From 45452629db2e82a89cb1c1ee44c88b2eec832cdf Mon Sep 17 00:00:00 2001 From: "Alexander A. Klimov" Date: Tue, 22 Oct 2024 12:02:57 +0200 Subject: [PATCH] Icinga 2.14.3 --- CHANGELOG.md | 9 +++++++++ ICINGA2_VERSION | 2 +- 2 files changed, 10 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index f808c2f5f..e51737fcb 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,6 +7,15 @@ documentation before upgrading to a new release. Released closed milestones can be found on [GitHub](https://github.com/Icinga/icinga2/milestones?state=closed). +## 2.14.3 (2024-11-12) + +This security release fixes a TLS certificate validation bypass. +Given the severity of that issue, users are advised to upgrade all nodes immediately. + +* Security: fix TLS certificate validation bypass. CVE-2024-49369 +* Security: update OpenSSL shipped on Windows to v3.0.15. +* Windows: sign MSI packages with a certificate the OS trusts by default. + ## 2.14.2 (2024-01-18) Version 2.14.2 is a hotfix release for master nodes that mainly diff --git a/ICINGA2_VERSION b/ICINGA2_VERSION index 4ddf75a41..9484e3caf 100644 --- a/ICINGA2_VERSION +++ b/ICINGA2_VERSION @@ -1,2 +1,2 @@ -Version: 2.14.2 +Version: 2.14.3 Revision: 1