| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: icinga2-ido-pgsql | Distribution: openSUSE Tumbleweed |
| Version: 2.16.4 | Vendor: openSUSE |
| Release: 4.1 | Build date: Fri Jul 17 11:10:07 2026 |
| Group: System/Monitoring | Build host: reproducible |
| Size: 640383 | Source RPM: icinga2-2.16.4-4.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://www.icinga.com/ | |
| Summary: IDO PostgreSQL database backend for Icinga 2 | |
Icinga 2 IDO PostgreSQL database backend. Compatible with Icinga 1.x IDOUtils schema >= 1.12
GPL-3.0-or-later
* Fri Jul 17 2026 ecsos <ecsos@opensuse.org>
- Update to version 2.16.4:
* Release v2.16.4
* Work around a compiler segfault on SLES 15.7 aarch64
* Fix that NewClientHandler() could hang indefinitely, preventing new connection attempts
* Prune runtime-deleted object dictionary every 15 Minutes
* Track deleted runtime objects to avoid erroneous recreation
* Check object version on deletion
* Make `Dictionary::Remove(Iterator)` return the next iterator
* Freeze perfdata arrays and remove locks in code using them
* doc/: don't mention Amazon Linux 2
* GitHub actions: drop EOL Amazon Linux 2
* GitHub actions: add Fedora 45 which provides OpenSSL 4
* Use `i2a_ASN1_INTEGER()`, don't access `ASN1_INTEGER` data directly
* Use `const X509_NAME*`, not `X509_NAME*`, on newer OpenSSL
* Pass `std::exception_ptr` to `SendJsonError`
* Consistently use `std::exception_ptr`
* Replace explicit `rethrow(current)` pattern with just throw;
* Fix unreachable fallback in `DiagnosticInformation(<eptr>)`
* Set `www_authenticate` header field after `SendJsonError()`
* Wed Jul 01 2026 ecsos <ecsos@opensuse.org>
- Update to version 2.16.3:
* Release v2.16.3
* Add Dominik Bay to AUTHORS
* Restore single-argument Json.decode() in the DSL
* Add upgrading docs explaining the config file change for logrotate
* Mon Jun 29 2026 ecsos <ecsos@opensuse.org>
- Update to version 2.16.2:
* Also execute JsonDecode stack size test in pthread if available
* Use protected stack for new-style Boost.Asio coroutines
* Add tests for JsonDecode depth limit in combination with coroutine stacks
* tests: move SpawnSynchronizedCoroutine() to utils.cpp
* Prevent HTTP requests from creating deeply nested data structures
* Don't shut down JSON-RPC connection if a message fails to parse
* JsonDecode: include path in JSON depth error
* JsonDecode: add depth limit
* Add filter-expression permission
* Release v2.16.2
* Bump OpenSSL shipped for Windows to v3.5.7
* Check if client is a valid endpoint before updating CA-certificate
* ConfigWriter::EmitScope: Escape import
* GHA: Windows: run on Windows Server 2022
* Guard against assert() failures in SendJsonError()
* Fix handling `std::ifstream` exceptions in `ConfigFilesHandler`
* Fix handling the `std::ifstream::failbit` in `OutgoingHttpMessage`
* Add test-case for `SendFile()` with non-existant paths
* This release fixes some critical security vulnerabilities_
- Verify that certificate update requests come from an authorized endpoint
(GHSA-vj39-ww8j-vvx5)
- Fix stack overflow due to deeply nested data structures
(GHSA-wh38-wg57-5w7g)
- Prevent arbitrary config injection on object creation via the API
(GHSA-jgqj-x5j9-vgcm)
* Sun May 31 2026 ecsos <ecsos@opensuse.org>
- Update to version 2.16.1:
* Revert "Merge pull request #10668 from Icinga/perfdata-writers-connection-handling"
* Update version to v2.16.1
* Update changelog for v2.16.1
* Revert "Merge pull request #10799 from Icinga/fix-pdwc-tls-host-check"
* Fix openSUSE 15.6 GitHub actions
* docs: note OTLP metrics package limitation on Debian 11 and Ubuntu 22.04 and Amazon Linux 2
* Add Fedora 44 to CI workflow
* Add Ubuntu 26.04 to CI workflow
* Thu Apr 23 2026 ecsos <ecsos@opensuse.org>
- Update to version 2.16.0:
* Fix PerfdataWriterConnection test-cases on parallel build
* Bump korthout/backport-action from 4.3.0 to 4.4.0
* Release v2.16.0
* Update changelog for v2.16
* Update Upgrading docs for v2.16
* Generate all unit-test certificates with CN=localhost
* publiccode.yml: update to GPL 3 (or later)
* Silence -Wunnecessary-virtual-specifier warning on clang
* OTLPMetricsWriter: don't add queue stats as counter
* Correctly create AsioTlsStream with host argument
* Fix misleading TLS handshake error logging
* Fix compiler crash on SLES 15.7 arm64 runner
* Inline `SendNextUpdate` & remove superfluous `m_RconWorker` checks
* IoEngine: introduce & use `IsStrandRunningOnThisThread` function
* Log pending items stats regularly & include them as perfdata in IcingaDB check
* OTel: downgrade `broken_pipe` errors to debug log
* Timeout: lift `VERIFY` -> `ASSERT` to prevent crashes in release builds
* Bump actions/create-github-app-token from 3.0.0 to 3.1.1
* Bump OpenSSL shipped for Windows to v3.5.6
* Reword Changelog for SELinux Issue
* Add security fixes to v2.14.7 changelog
* Add a check-list in release workflow to forward-port changelogs
* Icinga 2.12.12
* Icinga 2.12.11
* Icinga 2.12.10
* Release 2.12.9
* Release 2.12.8
* Release 2.12.7
* Add 2.12.6 changelog and bump VERSION
* Add security update to v2.13.14 changelog
* Changelog and version bump for v2.13.14
* Add security fixes to v2.13.13 changelog
* Changelog and version bump for v2.13.13
* Add security update to v2.14.8 changelog
* Release v2.14.8
* Changelog and version bump for v2.14.7
* Add security update to changelog for `v2.15.2`
* Release `v2.15.2`
* Add security fixes to v2.15.1 changelog
* Changelog and version bump for v2.15.1
* RedisConnection: simplify `GetOldestPendingQueryTs` function
* Reduce min queue item age from `1000ms` to `300ms`
* Inline `DequeueAndProcessOne` & don't process items out of order
* IcingaDB: use key extractor for worker queue
