From 4951cdf5610f6ab37ac86263143d99a9c0c8beb3 Mon Sep 17 00:00:00 2001 From: Noah Hilverling Date: Thu, 19 Aug 2021 11:17:45 +0200 Subject: [PATCH] Add security changelog for 2.13.1 --- CHANGELOG.md | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 41b15915a..f23820835 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -9,7 +9,18 @@ Released closed milestones can be found on [GitHub](https://github.com/Icinga/ic ## 2.13.1 (2021-08-19) -Version 2.13.1 fixes two issues indroduced with the 2.13.0 release. +The main focus of this version is a security vulnerability in the TLS certificate verification of our metrics writers ElasticsearchWriter, GelfWriter, InfluxdbWriter and Influxdb2Writer. + +Version 2.13.1 also fixes two issues indroduced with the 2.13.0 release. + +### Security + +* Add TLS server certificate validation to ElasticsearchWriter, GelfWriter, InfluxdbWriter and Influxdb2Writer ([GHSA-cxfm-8j5v-5qr2](https://github.com/Icinga/icinga2/security/advisories/GHSA-cxfm-8j5v-5qr2)) + +Depending on your setup, manual intervention beyond installing the new versions +may be required, so please read the more detailed information in the +[release blog post](https://icinga.com/blog/2021/08/19/icinga-2-13-1-security-release//) +carefully ### Bugfixes