Optimize Icinga 2 monitoring with `icinga2-mcp` for conversational AI. Use natural language to query status, acknowledge issues, and manage incidents efficiently....

Versions of Icinga 2 from 2.8 up to 2.14.9, 2.15.4, and 2.16.2 do not verify the source of certain JSON-RPC messages.

In this series, you'll learn how to install Icinga 2, set up IcingaDB and Icinga Web 2, monitor hosts and services, and deploy agents on remote Linux servers.

TL;DR Icinga patched three Icinga 2 vulnerabilities on 29 June 2026. Two let an unauthenticated attacker take over or crash the monitoring server. The third affects authenticated API users only. CVE numbers are still pending. No exploitation in the wild has been confirmed. Why It Matters Icinga 2 monitors large networks across many sites. So a compromised instance exposes broad infrastructure detail.

Die ist Beitrag 7 von 23 der Serie OSMC 2021OSMC 2021 has brought many insights into latest monitoring trends and we’re still amazed about that great on-site event last autmn. We’re happy to had a big amount of international attendees, 28 top-level speakers and not to forget our much valued sponsors on bord – in short: we’re grateful for everyone who made OSMC 2021 a special and an exciting event once again! For all of you who would like to listen to last year’s experts sessions as a follow-up, I’ve created this blog series. It reminds you bi-weekly of one of our OSMC lectures including its video recording. Today it’s all about Jakob Semre and his talk „Open Source API-HUB – Connect Icinga2, Zabbix, CheckMK and more with OpenCelium“. Enjoy Jakob’s lecture!   [embedyt] https://www.youtube.com/watch?v=KpcMHULSfEA[/embedyt]   If you’re already curious about what will await you at this year’s Open Source Monitoring Conference mark your calendars for November 14 – 16, 2022. Grab your Early Bird ticket until June 30 and become part of an extraordinary open source event! In case you have some great news to spread, you’re invited to join us as a speaker! Submit you paper for OSMC until […]

著者：doitsu(著)　個人出版　2025/4/1(火)配信

Security updates have been issued by AlmaLinux (firefox, gpsd-minimal, kernel, libarchive, libgcrypt, and LibRaw), Debian (bind9, ca-certificates, chromium, dnsdist, icinga2, kitty, libheif,…

Security updates have been issued by **AlmaLinux** (firefox, gpsd-minimal, kernel, libarchive, libgcrypt, and LibRaw), **Debian** (bind9, ca-certificates, chromium, dnsdist, icinga2, kitty, libheif, openjdk-21, pdns, pdns-recursor, thunderbird, and xen), **Fedora** (bird, erlang, kernel, mingw-glib2, nghttp2, p11-kit, perl, perl-Devel-Cover, perl-PAR-Packer, pgadmin4, polymake, python-nh3, python-wsgidav, python3.12, rabbitmq-server, rust-ammonia, seamonkey, and udisks2), **Mageia** (python-starlette), **Oracle** (gnutls, kernel, and LibRaw), **Red Hat** (container-tools:rhel8), **Slackware** (wpa_supplicant), and **SUSE** (azure-storage-azcopy, bouncycastle, ffmpeg-4, fuse-overlayfs, gleam, gstreamer-plugins-bad, libssh2-1, libssh2_org, libwireshark19, libXfont2-2, perl-Mojo-JWT, perl-Mojolicious, podman, python310, python313-Django4, and tekton-cli).

Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.

Security updates have been issued by **Debian** (apache2, kernel, linux-6.1, openjdk-17, and pgpool2), **Fedora** (glib2, matrix-synapse, openjpeg, python3-docs, and python3.13), **Oracle** (gdk-pixbuf2, glibc, java-1.8.0-openjdk, kernel, libxml2, python-requests, python3.11-setuptools, and thunderbird), **SUSE** (amber-cli, apache-commons-lang3, eclipse-jgit, go1.23, go1.24, govulncheck-vulndb, grub2, icinga2, kubernetes1.23, libgcrypt, python3, python313, sccache, slurm, tiff, and webkit2gtk3), and **Ubuntu** (linux-oracle).

