LoginSign Up
← Back to all sparks
G

Glances

ANALYTICS
Velocity5.0

Cross-platform system monitoring tool with web and terminal interfaces

nicolargo.github.io/glances ↗

Glances 4.5.9 closes out the 4.x line as a 5.0 beta opens for testing.

system monitoringsecurity fixesmajor versionrest apiopen source
◆Current state
Glances 4.5.9 replaces the python-jose library, which carried a CVE, with PyJWT and updates every dependency. The notes say it is the last 4.x release and point users to a Glances 5.0.0 beta on Test PyPI and a dev Docker image. Most 4.5 releases this year were security and correctness fixes.
◆Where it's heading
After a year of CVE patches and alert correctness work on 4.5, the project is ending the 4.x line and moving to 5.0. The feed does not yet describe what changes in 5.0.
◆Prediction
Expect further 5.0 betas and then a 5.0.0 release; whether it changes the plugin model, web UI or API is not visible in these entries.

◆Recent moves

  1. 6d ago

    Glances 4.5.9

    4.5.9 swaps the vulnerable python-jose library for PyJWT, updates every dependency and declares itself the last 4.x release. A 5.0.0 beta is now installable from Test PyPI or a dev Docker image, though its contents are not described here.

    View source ↗
  2. 1mo ago

    Glances 4.5.8

    Glances 4.5.8 fixes stdout CSV fields, dotted raw selectors, duplicated folder lists and the last sample lost in JSON export. Export and output bug fixes.

    View source ↗
  3. 1mo ago

    Pre-cutover tag before the v4 migration

    A tag marking the point before a v4 migration cutover, with renovate paused. Repository housekeeping, not a release.

    View source ↗
  4. 1mo ago

    Glances 4.5.7 fixes dozens of wrong or silent alerts

    A large correctness release: alerts for connections, disk I/O, network, sensors and NPUs now fire on the right values, WebUI cells are coloured by the right metrics, and --enable-mcp works again with mcp 2.0. It ends the run of security-led releases.

    View source ↗
  5. 3mo ago

    Credential leak via URL values in /api/4/config

    Fixes a credential leak where as_dict_secure() redacted keys but not values, exposing credentials embedded in URLs through /api/4/config, plus GPU plugin duplication in multi-GPU systems and a misleading VideoCore memory denominator on Raspberry Pi 5.

    View source ↗
  6. 5mo ago

    Container API latency, ARM GPU monitoring, AMP command-execution fix

    Cuts container API latency that left /api/4/containers taking four to five seconds with around sixty Docker containers, adds ARM and Raspberry Pi GPU monitoring plus NVIDIA Jetson process and temperature reporting, and fixes arbitrary file write and command execution in AMP command configuration.

    View source ↗