* IcingaDB: put all queue related stuff into `icingadb:task_queue` namespace
* Simplify `IcingaDB::PendingItemsThreadProc()` event loop
* IcingaDB: remove unused `UpdateObjectAttrs` method
* Fix missing `olock` for dependency child registration
* IcingaDB: use polymorphism for queue entries
* IcingaDB: subscribe to `OnNextCheckChanged` signal
* Revert "CheckerComponent#CheckThreadProc(): also propagate next check update to Icinga DB"
* RedisConnection: enhance `WriteQueueItem` & related usages
* RedisConnection: simplify query prioritization logic
* Revert "IcingaDB: suppress state sync until config sync finished"
* IcingaDB: enqueue config runtime updates to the worker queue
* OTel: raise runtime error when failing to fully serialize Protobuf request
* OTel: add connect & handshake timeout
* OTel: replace `AsioDualEvent` usage with `AsioConditionVariable`
* OTel: do not perform graceful disconnect on I/O timeout
* OTel: fix race condition triggered on Icinga 2 reload/shutdown
* Don't manually include custom Protobuf dir via compiler flag
* OTLP: Set `enable_ha` to true by default
* Reduce default `flush_threshold` to `16MiB`
* tests: fix `testbase` linker error
* Replace `for` with a simpler `while` loop & fix a typo
* Linux GHA: remove unnecessary `"${SCL_ENABLE_GCC[@]}"`
* Allow users to provide additional resource attributes
* docs: document `OTLPMetricsWriter` feature
* Add `OTLPMetricsWriter`
* GHA: install required protobuf devel package
* Containerfile: install all required Protobuf libs for `OTel`
* CMake: provide newer `FindProtobuf.cmake` for old CMake version
* Add common `OTel` type/lib
* Cache Icinga DB env_id in `Application` class as well
* Vendor `opentelemetry-proto` with the necessary files
* Rename `EnsureCertFor` to `GetCertFor`
* Generate ctest fixtures for generating CA and certificates
* Give CTestProperties a polymorphic interface
* Make unit-test data and cache directory unique per test
* Add network label to http tests
* Add a check command for NETGEAR monitoring (#10753)
* Give base_timer/(invoke|scope) timers a 10x multiplier on Windows
* Revert "Give timer tests more leeway for inaccurate implementations"
* Redis exceptions: remove inline specifiers
* Redis exceptions: use BOOST_THROW_EXCEPTION
* Redis exceptions: add proper what() messages
* Document the removal of deprecated features in v2.18
* Add warnings to deprecated features indicating removal in v2.18
* Bump korthout/backport-action from 4.2.0 to 4.3.0
* Warn if object name contains ctrl characters
* Endpoint: warn if endpoint name exceeds `64` characters
* Warn of object name exceeds `255` characters
* Warn about leading and trailing WSP in object names
* OutgoingHttpMessage: don't use shared_ptr for m_CpuBoundWork
* Make ShowCodeLocation() show the full line with a LastColumn of 0
* IcingaDB: enqueue all dependency related updates to the worker queue
* IcingaDB: don't send `nextupdate:{host,service}` as part of the initial sync
* IcingaDB: track object changesets efficiently
* IcingaDB: use a separate Redis conn for history & heartbeat streams
* Remove unused `IoEngine#m_AlreadyExpiredTimer`
* Remove unused `IoEngine::YieldCurrentCoroutine()`
* Make `IoEngine#m_CpuBoundSemaphore` unsigned
* `CpuBoundWork#CpuBoundWork()`: don't spin on atomic int to acquire slot
* Introduce `AsioConditionVariable`
* [Refactor] `CpuBoundWork#CpuBoundWork()`: require an io_context::strand
* `CpuBoundWork#~CpuBoundWork()`: just call `#Done()` to deduplicate code
* Remove unused `IoBoundWorkSlot`
* `OutgoingHttpMessage#Flush()`: release `CpuBoundWork` slot
* Add unit-tests for PerfdataWriterConnection
* Add documentation for the new disconnect_timeout config options
* Use PerfdataWriterConnection in perfdata writers
* IcingaDB: use a statically initialized list of syncable types for Redis keys
* Bump actions/create-github-app-token from 2.2.1 to 3.0.0
* IcingaDB: consistently use `const char*` literals everywhere
* IcingaDB: change `const T` to `const T&` to avoid stupid String copying
* Fix copy and paste error in build log message
* Use perfect-forwarding references to prevent passing temporaries
* Don't upload 32 bit MSIs to Chocolatey
* Make retrieval of the vector size more generic
* Fix CertificateFixture error if previous test fails
* Add a new CTest fixture for dirty_ssl_certs for tlsutility
* Remove dead links in doc/12-icinga2-api.md (#10745)
* Add PerfdataWriterConnection class
* Bump korthout/backport-action from 4.1.0 to 4.2.0
* Give timer tests more leeway for inaccurate implementations
* Improve debug message when dependency child/parent don't exist
* /v1/console: prevent concurrent use of the same session by multiple requests
* Change `RedisConnection::Query::value_type` to a string/view variant
* `ObjectLock`: allow to `TryLock` the mutex
* RedisConnection: drop superfluous `GetConnected` method
* Allow to track query stats in child Redis connections
* RedisConnection: introduce & use `RedisConnInfo` helper struct
* Use `RedisConnection::Quer*` type aliases
* Introduce `RedisConnection::QueryArg`, an alias of `String`
* `IcingaDB#AddObjectDataToRuntimeUpdates()`: take String by value
* Disable testing when building container image without testing
* Add Assert-Macros for the TestLogger
* Move and extend ReceiveCheckResults function
* Add TestThread class to not get unit-tests stuck in `join()`s
* Refactor OpenTsdbWriter to use a WorkQueue
* Import std::chrono_literals into icinga namespace
* Don't expect `Contet-Type` header to exactly match `application/json`
* Take a mutex before accessing the l_ApiScriptFrames
* Fix invalid category in publiccode.yml
* SELinux: allow to query attrs of a filesystem
* Add publiccode.yml
* Bump korthout/backport-action from 4.0.1 to 4.1.0
