Improved wait for cluster status during updates / upgrades
When restarting the Elasticsearch cluster during the NetEye update / upgrade procedure, is it possible let the restart procedure going even if the cluster has a “yellow” status. The check on the cluster status has been improved to allow at least the “yellow” status if the user specified it.
Resolving Elasticsearch Nodes Attempting to Join a New Cluster
During updates or upgrades, certain conditions may cause some Elasticsearch nodes to attempt to form a new cluster, resulting in nodes restart failures. This issue has been addressed by configuring the cluster.initial_master_nodes setting only during the initial bootstrap of the Elasticsearch cluster. Once the cluster is successfully established, this setting is permanently removed.
Addition of EnvironmentFile Directive in elastic-agent.service file
We have now made it possible to configure environment variables for the elastic-agent.service running on NetEye nodes. You can now configure environment variables by creating an environment file under /neteye/local/elastic-agent/conf/sysconfig/elastic-agent-user-customization.
List of updated packages
To solve the aforementioned issues, the following packages have been updated for NetEye 4.43:
Important: ClickHouse security update Type/Severity NetEye Product Security has rated this update as having a CRITICAL security impact. Topic An update for the clickhouse-server package is now available for NetEye 4. Security Fix for NetEye 4.50: 26.3.62.3-1 Security Fixes CVE-2026-116366CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H This vulnerability Read More
Disclaimer: Three of the security issues referenced below do not yet have public CVE identifiers, so they are referenced by their GHSA ID. This post will be updated as soon as CVEs become available. Important: Icinga Web 2 security update Read More
Disclaimer: Some of the CVEs referenced below have not yet been publicly disclosed, so details regarding their severity, impact, and potential attack vectors are not fully available at this time. This post will be updated as soon as additional information Read More
Important: Elastic Stack security update Type/Severity NetEye Product Security has rated this update as having a High security impact. Topic Updates for the Elastic Stack packages are now available for NetEye 4. Security Fix for NetEye 4.50 9.5.6_neteye3.105.5-1 CVEs Elasticsearch Read More
Update: Elastic Stack v9.5.6 also includes important security fixes. You can find more details here. Update of Elastic Stack to Version 9.5.6 Elastic Stack 9.5.6 is a maintenance release that brings a large set of stability, correctness and hardening fixes Read More