# Icinga 2 Security Release

**URL:** <https://community.icinga.com/t/icinga-2-security-release/14250>\
**Category:** Icinga 2\
**Tags:** release, security\
**Created:** [November 4, 2024, 12:13pm UTC](https://community.icinga.com/t/icinga-2-security-release/14250 "2024-11-04T12:13:03Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![theFeu](https://community.icinga.com/user_avatar/community.icinga.com/thefeu/32/7277_2.png) [@theFeu](https://community.icinga.com/u/theFeu)\
**Post date:** [November 4, 2024, 12:13pm UTC](https://community.icinga.com/t/icinga-2-security-release/14250/1 "2024-11-04T12:13:03Z")

</div>

There is a **critical Icinga 2 security release**  
Versions: 2.14.3, 2.13.10, 2.12.11, 2.11.12 (CVE-2024-49369).

This is fixing a critical vulnerability allowing that allowed to bypass the certificate validation for JSON-RPC and HTTP API connections.

**Given the severity of the issue, users are advised to upgrade immediately.**

Find all details in the [blogpost](https://icinga.com/blog/2024/11/12/critical-icinga-2-security-releases-2-14-3/).

---

<div class="post-metadata">

**Author:** ![theFeu](https://community.icinga.com/user_avatar/community.icinga.com/thefeu/32/7277_2.png) [@theFeu](https://community.icinga.com/u/theFeu)\
**Post date:** [November 4, 2024, 1:21pm UTC](https://community.icinga.com/t/icinga-2-security-release/14250/2 "2024-11-04T13:21:02Z")

</div>



---

<div class="post-metadata">

**Author:** ![theFeu](https://community.icinga.com/user_avatar/community.icinga.com/thefeu/32/7277_2.png) [@theFeu](https://community.icinga.com/u/theFeu)\
**Post date:** [November 29, 2024, 9:08am UTC](https://community.icinga.com/t/icinga-2-security-release/14250/4 "2024-11-29T09:08:03Z")

</div>