Release Notes for Zabbix 2.2.21rc1

5 December 2017

Zabbix Team is pleased to announce the availability of Zabbix 2.2.21rc1.

Zabbix is an enterprise-class open source distributed monitoring solution. Zabbix is released under the GPL, thus it is free of charge for both commercial and non-commercial use. A complete text of the license is available at http://www.gnu.org/copyleft/gpl.txt.

This document contains the release notes for Zabbix 2.2.21rc1. Download here.

The following sections describe the release in details and provide late-breaking or other information that supplements its main documentation.

---

Bug Fixes

ZBX-13262	Fixed cookie http-only attribute to prevent XSS attacks Frontend
ZBX-13261	Fixed reflected XSS vulnerability in popup forms Frontend
ZBX-13190	Fixed check for permissions to enable/disable actions Frontend
ZBX-13024	Fixed missed url search part in request login parameter Frontend
ZBX-13044	Fixed undefined index when setting strict-transport-security http header Frontend
ZBX-13133	Fixed multiple security issues Frontend
ZBX-12854	Fixed crash of VMware collector with DebugLevel=4 Proxy Server

---

Installation and Upgrade Notes

Installation

See Zabbix documentation for full details.

Upgrade

See Upgrade procedure for upgrade options and instructions. For version specific upgrade notes, see Upgrade notes for 2.2.21.

Commercial support

Zabbix Company provides a full range of Professional Services. We also provide trouble-free Upgrade Service for easy migration from earlier versions of Zabbix. Please Contact sales for pricing and more details.

• Zabbix Enterprise Support
• Zabbix Training
• Zabbix Development services

---

References

Zabbix 2.2 Manual