Security updates have been issued by AlmaLinux (expat and libxml2), Debian (openvpn and webkit2gtk), Fedora (gi-loadouts, kf6-kcoreaddons, kf6-kguiaddons, kf6-kjobwidgets, kf6-knotifications, kf6-kstatusnotifieritem, kf6-kunitconversion, kf6-kwidgetsaddons, kf6-kxmlgui, nanovna-saver, persepolis, python-ezdxf, python-pyside6, sigil, stb, syncplay, tinyproxy, torbrowser-launcher, ubertooth, and usd), Mageia (cups), SUSE (cups, gegl, icinga2, mozjs128, and Security), and Ubuntu (ghostscript, kernel, linux, linux-aws, linux-aws-5.15, linux-gcp-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx, linux-oracle, linux-oracle-5.15, linux-xilinx-zynqmp, linux, linux-aws, linux-aws-hwe, linux-kvm, linux-oracle, linux-aws-fips, linux-fips, linux-aws-fips, linux-fips, linux-gcp-fips, linux-azure-fips, linux-gcp, linux-gcp-4.15, linux-hwe, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-gcp-6.14, linux-raspi, linux-gcp-fips, linux-intel-iot-realtime, linux-realtime, linux-raspi, linux-raspi-realtime, linux-xilinx, and postgresql-14, postgresql-16, postgresql-17).

Icinga 2 is an open source monitoring system. Starting in version 2.3.0 and prior to versions 2.13.14, 2.14.8, and 2.15.2, the Icinga 2 MSI did not set appropriate permissions for the `%ProgramData%\icinga2\var` folder on Windows. This resulted in the its contents - including the private key of the user and …

Die ist Beitrag 10 von 10 der Serie OSMC 2022OSMC 2022 has brought lots of insightful open source expert know-how. In this blog series we will together take a glance back into our archives and pick out some of our highly appreciated speaker talks. Today we continue with Daniel’s Ignite talk “That’s nuts! A proof of concept of Icinga2 on Kubernetes using Acorn ”.   That’s what it’s all about Icinga2 with its many moving parts, credentials for database, API, and other features, and layered topology can be considered a pretty complex system. When deploying to Kubernetes, it might in fact prove overwhelming when transitioning from ‘traditional’ setups. In his Ignite Talk, Daniel will show you typical Icinga2 setups you might encounter in the wilds and how we can deploy them to Kubernetes clusters using acorn, a new deployment application framework for Kubernetes aimed at simplicity and developer experience. He will show you acorn’s basic idea(s), how it is configured and used in production, and where its shortcomings as of today might lie while going through the process of deploying a full-blown Icinga2 setup to a Kubernetes cluster.   Get inspired by his Talk [embedyt] https://www.youtube.com/watch?v=Jv22MOhzVOE[/embedyt]   You like his content […]

Vielleicht dürfte dem einen oder anderen regelmässigen Besucher schon aufgefallen sein, dass Prometheus in unser Produktportfolio aufgenommen wurde. Als Ergänzung zu den anderen Monitoringanwendungen (Icinga2, ElasticStack, Graylog) bietet es eine gute Ergänzung für bestimmte Anwendungsszenarien die sonst noch nicht oder nicht ideal abgedeckt werden konnten. Die Installation ist zwar bei Prometheus prinzipiell sehr einfach (das statisch gelinkte Binary an den richtigen Ort kopieren und ausführen), aber das ist typischerweise nicht die beliebteste Art und Weise Software zu installieren, schliesslich müssen dann Updates immer wieder mit dem gleichen Prozedere ausgebracht werden. Das wäre ja an sich nicht weiter schwierig zu automatisieren, aber wofür das Rad neu erfinden, das ist schliesslich die Aufgabe eines Paketmanagers. Aus diesem Grund sind jetzt in den Netways Repositories Pakete für RHEL- und Debianartige Linux-Distributionen verfügbar. Für Debian(artige) gibt es Prometheus zwar schon paketiert aus den offizielen Quellen, aber aus Gründen der Konsequenz haben wir diese in der gleichen Version wie die RHEL-Pakete nochmals gebaut. Das Prometheus entspricht eins zu eins dem Build der von Prometheus auch auf Github verfügbar ist. Wir wünschen fröhliche Installation und wer noch Bugs/Probleme find, darf sie beh möchte uns darauf aufmerksam machen 🙂