CVS commit: pkgsrc/net/icinga2

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Mon Jun 29 19:40:41 UTC 2026

Modified Files:
        pkgsrc/net/icinga2: Makefile distinfo

Log Message:
icinga2: updated to 2.16.2

2.16.2 (2026-06-29)

This release fixes some critical security vulnerabilities in Icinga 2. Users are advised to upgrade immediately, as two
of them allow an unauthenticated attacker to take over or crash the Icinga 2 process over the network. The other
security fixes only affect authenticated API users.

In addition, a new permission named `filter-expression` is introduced, which allows specifying if individual API users
are allowed to use DSL filter expressions in API queries. This allows further restricting some API users that don't need
this capability, for example, those only submitting individual check results. Due to the incompatibility of this change,
enforcement of this permission is opt-in until v2.17; see the
[upgrading docs](https://icinga.com/docs/icinga-2/latest/doc/16-upgrading-icinga-2/#upgrading-to-2-16-2) for details.

* Verify that certificate update requests come from an authorized endpoint ([GHSA-vj39-ww8j-vvx5](https://github.com/Icinga/icinga2/security/advisories/GHSA-vj39-ww8j-vvx5))
* Fix stack overflow due to deeply nested data structures ([GHSA-wh38-wg57-5w7g](https://github.com/Icinga/icinga2/security/advisories/GHSA-wh38-wg57-5w7g))
* Prevent arbitrary config injection on object creation via the API ([GHSA-jgqj-x5j9-vgcm](https://github.com/Icinga/icinga2/security/advisories/GHSA-jgqj-x5j9-vgcm))
* Fix that `/v1/config/files` could send uninitialized memory in case of file I/O errors
* Add `filter-expression` permission to make it possible to prevent API users from using DSL filter expressions
* Windows: Update bundled OpenSSL to v3.5.7


To generate a diff of this commit:
cvs rdiff -u -r1.27 -r1.28 pkgsrc/net/icinga2/Makefile
cvs rdiff -u -r1.12 -r1.13 pkgsrc/net/icinga2/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/icinga2/Makefile
diff -u pkgsrc/net/icinga2/Makefile:1.27 pkgsrc/net/icinga2/Makefile:1.28
--- pkgsrc/net/icinga2/Makefile:1.27    Mon Jun 22 19:38:49 2026
+++ pkgsrc/net/icinga2/Makefile Mon Jun 29 19:40:41 2026
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.27 2026/06/22 19:38:49 wiz Exp $
+# $NetBSD: Makefile,v 1.28 2026/06/29 19:40:41 adam Exp $
 
-DISTNAME=      icinga2-2.16.1
-PKGREVISION=   1
+DISTNAME=      icinga2-2.16.2
 CATEGORIES=    net sysutils
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=icinga/}
 GITHUB_TAG=    v${PKGVERSION_NOREV}

Index: pkgsrc/net/icinga2/distinfo
diff -u pkgsrc/net/icinga2/distinfo:1.12 pkgsrc/net/icinga2/distinfo:1.13
--- pkgsrc/net/icinga2/distinfo:1.12    Thu May 21 12:45:37 2026
+++ pkgsrc/net/icinga2/distinfo Mon Jun 29 19:40:41 2026
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.12 2026/05/21 12:45:37 adam Exp $
+$NetBSD: distinfo,v 1.13 2026/06/29 19:40:41 adam Exp $
 
-BLAKE2s (icinga2-2.16.1.tar.gz) = 43142fe89b37c95b6299d300023aa91868829c430f42cc774e681a629ab96585
-SHA512 (icinga2-2.16.1.tar.gz) = ea96ff526f6e0421bf55e9e67ab53f3eac7851ab42981ce5151444df031b59791c08410859ce26fe1cf7ca40fb79a0ee1be825250b38db4f23cab2f2711b1c12
-Size (icinga2-2.16.1.tar.gz) = 9578801 bytes
+BLAKE2s (icinga2-2.16.2.tar.gz) = 8647573b1a17c7ddd777a393ecd96fabb00fd4631f585ab1a1bca4f8ceb58702
+SHA512 (icinga2-2.16.2.tar.gz) = 664fb4e4b3a79bf99cf7f253007effd6940a15aa164a1f3aa122f2fc91bae5d9d4c5d732cfa9ca497cf668e4494a6ee1fe42a5ef411709b4e0426e76786576ae
+Size (icinga2-2.16.2.tar.gz) = 9582890 bytes
 SHA1 (patch-third-party_cmake_FindMySQL.cmake) = a33567c30db47c4fab379f1b7c358174dd85fdd3