Bug Fix Release: Icinga 2 v2.16.3, v2.15.5, v2.14.10

6 July, 2026

Dirk Wening
Dirk Wening
Technical Writer

by | Jul 6, 2026

Shortly after the release of the latest security updates, there’s some news: Users who have enabled the ” Json.decode() ” feature in their settings were surprised by an unpleasant side effect. As part of one of the security fixes, the internal C++ function ` JsonDecode() ` was given an additional argument, which was inadvertently passed on to the DSL as well. To make matters worse, this argument was defined as a required argument—which caused existing calls to the function to fail.

Fix Available: Return to Original Behavior

The released versions restore the previous behavior: ` Json.decode() ` can once again be called with just one argument. An update is recommended for anyone affected by the regression. The updated versions are:

As usual, you can find the source code in the Icinga 2 Git repository, and updated binary packages are available on packages.icinga.com and in the Icinga for Windows repository. The container images are hosted on Docker Hub.

How did you like our article?