We fixed the uncaught exception on bad Basic autm but in doing so we introduced a 302 redirect for API requests as well. Net result: a curl client expecting a 401 gets redirected to the login page instead, and the machine on the other end has no browser to follow it.
List of updated packages
To solve the issue mentioned above, the following packages have been updated for NetEye 4.48:
icingaweb2-module-neteye, icingaweb2-module-neteye-autosetup and icingaweb2-module-neteye-configurator to version 1.194.1-1
Important: Elastic Stack security update Type/Severity NetEye Product Security has rated this update as having a High security impact. Topic Updates for the Elastic Stack packages are now available for NetEye 4. Security Fix for NetEye 4.49 9.4.5_neteye3.103.7-1 CVEs Elasticsearch Read More
GLPI 11 install and upgrade issue We identified and fixed a bug that could cause the neteye install or neteye upgrade command to fail on clusters in case the service was not running on the same node as Icingaweb2 Keycloak Read More
Resolved issue affecting neteye update We identified and fixed a bug that could cause the neteye update command to fail under specific circumstances. List of updated packages To solve the issue mentioned above, the following packages have been updated for Read More
Important: Icinga 2 security update Type/Severity NetEye Product Security has rated this update as having a critical security impact. Topic An update for the icinga package is now available for NetEye 4. Security Fix for NetEye 4.46 2.15.5_neteye1.64.3-1 Summary The vulnerabilities include an Read More
Important: Icinga 2 security update Type/Severity NetEye Product Security has rated this update as having a critical security impact. Topic An update for the icinga package is now available for NetEye 4. Security Fix for NetEye 4.47 2.15.5_neteye1.68.3-1 Summary The vulnerabilities include an Read More