We fixed a race condition in El Proxy for which sometimes Logstash was failing to recognize whether an incoming log should be signed by El Proxy or not.
We fixed a bug in El Proxy, which caused the verify command to report corruptions in the blockchain if newly signed documents were still waiting to be indexed by Elasticsearch.
We fixed a bug in Geomap that did not allow automatic updates of hosts’ status.
Moreover, we fixed a bug that prevented the installation of the perl-JSON-XS package, which can be required by external checks.
We fixed two bugs in the Eventhandler. One bug causing a certificates verification error while using the GUI and another one causing the Eventhandler GUI to freeze when a particular race condition was encountered.
We fixed a bug in Tornado that led to a privilege escalation to Icinga2 system user.
For NetEye 4.25 we updated the following packages:
icingaweb2-module-geomap, icingaweb2-module-geomap-autosetup to version 1.17.1-1
neteye-setup to version 1.90.2-1
eventhandler, eventhandler-autosetup, eventhandler-neteye-config to version 1.8.3-1
icingaweb2-module-eventhandler, icingaweb2-module-eventhandler-autosetup to version 1.12.1-2
perl-nats to version 0.2.2_neteye1.0.1-1
tornado-common, tornado-rsyslog-collector-logmanager, tornado, tornado-dto,tornado-neteye-config, tornado-autosetup to version 1.19.6-1
icinga2-autosetup, icinga2-common, icinga2-ido-mysql, icinga2-resources, icinga2-neteye-config, icinga2, icinga2-bin, icinga2-debuginfo, icinga2-doc to version 2.11.9_neteye1.48.5-1
elastic-blockchain-proxy, elastic-blockchain-proxy-autosetup to version 0.20.2-1
Important: ClickHouse security update Type/Severity NetEye Product Security has rated this update as having a CRITICAL security impact. Topic An update for the clickhouse-server package is now available for NetEye 4. Security Fix for NetEye 4.50: 26.3.62.3-1 Security Fixes CVE-2026-116366CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H This vulnerability Read More
Disclaimer: Three of the security issues referenced below do not yet have public CVE identifiers, so they are referenced by their GHSA ID. This post will be updated as soon as CVEs become available. Important: Icinga Web 2 security update Read More
Disclaimer: Some of the CVEs referenced below have not yet been publicly disclosed, so details regarding their severity, impact, and potential attack vectors are not fully available at this time. This post will be updated as soon as additional information Read More
Important: Elastic Stack security update Type/Severity NetEye Product Security has rated this update as having a High security impact. Topic Updates for the Elastic Stack packages are now available for NetEye 4. Security Fix for NetEye 4.50 9.5.6_neteye3.105.5-1 CVEs Elasticsearch Read More
Update: Elastic Stack v9.5.6 also includes important security fixes. You can find more details here. Update of Elastic Stack to Version 9.5.6 Elastic Stack 9.5.6 is a maintenance release that brings a large set of stability, correctness and hardening fixes Read More