* Fix undefined behavior introduced by initializing last states with 99
* Remove potential irritating comment on config flag
* Update lib/cli/nodesetupcommand.cpp
* Remove `AuthenticatedApiUser` thread-local variable & pass it as param instead
* HTTP: stream responses where appropriate
* Make `ValueGenerator` more flexible & easy to use
* Fix uninitialized member in ScriptError
* Use noop lambda in dummy NotificationCommand
* Fix notificationcomponent test-cases with fixed TestLoggerFixture
* tests: fix min severity doesn't get updated
* doc: Explain icingadb built-in check
* Rename `COPYING` -> `LICENSE.md` & upgrade to GPLv3
* Replace all existing copyright headers with `SPDX` headers
* Add check_smart.pl plugin as smart-advanced command
* Bump OpenSSL shipped for Windows to v3.5 LTS
* Fix URL to `check_interfaces` in ITL
* windows: bump OpenSSL to 3.0.19
* Remove unused `DbTypeRegistry`
* Replace `class B : public A { };` with `using B = A;` (refactor only)
* `Registry<U,T>`: remove unused template typename `U`
* Silence compiler warnings about unused parameters
* Allow Icinga to send SIGTERM to nagios plugins in SELinux Policy
* `Downtime::AddDowntime()`: remove unused parameter `const MessageOrigin::Ptr& origin`
* Refactor HttpMessage into generalized templated types
* Update names of HttpRequest and HttpResponse
* Windows TL;DR dev env: use Visual Studio 2022, not 2019
* backbot: drop `conflict_resolution` option
* backbot: drop `copy_requested_reviewers` option
* backbot: exclude CLA label correctly from copied labels
* Fix(#10687): address null pointer dereference on navigate
* docs: Fix rendering issue on icinga.com
* Add error handling for icacls calls
* Fix a race condition in NotificationComponent
* Add test-case to verify delayed (times) notifications feature
* Add test-case to reproduce a race condition in NotificationComponent
* Windows: set ACLs for %ProgramData%\icinga2\var as well
* docs: Remove 'queue' parameter requirement from event stream document… (#10495)
* Container: ICINGA_LOG_LEVEL Environment Variable
* Bump korthout/backport-action from 4.0.0 to 4.0.1
* Bump korthout/backport-action from 3.4.1 to 4.0.0
* Bump actions/cache from 4 to 5
* Bump Boost shipped for Windows to v1.90
* Bump actions/create-github-app-token from 2.2.0 to 2.2.1
* tests: verify statically provided certs as well
* Add documentation for ApiListener.http_response_headers
* Test internal cert generation & verification process
* tlsutility: make cert ts configurable & use `ASN1_TIME_compare` for comparison
* tests: skip superfluous cert generation in `EnsureCertFor()`
* IsValidHeaderValue: use front()/back() instead of iterators
* Allow to set extra headers in HTTP responses
* HttpUtility: add functions for validating HTTP header names and values
* backbot: use `pull_request_target` event
* workflows: fix invalid usage of `github.event_name`
* Bump actions/checkout from 5 to 6
* workflows: fix authors-file
* Have thread name length clamping also apply for the other OSes
* Fix usage of pthread_setname_np() on NetBSD
* GHA: ignore also `github-actions` in authors file
* GHA: auto backport PRs based on labels
* Fix dlopen()'ing libraries on OpenBSD
* Add tests for pthread_set_name_np() and pthread_setname_np()
* Enable the pthread_np.h header on OpenBSD and DragonFly
* GitHub actions: add Fedora 43
* GitHub actions: add SLES 16.0
* Fix -Wunused-lambda-capture warning
* Fix -Wunused-variable warnings
* Fix -Wunused-but-set-variable warnings (clang)
* Fix -Wunknown-pragmas warnings
* Fix -Wenum-compare warnings
* Fix -Wredundant-move warnings
* Fix -Wsign-compare warnings
* Fix -Wsuggest-override warnings
* Add ABORT() macro for unconditionally failing ASSERTS
* Use 64bit unsigned integer for Replay log timestamps
* TimePeriod: properly validate `ranges` field
* Actually use Registry#Freeze() at startup, when everything has been registered
* Introduce Registry::GetInstance() to deduplicate such methods
* Introduce Registry#Freeze()
* Registry#Get*(): use shared locking to allow concurrent access
* Make Registry#ItemMap a hash table to speed up lookups
* Inline Registry#RegisterInternal() used only once
* Remove unused Registry#OnRegistered
* Remove unused Registry#OnUnregistered
* SELinux: allow `logrotate` to execute `icinga2` binary
* Adapt the unit-test to reflect fix in the previous commit
* Subtract inapplicable suppressed notifications at a later point
* Add unit-tests for NotificationComponent
* Add ClearTestLogger method to TestLoggerFixture
* Fix compiler warnings
* Fix compiler warnings by not std::move()ing where redundant
* Fix compiler warnings by ensuring variable initialization
* Fix compiler warnings by replacing x&&y||z with (x&&y)||z
* Fix compiler warnings by re-ordering member init in constructors
* Don't define/use OpenSSL*Callback() for/in OpenSSL > v1.1
* GHA: add Ubuntu 25.10
* Fix compiler warnings by removing unused variables
* AtomicOrLocked: use std::conditional_t and std::is_trivially_copyable_v
* Remove obsolete workaround for GCC 4.x
* GHA: re-add Debian 11
* windows: bump OpenSSL to `3.0.18`
* DerefExpression: Add missing nullptr check
* GHA: drop all distros that are no longer supported
* GHA: Add openSUSE 16
* ITL: Enhanced SMART attributes monitoring plugin check configuration to more parameters
* Remove TicketSalt in VariableQueryHandler as early as possible
* Add test-cases for checking permissions in filter exprs
* Filter global variables when Sandboxed
* Declare functions as unsafe that aren't useful in filter expressions
* Check for permission in get_object()
* Add permission checking to script frames and filter utilities
* Disable -Wimplicit-fallthrough for mmatch
* Enable -Wall -Wextra for all Linux runners
