/netdata#10941)
- Add functionality to store node_id for a host.
(gh#netdata/netdata#11059)
- Remove version negotiation from ACLK-NG.
(gh#netdata/netdata#10980)
- Persist claim IDs in local database for parent and children.
(gh#netdata/netdata#10993)
- Provide more agent analytics to PostHog.
(gh#netdata/netdata#11020)
- Reduce logging when sending agent analytics.
(gh#netdata/netdata#11091)
- Remove error message on Netdata restart.
(gh#netdata/netdata#8685)
- Add a timeout when sending anonymous statistics using curl.
(gh#netdata/netdata#11010)
- Improve dash-example.html. (gh#netdata/netdata#10870)
- Add host_cloud_enabled attribute to analytics.
(gh#netdata/netdata#11100)
Dashboard
- Bundle the react dashboard code into the agent repo directly.
(gh#netdata/netdata#11139)
- Add dashboard info strings for systemdunits collector.
(gh#netdata/netdata#10904)
- Update dashboard version to v2.17.0. (gh#netdata/netdata#10856)
+ Top bar, side panel and overall navigation has been
redesigned.
+ Top bar now includes a light bulb icon with news/features and
the number of CRITICAL or WARNING alarms.
+ Documentation and settings buttons moved to the sidebar.
+ Improved rendering of sign in/sign up option button along
with an operational status option (under user settings).
+ In the left panel, nodes show a status badge and are now
searchable if there are more than 4.
Health
- Improvements
+ Add charts configuration option to templates.
(gh#netdata/netdata#11054)
+ Add new attributes to health configuration files.
(gh#netdata/netdata#10961)
+ Add inconsistent state to the mysql_galera_cluster_state
alarm. (gh#netdata/netdata#10945)
+ Add systemdunits collector alarms. (gh#netdata/netdata#10906)
+ Use average instead of sum in VerneMQ alarms.
(gh#netdata/netdata#11037)
+ Check configuration for CUSTOM and MSTEAM.
(gh#netdata/netdata#11113)
+ Reduce alarms notifications dump logging.
(gh#netdata/netdata#11116)
- Bug fixes
+ Add synchronization.conf to the Makefile.
(gh#netdata/netdata#10907)
+ Fix Microsoft Teams naming. (gh#netdata/netdata#9905)
Collectors
- New
+ Add a chart for out of memory kills.
(gh#netdata/netdata#10880)
+ Add a chart with Netdata uptime. (gh#netdata/netdata#10997)
+ Add a module for ZFS pool state. (gh#netdata/netdata#11071)
+ Add a plugin for the system clock synchronization state.
(gh#netdata/netdata#10895)
+ Add new charts for extended disk metrics.
(gh#netdata/netdata#10939)
+ Add support for renaming libvirtd LXC containers.
(gh#netdata/netdata#11006)
+ Add a metric for Percpu memory. (gh#netdata/netdata#10964)
+ Add an eBPF directory cache collector.
(gh#netdata/netdata#10855)
+ Add a Z-scores python collector. (gh#netdata/netdata#10673)
+ Add changefinder python collector. (gh#netdata/netdata#10672)
- Improvements
+ Remove dots in cgroup IDs. (gh#netdata/netdata#1105
Affected software
openSUSE-SU-2021:1603-1 is recorded against 1 package.
- netdata (fixed in 1.31.0-bp153.2.3.1)
Timeline and source
Published on 20 December 2021 and last revised on 4 February 2026. No public exploit is currently recorded for this entry. Record sourced from OSV.
References
lists.opensuse.org (Advisory)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
www.suse.com (Web)
www.suse.com (Web)
www.suse.com (Web)
www.suse.com (Web)
Details
Affected Packages
| Software | From version | Fixed in |
|---|---|---|
| netdata | — | 1.31.0-bp153.2.3.1 |
Similar Threats
- Medium CVE-2025-71385
- Unknown DEBIAN-CVE-2025-71385
- Unknown UBUNTU-CVE-2025-71385
- Unknown MINI-35h9-5xw6-g5wf
- Unknown USN-7250-1
Free Vulnerability Check
Is your site affected by openSUSE-SU-2021:1603-1?
BotEraser helps you identify potentially vulnerable plugins and themes by checking your installation against openSUSE-SU-2021:1603-1 and other known CVE records.
Scan My Site Free →No credit card required · Results in minutes
ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.