Merge pull request #10231 from Icinga/probot/sync-changelog/master/cf…

…162e85d013a95fa31107284bdc969410de4bd7
Icinga · Nov 12, 2024 · 7a20d98 · 7a20d98
2 parents cf162e8 + dfa2912
commit 7a20d98
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,6 +7,15 @@ documentation before upgrading to a new release.
 
 Released closed milestones can be found on [GitHub](https://github.com/Icinga/icinga2/milestones?state=closed).
 
+## 2.14.3 (2024-11-12)
+
+This security release fixes a TLS certificate validation bypass.
+Given the severity of that issue, users are advised to upgrade all nodes immediately.
+
+* Security: fix TLS certificate validation bypass. CVE-2024-49369
+* Security: update OpenSSL shipped on Windows to v3.0.15.
+* Windows: sign MSI packages with a certificate the OS trusts by default.
+
 ## 2.14.2 (2024-01-18)
 
 Version 2.14.2 is a hotfix release for master nodes that mainly