* Disable -Wunused-(parameter|variable) on generated files
* Silence Amazonlinux:2 warnings about deprecated coroutines
* Remove reference to missing ftest submodule
* Remove MSVC warnings about unknown pragmas GCC/clang
* Add Github Problem Matchers actions for GCC/MSVC
* Docs: add some troubleshooting for overloaded JSON-RPC connections
* Endpoint expose seconds_processing_messages attribute
* Measure and store message processing time per endpoint
* Introduce AtomicDuration
* Fix double-free error in posix_error::what()
* Rename/Move existing certs/ca instead of symlinking
* GitHub Actions: remove Ubuntu 24.10 (end of life)
* HttpServerConnection: use `std::chrono` for `m_Seen`
* tests: speed up timer tests using smaller sleep times
* Make HTTP livness timout configurable for unittests
* don't install boost dev in the final image
* Drop ICINGA2_WITH_TESTS option in favor of CTest's BUILD_TESTING
* Discover Boost test cases automatically after build
* Fix rediscovered test-cases in icinga-checkresult
* Bump base image version to Debian 13 (trixie)
* workflows: drop `docker.yml`
* workflows: build and publish container images
* docs: Add `For-Container.md`
* Add `Containerfile`
* Add unit-tests for HttpServerConnection and HTTP message classes
* Make inherited protected functions of ApiListener public
* Refactor ObjectQueryHandler to use new JSON stream encoder
* Remove extra parameters from HTTP handler signature
* Refactor EventsHandler to stream responses via chunked encoding
* Use new HTTP message classes in HttpServerConnection and Handlers
* Add HttpRequest and HttpResponse classes
* Allow UID/GID in ICINGA2_(USER|GROUP) environment variables
* Remove clear variable from disk CheckCommand
* add "--long-output" to ssl_cert command
* ApiListener#RelayMessageOne(): log to which Endpoint messages are relayed
* Bump Boost shipped for Windows to v1.89
* Boost: don't require "system" component
* GHA: add Debian 13
* Bump actions/checkout from 4 to 5
* Document current dependency recursion limit
* Prevent worst-case exponential complexity in dependency evaluation
* Move code involved in recursive dependency evaluation to helper class
* Send signals as Icinga user in safe-reload and logrotate
* Allow intrusive_ptr<const T> for objects
* Log: don't construct std::ostringstream for no-op messages
* Log: use std::forward in operator<< and remove overload for const char*
* docs: Fix some dead/old links
* docs: Update ElasticsearchWriter flush_threshold note format
* docs: Mention field mapping issue with ElasticsearchWriter
* Disallow stage deletions during reload
* Use `AtomicFile` where applicable in `ConfigPackageUtility`
* Handle concurrent config package updates gracefully
* GHA: add RHEL 10
* GHA: add Ubuntu 25.04
* GHA: add SLES 15.7
* GHA: add Fedora 42
* JsonEncoder: wrap writer for flushing
* fix comment
* Rename `AsyncJsonWriter::Flush()` -> `MayFlush()` to reflect its usage
* Restore table alignement in node setup documentation
* Document the --no-default-global-zones flag
* JsonEncoder: let the serializer replace invalid UTF-8 characters
* JsonEncoder: lock olock conditionally & flush output regularly
* Implement `LockIfRequired()` method for `Namespace`, `Dictionary` & `Array`
* Do not require olock on frozen `Namespace`, `Dictionary` & `Array`
* Introduce `JsonEncode` helper function
* Introduce `JsonEncoder` class
* Fix typo
* Add plain fping CheckCommand to ITL
* Introduce `AsyncJsonWriter` output adapter interface
* Implement bool operator for `ObjectLock`
* Allow to defer lock on `ObjectLock`
* Introduce `ValueGenerator` class
* No longer allow overriding the frozen attribute of containers
* docs: Icinga DB Setup for every Distribution
* Update AUTHORS
* docs: Fix various misspellings
* docs: Mention Elasticsearch prefix for indices
* Update AUTHORS
* Correct a problem with expiry times not being passed through to AcknowledgeProblem
* Add a hint for upgrading docs to the release checklist
* Introduce Endpoint#messages_received_per_type
* Count incoming messages per type and endpoint
* ApiFunction: store own name
* Zone#GetEndpoints(): return endpoints in the specified order, not randomly
* Add cli option to disable the default global zones
Deprecations
Features newly deprecated in this version:
ElasticsearchWriter (please use the new OTLPMetricsWriter instead)
User declared namespace objects (i.e. namespace foo {})
We've scheduled these features for removal in v2.18 (#10734).
These features have already been deprecated and will also be removed in v2.18:
IdoMySqlConnection
IdoPgsqlConnection
CompatLogger
ExternalCommandListener
LivestatusListener
Windows check-plugins (i.e. check_*.exe) and CheckCommands (please use our PowerShell Plugins instead)
* Thu Apr 23 2026 ecsos <ecsos@opensuse.org>
- Update to version 2.15.3:
* Release v2.15.3
* Update changelog for v2.14.3
* Bump OpenSSL shipped for Windows to v3.0.20
* GHA: Add openSUSE 16
* Fix(#10687): address null pointer dereference on navigate
* Thu Jan 29 2026 ecsos <ecsos@opensuse.org> - 2.15.2
- Update to 2.15.2
* Security
- CVE-2026-24413: Fix permissions of %ProgramData%\icinga2\var on Windows.
- SELinux: Fix policy to allow logrotate to execute the icinga2 binary in order to send SIGUSR1 for log rotation. #10643
- SELinux: Fix policy to allow icinga2 to send SIGTERM to nagios plugins processes on timeout. #10694
* Other Changes
- doc: Update Windows development docs to use Visual Studio 2022 instead of 2019. #10695
- Windows: Update to OpenSSL 3.0.19. #10706
* Fri Oct 17 2025 ecsos <ecsos@opensuse.org>
- Update to 2.15.1
* Security
- CVE-2025-61907: Prevent API users from accessing variables and objects they
don't have access to within filter expressions.
