portage-ng / portage / net-analyzer / icinga2 / 2.15.4
portage-ng glsa
1 advisory reference net-analyzer/icinga2 · none place version 2.15.4 in a vulnerable range
▸ GLSA 202412-08 icinga2: Multiple Vulnerabilities this version unaffected low remote 2024-12-07

Multiple vulnerabilities have been discovered in Icinga2, the worst of which could lead to arbitrary code execution.

Announced
2024-12-07
Revised
2024-12-07
Access
remote
Bugs
#760660 #943329
Advisory
https://security.gentoo.org/glsa/202412-08

Affected packages

PackageArchVulnerableUnaffected
net-analyzer/icinga2*< 2.14.3>= 2.14.3

Background

Icinga2 is a distributed, general purpose, network monitoring engine.

Description

Multiple vulnerabilities have been discovered in Icinga2. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Icinga2 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-analyzer/icinga2-2.14.3"

References