# Icingaweb2 security alerts version 2.12.3

**URL:** <https://community.icinga.com/t/icingaweb2-security-alerts-version-2-12-3/14803>\
**Category:** Icinga Web\
**Tags:** icingaweb2\
**Created:** [April 17, 2025, 9:21am UTC](https://community.icinga.com/t/icingaweb2-security-alerts-version-2-12-3/14803 "2025-04-17T09:21:53Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![moinsunsurx](https://community.icinga.com/user_avatar/community.icinga.com/moinsunsurx/32/6000_2.png) [@moinsunsurx](https://community.icinga.com/u/moinsunsurx)\
**Post date:** [April 17, 2025, 9:21am UTC](https://community.icinga.com/t/icingaweb2-security-alerts-version-2-12-3/14803/1 "2025-04-17T09:21:53Z")

</div>

Hello,  
I received these security alerts for icingaweb2:  
CVE-2025-27405 - Icinga Web 2 [[image]XSS in embedded content](https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FIcinga%2Ficingaweb2%2Fsecurity%2Fadvisories%2FGHSA-3x37-fjc3-ch8w&data=05%7C02%7Cho.hgarrivier%40cma-cgm.com%7C6aa51e1df9a34dacbf8608dd72be269e%7C9d31429775dc43298f94a66489b4b9bb%7C0%7C0%7C638792883188878725%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=DPh5LtcHS6iEvnTDDpwTMGkP9K2Ugv5akfL7CjR6cmo%3D&reserved=0)

CVE-2025-27404 - Icinga Web 2 [[image]DOM-based XSS](https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FIcinga%2Ficingaweb2%2Fsecurity%2Fadvisories%2FGHSA-c6pg-h955-wf66&data=05%7C02%7Cho.hgarrivier%40cma-cgm.com%7C6aa51e1df9a34dacbf8608dd72be269e%7C9d31429775dc43298f94a66489b4b9bb%7C0%7C0%7C638792883188923278%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=dus99BkS08p7vntbR46FulkAAAniPdRrsDHJTlnXNVQ%3D&reserved=0)

CVE-2025-30164 - Icinga Web 2 [[image]Open redirect on login page](https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FIcinga%2Ficingaweb2%2Fsecurity%2Fadvisories%2FGHSA-8r73-6686-wv8q&data=05%7C02%7Cho.hgarrivier%40cma-cgm.com%7C6aa51e1df9a34dacbf8608dd72be269e%7C9d31429775dc43298f94a66489b4b9bb%7C0%7C0%7C638792883188957846%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=ph9IpbzM8DPj5fQUfu5pwlPLdssNP4m%2B1%2B3IiO8LZGU%3D&reserved=0)

CVE-2025-27609 - Icinga Web 2 [[image]Reflected XSS](https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FIcinga%2Ficingaweb2%2Fsecurity%2Fadvisories%2FGHSA-5cjw-fwjc-8j38&data=05%7C02%7Cho.hgarrivier%40cma-cgm.com%7C6aa51e1df9a34dacbf8608dd72be269e%7C9d31429775dc43298f94a66489b4b9bb%7C0%7C0%7C638792883188988915%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=ZsVSH%2BsUSG3TWSyneb414KwM1KH4le5VGJR%2FAAAZSxk%3D&reserved=0)

But in the repo : [Index of /centos/7Server/release/resigned-2024-10-31/noarch/icingaweb2](https://packages.icinga.com/centos/7Server/release/resigned-2024-10-31/noarch/icingaweb2/) the versions stop at 2.12.1-1. Where can I find the 2.12.3 version?

Thank you

Give as much information as you can, e.g.

- Icinga Web 2 version : 2.12.1
- Web browser used
- Icinga 2 version used : 2.14.3-1
- PHP version used : 7
- Server operating system and version : Linux Redhat 7.9

---

<div class="post-metadata">

**Author:** ![rivad](https://community.icinga.com/user_avatar/community.icinga.com/rivad/32/5852_2.png) [@rivad](https://community.icinga.com/u/rivad)\
**Post date:** [April 17, 2025, 9:37am UTC](https://community.icinga.com/t/icingaweb2-security-alerts-version-2-12-3/14803/2 "2025-04-17T09:37:00Z")

</div>

Isn’t 7 EOL? [CentOS | endoflife.date](https://endoflife.date/centos)

Maybe with a Icinga repo subscription you cold get updates as it looks like RHEL is still in “extended Life Cycle Support” until 30 Jun 2028 according to [Red Hat Enterprise Linux | endoflife.date](https://endoflife.date/rhel).

Ask [Icinga » Contact Sales](https://icinga.com/contact-sales/) to be sure.

---

<div class="post-metadata">

**Author:** ![bberg](https://community.icinga.com/letter_avatar_proxy/v4/letter/b/b782af/32.png) [@bberg](https://community.icinga.com/u/bberg)\
**Post date:** [April 18, 2025, 11:13am UTC](https://community.icinga.com/t/icingaweb2-security-alerts-version-2-12-3/14803/3 "2025-04-18T11:13:28Z")

</div>

RHEL 7 is EOL is out of support. Thus Icinga doesnt support it anymore. You could upgrade to something newer like RHEL 8 oder RHEL 9 - but then you would need either a Subscription (Developer or regular), or need to build the packages by yourself. Of course you could also switch to a distro like Debian or Ubuntu and get the newer versions in the icinga stack free of charge.