This security release fixes a problem in the Icinga 2 Windows MSI that did not set proper permissions for %ProgramData%\icinga2\var. Additionally, it includes two minor bug fixes regarding our SELinux policy and updates the OpenSSL version shipped on Windows.
Security
- CVE-2026-24413: Fix permissions of
%ProgramData%\icinga2\varon Windows. - SELinux: Fix policy to allow
logrotateto execute theicinga2binary in order to sendSIGUSR1for log rotation. #10643 - SELinux: Fix policy to allow
icinga2to sendSIGTERMto nagios plugins processes on timeout. #10694