Updates Archive

Foreman & Katello Update | Fixes, CVEs, and New Releases

Installer Fix and CVE Updates At the Foreman Release Team Meeting on July 1, 2026, it was reported that the previously malfunctioning foreman-installer-source-release is now working again. The issue was resolved by two pull requests that restored compatibility between Podman and puppetlabs-concat. In the Nightly branch, as well as in the stable branches 3.18 and 3.19, four CVE fixes will also be released on the same day. Candlepin 4.8 and OCI Images In addition, Candlepin version 4.8 has been...

Bug Fix Release: Icinga 2 v2.16.3, v2.15.5, v2.14.10

by Dirk Wening

Shortly after the release of the latest security updates, there's some news: Users who have enabled the " Json.decode() " feature in their settings were surprised by an unpleasant side effect. As part of one of the security fixes, the internal C++ function ` JsonDecode() ` was given an additional argument, which was inadvertently passed on to the DSL as well. To make matters worse, this argument was defined as a required argument—which caused existing calls to the function to fail. Fix...

Security Release for Icinga 2 v2.16.2, 2.15.4, 2.14.9

by Dirk Wening

Today's security update for Icinga2 addresses several security vulnerabilities. Two of them are particularly critical. An update is absolutely necessary. An unauthenticated attacker can use this to take over or crash Icinga 2 processes over the network. The remaining updates apply only to authenticated API users. Find out here exactly what's affected, how high the risk is for your setup, and how to update in just a few minutes. The Vulnerabilities in Detail GHSA-vj39-ww8j-vvx5 ( CVE pending)...

Icinga Web Module for Performance Data Graphs

by Markus Opolka

After we forked the Grafana module for Icinga Web last year, we thought about whether there are other ways to graphically display Icinga performance data on the web. Running a Grafana instance alongside Icinga just for rendering graphs is a lot of effort and additional operational complexity, no matter how great you think Grafana is. In addition, the installation of the grafana-image-renderer is not always trivial. So we took a closer look at the topic and tried to create an Icinga Web module...

The Icinga Web Grafana module has found a new home

by Tobias Redel

We are happy to announce that the Icinga Web Grafana module has found a new home! Originally developed by Carsten (Mikesch-mp), this module is a valuable extension of the Icinga ecosystem and enables the integration of Grafana into the Icinga web interface. By handing over maintenance to our team, we undertake to ensure stability and compatibility. You can find the new repository for the module on GitHub at: 👉 https://github.com/NETWAYS/icingaweb2-module-grafana WHAT DOES THIS MEAN FOR YOU AS...

NIS 2 – The current status in January 2025

by Tobias Redel

Since its adoption, the EU Directive NIS 2 (Network and Information Security Directive 2) has been a central element of the European cyber security strategy. It aims to strengthen the resilience and protection of critical infrastructures (KRITIS) in Europe. In January 2025, many companies and organizations will need to further adapt their IT security standards. But what is the current status? What does NIS 2 actually mean for companies? Reminder: What is NIS 2? The NIS 2 Directive is the...

Icinga 2 Security Release – November 2024

by Tobias Redel

Critical error in the Icinga 2 core Today, November 12, 2024, the Icinga team has released a security fix that is classified as CRITICAL. The associated CVE (Common Vulnerabilities and Exposures) can be found under the number CVE-2024-49369. You can find Icinga's blog post on the topic here: https://icinga.com/blog/2024/11/12/critical-icinga-2-security-releases-2-14-3/ Our recommendation The problems affect masters, satellites and agents. We recommend that all Icinga users install this update...