861 Commits

Author SHA1 Message Date
nicolargo
07080cdca4 Update WebUI, requirements and docs 2026-05-23 15:42:02 +02:00
nicolargo
0de3b8f875 XML-RPC Multi-Origin CORS Configuration Silently Falls Back to Wildcard - CVE-2026-46608 2026-05-23 11:40:20 +02:00
nicolargo
4976bd7509 docs(quickstart): document xmlrpc_allowed_hosts DNS rebinding protection
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-23 09:56:46 +02:00
nicolargo
8b6cab83e8 docs(plan): implementation plan for GHSA-w856-8p3r-p338 XML-RPC fix
11-task TDD plan covering test scaffold, regression baseline,
parse_request Host validation, wildcard/port/missing-Host edge
cases, startup warning, conf entry, docs and lint/format check.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-23 09:43:23 +02:00
nicolargo
bcbeae7af6 docs(spec): design for GHSA-w856-8p3r-p338 XML-RPC Host validation
Design document for CVE-2026-46611 patch: add opt-in Host header
validation to the XML-RPC server via a new xmlrpc_allowed_hosts
config key, with permissive default and startup warning (mirrors
the REST/WebUI mitigation pattern).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-23 09:38:43 +02:00
Nicolas Hennion
2cfc64e8e9 Update MCP configuration instructions in mcp.rst
Added instructions for configuring Glances MCP from the Claude command line.
2026-05-21 17:18:50 +02:00
nicolargo
77131e745f Update doc for #1711 2026-05-05 08:52:20 +02:00
nicolargo
53a8a4836d Update documentation for hide/show #3546 2026-05-04 14:59:20 +02:00
nicolargo
746f0f7011 GPU Monitoring (ARM / RaspberryPi) #1048 2026-04-21 11:37:36 +02:00
nicolargo
05ff62d883 version 4.5.4 2026-04-19 09:41:52 +02:00
nicolargo
30730f4eb4 Prepare Glances 4.5.4 version 2026-04-19 09:36:25 +02:00
nicolargo
b50f306e86 Update doc 2026-04-18 11:40:18 +02:00
nicolargo
cec380536f Overwrite thresholds for a specific sensor is not taken into account - Related to #3525 2026-04-18 09:45:29 +02:00
nicolargo
fdfb977b1d Cross-Origin Information Disclosure via Unauthenticated REST API (/api/4) due to Permissive CORS in Glances - Mitigate CVE-2026-34839 2026-04-12 09:22:36 +02:00
nicolargo
24615e52e7 Update doc and webui 2026-04-11 09:26:20 +02:00
csvke
a8023b3e4c RV1126BP-70: Add config, docs, and unit tests for MPP plugin
- Add [mpp] section to conf/glances.conf with disable=True
- Add docs/aoa/mpp.rst documentation page and index entry
- Add unit test test_026_mpp with Rockchip MPP test fixtures
2026-04-11 01:34:44 +08:00
nicolargo
b4c963e173 version 4.5.3 2026-03-29 16:56:27 +02:00
nicolargo
f5f1c33a3c Prepare release 4.5.3 2026-03-29 16:41:48 +02:00
nicolargo
07f345e233 Replace py-spy by memray for Flamegraph generation 2026-03-28 11:06:26 +01:00
nicolargo
36bc0216f5 Command Injection via Dynamic Configuration Values - Mitigate CVE-2026-33641 2026-03-28 09:55:51 +01:00
nicolargo
a921a1c828 Update doc 2026-03-22 10:37:22 +01:00
Nicolas Hennion
22db0da0c8 Update clickhouse.rst 2026-03-22 10:36:31 +01:00
nicolargo
b6a694f38f Add export to ClickHouse #3320 2026-03-22 10:15:17 +01:00
nicolargo
f6bc98451e Update docs and deps 2026-03-15 16:44:28 +01:00
Christian Rishøj
c53cb847b9 #3480 fix review nits
- Remove unnecessary hasattr guard on get_refresh()
- Init _last_stats_computed_time to time.time() to avoid stale first reading
- Guard against ZeroDivisionError in IO/network rate calculations
- Use title-case status from pylxd directly
- Add trailing newline to containers.rst

