Security Releases: Icinga 2 and Web 2
SUMMARY
Hi John,
Icinga 2 and Icinga Web 2 both have new security releases this month, so please plan your updates. On the blog, we cover the Prometheus integration, monitoring as code, Icinga for Kubernetes, and a side project that plays GIFs in the service grid. We also invite you to our webinar on advanced Icinga Director on December 3 and are looking for new Icinga Insiders.
Happy Reading!
RELEASE OVERVIEW
Security release: Icinga 2 v2.16.6 and v2.15.7
Icinga 2 v2.16.6 and v2.15.7 fix several security issues, including a command-line argument injection in the default email notification scripts and multiple API issues. If you changed these scripts locally, check for .dpkg-dist or .rpmnew files after upgrading. API users now need the new diagnostic-information permission to receive diagnostic data. All changes and upgrade notes are covered in the release announcement.
Security release: Icinga Web 2.14.1 and 2.13.2
Icinga Web 2.14.1 and 2.13.2 fix four vulnerabilities. The most severe one affected the standalone chart endpoints, which let attackers read files without logging in. We removed these endpoints. Versions 2.12 and earlier receive no fixes, so please upgrade to 2.13.2 or later. Version 2.14.1 also moves the password policy setting to the new config/security permission. Module developers should check the upgrading notes. See the blog post and relese announcement.
UPCOMING WEBINAR
What comes after the first Director setup? This session covers custom variables in Director 1.12, apply rules, satellites, multi-source imports, and permissions that give each team its own part of the configuration.
Date: Thursday, December 3, 2026
Time: 3 PM - 4 PM CET // Convert your local time
BLOG
Connecting Icinga and Prometheus
NETWAYS walks through four open-source tools that connect the two systems: checking Prometheus health and alerts from Icinga, monitoring Icinga itself with Prometheus, and routing Alertmanager alerts into Icinga.
Monitoring as code with Icinga
Blerim Sheqa compares ways to keep your configuration in version control: Git with CI, Ansible, Puppet, the Director, and Terraform. The guide also covers what belongs in code and what does not.
Playing GIFs in the Icinga DB Web service grid
Jan Schuppik turned the service grid into a screen, and learned a lot about Icinga 2, Icinga DB and Redis on the way. A side project with real insights.
Removing retired clusters in Icinga for Kubernetes
Retired a cluster? The new --remove-cluster option deletes it and all its data from the database, with no kubeconfig needed. It comes with the next release, and feedback from multi-cluster setups is welcome.
THIS MONTH IN THE FORUM
Migrating from IDO to Icinga DB
A team with about 600 hosts and 10,000 services asks how to modernise its setup. Replies cover moving to Icinga DB, why a parallel setup with a fixed deadline helps, and when to call in consultants. Experiences with larger AlmaLinux or RHEL setups are still welcome.
Satellite host stuck in “pending”
After a new satellite setup, host checks for an agent behind it stayed pending. A clean reinstall of satellite and agent, plus re-adding the host in Director, fixed it. One tip from the thread: let the master run host checks against satellites, so you notice if one goes down.
InfluxDB graphs lose their token after an update
After updating the InfluxDB v2 backend for Performance Data Graphs to 1.1.0, the token seemed to disappear. The cause: option names changed in an earlier release, so old config files are no longer read. Check the changelog before you update.
BEHIND THE SCENES
Icinga Insiders is a group of Icinga users who test new features and join usability tests and surveys before releases go public. Christian Stein is currently looking for people who use Icinga for Windows - sign up now.
NEED ANYTHING ELSE?
Open-source gets you far. When you need custom integrations, dedicated support, or training for your team, that’s where we come in.
You made it to the end of this newsletter!
If you have any questions, feedback or anything you would like us to cover in the next newsletter, don't hesitate to get in touch.
Until next month,
Angelika and the Icinga Team
How would you rate this month's newsletter?
FOLLOW US
If this message is not displayed properly, click here please.
Icinga GmbH
Deutschherrnstr. 15-19
90429 Nuremberg
Germany
+49 911 9288555
[email protected]
https://icinga.com
CEO: Julian Hein, Bernd Erk
Register: Nuremberg
Tax ID: DE318593083