icinga2 - Debian Package Tracker

general

source: icinga2 (main)
version: 2.13.8-1
maintainer: Debian Nagios Maintainer Group (archive) (DMD)
uploaders: Alexander Wirt [DMD] – Jan Wagner [DMD] – Markus Frosch [DMD]
arch: all any
std-ver: 4.6.2
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 2.10.3-2+deb10u1
oldstable: 2.12.3-1
stable: 2.13.6-2
testing: 2.13.8-1
unstable: 2.13.8-1
exp: 2.14.0-1~exp1

versioned links

2.10.3-2+deb10u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.12.3-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.13.6-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.13.8-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.14.0-1~exp1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

icinga2 (3 bugs: 0, 1, 2, 0)
icinga2-bin (1 bugs: 0, 1, 0, 0)
icinga2-common (1 bugs: 0, 1, 0, 0)
icinga2-doc
icinga2-ido-mysql (2 bugs: 0, 2, 0, 0)
icinga2-ido-pgsql
vim-icinga2

action needed

A new upstream version is available: 2.14.0 high

A new upstream version 2.14.0 is available, you should consider packaging it.

Created: 2023-07-12 Last update: 2023-09-26 00:34

1 bug tagged patch in the BTS normal

The BTS contains patches fixing 1 bug, consider including or untagging them.

Created: 2023-09-13 Last update: 2023-09-26 00:02

Does not build reproducibly during testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2022-11-14 Last update: 2023-09-25 20:01

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 2.14.0-1~exp2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 82da9c1862d797bdf62bf3c52eedd24dafb85377
Author: Bas Couwenberg <sebastic@xs4all.nl>
Date:   Wed Aug 30 15:50:54 2023 +0200

    Use dh-sequence-{bash-completion,vim-addon}.

commit d1605ffb8c09ebd7b719a04de24ee2d6b9423d57
Author: Bas Couwenberg <sebastic@xs4all.nl>
Date:   Fri Aug 25 20:47:11 2023 +0200

    Allow reprotest to fail.

commit 59bf8efd7757ffd2adb779d75d7aabf50fe652f8
Author: Bas Couwenberg <sebastic@xs4all.nl>
Date:   Fri Aug 25 20:08:41 2023 +0200

    Ignore test failures on i386.

commit 60fa776db7de3f001f17e1a37949c2830e540800
Author: Bas Couwenberg <sebastic@xs4all.nl>
Date:   Fri Aug 25 19:34:35 2023 +0200

    Enable Salsa CI.

Created: 2023-08-27 Last update: 2023-09-24 14:13

lintian reports 2 warnings normal

Lintian reports 2 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2022-11-08 Last update: 2023-07-13 03:08

3 low-priority security issues in bullseye low

There are 3 open security issues in bullseye.

3 issues left for the package maintainer to handle:

CVE-2021-32739: (needs triaging) Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. From version 2.4.0 through version 2.12.4, a vulnerability exists that may allow privilege escalation for authenticated API users. With a read-ony user's credentials, an attacker can view most attributes of all config objects including `ticket_salt` of `ApiListener`. This salt is enough to compute a ticket for every possible common name (CN). A ticket, the master node's certificate, and a self-signed certificate are enough to successfully request the desired certificate from Icinga. That certificate may in turn be used to steal an endpoint or API user's identity. Versions 2.12.5 and 2.11.10 both contain a fix the vulnerability. As a workaround, one may either specify queryable types explicitly or filter out ApiListener objects.
CVE-2021-32743: (needs triaging) Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. In versions prior to 2.11.10 and from version 2.12.0 through version 2.12.4, some of the Icinga 2 features that require credentials for external services expose those credentials through the API to authenticated API users with read permissions for the corresponding object types. IdoMysqlConnection and IdoPgsqlConnection (every released version) exposes the password of the user used to connect to the database. IcingaDB (added in 2.12.0) exposes the password used to connect to the Redis server. ElasticsearchWriter (added in 2.8.0)exposes the password used to connect to the Elasticsearch server. An attacker who obtains these credentials can impersonate Icinga to these services and add, modify and delete information there. If credentials with more permissions are in use, this increases the impact accordingly. Starting with the 2.11.10 and 2.12.5 releases, these passwords are no longer exposed via the API. As a workaround, API user permissions can be restricted to not allow querying of any affected objects, either by explicitly listing only the required object types for object query permissions, or by applying a filter rule.
CVE-2021-37698: (needs triaging) Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. In versions 2.5.0 through 2.13.0, ElasticsearchWriter, GelfWriter, InfluxdbWriter and Influxdb2Writer do not verify the server's certificate despite a certificate authority being specified. Icinga 2 instances which connect to any of the mentioned time series databases (TSDBs) using TLS over a spoofable infrastructure should immediately upgrade to version 2.13.1, 2.12.6, or 2.11.11 to patch the issue. Such instances should also change the credentials (if any) used by the TSDB writer feature to authenticate against the TSDB. There are no workarounds aside from upgrading.

