Register | Log in

icingaweb2

simple and responsive web interface for Icinga

Choose email to subscribe with

general

source: icingaweb2 (main)
version: 2.7.3-1
maintainer: Debian Nagios Maintainer Group (archive) (DMD)
uploaders: Markus Frosch [DMD]
arch: all
std-ver: 4.4.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 2.4.1-1
old-bpo: 2.6.2-3~bpo9+1
stable: 2.6.2-3
testing: 2.7.3-1
unstable: 2.7.3-1

versioned links

2.4.1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.6.2-3~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.6.2-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.7.3-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

icingacli
icingaweb2
icingaweb2-common (1 bugs: 0, 0, 1, 0)
icingaweb2-module-doc
icingaweb2-module-monitoring
php-icinga

action needed

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 2.7.3-2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 085698d007ca7c45a4ad431ca00865718efcdb29
Author: Bas Couwenberg <sebastic@xs4all.nl>
Date:   Sat Jan 25 11:22:31 2020 +0100

    Bump Standards-Version to 4.5.0, no changes.

commit bead3de1807db0e8a02144a0924d2dbb93b53ecf
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Thu Dec 12 18:18:33 2019 +0000

    Remove obsolete field Name from debian/upstream/metadata (already present in machine-readable debian/copyright).

commit 46b64ec269faea474ef36894e8a3b529fb167a6c
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Thu Dec 12 18:18:13 2019 +0000

    Drop unnecessary dh arguments: --parallel
    
    Fixes lintian: debian-rules-uses-unnecessary-dh-argument
    See https://lintian.debian.org/tags/debian-rules-uses-unnecessary-dh-argument.html for more details.

commit d5d3d79e9a7e37230e88ca6250a90696d0aac2a9
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Thu Dec 12 18:17:51 2019 +0000

    Set debhelper-compat version in Build-Depends.
    
    Fixes lintian: uses-debhelper-compat-file
    See https://lintian.debian.org/tags/uses-debhelper-compat-file.html for more details.

commit c3b73904eed08e71dcda04c6103ef57d3e48286a
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Thu Dec 12 18:17:30 2019 +0000

    Bump debhelper from old 9 to 12.
    + debian/rules: Rely on default use of dh_missing rather than using dh_install --list-missing.
    
    Fixes lintian: package-uses-old-debhelper-compat-version
    See https://lintian.debian.org/tags/package-uses-old-debhelper-compat-version.html for more details.

Created: 2019-12-13 Last update: 2020-02-21 21:37

5 ignored security issues in stretch low

There are 5 open security issues in stretch.

5 issues skipped by the security teams:

CVE-2018-18250: Icinga Web 2 before 2.6.2 allows parameters that break navigation dashlets, as demonstrated by a single '$' character as the Name of a Navigation item.
CVE-2018-18248: Icinga Web 2 has XSS via the /icingaweb2/monitoring/list/services dir parameter, the /icingaweb2/user/list query string, the /icingaweb2/monitoring/timeline query string, or the /icingaweb2/setup query string.
CVE-2018-18249: Icinga Web 2 before 2.6.2 allows injection of PHP ini-file directives via vectors involving environment variables as the channel to send information to the attacker, such as a name=${PATH}_${APACHE_RUN_DIR}_${APACHE_RUN_USER} parameter to /icingaweb2/navigation/add or /icingaweb2/dashboard/new-dashlet.
CVE-2018-18246: Icinga Web 2 before 2.6.2 has CSRF via /icingaweb2/config/moduledisable?name=monitoring to disable the monitoring module, or via /icingaweb2/config/moduleenable?name=setup to enable the setup module.
CVE-2018-18247: Icinga Web 2 before 2.6.2 has XSS via the /icingaweb2/navigation/add icon parameter.

Please fix them.

Created: 2018-12-19 Last update: 2019-10-24 08:38

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.5.0 instead of 4.4.1).

Created: 2020-01-21 Last update: 2020-01-21 05:05

news

[2019-10-24] icingaweb2 2.7.3-1 MIGRATED to testing (Debian testing watch)
[2019-10-19] Accepted icingaweb2 2.7.3-1 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2019-08-21] icingaweb2 2.7.1-1 MIGRATED to testing (Debian testing watch)
[2019-08-16] Accepted icingaweb2 2.7.1-1 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2019-08-05] icingaweb2 2.7.0-1 MIGRATED to testing (Debian testing watch)
[2019-07-31] Accepted icingaweb2 2.7.0-1 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2019-07-13] icingaweb2 2.6.3-1 MIGRATED to testing (Debian testing watch)
[2019-07-13] icingaweb2 2.6.3-1 MIGRATED to testing (Debian testing watch)
[2019-07-07] Accepted icingaweb2 2.6.3-1 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2019-04-25] Accepted icingaweb2 2.6.3-1~exp1 (source all) into experimental (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2019-03-23] Accepted icingaweb2 2.6.2-3~bpo9+1 (source) into stretch-backports->backports-policy, stretch-backports (Chris Boot)
[2019-03-15] icingaweb2 2.6.2-3 MIGRATED to testing (Debian testing watch)
[2019-03-05] Accepted icingaweb2 2.6.2-3 (source all) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2019-01-06] Accepted icingaweb2 2.6.2-2~bpo9+1 (source) into stretch-backports (Chris Boot)
[2018-11-29] icingaweb2 2.6.2-2 MIGRATED to testing (Debian testing watch)
[2018-11-23] Accepted icingaweb2 2.6.2-2 (source all) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2018-11-23] Accepted icingaweb2 2.6.2-1 (source all) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2018-10-09] Accepted icingaweb2 2.6.1-1~bpo9+1 (source all) into stretch-backports, stretch-backports (Chris Boot)
[2018-08-12] icingaweb2 2.6.1-1 MIGRATED to testing (Debian testing watch)
[2018-08-06] Accepted icingaweb2 2.6.1-1 (source all) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2018-07-23] icingaweb2 2.6.0-1 MIGRATED to testing (Debian testing watch)
[2018-07-23] icingaweb2 2.6.0-1 MIGRATED to testing (Debian testing watch)
[2018-07-21] Accepted icingaweb2 2.6.0-1 (source all) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2018-05-11] icingaweb2 2.5.3-1 MIGRATED to testing (Debian testing watch)
[2018-05-08] Accepted icingaweb2 2.5.3-1 (source all) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2018-05-08] Accepted icingaweb2 2.5.3-1~exp3 (source all) into experimental (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2018-05-06] Accepted icingaweb2 2.5.3-1~exp2 (source all) into experimental (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2018-05-06] Accepted icingaweb2 2.5.3-1~exp1 (source all) into experimental (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2017-01-31] icingaweb2 2.4.1-1 MIGRATED to testing (Debian testing watch)
[2017-01-20] Accepted icingaweb2 2.4.1-1 (source all) into unstable (Markus Frosch)

1
2

bugs [bug history graph]

all: 3
RC: 0
I&N: 1
M&W: 2
F&P: 0
patch: 0

links

homepage
buildd: logs, clang, reproducibility
popcon
browse source code
edit tags
security tracker
screenshots

ubuntu

[Information about Ubuntu for Debian Developers]

version: 2.7.3-1
1 bug

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing