Technology Services, Munki Changelog

Munki

None at this time

December 20, 2022

On Tuesday, December 20th, from 7:00 AM to 9:00 AM, the Endpoint Services (EPS) team will be applying visual updates to the Multi-Tenant Munki service. During this time, access to the MTM portal and MTM WebDAV may be interrupted. No further action is required by IT Pros.

Notable Changes:

• Update the MTM portal CSS and logo to better align with university system branding guidelines
• Add a header to the MTM portal banner
• Some navigation bar buttons now open in a new tab/window instead of the same window

October 28, 2022

On Friday, October 28th, the Endpoint Services (EPS) team will be making modifications to the Multi-Tenant Munki service.

Notable Changes:

• Fixed a bug that required the 'Use Templates' and 'Force Rename' checkboxes to be selected to add a computer successfully

September 21, 2022

On Wednesday, September 21st, from 7:00 AM to 9:00 AM, the Endpoint Services (EPS) team will be performing database upgrades for the Multi-Tenant Munki and MunkiReport services. During this time, access to the MTM portal, MTM WebDAV, and MunkiReport may be interrupted. No further action is required by IT Pros.

August 3, 2022

On Wednesday, August 3rd, from 5:00 PM to 7:00 PM, the Endpoint Services (EPS) team will be updating the SSL certificates for the Multi-Tenant Munki and MunkiReport services. During this time, access to the MTM portal, MTM WebDAV, and MunkiReport may be interrupted. No further action is required by IT Pros.

November 30, 2021

On Tuesday, November 30th, from 7:00 AM to 9:00 AM, the Endpoint Services (EPS) team will be performing maintenance on the Multi-Tenant Munki and MunkiReport systems. The services will be unavailable intermittently during the event. No further action is required by IT Pros.

Notable Changes:

• Update MTM code for PHP 8 compatibility

September 14, 2021

On Tuesday, September 14th, from 7:00 AM to 9:00 AM, the Endpoint Services (EPS) team will be updating the SSL certificates for the Multi-Tenant Munki and MunkiReport services. During this time, access to the MTM portal, MunkiReport, and WebDAV may be interrupted. No further action is required by IT Pros.

August 10, 2021

On Tuesday, August 10th, from 7:00 AM to 9:00 AM, the Endpoint Services (EPS) team will be making modifications to the Multi-Tenant Munki service. During this time, portal access and WebDAV access may be interrupted. No further action is required by IT Pros.

Notable Changes:

• Configure Munki client basic authentication as part of the client onboarding process
• Convert Multi-Tenant Munki preflight scripts from Python to Shell to remove dependencies on Munki libraries
  • Resolves issues with Munki v5.5

May 4, 2021

The Endpoint Services team will be applying an emergency patch tomorrow morning, from 7:00 AM to 9:00 AM on the Multi-Tenant Munki server. The service will be unavailable intermittently during the event. This should resolve any issues with Munki introduced by the recent macOS 11.3 upgrade. Any Macs that had previously been upgraded to macOS 11.3 should begin reconnecting afterwards. No further action is required by IT Pros.

Notable Changes:

• Transition Multi-Tenant Munki client authentication from using SSL client authentication to basic authentication
  • Resolves issues with Munki client authentication introduced by the macOS 11.3 update
• Improve the Munki service’s resiliency during periods of high demand

February 15, 2021

On Wednesday, February 15, from 7:00 AM to 9:00 AM, the Endpoint Services (EPS) team will be making modifications to the Multi-Tenant Munki service. During this time, portal access and WebDAV access may be interrupted. No further action is required by IT Pros.

Notable Changes:

• Update the MTM Shibboleth metadata configuration

October 7, 2020

On Wednesday, October 7, from 7:00 AM to 9:00 AM, the Endpoint Services (EPS) team will be making modifications to the Multi-Tenant Munki service. During this time, portal access and WebDAV access may be interrupted. No further action is required by IT Pros.

