This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2020-29663 →
DEBIAN-CVE-2020-29663
Icinga 2 v2.8.0 through v2.11.7 and v2.12.2 has an issue where revoked certificates due for renewal will automatically be renewed, ignoring the CRL. T...
Original description
The description as published by the source.
Icinga 2 v2.8.0 through v2.11.7 and v2.12.2 has an issue where revoked certificates due for renewal will automatically be renewed, ignoring the CRL. This issue is fixed in Icinga 2 v2.11.8 and v2.12.3.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
icinga2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.3-1"}]}]
Debian:13
icinga2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.3-1"}]}]
Debian:14
icinga2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.3-1"}]}]
References
- advisory security-tracker.debian.org