Release version 2.8.6

This commit is contained in:
Johannes Meyer 2022-03-08 12:07:35 +01:00
commit 2a176fa1ae
9 changed files with 21 additions and 8 deletions

View File

@ -4,6 +4,19 @@ Please make sure to always read our [Upgrading](doc/80-Upgrading.md) documentati
## What's New
### What's New in Version 2.8.6
**Notice**: This is a security release. It is recommended to upgrade to this release if you don't plan to upgrade to v2.9.0.
#### Security Fixes
This release includes two security related fixes. Both were published as part of a security advisory on Github.
They allow admins to run arbitrary PHP code just by accessing the UI and may disclose unwanted details to
restricted users. Please check the respective advisory for details.
* SSH resources allow arbitrary code execution for authenticated users [GHSA-v9mv-h52f-7g63](https://github.com/Icinga/icingaweb2/security/advisories/GHSA-v9mv-h52f-7g63)
* Unwanted disclosure of hosts and related data, linked to decommissioned services [GHSA-qcmg-vr56-x9wf](https://github.com/Icinga/icingaweb2/security/advisories/GHSA-qcmg-vr56-x9wf)
### What's New in Version 2.8.5
This minor release backports two small fixes to the v2.8.x branch:

View File

@ -1 +1 @@
v2.8.5
v2.8.6

View File

@ -8,7 +8,7 @@ namespace Icinga\Application;
*/
class Version
{
const VERSION = '2.8.5';
const VERSION = '2.8.6';
/**
* Get the version of this instance of Icinga Web 2

View File

@ -1,4 +1,4 @@
Module: doc
Version: 2.8.5
Version: 2.8.6
Description: Documentation module
Extracts, shows and exports documentation for Icinga Web 2 and its modules.

View File

@ -1,5 +1,5 @@
Module: migrate
Version: 2.8.5
Version: 2.8.6
Description: Migrate module
This module was introduced with the domain-aware authentication feature in version 2.5.0.
It helps you migrating users and user configurations according to a given domain.

View File

@ -1,5 +1,5 @@
Module: monitoring
Version: 2.8.5
Version: 2.8.6
Description: Icinga monitoring module
IDO accessor and UI for your monitoring. This is the initial instalment for a
graphical presentation of Icinga environments. The predecessor of Icinga DB.

View File

@ -1,5 +1,5 @@
Module: setup
Version: 2.8.5
Version: 2.8.6
Description: Setup module
Web based wizard for setting up Icinga Web 2 and its modules.
This includes the data backends (e.g. relational database, LDAP),

View File

@ -1,5 +1,5 @@
Module: test
Version: 2.8.5
Version: 2.8.6
Description: Translation module
This module allows developers to run (unit) tests against Icinga Web 2 and
any of its modules. Usually you do not need to enable this.

View File

@ -1,5 +1,5 @@
Module: translation
Version: 2.8.5
Version: 2.8.6
Description: Translation module
This module allows developers and translators to translate Icinga Web 2 and
its modules for multiple languages. You do not need this module to run an