We fixed a race condition in El Proxy for which sometimes Logstash was failing to recognize whether an incoming log should be signed by El Proxy or not.
We fixed a bug in El Proxy, which caused the verify command to report corruptions in the blockchain if newly signed documents were still waiting to be indexed by Elasticsearch.
We fixed a bug in Geomap that did not allow automatic updates of hosts’ status.
Moreover, we fixed a bug that prevented the installation of the perl-JSON-XS package, which can be required by external checks.
We fixed two bugs in the Eventhandler. One bug causing a certificates verification error while using the GUI and another one causing the Eventhandler GUI to freeze when a particular race condition was encountered.
We fixed a bug in Tornado that led to a privilege escalation to Icinga2 system user.
For NetEye 4.25 we updated the following packages:
icingaweb2-module-geomap, icingaweb2-module-geomap-autosetup to version 1.17.1-1
neteye-setup to version 1.90.2-1
eventhandler, eventhandler-autosetup, eventhandler-neteye-config to version 1.8.3-1
icingaweb2-module-eventhandler, icingaweb2-module-eventhandler-autosetup to version 1.12.1-2
perl-nats to version 0.2.2_neteye1.0.1-1
tornado-common, tornado-rsyslog-collector-logmanager, tornado, tornado-dto,tornado-neteye-config, tornado-autosetup to version 1.19.6-1
icinga2-autosetup, icinga2-common, icinga2-ido-mysql, icinga2-resources, icinga2-neteye-config, icinga2, icinga2-bin, icinga2-debuginfo, icinga2-doc to version 2.11.9_neteye1.48.5-1
elastic-blockchain-proxy, elastic-blockchain-proxy-autosetup to version 0.20.2-1
NagVis: honor recognize_services and exclude_members for Icinga DB hostgroups When NagVis renders a hostgroup summary object, two map options control which member states may influence the icon: recognize_services: if disabled, only the host states matter for the group icon; exclude_members: Read More
Important: Grafana security update Type/Severity NetEye Product Security has rated this update as having a Medium security impact. Topic Updates for the grafana packages are now available for NetEye 4. Security Fix for NetEye 4.50 12.4.13_neteye3.31.5-1 CVEs CVE-2026-15577CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVE-2026-33374CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2026-93294CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N Read More
RKE2: Fix of the upgrade to NetEye 4.49 and NetEye 4.50 fresh installations During an upgrade to NetEye 4.49 or a fresh installation of NetEye 4.50, the configuration of the RKE2 service could cause PCS to report all *_virt_ip resources Read More
Graph titles no longer disappear We fixed an issue where graph titles on ICW2 dashboards disappeared a few seconds after the page loaded.Graph titles now remain visible as expected. List of updated packages To solve the issue mentioned above, the Read More
Important: Keycloak security update Type/Severity NetEye Product Security has rated this update as having a high security impact. Topic An update for the keycloak packages is now available for NetEye 4. Security Fix for NetEye 4.50: 26.8.1_neteye1.47.2-1 CVEs CVE-2026-94000CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2026-94001CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H CVE-2026-97177CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2026-94215CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:L Read More