This allowed authenticated API users to learn information they aren't allowed
to access directly.
- CVE-2025-61908: Add a missing null pointer check while evaluating expressions.
This allowed authenticated API users to crash the Icinga 2 daemon by supplying
a crafted filter expression.
- CVE-2025-61909: Don't send signals as root in safe-reload script and logrotate config.
This allowed a limited privilege escalation from the Icinga 2 service user to root.
The scope is limited to sending SIGHUP or SIGUSR1 to an arbitrary process. #10590
- Windows: Update to OpenSSL 3.0.18. #10591
* Bugfixes
- When a reload triggered from Icinga Director (or the /v1/config API) fails,
the corresponding state is cleared, allowing to deploy a new config
without having to restart Icinga 2 manually first. #10584
* Enhancements
- Add JSON-RPC utilization metrics and troubleshooting docs. #10586
- When sending cluster messages to other zones, prefer endpoints in the order
as specified in the zone configuration. #10587
- Track the number of JSON-RPC messages received for each message type per endpoint. #10585
- Add support for building with Boost v1.89 and use it on Windows. #10578
- Drop 76fa0d9e8054f405dc3d1e39a4b48f21e86afdf0.patch because now in upstream.
* Sat Sep 27 2025 Arjen de Korte <suse+build@de-korte.org>
- Boost.System has been header only since Boost 1.69.0
- Add 76fa0d9e8054f405dc3d1e39a4b48f21e86afdf0.patch
* Thu Jun 19 2025 ecsos <ecsos@opensuse.org>
- Update ot 2.15.0
* Breaking Changes
- API: Fix /v1/objects/* queries with attrs set to [] to return empty attributes instead of all of them. #8169
- Drop the undocumented Checkable#process_check_result and broken System#track_parents DSL functions. #10457
* Enhancements
- Gracefully disconnect all clients on shutdown and prevent from accepting new connections. #10460
- Icinga DB: Send data to Redis® exactly as they're stored in the database to avoid extra value-mapping routines by the Go daemon. #10452
- Add support for Icinga 2 dependencies in Icinga DB. #10290
- Take host/service reachability into account when computing its severity. #10399
- Rework the dependency cycle detection to efficiently handle large configs and provide better error messages. #10360
- Don't log next check timestamp in scientific notation. #10352
- Automatically remove child downtimes when removing parent downtime. #10345
- Ensure compatibility with Boost version up to v1.88. #10278 #10419
- Reject infinite performance data values. #10077
- Support host_template and service_template tags in ElasticsearchWriter. #10074
- Icinga DB: Support Redis® username authentication. #10102
- Cluster: Distribute host child objects (e.g. services, notifications, etc.) based on the host's name. #10161
- Icinga DB Check: Report an error if both Icinga DB instances are responsible in a HA setup. #10188
- Windows: upgrade build toolchain to Visual Studio 2022. #9747
* Bugfixes
* Core
- Use Checkable#check_timeout also for rescheduling remote checks. #10443
- Log: Don't unnecessarily buffer log messages that are going to be dropped anyway. #10177
- Don't loose perfdata counter (c) unit when normalizing performance data for Icinga DB. #10432
- Fix broken SELinux policy on Fedora ≥ 41 due to the new /usr/sbin to /usr/bin equivalence. #10429
- Don't load Notification objects before User and UserGroup objects to allow them to be referenced in notifications. #10427
- Ensure consistent DST handling across different platforms. #10422
- Fix Icinga 2 doesn't generate a core dump when it crashes with SIGABRT. #10416
- Don't process concurrent checks for the same checkable. #10372
- Don't process check results after the checker and API listener have been stopped. #10397
- Avoid zombie processes on plugin execution timeout on busy systems. #10375
- Properly restore the notification object state on Recovery notification. #10361
- Fix incorrectly dropped acknowledgement and recovery notifications. #10211
- Prevent checks from always being rescheduled outside the configured check_period. #10070
- Don't send reminder notifications after a Custom notification while interval is set to 0. #7818
- Reset all signal handlers of child processes to their defaults before starting a plugin. #8011
- tests: Fix FormatDateTime test cases with invalid formats on macOS and all BSD-based systems. #10149
- Mark move constructor and assignment operator in String as noexcept to allow optimizations. #10353 #10365
* Cluster and API
- Fix an inverted condition in ApiListener#IsHACluster() that caused to always return true in a non-HA setup. #10417
- Don't silently accept authenticated JSON-RPC connections with no valid endpoint. #10415
- Sync Notification#notified_problem_users across the cluster to prevent lost recovery notifications. #10380
- Remove superfluous ) from a HTTP request log message. #9966
- Disable TLS renegotiation (handshake on existing connection) on OpenBSD as well. #9943
- Log also the underlying error message when a HTTP request is closed with No data received by Icinga 2. #9928
- Fix a deadlock triggered by concurrent /v1/actions/add-comment and /v1/actions/acknowledge-problem requests
on the same checkable, as well as a crash that might occur when running perfectly timed /v1/actions/add-comment
and /v1/actions/remove-comment requests targeting the same comment. #9924
* Icinga DB
- Fix missing acknowledgement and flapping history entries due to a number overflow. #10467