Notable Changes:

• Fix bug where computers with an ‘ungenerated’ status did not respect their time window
• Fix sorting of software on the MTM software list
• Add HTML lang attribute to portal for improved accessibility
• Backend PHP upgrade
• Add separate download links for Munki v4 and Munki v5 to MTM downloads page

September 16, 2020

Endpoint Services is currently testing Munki version 5 (v5) and will be rolling it out to endpoints using the Multi-Tenant Munki service. Munki v5 introduces some significant changes to how Munki handles updates:

• On macOS 10.14+, Munki v5 won't attempt installation of Apple Updates that require a restart (e.g. point releases, security updates, BridgeOSupdates)
  • For these updates, Munki v5 directs users to System Preferences - Software Update
• Munki v5 offers additional update encouragement, including number of days an update has been pending
• More aggressive update notification behavior begins after 14 days (a default setting), making it more difficult for users to ignore or defer pending updates
  • EPS will offer optional configurations for 7, 21, and 30 days before aggressive update notification behavior begins
  • EPS will also offer an optional configuration to completely disable aggressive update notification behavior
• Currently there's no Apple-supported method for automated, touch-free updates
  • EPS is testing a workaround for non-T2, non-encrypted hardware
• EPS will release Munki v5 using a different name key than v4, allowing stakeholders to make the transition at their own pace

January 23, 2020

On Thursday, January 23, from 7:00 AM to 9:00 AM, the Endpoint Services (EPS) team will be making modifications to the Multi-Tenant Munki service. During this time, portal access and WebDAV access may be interrupted. No further action is required by IT Pros.

Notable Changes:

• The work will fix a bug that affects the re-onboarding of machines that do not have MunkiReport installed.

MunkiReport

None at this time

February 28, 2023

On Tuesday, February 28th, from 7:00 AM to 9:00 AM, the Endpoint Services (EPS) team will be upgrading the MunkiReport client version to 5.7.3. No further action is required by IT Pros. The client upgrade installer will be promoted to production catalogs during the regular Wednesday release cycle.

Bug Fixes:

• Fix for Manifests module UI bug when there is no manifest data
• Fix for Homebrew Info module missing a variable in the client script
• Fix for Security module to properly get the CPU architecture for Apple Silicon devices

• General cleanup of the Security module
• Enhancement to the CrowdStrike module to add sensor state data

September 21, 2022

On Wednesday, September 21st, from 7:00 AM to 9:00 AM, the Endpoint Services (EPS) team will be performing database upgrades for the Multi-Tenant Munki and MunkiReport services. During this time, access to the MTM portal, MTM WebDAV, and MunkiReport may be interrupted. No further action is required by IT Pros.

September 19, 2022

On Monday, September 19th, from 7:00 AM to 9:00 AM, the Endpoint Services (EPS) team will be upgrading the MunkiReport client version to 5.7.2. No further action is required by IT Pros. The client upgrade installer will be promoted to production catalogs during the regular Wednesday release cycle.

Bug Fixes:

• Fix for Applications module missing the last_modified value for some applications
• Fix for Bluetooth module not populating Bluetooth MAC addresses for Macs running macOS 12 and higher if Bluetooth was turned off
• Fix for Disk Report module script not running properly on macOS 11 and higher
• Fix for Disk Report module missing filesystem types in the widget
• Fix for FindMyMac module SQLSTATE error when FindMyMac was disabled
• Fix for Homebrew module to accomodate changes in Homebrew path on Apple Silicon
• Fix for Homebrew Info module to accomodate changes in Homebrew path on Apple Silicon
• Fix for iBridge module generating data for non-iBridge Macs on macOS 12
• Fix for iBridge module displaying iOS devices on Apple Silicon
• Fix for iBridge module displaying duplicate iBridge entries on Apple Silicon
• Fix for Network module UI bug on Apple Silicon Macs
• Fix for Network module displaying the VLANs column too small
• Fix for Network module for non-US Macs reporting a payload larger than the supported 255-character length for supported_channels
• Fix for Power module not displaying the battery manufacturer for some Macs
• Fix for Power module missing battery data in some cases on macOS 11 and higher
• Fix for Power module displaying blank values on the battery condition widget in some cases
• Fix for Power module missing the "Good" battery condition button on its widget
• Fix for Security module displaying incorrect FileVault data
• Fix for Securuty module 'No such key: GroupMembership' error
• Fix for Time Machine module "Invalid date" error
• Fix for Time Machine module broken client tab in some cases when there wasn't any Time Machine errors
• Fix for USB module client tab not displaying for a device if no USB devices were connected
• Fix for Users module Group Membership column overflow issue
• Fix for Users module detection of admin users
• Fix for Users module broken auto login widget
• Fix for Users module issue where the script would crash if a user account did not have a user_att key
• Fix for Users module displaying duplicate local admin users on the client tab in some situations
• Fix for Browser Extensions tab for Firefox extensions not reporting if a profile did not exist

