14805 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Alexander Aleksandrovič Klimov	a55fdbd72f	Merge pull request #10917 from Icinga/release-v2.16.3 ... Release v2.16.3	2026-06-30 18:56:08 +02:00
Alexander Aleksandrovič Klimov	be84a7f2cb	Merge pull request #10921 from Icinga/backport-10914-to-support/2.16 ... [Backport support/2.16] Restore single-argument Json.decode() in the DSL	2026-06-30 18:03:51 +02:00
Julian Brost	9d61b4f7be	Release v2.16.3	2026-06-30 15:35:06 +02:00
Dominik Bay	842c080c76	Add Dominik Bay to AUTHORS ... refs #10913 (cherry picked from commit 326cbde447)	2026-06-30 12:46:07 +00:00
Dominik Bay	33ef1cf751	Restore single-argument Json.decode() in the DSL ... The recursion depth limit added to JsonDecode() in 2.16.2 gave the C++ function a second parameter with a default value. Function pointers do not carry default arguments, so the DSL function binding deduced an arity of 2 via boost::function_types::function_arity and required two arguments. As a result `Json.decode("...")` failed with "Too few arguments for function", an undocumented breaking change in a patch release. Wrap JsonDecode() in a single-argument shim (mirroring the existing JsonEncodeShim) so the registered function keeps its one-parameter contract while still applying the default depth limit internally. refs #10913 (cherry picked from commit d29ac491f2)	2026-06-30 12:46:07 +00:00
Julian Brost	d556b91595	Merge pull request #10916 from Icinga/backport-10912-to-support/2.16 ... [Backport support/2.16] Forward-port missing v2.15.1 upgrading docs to master branch	2026-06-30 12:48:23 +02:00
Julian Brost	29fa57c7fe	Add upgrading docs explaining the config file change for logrotate ... (cherry picked from commit ead09722a9) (cherry picked from commit d656f03862)	2026-06-30 07:42:12 +00:00
Julian Brost	00cd4fd853	Merge pull request #10904 from Icinga/security-2.16.2 ... Merge changes from private security fork (v2.16.2)	2026-06-29 14:42:47 +02:00
Julian Brost	cfdf63b633	Merge branch 'release-v2.16.2' into 'support/2.16' ... Release v2.16.2 See merge request packages/security/icinga2!27	2026-06-24 12:48:08 +00:00
Julian Brost	20ef9e2438	Merge branch 'filter-expression-permission-v2.16' into 'support/2.16' ... [Backport support/2.16] Add filter-expression permission See merge request packages/security/icinga2!15	2026-06-24 12:45:25 +00:00
Julian Brost	bb4e535e01	Merge branch 'configwriter-import-validation-v2.16' into 'support/2.16' ... [Backport support/2.16] [GHSA-jgqj-x5j9-vgcm] ConfigWriter::EmitScope: Escape import See merge request packages/security/icinga2!16	2026-06-24 12:44:16 +00:00
Julian Brost	efb8f63c17	Merge branch 'json-parsing-recursion-limit-v2.16' into 'support/2.16' ... [Backport support/2.16] [GHSA-wh38-wg57-5w7g] Fix stack overflow due to deeply nested data structures See merge request packages/security/icinga2!17	2026-06-24 12:40:08 +00:00
Julian Brost	bd6050a828	Merge branch 'fix-ca-replacement-vuln-v2.16' into 'support/2.16' ... [Backport support/2.16] [GHSA-vj39-ww8j-vvx5] Checking if certificate update request comes from a valid endpoint See merge request packages/security/icinga2!18	2026-06-24 12:36:44 +00:00
Julian Brost	f5b02b4885	Also execute JsonDecode stack size test in pthread if available ... Depending on the Boost version, the existing test case based on Boost.Asio coroutines might use a stack allocated without a guard page and might not reliably detect an overflow. This commit additionally runs the same test function within a pthread thread started with the same stack size as used by our coroutines. (cherry picked from commit a155da01b2)	2026-06-24 11:16:36 +02:00