- Send downtime cancel_time only if it is cancelled. #10379
- Send only the necessary data to the icinga:stats Redis® stream. #10359
- Remove a spin lock in RedisConnection#Connect() to avoid busy waiting. #10265
* Writers
- Serialize all required metrics before queueing them to a WorkQueue. #10420
- OpenTsdbWriter: Include checkable name in log messages to ease troubleshooting. #10009
- OpenTsdbWriter: Don't send custom empty tags. #7928
- InfluxDBWriter: Add missing closing quote in validation error message. #10174
* ITL
- Add --maintenance_mode_state ($vmware_maintenance_mode_state) argument to vmware-esx-command check command. #10435
- Add -n ($load_procs_to_show$) argument to load check command. #10426
- Add --inode-perfdata ($disk_np_inode_perfdata$) argument to disk check command. #10395
- Add -r ($ssh_remote_version$) and -P ($ssh_remote_protocol$) arguments to ssh check command. #10283
- Add --unplugged_nics_state ($vmware_unplugged_nics_state$) argument to
vmware-esx-soap-host-net and vmware-esx-soap-host-net-nic check commands. #10261
- Add -X ($proc_exclude_process$) argument to procs check command. #10232
- Add --dane ($ssl_cert_dane$) argument to ssl_cert check command. #10196
- Fix check_ssl_cert deprecation warnings. #9758
- Fix check_systemd executable name add add all missing arguments. #10035
- Add -M ($snmp_multiplier$ & $snmpv3_multiplier$) argument to snmp and snmpv3 check commands. #9975
- Add --continue-after-certificate ($http_certificate_continue$) argument to http check command. #9974
- Add --ignore-maximum-validity ($ssl_cert_ignore_maximum_validity$) argument to ssl_cert check command. #10396
- Add --maximum-validity ($ssl_cert_maximum_validity$) argument to ssl_cert check command. #9881
- Add --url ($ssl_cert_http_url$) argument to ssl_cert check command. #9759
- Add fuse.sshfs and fuse.* (supported only by Monitoring Plugins) to the list of default disk exclude types. #9749
- Add check_curl check command. #9205
- Add the --extra-opts argument to various commands that support it. #8010
* Documentation
- Don't use dnf config-manager to configure Fedora repository and mention icingadb-redis-selinux package. #10479
- Update the outdated cold startup duration documentation to reflect the current behavior. #10446
- Indent second-level unordered lists with four spaces to correctly render them in the HTML documentation. #10441
- Add a reference to the check result state documentation from within the Advanced Topics section. #10421
- Improve the documentation of how to generate Icinga 2 core dumps. #10418
- Update Icinga 2 CLI output examples to match the current output. #10323
- Fix incorrect ping_timeout value in the hostalive check command documentation. #10069
* Code Quality
- Simplify deferred SSL shutdown in ApiListener#NewClientHandlerInternal(). #10301
- Don't unnecessarily shuffle configuration items during config load. #10008
- Sort config types by their load dependencies at namespace initialization time to save some round trips during config load. #10148
- Fix livestatus build error on macOS without unity builds. #10176
- Remove unused methods in SharedObject class. #10456
- Remove unused ProcessingResult#NoCheckResult enum value. #10444
- CMake: Drop all third-party cmake modules and use the ones shipped with CMake v3.8+. #10403
- CMake: Raise the minimum required policy to 3.8. #10402 #10478
- CMake: Turn on -Wsuggest-override to warn about missing override specifiers. #10225 #10356
- Make icinga::Empty a constant to prevent accidental modifications. #10224
- Remove various unused methods in the Registry class. #10222
- Fix missing parent std::atomic<T> constructor call in our Atomic<T> wrapper class. #10215
- Drop unused m_NextHeartbeat member variable from JsonRpcConnection. #10208
- Enhance some of the validation error messages. #10201
- Don't allow Type#GetLoadDependencies() to return non-config object type dependencies. #10169
- Don't allow Type#GetLoadDependencies() to return a set of nullptr type dependencies. #10155
- Remove EOL distros detection code from Utility::ReleaseHelper() function. #10147
- Remove dead code in TLS GetSignatureAlgorithm() function. #9882
- Mark Logger#GetSeverity() as non-virtual to avoid unnecessary vtable lookups. #9851
- Remove unused Stream#Peak() method and unused allow_partial parameter from Stream#Read(). #9734 #9736
- Suppress compiler warnings in third-party libraries. #9732
- Fix various compiler warnings. #9731 #10442
- Reduce task function allocation overhead by using a per-thread created lambda in WorkQueue. #9575
- Remove redundant trailing empty lines and add missing newlines in some files. #7799
- Drop icinga-pr10278.patch becauise now in upstream.
- Change BuildRequires from yajl to nlohmann_json because yajl is dead.
* Tue May 27 2025 ecsos <ecsos@opensuse.org>
- Update to 2.14.6
- CVE-2025-48057: Prevent invalid certificates from being renewed with OpenSSL older than v1.1.0.
- Fix use-after-free in VerifyCertificate(): Additionally, a use-after-free was found in the same
function which is fixed as well, but in case it is triggered, typically only a wrong error code
may be shown in a log message.
- Windows: Update OpenSSL shipped on Windows to v3.0.16.
- Rebase icinga-pr10278.patch.
* Thu May 15 2025 Dominique Leuenberger <dimstar@opensuse.org>
- Clean up merge-conflict markers in the changelog.