• Enhancement to Disk Report module to hide hidden system volumes (/System/Volumes/xarts, /System/Volumes/Hardware, etc.)
• Enhancement to Fan Temps module to add support for Apple Silicon
• Enhancement to the MDM Status module to add a new 'MDM server URL' widget
• Enhancement to the MunkiReportInfo module to collect more server and client errors and warnings
• Enhancement to Power module to add full support for Apple Silicon
• Enhancement to the Security module to remove debugging messages for Apple Silicon
• Enhancement to the SoftwareUpdate module to add the collection of XProtect payload data on macOS 10.15 and higher
• Enhancement to the Sophos module to add support for Sophos Central with InterceptX
• Enhancement to the Supported OS module to update the latest version of macOS to macOS 13 Ventura
• Enhancement to the Supported OS module to update the supported hardware for macOS Ventura
• Enhancement to the Usage Stats module client tab to make it dynamic and hide unused values
• Enhancement to the USB module to add more USB device types
• Enhancement to the Users module to add automatic login information
• Enhancement to the WiFi module to add a new WiFi Report
• Enhancement to the WiFi module to add a new 'WiFi security encryption level' widget
• Enhancement to the Browser Extensions module to filter out default browser extensions
• General cleanup of the MDM Status module
• General cleanup of the Network module
• General cleanup of the Profile module
• General cleanup of the Security module
• General cleanup of the SMART Stats module
• General cleanup of the Time Machine module
• General cleanup of the WiFi module

August 3, 2022

On Wednesday, August 3rd, from 5:00 PM to 7:00 PM, the Endpoint Services (EPS) team will be updating the SSL certificates for the Multi-Tenant Munki and MunkiReport services. During this time, access to the MTM portal, MTM WebDAV, and MunkiReport may be interrupted. No further action is required by IT Pros.

April 6, 2022

On Wednesday, April 6th, from 7:00 AM to 9:00 AM, the Endpoint Services (EPS) team will be upgrading the MunkiReport client version to 5.7.1. No further action is required by IT Pros. The client upgrade installer will be promoted to production catalogs that same day.

Bug Fixes:

• Fix for Findmymac module failing to parse the Date Enabled field properly for older versions of macOS
• Fix for Power module calculating battery health incorrectly for Apple Silicon/M1 Macs
• Fix for Security module displaying incorrect FileVault data
• Fix for Users module failing to identify local administrators

• Enhancement to Security module to add Activation Lock status
• Enhancement to Sophos module to add support for Sophos Central with InterceptX
• Enhancement to Users module to add the status of auto login for user accounts

February 22, 2022

On Tuesday, February 22nd, from 7:00 AM to 9:00 AM, the Endpoint Services (EPS) team will be upgrading the MunkiReport server to version 5.7.0. No further action is required by IT Pros. The client upgrade installer will be promoted to production catalogs that same day.

Notable changes:

• This release addresses the issue of Apple removing python 2.7 from macOS 12.3
• Fix for Users module where users that were print administrators were erroneously listed as system administrators.

December 20, 2021

On Monday, December 20th, from 7:00 AM to 9:00 AM, the Endpoint Services (EPS) team will be upgrading the MunkiReport client version to 5.6.7. No further action is required by IT Pros. The client upgrade installer will be promoted to production catalogs that same day.

Bug Fixes:

• Fix for Bluetooth module not reporting Bluetooth information for Macs running macOS 12 Monterey
• Fix for iBridge module generating errors for Macs without an iBridge chip
• Fix for USB module not properly setting device type if there were unknown values

• Enhancement to Profiles module to add support for capturing data from profiles with larger payloads (e.g., an MDM profile for printers)
• Enhancement to Supported OS module to add macOS 12 as the latest OS
• Enhancement to Kernel Panics module to support macOS 12
• Change in the display of OS versions in the Supported OS module
  • Starting with macOS 12, this module will no longer show macOS point releases for versions of macOS that are still receiving updates (N-2)

September 14, 2021

On Tuesday, September 14th, from 7:00 AM to 9:00 AM, the Endpoint Services (EPS) team will be updating the SSL certificates for the Multi-Tenant Munki and MunkiReport services. During this time, access to the MTM portal, MunkiReport, and WebDAV may be interrupted. No further action is required by IT Pros.

On Tuesday, April 20th, from 7:00 AM to 9:00 AM, the Endpoint Services team will be upgrading the MunkiReport server to version 5.6.5. No further action is required by IT Pros.

