Keycloak: Fix for Oversized Logout URL and Package Update This update addresses an issue where the logout redirect URL became excessively large, leading to failed logouts and HTTP 500 errors. When users belonged to a large number of groups, the ID token grew substantially (exceeding 8 KB) because the full group list was mapped into…
Read MoreWhen a request is large, it is tempting to turn every step into a sub-task. It makes sense: each activity is visible, assignable, and trackable. However, there is a downside. Projects can quickly become crowded with work items, navigation becomes heavier, and even simple actions require more administration than they deserve. This was exactly the…
Read MoreImportant: GLPI security update Type/Severity NetEye Product Security has rated this update as having a high security impact. Topic An update for the glpi packages is now available for NetEye 4. Security Fix for NetEye 4.49 Summary This is the list of vulnerabilities patched in this update: For details on how to apply this update, which includes the…
Read MoreImportant: Keycloak security update Type/Severity NetEye Product Security has rated this update as having a high security impact. Topic An update for the keycloak packages is now available for NetEye 4. Security Fix for NetEye 4.49: Summary This Keycloak update (version 26.7.4) resolves several security issues identified in upstream Keycloak: For details on how to apply this…
Read MoreHow Terraform has turned our NetEye Cloud Elastic configuration management into a declarative, verifiable, and repeatable process that improves governance, security, and operational speed. From Manual Configuration to a Declarative Platform The configuration of an observability and security platform quickly grows in complexity. Workspaces, permissions, retention policies, data views, and user experience settings must remain…
Read MoreUpdate of Elastic Stack to Version 9.4.7 Elastic Stack 9.4.7 delivers targeted fixes across Elasticsearch, Kibana, Fleet Server, Logstash, Elastic Observability, and Elastic Security. Elasticsearch improves memory protection, ES|QL correctness, kNN filtering, vector compatibility, and data-stream auto-sharding. Kibana addresses issues across dashboards, alerting, Fleet, and platform stability, while Fleet Server fixes version-specific agent re-enrollment, upgrade…
Read MoreImportant: Grafana security update Type/Severity NetEye Product Security has rated this update as having a high security impact. Topic An update for the grafana packages is now available for NetEye 4. Security Fix for NetEye 4.49 Summary An authenticated user with permission to create or edit alert rules can bypass datasource query authorization by marking an alert rule…
Read MoreNetEye upgrade causes RPMS of next release to be upgraded even if an update is required first We fixed a bug in NetEye 4.47 and 4.48 that caused the neteye upgrade command to update some NetEye packages even when packages from the previous version had not yet been installed by neteye update. List of updated…
Read MoreOpenTelemetry’s graduation within the Cloud Native Computing Foundation was an important milestone. It confirmed that the project’s APIs, governance, and release processes had reached a level of maturity suitable for long-term adoption. However, graduation doesn’t solve one practical problem: The distribution containing the Collector you need may not include all the components your environment requires….
Read MoreEvery automation project starts with a clear goal, but the interesting part almost always shows up later. This is the story of how a synthetic monitoring test case on Microsoft Dynamics AX did exactly what it was supposed to do, and how that success eventually created a problem that only further automation could solve. It’s…
Read MoreI’m writing this article from the point of view of a NetEye system engineer. I want to share my findings from my path of improving the quality of the underlying Galera cluster architecture. The aim is to provide you with a practical guide for realizing non-blocking state transfers, Galera-aware health checks, database tuning and reliable…
Read MoreEvery red team engagement that involves a phishing scenario runs into the same wall sooner or later: You need a mail server you fully control, one that behaves like a real corporate mail system, sends and receives reliably, and does not torch your reputation the moment you use it. The answer is to compose your…
Read MoreTL;DR Results: GitHub Actions run 32970330873 at commit 1846eb4a863015cbc0a3c75431b42d138b8706c3 This experiment measures two different workloads in Go 1.27 and .NET 10/.NET 11(preview): It used one ubuntu-24.04 runner, 20 independent process samples, and 100 measured operations per sample. For TLS, the cleanest comparison is classical versus hybrid within the same implementation and, for .NET, the same OpenSSL provider…
Read MoreImportant: Keycloak security update Type/Severity NetEye Product Security has rated this update as having a high security impact. Topic An update for the keycloak packages is now available for NetEye 4. Security Fix for NetEye 4.49 Summary This Keycloak update (version 26.7.3) fixes 20 security issues found during internal review. None of them are rated Critical for running…
Read MoreIcinga 2 live-creation requests are no longer lost during reload During a Director deployment, Icinga 2 reloads its configuration in the background. Previously, live-creation requests could still be processed for a short time after a reload had been requested. This created a race condition: a request could be processed by the old Icinga 2 process…
Read More