* Fri Mar 14 2025 ro@suse.de
- fix permissions for include and script files
* Thu Mar 13 2025 ro@suse.de
- add patches from PR10278 to fix build with boost 1.87
https://github.com/Icinga/icinga2/pull/10278
icinga-pr10278.patch
- use RPM_BUILD_ROOT variable
- fix ownership for include files and scripts
- move bash-completions to /usr/share
* Fri Feb 07 2025 ecsos <ecsos@opensuse.org>
- Update to 2.14.5
* Bug Fixes
- Don't close anonymous connections before sending the response for a certificate request #10337
- Performance data: Don't discard min/max values even if crit/warn thresholds aren’t given #10339
- Fix a failing test case on systems time_t is only 32 bits #10343
* Documentation
- Document the -X option for the mail-host-notification and mail-service-notification commands #10335
- Include Nagios in the migration docs #10324
- Remove RHEL 7 from installation instructions #10334
- Add instructions for installing build dependencies on Windows Server #10336
* Fri Jan 24 2025 ecsos <ecsos@opensuse.org>
- Update to 2.14.4
* Crash Fixes
- Invalid DateTime#format() arguments in config and console on Windows Server 2016 and older. #10112
- Downtime scheduling at runtime with non-existent trigger. #10049
- Object creation at runtime during Icinga DB initialization. #10151
- Comment on a service of a non-existent host. #9861
* Miscellaneous Bugfixes
- Lost notifications after recovery outside the notification time period. #10187
- TimePeriod/ScheduledDowntime exceeding specified date range. #9983 #10107
- Clean up failure for obsolete Downtimes. #10062
- ifw-api check command: use correct process-finished handler. #10140
- Email notification scripts: strip 0x0D (CR) for a proper Content-Type. #10061
- Several fixes and improvements of the code quality. #10066 #10214 #10254 #10263 #10264
* Cluster and API
- Sync runtime objects in topological order to honor their dependencies. #10000
- Make parallel config syncs more robust. #10013
- After object creation via API fails, clean up properly for the next try. #10111
- Close HTTPS connections properly to prevent leaks. #10005 #10006
- Reduce the number of cluster messages in memory at the same time. #9991 #9999 #10210
- Once a cluster connection shall be closed, stop communicating. #10213 #10221
- Remove unnecessary blocking of semaphores. #9992 #9994
- Reduce unnecessary cluster messages setting the next check time. #10011
* Icinga DB and IDO
- IDO: fix object relations after aborted synchronization. #10065
- Icinga DB, IDO: limit all timestamps to four year digits. #10058 #10059
- Icinga DB: limit execution_time and latency (milliseconds) to database schema. #10060
* Troubleshooting
- Add /v1/debug/malloc_info which calls malloc_info(3) if available. #10015
- Add log messages about own network I/O. #9993 #10141 #10207
- Several fixes and improvements of log messages. #9997 #10021 #10209
* Windows
- Update OpenSSL shipped on Windows to v3.0.15. #10170
- Update Boost shipped on Windows to v1.86. #10114
- Support CMake v3.29. #10037
- Don't require to build .msi as admin. #10137
- Build configuration scripts: allow custom $CMAKE_ARGS. #10312
* Documentation
- Distributed Monitoring: add section "External CA/PKI". #9825
- Explain how to enable/disable debug logging on the fly. #9981
- Update supported OS versions and repository configuration. #10064 #10090 #10120 #10135 #10136 #10205
- Several fixes and improvements. #9960 #10050 #10071 #10156 #10194
- Replace broken links. #10115 #10118 #10282
- Fix typographical and similarly trivial errors. #9953 #9967 #10056 #10116 #10152 #10153 #10204
* Mon Nov 25 2024 Guillaume GARDET <guillaume.gardet@opensuse.org>
- Use %{optflags} macro for build flags
- Fix build on non-x86_64 architectures
* Tue Nov 12 2024 ecsos <ecsos@opensuse.org>
- Update to 2.14.3
- Security: fix TLS certificate validation bypass. CVE-2024-49369 (boo#1233310)
- Security: update OpenSSL shipped on Windows to v3.0.15.
- Windows: sign MSI packages with a certificate the OS trusts by default.
- Revision and cleanup of the spec file to remove errors and make it clearer.
* Thu Feb 22 2024 Dominique Leuenberger <dimstar@opensuse.org>
- Use %patch -P N instead of deprecated %patchN.
* Thu Jan 18 2024 ecsos <ecsos@opensuse.org>
- Update to 2.14.2
- InfluxDB: truncate timestamps to whole seconds to save disk space. #9969
- HttpServerConnection: log request processing time as well. #9970
- Update Boost shipped on Windows to v1.84. #9970
* Thu Dec 21 2023 ecsos <ecsos@opensuse.org>
- Update to 2.14.1
* Security
- Automatically renew own root CA and distribute it to all nodes. #9933
- Update OpenSSL shipped on Windows to v3.0.12. #9946
- Disable TLS renegotiation (handshake on existing connection). #9946
* Bugfixes
- Icinga DB feature: fix crash due to missing NULL pointer check. #9946
- Icinga DB feature: fix data written into Redis crashing the Go daemon. #9946
- GelfWriter: fix deadlock on stop/reload caused by busy queue. #9947
- Don't lose notifications due to too long output, truncate it. #9947
* Enhancements
- Discard duplicate problem notifications due to state filtering. #9932
- Speed up API filters targeting specific hosts/services to O(1). #9944
- POST /v1/console/*: return HTTP 503 while Icinga is reloading. #9947
- Update Boost shipped on Windows to v1.83. #9946
- Documentation: several fixes and improvements. #9921
* Thu Sep 28 2023 ecsos <ecsos@opensuse.org>
- Update to 2.14.0
* Breaking Changes
- Remove CheckResultReader (which has been deprecated since v2.9). #9714
- Remove StatusDataWriter (which has been deprecated since v2.9). #9715
- ElasticsearchWriter: drop support for Elasticsearch < v7. #9812
- Consider a checkable unreachable once one Dependency fails.
Previously all of them had to fail. (Consult the upgrading docs.) #8218
- API: reject config modifications during reload with HTTP status 503. #9445
- icinga2 daemon: to reduce config load time, write file needed by
icinga2 object list only if --dump-objects is given. #9586 #9591
- Default email notification scripts: link to Icinga DB Web,
not the monitoring module. (Consult the upgrading docs.) #9742 #9757
- API: for security reasons hide TicketSalt in /v1/variables. #7863
* Icinga 2 Config DSL
- Disallow global variable modification after config commit start (i.e.
inside object/apply T "x" { ... }) to reduce config load time. #9740
- Forbid Dependency cycles at config load time. #8389
- Allow only strings in the arrays Host#groups, Service#groups and
User#groups. Needed for consistency, especially by the IDO. #9057
- Disallow empty object names. (They worked only partially anyway.) #9409
* Enhancements
- Significantly reduce config load time of large setups.
[#8118] #9555 #9557 #9572 #9577 #9603 #9608 #9627 #9648 #9657 #9662
- Allow to connect dependencies via redundancy groups. Only parents within
one group are assumed to provide redundancy for each other. #8218
- Built-in check command ifw-api, communicates directly with the Icinga for
Windows REST API. (Doesn't spawn a PowerShell process for that.) #9062
- JournaldLogger which logs to systemd journal. #9000
- API: POST /v1/objects: allow to discard some previously modified attributes,
i.e. to restore the config files' values. #9783
- ElasticsearchWriter: support Elasticsearch v8. #9812
- Support $env.ENV_VAR_NAME$ macros. #8302
- Speed up Icinga DB config dump. #9524
- Default mail notification scripts: also print $host.notes$ and $service.notes$. #9713
- Enable built-in OpenSSL DH parameters to allow DHE TLS ciphers. #9811
- Clean up global default TLS cipher list to improve security. #9809
- Influxdb(2)Writer: write more precise timestamps (nanoseconds). #9599
* Bugfixes
- Icinga DB feature: normalize several Redis data not to crash the Go daemon.