• New Browser Extensions module
  • Only works for Google Chrome, Microsoft Edge, and Mozilla Firefox browsers

• Fix for 32-bit apps widgets
• Fix for Bluetooth module logic for devices with Bluetooth enabled but no connected devices
• Fix for Devtools module logic for devices that do not have Xcode installed
• Fix for Disk Report module for disk encryption status of FileVaulted APFS volumes
• Fix for Software Update module not collecting MRT update data on newer versions of macOS
• Fix for USB module for broken widgets and issues with devices without vendor IDs

• Updated Apple support URL used for machine model lookups to use HTTPS
• Add text renderer to Applications module to prevent cross-site scripting (XSS) attacks.
• Update Shibboleth to v3.2.1

• Improvements to Power module for better support of Big Sur and M1 machines
• Changes to CrowdStrike module so that only non-empty records are displayed in the listing
• General cleanup of Find My Mac module and added 'Date Enabled' field
• General cleanup of iBridge module and addition of new fields (iBridge version, iBridge hardware model, Machine region, iBridge OS version, iBridge board ID, Machine model)
• General cleanup of Printer module
• General cleanup of USB module

On Tuesday, March 2nd, from 7:00 AM to 9:00 AM, the Endpoint Services team will be upgrading the MunkiReport server to version 5.6.4. No further action is required by IT Pros.

• macOS 11 Big Sur support
• Apple Silicon M1 support
• Application architecture (Universal, Intel) column added to the applications listing

On August 12, 2020, the Endpoint Services team will be upgrading the MunkiReport service to version 5.6.3. All existing endpoint data will remain intact. IT Pros will need to clear their browser cache or use private browsing to avoid issues with deleting machines.

• Patches a number of security vulnerabilities
  • XSS Filter Bypass On Comments
  • CSRF Bypass On Endpoints With No Body Parameters
  • munki_facts XSS
  • Reflected XSS In Managedinstalls Module
  • SQL Injection In Datatables Order By In Post Body
  • SQL Injection In Reportdata Ip In 'req' GET Parameter
  • SQL Injection in softwareupdate module
• Improvement in disk report module so that only the root partition is used when calculating FileVault status
• “Auth Restart Supported” column added to the FileVault Listing
• Removal of external IP in network module
  • Fixes issue with data ingestion failure causing partial client imports
• Log file size added to MunkiReport module
• Fix for passing Munki runtype variable in preflight scripts (used by MunkiTimeWindow)
• Miscellaneous backend fixes and enhancements

On July 7, 2020, the Endpoint Services team will be upgrading the MunkiReport service to version 5.6.2. All existing endpoint data will remain intact. No further action is required by IT Pros.

• Adds macOS 11.0 (Big Sur beta) as latest highest supported OS
• Miscellaneous backend fixes and enhancements

On June 11, 2020, the Endpoint Services team will be upgrading the MunkiReport service to version 5.5.1. No further action is required by IT Pros. The client upgrade installer will be promoted to production catalogs during the regular Wednesday release cycle.

• New Firewall module
• Apple Remote Desktop module rewrite with additional data added to Apple Remote Desktop module (ARD users, VNC enabled, Allow All Local Users, etc.)
• Additional data added to MunkiReport module (MR file upload size, MR warnings, start/end time, etc.)
• Localadmin module deprecated and replaced with the new Users module
  • Some existing data for users/local administrators on devices will be erased! Data should repopulate upon next client check-in following the installation of the latest MunkiReport package.
• Highest Supported OS module renamed to Supported OS
  • Module now shows the operating system that a machine shipped with
• Archiver user role added
• Miscellaneous bug fixes

On May 28, 2020, from 7:00 AM to 9:00 AM, the Endpoint Services team will be upgrading the MunkiReport service to version 5.4.1. No further action is required by IT Pros. The client upgrade installer will be promoted to production catalogs during the regular Wednesday release cycle.

• New archiving feature
  • Archiving machines will not remove them from Endpoint Services billing! Be sure to delete inactive machines to avoid inaccurate charges.
  • Similar to deleting machines, only users with the MunkiReport admin role can archive machines.
  • Archived machines that check-in again should automatically change their status from ‘Archived’ to ‘In Use’.
  • New archive filters have been added.
• Bluetooth module rewrite with enhanced features
  • Existing Bluetooth device data will be erased! Bluetooth data should repopulate upon next client check-in.
• Miscellaneous bug fixes

On Tuesday, May 5th, from 7:00 AM to 9:00 AM, the Endpoint Services (EPS) team will be upgrading the MunkiReport server to version 5.3.5. All existing endpoint data will remain intact. No further action is required by IT Pros. The client upgrade installer will be promoted to production catalogs during the regular Wednesday release cycle.

• Zoom has been added to the App Versions report
• Cross Site Request Forgery (CSRF) vulnerability patches
• Fix for PHP and Apache version information leakage
• Miscellaneous bug fixes