Download Latest Version Icinga 2 v2.16.4 source code.zip (10.2 MB)
Email in envelope

Get an email when there's a new version of Icinga 2

Home / v2.16.2
Name Modified Size InfoDownloads / Week
Parent folder
Icinga 2 v2.16.2 source code.tar.gz 2026-06-25 9.6 MB
0
Icinga 2 v2.16.2 source code.zip 2026-06-25 10.2 MB
0
README.md 2026-06-25 1.6 kB
0
Totals: 3 Items   19.8 MB 0

This release fixes some critical security vulnerabilities in Icinga 2. Users are advised to upgrade immediately, as two of them allow an unauthenticated attacker to take over or crash the Icinga 2 process over the network. The other security fixes only affect authenticated API users.

In addition, a new permission named filter-expression is introduced, which allows specifying if individual API users are allowed to use DSL filter expressions in API queries. This allows further restricting some API users that don't need this capability, for example, those only submitting individual check results. Due to the incompatibility of this change, enforcement of this permission is opt-in until v2.17; see the upgrading docs for details.

  • Verify that certificate update requests come from an authorized endpoint (GHSA-vj39-ww8j-vvx5)
  • Fix stack overflow due to deeply nested data structures (GHSA-wh38-wg57-5w7g)
  • Prevent arbitrary config injection on object creation via the API (GHSA-jgqj-x5j9-vgcm)
  • Fix that /v1/config/files could send uninitialized memory in case of file I/O errors (#10871)
  • Add filter-expression permission to make it possible to prevent API users from using DSL filter expressions
  • Windows: Update bundled OpenSSL to v3.5.7 (#10893)
Source: README.md, updated 2026-06-25