Fix for memory corruption in icinga2 We solved an issue that affected icinga2. If the cleanup of the http sessions in the execute-script endpoint ran during a request, the re-balance in the internal datastructure would corrupt the requests memory, resulting in erroneous behaviors or crashes of icinga2. List of updated packages To solve the issues…
Read MoreA while ago I was studying the webp image format by Google out of curiosity. I had written a .png parser in the past and was interested in seeing how the lossless VP8L encoding in particular was working in that library. While I was using a external Rust library to decode the actual image data…
Read MoreRecently Icinga DB Web had a new security release, fixing a vulnerability where protected or hidden custom variables could be inferred by any user with object visibility by abusing comparative filters on those hidden variables.
Read MoreFixes for icinga2 We have updated icinga2 to the latest bugfix version to resolve CVE-2025-48057. List of updated packages To solve the aforementioned issues, the following packages have been updated for NetEye 4.42:
Read MoreFix Tornado filter WHERE condition We fixed an issue in Tornado UI in which the WHERE condition of a filter were not being displayed correctly for some conditions not created through the API. List of updated packages To solve the issue, the following packages have been updated for NetEye 4.39 – 4.40: To solve the…
Read MoreFix for icinga2 check processing We fixed a race-condition in icinga2, where a lock was not held long enough, causing threads to overwrite local state when processing two simultaneous check results for the same object. List of updated packages To solve the issue, the following packages have been updated:
Read MoreAt the 36th Chaos Communication Congresses back before COVID forced a three year break, I attended a talk from the German tech-blogger Fefe. There he talked about the “nützlich-unbedenklich Spektrum” or in English, the useful – harmless spectrum. He argued that all software lies on that spectrum to some degree. Of course one could argue…
Read MoreAfter the previous release of an Icinga2 bugfix for a race-condition during the shutdown, some issues with the connection to satellite nodes emerged. This bugfix release is a cleanup we worked on in cooperation with Icinga2 to address those issues. We updated the following packages for NetEye 4.37 and 4.38: We updated the following packages…
Read MoreAssetmanagement – GLPI We fixed a bug for the GLPI single sign on, where every login through the SSO would write two line of updates for the user permissions to the user object history. SIEM – Log Management We resolved a bug in Elasticsearch that occurred when a mount (for example, an NFS share) was…
Read MoreMonitoring We have resolved an issue where icinga2 would fail to write state changes to the IDO and execute notifications during shutdown. We updated the following packages:
Read MoreWe fixed a bug where the deployment of the Icinga director would not clean up old stages, filling up the file system over multiple deploys. Updated packages For NetEye 4.32 we updated the following packages:
Read MoreWith the upcoming Rust version 1.75.0, two important new features will be stabilized. These features go by the names return-position impl Trait in trait (RPITIT) and async fn in trait (AFIT).
Read MoreWe fixed a bug in the NetEye in which El Proxy would use an empty string as previous hash when, upon restart, it could not find the last signed log in Elasticsearch, resulting in a blockchain corruption. Updated packages For NetEye 4.31 we updated the following packages:
Read MoreThe n-queens problem is a common exercise in computer science. Legend has it that a mathematician once declared that women are like the queens in chess, you can’t put eight of them in a room without them trying to kill each other. This obviously isn’t true, and since I’m a feminist, but also a nerd,…
Read MoreWe fixed a bug that caused tornado smart monitoring executor to throw errors if the object name contained some special characters. Together with this bug fix we also deprecated the retry option on pending object, as we resolved this issue in NetEye 4.22. If a custom configuration was created, it will be backed up as…
Read More