Julian Brost	5288e83341	Use protected stack for new-style Boost.Asio coroutines ... In the `boost::asio::spawn()` call for newer Boost versions with `std::allocator_arg`, switch from `fixedsize_stack` to `protected_fixedsize_stack` in order to allocate the stacks with guard pages. This is done as an additional safeguard in case there was still some way to overflow, this at least reliably crashes the process instead of going into undefined behavior, which could even result in code execution. Unfortunately, the old-style `spawn()` function with `boost::coroutines::attributes` does not - at least to my knowledge - provide a way to request a stack allocated with guard pages, hence this is only enabled for Boost 1.87 and later with this commit. (cherry picked from commit 28711824cc)	2026-06-24 11:16:36 +02:00
Julian Brost	77effd5bbb	Add tests for JsonDecode depth limit in combination with coroutine stacks ... (cherry picked from commit 0481a66b01)	2026-06-24 11:16:36 +02:00
Julian Brost	dfda80415d	tests: move SpawnSynchronizedCoroutine() to utils.cpp ... This allows reusing the helper also from other test files. (cherry picked from commit ed202ed745)	2026-06-24 11:16:13 +02:00
Julian Brost	547b55031a	Prevent HTTP requests from creating deeply nested data structures ... Add validation checks to code paths reachable from the HTTP API (except full config file deployments via /v1/config) that prevent creating deeply nested data structures that could later cause a stack overflow. (cherry picked from commit 4b7ef02bd2)	2026-06-24 11:15:11 +02:00
Julian Brost	5ff0e61ad8	Don't shut down JSON-RPC connection if a message fails to parse ... With the limit from the previous commit, if a JSON-RPC now message fails to parse due to being nested to deep, it would have torn down the whole connection. It is still possible to trigger that scenario from DSL config (for example by returning nested structures from a lambda that is used in a check with command_endpoint). In order to fail more gracefully, only discard the single message and don't kill the whole connection. (cherry picked from commit e7d656cf37)	2026-06-24 11:15:11 +02:00
Julian Brost	b80132db87	JsonDecode: include path in JSON depth error ... If parsing JSON is rejected due to the depth limit introduced in the last commit, also include the path (like root["object"]["children"]...) that exceeds the allowed nesting depth. (cherry picked from commit 14d6ee9cdf)	2026-06-24 11:15:11 +02:00
Julian Brost	ed163a8aa9	JsonDecode: add depth limit ... Data structures parsed from JSON may be accessed recursively, so deeply nested structures may wreak havoc by overflowing the stack. Thus, enforce a general nesting depth limit of 24 by default (which should be more than enough for reasonable use), with the ability to pass a different limit to JsonDecode() if needed. (cherry picked from commit 4964d2444c)	2026-06-24 11:15:11 +02:00
Julian Brost	e21db4ed40	Add filter-expression permission ... This allows preventing ApiUsers from evaluating their own DSL expressions for improved security. (cherry picked from commit 324d5bb815)	2026-06-24 11:14:30 +02:00
Julian Brost	4f172a5a14	Release v2.16.2 ... Co-authored-by: Johannes Schmidt <johannes.schmidt@icinga.com>	2026-06-23 17:02:41 +02:00
Johannes Schmidt	b376830827	Merge pull request #10893 from Icinga/backport-10874-to-support/2.16 ... [Backport support/2.16] Bump OpenSSL shipped for Windows to v3.5.7	2026-06-23 12:04:07 +02:00
Julian Brost	414844ad3f	Bump OpenSSL shipped for Windows to v3.5.7 ... (cherry picked from commit 22b6188e24)	2026-06-23 09:06:04 +02:00
Julian Brost	e105e464e8	Merge pull request #10871 from Icinga/backport-10864-to-support/2.16 ... [Backport support/2.16] Fix handling the `std::ifstream::failbit` in `OutgoingHttpMessage`	2026-06-22 16:31:55 +02:00
Johannes Schmidt	a6f7cc7a4e	Check if client is a valid endpoint before updating CA-certificate ... (cherry picked from commit 1d412d2a5f2f9af59e8a79d02587ba9229e909e8)	2026-06-22 16:01:07 +02:00
Alvar Penning	af4b36e646	ConfigWriter::EmitScope: Escape import ... Escape all user-supplied template imports when creating an Icinga 2 DSL configuration object. Without the escape, a `"` within the template name would allow escaping the created object and create other Icinga 2 DSL objects, exceeding potential user privileges. The same bug was present in ConfigWriter::EmitComment, but as this method is dead code, it could just be removed. (cherry picked from commit faf0450962)	2026-06-22 15:42:34 +02:00
