| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: glances-common | Distribution: openSUSE Tumbleweed |
| Version: 4.5.5 | Vendor: openSUSE |
| Release: 2.2 | Build date: Tue Jun 30 18:18:47 2026 |
| Group: Unspecified | Build host: reproducible |
| Size: 732 | Source RPM: python-Glances-4.5.5-2.2.src.rpm |
| Packager: http://bugs.opensuse.org | |
| Url: https://github.com/nicolargo/glances | |
| Summary: Service and firewalld files for glances | |
Glances is a cross-platform monitoring tool which presents a large amount of monitoring information through a curses or Web based interface. The information dynamically adapts depending on the size of the user interface. This packages contains the service file to start a glances server from systemd and a firewalld file to open the default port.
LGPL-3.0-only
* Tue Jun 30 2026 Dirk Müller <dmueller@suse.com>
- move to the right subpackage
* Mon Jun 29 2026 Adrian Schröter <adrian@suse.de>
- Add missing requires to be able to start the server
* Tue Jun 23 2026 Nico Krapp <nico.krapp@suse.com>
- Update to 4.5.5 (fixes CVE-2026-46606 (bsc#1268800), CVE-2026-46607
(bsc#1268854), CVE-2026-46608 (bsc#1268855), CVE-2026-46611 (bsc#1268856),
CVE-2026-53925 (bsc#1268984))
* /api/4/containers stays ~4-5s with ~60 Docker containers #3559
* Crash when using --sparkline #3547
* VMs section does not show LOAD 1/5/15min values #3535
* Fix AMD GPU detection for multi-digit DRM card numbers #3578
* Keep auto_unit within limits, so columns stay aligned #3558
* Rest status check shouldn't require auth #3544
* Logging configuration to use boolean value #3536
* Fix filesystem aliases for mixed-case mount points #3532
* Regression in Disk I/O reporting #3546
* Add meter for CPU and MEM of GPU in the Quicklook plugin #1711
* Add cpu limit to docker, podman and lxd containers #3557
* GPU Monitoring (ARM / RaspberryPi) #1048
* GPU plugin: display proc and temperature on NVIDIA Jetson (Tegra)
integrated #3580
* Arbitrary file write and command execution in AMP command
configuration - Correct CVE-2026-53925
* XML-RPC Server Missing Host Header Validation Enables DNS
Rebinding Attack - Correct CVE-2026-46611
* XML-RPC Multi-Origin CORS Configuration Silently Falls Back to Wildcard
- Correct CVE-2026-46608
* Insecure Pickle Deserialization in Version Cache Leads to Arbitrary Code
Execution - Correct CVE-2026-46607
* Command Injection via KVM/QEMU VM Domain Names in virsh.py - Correct
CVE-2026-46606
* Add top 10 slowest plugins summary at end of --issue output #3572
* Update documentation for hide/show #3546
* Refactor: Improve load_additional_plugins Maintainability, Safety, and
Plugin Discovery #3561
* Refactor: Reduce Cyclomatic complexity of __display_top Issue #3549
* Refactor: Reduce Cyclomatic complexity of display_popup() #3542
* Refactor: Compute spacing
* Refactor: handle quicklook required for display²
* Refactor: Get plugin Width & get stats summary
* Add unit test to containers/docker plugin
* Wed Apr 22 2026 Daniel Garcia <daniel.garcia@suse.com>
- Update to 4.5.4 (bsc#1262451, bsc#1262453, bsc#1262455):
[#]# Security patches:
- SSRF in Glances IP Plugin via public_api leads to credential
leakage - Correct CVE-2026-35587
- Cross-Origin Information Disclosure via Unauthenticated REST API
(/api/4) - Correct CVE-2026-34839
- fix(cassandra): validate keyspace/table/replication_factor to
prevent CQL injection - Correct CVE-2026-35588 #3520
[#]# Bug corrected:
* Cannot set warning/critical temperature for a specific sensor #3525
* Memory percentage and used displayed as negative numbers #3358
* Incorrect Docker container count via Homeassistant Integration #3433
* Fix LXD filter excluding containers on standalone hosts #3529
[#]# Enhancements:
* Add Rockchip MPP plugin for hardware encoder/decoder monitoring #3514
* Clamp memory used/percent to non-negative values for LXC containers #3505
* Support single-core Rockchip NPU load parsing and improve device naming #3499
[#]# Continious integration and documentation:
* pycache file is put in wheel #3516
* Remove dead code #3507
* Thu Apr 09 2026 Daniel Garcia <daniel.garcia@suse.com>
- Update to 4.5.3 (CVE-2026-33533, bsc#1261379):
[#]# Bug corrected:
* Internal Server Error (Web Server Mode) #3502
* Container plugin crashes with docker.errors.NullResource on Podman
pod infra containers #3498
* [ALERTS] Sometime the top process list is not the good one #3481
[#]# Enhancements:
* Support for LXC/LXD containers #3480
* Add export to ClickHouse #3320
[#]# Security patches:
* Command Injection via Dynamic Configuration Values - Mitigate
CVE-2026-33641
* Cross-Origin System Information Disclosure via XML-RPC Server CORS
Wildcard - Mitigate CVE-2026-33533
[#]# Continious integration and documentation:
* Use sys.executable in the testsuite #3497
* Add unit tests for LXD container engine #3487
* Replace Py-Spy per Memray for FlameGraph generation
