Multiple security issues have been found in the Icinga host and network monitoring system (buffer overflows, cross-site request forgery, off-by ones) which could result in the execution of arbitrary code, denial of service or session hijacking.

For the stable distribution (wheezy), these problems have been fixed in version 1.7.1-7. For the testing distribution (jessie), these problems have been fixed in version 1.11.0-1. For the unstable distribution (sid), these problems have been fixed in version 1.11.0-1. We recommend that you upgrade your icinga packages.

Icinga is a modular monitoring framework for hosts, services, and networks, based on the Nagios project. It is designed to be easy to understand and modify to fit any need.

icinga on Debian Linux

This check tests the installed software version using the apt package manager.

• http://www.debian.org/security/2014/dsa-2956.html

---

Updated on 2015-03-25