From dfa29129836a5c87a7d295d84a676f4579aae1d2 Mon Sep 17 00:00:00 2001 From: "Alexander A. Klimov" Date: Tue, 12 Nov 2024 19:21:36 +0000 Subject: [PATCH] CHANGELOG.md: add v2.14.3 --- CHANGELOG.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index fd231d320..b9b9d08ad 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,6 +7,15 @@ documentation before upgrading to a new release. Released closed milestones can be found on [GitHub](https://github.com/Icinga/icinga2/milestones?state=closed). +## 2.14.3 (2024-11-12) + +This security release fixes a TLS certificate validation bypass. +Given the severity of that issue, users are advised to upgrade all nodes immediately. + +* Security: fix TLS certificate validation bypass. CVE-2024-49369 +* Security: update OpenSSL shipped on Windows to v3.0.15. +* Windows: sign MSI packages with a certificate the OS trusts by default. + ## 2.14.2 (2024-01-18) Version 2.14.2 is a hotfix release for master nodes that mainly