Icinga: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Summary

Product

Vulnerabilities 1

• Critical 9.3
  CVE-2025-48057

  Icinga 2 certificate renewal might incorrectly renew an invalid certificate

  Icinga 2 is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. Prior to versions 2.12.12, 2.13.12, and 2.14.6, the VerifyCertificate() function can be tricked into i…

  Icinga icinga2 icinga2 icinga2 Debian Ubuntu
  May 27, 2025

Revision history

1. 2025-08-13 #3

   Neue Updates von SUSE aufgenommen

2. 2025-06-01 #2

   Neue Updates von openSUSE aufgenommen

3. 2025-05-27 #1

   Initiale Fassung

References

• Icinga 2 Security Release vom 2025-05-27
  https://icinga.com/blog/cve-2025-48057/
• Icinga GitHub vom 2025-05-27
  https://github.com/Icinga/icinga2/security/advisories/GHSA-7vcf-f5v9-3wr6
• openSUSE Security Update OPENSUSE-SU-2025:15180-1 vom 2025-05-31
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/PMOYZI6ZEZAH5LWUMEKA4PQC52MM7SME/
• SUSE Security Update SUSE-SU-2025:02783-1 vom 2025-08-13
  https://lists.suse.com/pipermail/sle-security-updates/2025-August/022156.html