Julian Brost	b02293da52	Merge pull request #10888 from Icinga/backport-10884-to-support/2.16 ... [Backport support/2.16] GHA: Windows: run on Windows Server 2022	2026-06-22 13:03:32 +02:00
Alexander Aleksandrovič Klimov	a7b685f934	GHA: Windows: run on Windows Server 2022 ... Recently, the Windows Server 2025 image upgraded Visual Studio from v2022 to v2026. Our build setup is not prepared for this, so we must pin the OS image. (cherry picked from commit 6dc479741c)	2026-06-17 13:11:10 +00:00
Johannes Schmidt	bc300b51d8	Guard against assert() failures in SendJsonError() ... Co-authored-by: Julian Brost <julian.brost@icinga.com> (cherry picked from commit fe469a5455)	2026-06-10 15:18:05 +00:00
Johannes Schmidt	4188d2a914	Fix handling std::ifstream exceptions in ConfigFilesHandler ... (cherry picked from commit 6a3979fd1f)	2026-06-10 15:18:05 +00:00
Johannes Schmidt	0e9b6b0d05	Fix handling the std::ifstream::failbit in OutgoingHttpMessage ... (cherry picked from commit 281dd133c7)	2026-06-10 15:18:05 +00:00
Johannes Schmidt	3c58772da0	Add test-case for SendFile() with non-existant paths ... (cherry picked from commit e8a4336ab8)	2026-06-10 15:18:05 +00:00
Johannes Schmidt	1c7237d66d	Merge pull request #10853 from Icinga/release-2.16.1 ... Update changelog and version for v2.16.1	2026-05-21 09:53:44 +02:00
Johannes Schmidt	910c0a77d7	Merge pull request #10851 from Icinga/revert-perfdatawriterconnection ... Revert adding `PerfdataWriterConnection`	2026-05-21 09:51:49 +02:00
Johannes Schmidt	9110c455ae	Revert "Merge pull request #10668 from Icinga/perfdata-writers-connection-handling" ... This reverts commit 6592eae21d, reversing changes made to 41109e20d6.	2026-05-20 17:36:43 +02:00
Johannes Schmidt	173c421d41	Update version to v2.16.1	2026-05-20 16:17:12 +02:00
Johannes Schmidt	d5ce462b39	Update changelog for v2.16.1	2026-05-20 16:17:07 +02:00
Johannes Schmidt	12a20b18d5	Revert "Merge pull request #10799 from Icinga/fix-pdwc-tls-host-check" ... This reverts commit 03d3558621, reversing changes made to 81d39f1f78.	2026-05-20 12:47:48 +02:00
Julian Brost	e037b74eb3	Merge pull request #10850 from Icinga/backport-10832-to-support/2.16 ... [Backport support/2.16] Fix openSUSE 15.6 GitHub actions	2026-05-20 12:41:44 +02:00
Alexander A. Klimov	252c4fbef5	Fix openSUSE 15.6 GitHub actions ... The runner image ships libncurses6-6.1-150000.5.33.1, but the only ncurses-devel available in the configured repos is 6.1-150000.5.30.1, which requires an exact-version match on libncurses6. (cherry picked from commit 4a868146dd)	2026-05-20 07:43:08 +00:00
Julian Brost	4bfb7c88b8	Merge pull request #10837 from Icinga/backport-10829-to-support/2.16 ... [Backport support/2.16] docs: clarify OTLPMetricsWriter unavailability on Debian 11 and Ubunt…	2026-05-19 15:57:27 +02:00
Julian Brost	e6e856239b	Merge pull request #10817 from Icinga/backport-10802-to-support/2.16 ... [Backport support/2.16] Add Ubuntu 26.04 to CI workflow	2026-05-19 15:55:42 +02:00
Julian Brost	ff51d63cd1	Merge pull request #10820 from Icinga/backport-10803-to-support/2.16 ... [Backport support/2.16] Add Fedora 44 to CI workflow	2026-05-19 15:53:51 +02:00
Manas Singh	bdfd923df6	docs: note OTLP metrics package limitation on Debian 11 and Ubuntu 22.04 and Amazon Linux 2 ... (cherry picked from commit 8d9b8ae0fd)	2026-05-05 11:29:12 +00:00
Alexander Aleksandrovič Klimov	abb345f8ef	Add Fedora 44 to CI workflow ... (cherry picked from commit 00e03c975d)	2026-04-23 12:29:04 +00:00
Alexander Aleksandrovič Klimov	5cb2912fd9	Add Ubuntu 26.04 to CI workflow ... (cherry picked from commit de258f09d5)	2026-04-23 12:25:45 +00:00
Julian Brost	5855790474	Merge pull request #10760 from Icinga/changelog-216 ... Release v2.16.0	2026-04-22 11:29:50 +02:00
Johannes Schmidt	03d3558621	Merge pull request #10799 from Icinga/fix-pdwc-tls-host-check ... Fix host name verification for `PerfdataWriterConnection`	2026-04-22 11:22:27 +02:00