* Make the WebUI build before the packages and Docker images build
* Harden GitHub Actions workflows: minimal permissions, SHA pins, timeouts
- Drop upstreamed patch use-sys-executable.patch
* Tue Mar 24 2026 Steve Kowalik <steven.kowalik@suse.com>
- Update to 4.5.2:
[#]# Security:
* Default CORS Configuration Allows Cross-Origin Credential Theft
(CVE-2026-32610, bsc#1259841)
* Incomplete Secrets Redaction: /api/v4/args Endpoint Leaks Password Hash
and SNMP Credentials (CVE-2026-32609, bsc#1259832)
* REST/WebUI Lacks Host Validation and Remains Exposed to DNS Rebinding
(CVE-2026-32632, bsc#1259839)
* Unauthenticated API Exposure / Add warning message on startup
(CVE-2026-32596, bsc#1260321)
* SQL Injection in DuckDB Export via Unparameterized DDL Statements
(CVE-2026-32611, bsc#1259840)
* Command Injection via Process Names in Action Command Templates
(CVE-2026-32608, bsc#1260320)
* Central Browser Autodiscovery Leaks Reusable Credentials to
Zeroconf-Spoofed Servers (CVE-2026-32634, bsc#1259837)
* Browser API Exposes Reusable Downstream Credentials
(CVE-2026-32633, bsc#1259838)
[#]# Enhancements:
* NPU Monitoring
* NVMe Support
* DuckDB Export
* CPU Core Assignment
* API Token Authentication
* Make a Glances API in order to use Glances as a Python lib
* Add a new --fetch (neofetch like) option to display a snapshot of the
current system status
* Show long command line with arrow key
* Do not call update if a call is done to a specific plugin through the API
* Make --stdout (csv and json) compliant with client/server mode
* API history endpoints shows times without timezone
* FR: Sort Sensors my name in proper number order
* Top processes extended stats and processes filter in Web server mode
* Entry point in the API to get extended process stats
[#]# Bug fixes:
* DiskIO — empty args not handled in msg_curse()
* Filesystem — KeyError: '/etc/hostname' on get_view
* Glances hang when killing process with muliple CTRL-C
* Ignore unsupported line endings in password fil
* Fix matching problem when fs config has "show" value
* globals: Fix a race condition in namedtuple_to_dict
* glances: removal of iterators helpers in processes.py and
stats_client_snmp.py
* glances: amps: Removal of iterator helpers, refactor
* Change "Pinned thread" to "Pinned task" and "Upin" to "Unpin"
* default_config_dir: Fix config path to include glances/ directory
* Cannot set warning/critical temperature for a specific sensor needs test
* Try to reduce latency between stat's update and view
* Error on Cloud plugin initialisation make TUI crash
- Drop patches:
* adjust-data-files.patch
* fix-tests.patch
* skip-online-tests.patch
* unitest-wait-for-server.patch
- Add patch use-sys-executable.patch:
* Use sys.executable everywhere in the testsuite.
* Mon Apr 14 2025 Steve Kowalik <steven.kowalik@suse.com>
- Support both lowercased and unnormalized metadata directory names.
* Tue Mar 25 2025 Steve Kowalik <steven.kowalik@suse.com>
- Lowercase metadata directory name.
* Sun Mar 24 2024 Dirk Müller <dmueller@suse.com>
- update to 3.4.0.5:
* Correct issur with GPU plugin in Docker images #2705
* Cyber security patch (update some deps in the WebUI and
Docker image)
* Mon Sep 04 2023 Steve Kowalik <steven.kowalik@suse.com>
- Update to 3.4.0.3:
* Influxdb2 export not working #2407
* 3.4.0 crash on startupwith minimal deps #2401
* Enhance process "extended stats" display (in Curses interface) #2225
* Improve Glances start time by disabling Docker and Podman version getter
* Customizable InfluxDB2 export interval #2348
* Improve kill signal management #2194
* Display a critical error message if Glances is ran with both webserver
and rpcserver mode
* Refactor the Cloud plugin, disable it by default in the default
configuration file - Related to #2279
* Correct clear-text logging of sensitive information (security alert #29)
* Use of a broken or weak cryptographic hashing algorithm (SHA256) on
password storage #2175
* Correct issue (error message) concerning the Cloud plugin
* InfluxDB2 export doesn't process folders correctly - missing key #2327
* Index error when displaying programs on MacOS #2360
* Dissociate 2 sensors with exactly the same names #2280
* It is not possible to return API data for a particular mount
point (FS plugin) #1162
- Drop patch remove-shebang.patch, no longer required.
- Switch to pyproject and autosetup macros.
* Thu Jul 06 2023 ecsos <ecsos@openssuse.org>
- Add %{?sle15_python_module_pythons}
* Tue Apr 25 2023 Andrea Manzini <andrea.manzini@suse.com>
- Update to 3.3.1
* Minor change on the help screen
* Refactor some loop in the processes function
* Replace json by ujson #2201
* Improvements on documentation, unit test and CI
* bump dependencies and web lib to address security
/usr/lib/firewalld /usr/lib/firewalld/services /usr/lib/firewalld/services/glances.xml /usr/lib/systemd/system/glances.service /usr/sbin/rcglances
Generated by rpm2html 1.8.1
Fabrice Bellet, Sun Aug 2 03:14:27 2026