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-15 14:50:48 +01:00
Christian Rishøj
d6395e8d3e #3480 address review feedback
- Split _compute_activity_stats into sub-functions per review feedback
- Pass Glances refresh interval as LXD poll interval
- Update containers docs to mention LXD/pylxd

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-15 14:44:21 +01:00
nicolargo
a56a5b78ef version 4.5.2 2026-03-14 15:31:14 +01:00
nicolargo
d691238478 Default CORS Configuration Allows Cross-Origin Credential Theft - Correct CVE-2026-32610 2026-03-14 14:54:02 +01:00
nicolargo
a8443489e3 REST/WebUI Lacks Host Validation and Remains Exposed to DNS Rebinding - Correct CVE-2026-32632 2026-03-14 13:48:25 +01:00
nicolargo
6a358d07d7 Update docs 2026-03-14 11:40:28 +01:00
nicolargo
08a600ff4a Update documentation 2026-03-14 11:00:48 +01:00
nicolargo
fb0263af0c Unauthenticated API Exposure / Add warning message on startup - Correct CVE-2026-32596 2026-03-14 10:53:19 +01:00
nicolargo
5680a5da4a Command Injection via Process Names in Action Command Templates - Correct CVE-2026-32608 2026-03-14 09:52:12 +01:00
nicolargo
a9170d7121 Update NEWS file 2026-03-07 15:51:54 +01:00
nicolargo
02f0106ee8 Update profiling 2026-03-07 15:39:13 +01:00
nicolargo
058ed1f7a8 Update req 2026-03-07 15:01:55 +01:00
nicolargo
45b3164464 Improve docs and also add min/max/mean for CPU and load 2026-03-07 10:09:24 +01:00
Siddharth Doshi
e306ad24b6 feat(plugin): add generic mmm (min/max/mean) support in base plugin model
Introduce a generic Min/Max/Mean (mmm) mechanism at the plugin model level.

When a field in `fields_description` defines `'mmm': True`, the plugin
automatically generates and maintains the following derived fields:

  <field>_min
  <field>_max
  <field>_mean

The computation is handled in the base plugin model to ensure the
feature is reusable across all plugins. Mean is calculated as a
running mean, and min/max are updated on each refresh cycle.

This implementation:
- Keeps the feature opt-in per field
- Avoids hardcoding logic in individual plugins
- Maintains full backward compatibility
- Preserves existing API v4 response structure
- Ensures no regression in existing behavior

Unit tests have been added to validate correct field generation
and update behavior.
2026-03-01 17:34:33 +05:30
Siddharth Doshi
5248bec5ee Enhance the existing memory plugin to track runtime minimum and maximum memory usage percentage since Glances startup and expose these values through the existing /api/4/mem endpoint. 2026-02-28 14:30:31 +05:30
nicolargo
ad1f18c657 Add documentation for MCP server 2026-02-21 20:57:00 +01:00
nicolargo
1341ed3d68 GPU monitoring (INTEL) #994 2026-02-20 08:42:10 +01:00
nicolargo
bfc5d3e000 First version for Intel GPU 2026-02-18 22:58:36 +01:00
Nicolas Hennion
22ca17fbe0 Merge pull request #3447 from mikemhenry/patch-1
Fix code block formatting
2026-02-17 22:38:14 +01:00
nicolargo
07645532fc version 4.5.0.5 2026-02-17 22:01:17 +01:00
Mike Henry
95e868cb48 Fix code block formatting 2026-02-17 12:38:47 -07:00
nicolargo
620413edf0 version 4.5.0.4 2026-02-10 22:29:05 +01:00
nicolargo
12a279b0da version 4.5.0.3 2026-02-10 22:17:39 +01:00
nicolargo
60c1e2ef96 version 4.5.0.2 2026-02-10 21:41:44 +01:00
nicolargo
db72611f12 Glances version 4.5.0.2 2026-02-10 21:35:05 +01:00
nicolargo
6e0b87c55d NPU plugin makes Glances 4.5.0.1 crashing on start #3425 2026-02-10 21:21:54 +01:00