Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2024:0371-1

Опубликовано: 21 нояб. 2024
Источник: suse-cvrf

Описание

Security update for icinga2

This update for icinga2 fixes the following issues:

Update to 2.13.10:

  • CVE-2024-49369: Fix TLS certificate validation bypass (bsc#1233310).

Список пакетов

SUSE Package Hub 15 SP5
icinga2-2.13.10-bp155.3.3.1
icinga2-bin-2.13.10-bp155.3.3.1
icinga2-common-2.13.10-bp155.3.3.1
icinga2-doc-2.13.10-bp155.3.3.1
icinga2-ido-mysql-2.13.10-bp155.3.3.1
icinga2-ido-pgsql-2.13.10-bp155.3.3.1
nano-icinga2-2.13.10-bp155.3.3.1
vim-icinga2-2.13.10-bp155.3.3.1
openSUSE Leap 15.5
icinga2-2.13.10-bp155.3.3.1
icinga2-bin-2.13.10-bp155.3.3.1
icinga2-common-2.13.10-bp155.3.3.1
icinga2-doc-2.13.10-bp155.3.3.1
icinga2-ido-mysql-2.13.10-bp155.3.3.1
icinga2-ido-pgsql-2.13.10-bp155.3.3.1
nano-icinga2-2.13.10-bp155.3.3.1
vim-icinga2-2.13.10-bp155.3.3.1

Ссылки

Описание

Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. The TLS certificate validation in all Icinga 2 versions starting from 2.4.0 was flawed, allowing an attacker to impersonate both trusted cluster nodes as well as any API users that use TLS client certificates for authentication (ApiUser objects with the client_cn attribute set). This vulnerability has been fixed in v2.14.3, v2.13.10, v2.12.11, and v2.11.12.

Затронутые продукты
SUSE Package Hub 15 SP5:icinga2-2.13.10-bp155.3.3.1
SUSE Package Hub 15 SP5:icinga2-bin-2.13.10-bp155.3.3.1
SUSE Package Hub 15 SP5:icinga2-common-2.13.10-bp155.3.3.1
SUSE Package Hub 15 SP5:icinga2-doc-2.13.10-bp155.3.3.1
Ссылки