From d31c2f156fc7c0eaeb753711fc9e752cb2c8d522 Mon Sep 17 00:00:00 2001 From: "icinga-probot[bot]" <70573609+icinga-probot[bot]@users.noreply.github.com> Date: Thu, 4 Nov 2021 12:21:29 +0100 Subject: [PATCH] CHANGELOG.md: add v2.11.11 (#9055) Co-authored-by: Noah Hilverling --- CHANGELOG.md | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index f23820835..00895ece7 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -500,6 +500,19 @@ Thanks to all contributors: * Code quality fixes * Small documentation fixes +## 2.11.11 (2021-08-19) + +The main focus of these versions is a security vulnerability in the TLS certificate verification of our metrics writers ElasticsearchWriter, GelfWriter and InfluxdbWriter. + +### Security + +* Add TLS server certificate validation to ElasticsearchWriter, GelfWriter and InfluxdbWriter + +Depending on your setup, manual intervention beyond installing the new versions +may be required, so please read the more detailed information in the +[release blog post](https://icinga.com/blog/2021/08/19/icinga-2-13-1-security-release//) +carefully + ## 2.11.10 (2021-07-15) Version 2.11.10 fixes two security vulnerabilities that may lead to privilege