You can find information about how to handle these issues in the security team's documentation.

Created: 2022-07-04 Last update: 2023-07-18 05:36

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2023-01-23 Last update: 2023-01-23 06:44

testing migrations

This package will soon be part of the boost1.81 transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.

news

[rss feed]

[2023-07-18] icinga2 2.13.8-1 MIGRATED to testing (Debian testing watch)
[2023-07-12] Accepted icinga2 2.14.0-1~exp1 (source) into experimental (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2023-07-12] Accepted icinga2 2.13.8-1 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2023-06-17] icinga2 2.13.7-1 MIGRATED to testing (Debian testing watch)
[2023-06-17] icinga2 2.13.7-1 MIGRATED to testing (Debian testing watch)
[2023-06-11] Accepted icinga2 2.13.7-1 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2023-02-16] Accepted icinga2 2.13.7-1~exp1 (source) into experimental (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2023-01-28] icinga2 2.13.6-2 MIGRATED to testing (Debian testing watch)
[2023-01-22] Accepted icinga2 2.13.6-2 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2022-11-13] icinga2 2.13.6-1 MIGRATED to testing (Debian testing watch)
[2022-11-07] Accepted icinga2 2.13.6-1 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2022-10-25] Accepted icinga2 2.13.5-2 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2022-08-17] icinga2 2.13.5-1 MIGRATED to testing (Debian testing watch)
[2022-08-11] Accepted icinga2 2.13.5-1 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2022-07-14] icinga2 2.13.4-1 MIGRATED to testing (Debian testing watch)
[2022-06-30] Accepted icinga2 2.13.4-1 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2022-04-19] icinga2 2.13.3-1 MIGRATED to testing (Debian testing watch)
[2022-04-13] Accepted icinga2 2.13.3-1 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2021-11-18] icinga2 2.13.2-1 MIGRATED to testing (Debian testing watch)
[2021-11-13] Accepted icinga2 2.13.2-1 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2021-11-10] Accepted icinga2 2.6.0-2+deb9u2 (source) into oldoldstable (Sylvain Beucler)
[2021-08-25] icinga2 2.13.1-1 MIGRATED to testing (Debian testing watch)
[2021-08-19] Accepted icinga2 2.13.1-1 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2021-08-15] Accepted icinga2 2.12.5-1 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2021-08-04] Accepted icinga2 2.13.0-1~exp1 (source) into experimental (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2021-07-16] Accepted icinga2 2.12.5-1~exp1 (source) into experimental (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2021-05-27] Accepted icinga2 2.12.4-1~exp1 (source) into experimental (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2020-12-18] icinga2 2.12.3-1 MIGRATED to testing (Debian testing watch)
[2020-12-16] Accepted icinga2 2.12.3-1 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2020-12-01] icinga2 2.12.2-1 MIGRATED to testing (Debian testing watch)

bugs [bug history graph]

all: 7
RC: 0
I&N: 5
M&W: 2
F&P: 0
patch: 1

links

homepage
lintian (0, 2)
buildd: logs, exp, checks, reproducibility, cross
popcon
browse source code
edit tags
other distros
security tracker
screenshots
l10n (100, -)
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 2.13.8-1
4 bugs