[#9772] #9775 #9792 #9793 #9794 #9805
- Fix parsing of perfdata across multiple lines in plugin output. #8969
- icinga check: fix last reload failure time. #8429 #9827
- Resolve macros inside custom vars of IcingaApplication. #9779
- SELinux: allow Icinga and its plugins to write to syslog. #9688
- ElasticsearchWriter: fix data buffer flush race condition during stop. #9810
- Trigger flexible downtimes not in the past if checkable is already down. #9726
- Send downtime expiration notifications immediately, not after up to a minute. #9726
* Cluster
- Don't hang in timed out connection attempt. #9711 #9725
- Fix lost acknowledgements after re-connect. #9718
- cluster-zone check: don't complain about not connected
other local zone members if there aren't any. #8595
- Allow agent to update executions delegated to it via /v1/actions/execute-command. #8627
* API
- Disallow breaking inter-object relationships by changing
relationship attributes at runtime, e.g. Service#host_name. #9407
- Correct several HTTP response status codes. #7958 #9354
- Correct Boolean field types previously reported by /v1/types as Number. #9514
* CLI
- icinga2 daemon: fix -DConfiguration.Concurrency= flag
which now allows to override the number of threads. #9643
- icinga2 node wizard: avoid unnecessary chown(2) which may fail and abort the wizard. #8744
- Correct several log messages. #8895 #8965 #9663
* ITL
- Add linux_netdev check command. #9045
+ Command Argument Changes
- disk: don't pass -m (disk_megabytes) by default. #9642
- disk: pass -X fuse.portal (disk_exclude_type) by default. #9459
- http: support multiple -k (http_header) as array. #8574
- icmp: double defaults for -w (icmp_wpl) and -c (icmp_cpl). #9041
- logfiles: pass --winwarncrit (logfiles_winwarncrit) without argument. #9056
- nwc_health: pass SNMPv3-only args only when using SNMPv3. #9095
- vmware-esx-dc-runtime-tools and vmware-esx-soap-vm-runtime-tools:
- rename --open-vm-tools to --open_vm_tools_ok (vmware_openvmtools). #9611
* Sun Aug 20 2023 Bernhard Wiedemann <bwiedemann@suse.com>
- Use fixed hostname string (boo#1084909)
* Sat Jul 15 2023 ecsos <ecsos@opensuse.org>
- Update to 2.13.8
* Bugfixes
- Icinga DB feature: normalize several Redis data not to crash the Go daemon. #9814
- Don't hang in timed out connection attempt. #9815
- Trigger flexible downtimes not in the past if checkable is already down. #9817
- ElasticsearchWriter: fix data buffer flush race condition during stop. #9818
- SELinux: allow Icinga and its plugins to write to syslog. #9819
- Fix lost acknowledgements after re-connect. #9820
- Fix parsing of perfdata across multiple lines in plugin output. #9821
- cluster-zone check: don't complain about not connected
other local zone members if there aren't any. #9822
* Updates
- Update Boost shipped on Windows to v1.82. #9816
- Update OpenSSL shipped on Windows to v3.0.9. #9816
- Update vendored https://github.com/nlohmann/json to v3.9.1. #9816
- Update vendored https://github.com/nemtrif/utfcpp to v3.2.3. #9816
* Thu Feb 16 2023 ecsos <ecsos@opensuse.org>
- Update to 2.13.7
* Security
- Windows: update bundled OpenSSL to v1.1.1t. #9672
* Bugfixes
- SELinux: fix user and domain creation by explicitly setting the role. #9690
- Signal handlers: don't interrupt and break plugins spawning. #9682
- Icinga DB: take check\_period into account during overdue calculation. #9679
- Avoid corrupted files: use fsync(2)/FlushFileBuffers() everywhere. #9681
- Solaris: fix compile error. #9680
* Enhancements
- Windows: update bundled Boost to v1.81. #9678
- Documentation: several fixes and improvements. #9671
- Drop icinga2-boost.patch because now in upstream.
* Fri Feb 03 2023 ecsos <ecsos@opensuse.org>
- Add icinga2-boost.patch to make compilable on Boost v1.81
and fix build error on Tumbleweed.
/etc/icinga2/features-available/ido-pgsql.conf /usr/lib64/icinga2/libpgsql_shim.so /usr/lib64/icinga2/libpgsql_shim.so.2.16.4 /usr/share/doc/packages/icinga2-ido-pgsql /usr/share/doc/packages/icinga2-ido-pgsql/AUTHORS /usr/share/doc/packages/icinga2-ido-pgsql/CHANGELOG.md /usr/share/doc/packages/icinga2-ido-pgsql/NEWS /usr/share/doc/packages/icinga2-ido-pgsql/README.md /usr/share/icinga2-ido-pgsql /usr/share/icinga2-ido-pgsql/schema /usr/share/icinga2-ido-pgsql/schema/pgsql.sql /usr/share/icinga2-ido-pgsql/schema/upgrade /usr/share/icinga2-ido-pgsql/schema/upgrade/2.0.2.sql /usr/share/icinga2-ido-pgsql/schema/upgrade/2.1.0.sql /usr/share/icinga2-ido-pgsql/schema/upgrade/2.2.0.sql /usr/share/icinga2-ido-pgsql/schema/upgrade/2.3.0.sql /usr/share/icinga2-ido-pgsql/schema/upgrade/2.4.0.sql /usr/share/icinga2-ido-pgsql/schema/upgrade/2.5.0.sql /usr/share/icinga2-ido-pgsql/schema/upgrade/2.6.0.sql /usr/share/icinga2-ido-pgsql/schema/upgrade/2.8.0.sql /usr/share/icinga2-ido-pgsql/schema/upgrade/2.8.1.sql /usr/share/licenses/icinga2-ido-pgsql /usr/share/licenses/icinga2-ido-pgsql/LICENSE.md
Generated by rpm2html 1.8.1
Fabrice Bellet, Sun Aug 2 03:56:04 2026