LoginSign Up
← Back to all sparks
G

Glances

ANALYTICS
Velocity5.0

Cross-platform system monitoring tool with web and terminal interfaces

nicolargo.github.io/glances ↗

After a year of CVE fixes, Glances 4.5.7 turns to making its alerts tell the truth.

system monitoringsecurity fixesalertinggpu monitoringrest api
◆Current state
Most Glances releases this year carried security patches: 4.5.2 alone corrected eight CVEs, and 4.5.3 to 4.5.6 kept going, ending with a credential leak through URL config values. 4.5.7 in September broke the pattern with a long list of correctness fixes, many of them alerts that fired on the wrong value or never fired, plus WebUI colouring bugs and a fix for --enable-mcp under mcp 2.0. 4.5.8 in October fixed export edge cases.
◆Where it's heading
Hardware coverage keeps widening alongside the fixes (Intel, AMD and ARM GPUs, Rockchip NPUs, LXC containers), and a v4 cutover tag in October suggests repository restructuring ahead. The security run appears to have eased since August.
◆Prediction
Unclear what the v4 cutover changes for users; until it is explained, expect more 4.5.x maintenance releases.

◆Recent moves

  1. 24d ago

    Glances 4.5.8

    Glances 4.5.8 fixes stdout CSV fields, dotted raw selectors, duplicated folder lists and the last sample lost in JSON export. Export and output bug fixes.

    View source ↗
  2. 25d ago

    Pre-cutover tag before the v4 migration

    A tag marking the point before a v4 migration cutover, with renovate paused. Repository housekeeping, not a release.

    View source ↗
  3. 1mo ago

    Glances 4.5.7 fixes dozens of wrong or silent alerts

    A large correctness release: alerts for connections, disk I/O, network, sensors and NPUs now fire on the right values, WebUI cells are coloured by the right metrics, and --enable-mcp works again with mcp 2.0. It ends the run of security-led releases.

    View source ↗
  4. 3mo ago

    Credential leak via URL values in /api/4/config

    Fixes a credential leak where as_dict_secure() redacted keys but not values, exposing credentials embedded in URLs through /api/4/config, plus GPU plugin duplication in multi-GPU systems and a misleading VideoCore memory denominator on Raspberry Pi 5.

    View source ↗
  5. 4mo ago

    Container API latency, ARM GPU monitoring, AMP command-execution fix

    Cuts container API latency that left /api/4/containers taking four to five seconds with around sixty Docker containers, adds ARM and Raspberry Pi GPU monitoring plus NVIDIA Jetson process and temperature reporting, and fixes arbitrary file write and command execution in AMP command configuration.

    View source ↗
  6. 6mo ago

    Rockchip MPP and NPU monitoring, plus three CVE corrections

    Adds a Rockchip MPP plugin for hardware encoder and decoder monitoring and single-core NPU load parsing, and corrects three CVEs — SSRF in the IP plugin leaking credentials, unauthenticated cross-origin disclosure via /api/4, and CQL injection in the Cassandra export.

    View source ↗