Asset Management: GLPI agent inventory submissions through satellites now work with the glpiinventory plugin
On NetEye satellites, nginx proxies GLPI inventory submissions from agents to the GLPI instance running on the master. Until now, the proxy covered only one endpoint, /glpi/front/inventory.php. However, agents that rely on the glpiinventory plugin may also exchange data with the plugin endpoints /glpi/plugins/glpiinventory/index.php and /glpi/marketplace/glpiinventory/index.php. Since these were not proxied, the satellite’s own nginx answered those requests instead of the master’s GLPI, causing inventory submissions sent through the satellite to fail.
With this update, the satellite proxy configuration now forwards the glpiinventory plugin endpoints to the master, just like the endpoint it already handled. Note that this fix concerns the satellites only: GLPI on the master already serves the plugin endpoints, so no update or reconfiguration is needed on the master. Regularly updating the satellites is sufficient to make inventory collection through them work end to end.
For instructions on how to update NetEye satellites, see the corresponding section in the NetEye User Guide.
List of updated packages
To solve the issue mentioned above, the following packages have been updated:
icingaweb2-module-assetmanagement, icingaweb2-module-assetmanagement-autosetup, icingaweb2-module-assetmanagement-configurator, all to version 1.44.1-1
Important: ClickHouse security update Type/Severity NetEye Product Security has rated this update as having a CRITICAL security impact. Topic An update for the clickhouse-server package is now available for NetEye 4. Security Fix for NetEye 4.50: 26.3.62.3-1 Security Fixes CVE-2026-116366CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H This vulnerability Read More
Disclaimer: Three of the security issues referenced below do not yet have public CVE identifiers, so they are referenced by their GHSA ID. This post will be updated as soon as CVEs become available. Important: Icinga Web 2 security update Read More
Disclaimer: Some of the CVEs referenced below have not yet been publicly disclosed, so details regarding their severity, impact, and potential attack vectors are not fully available at this time. This post will be updated as soon as additional information Read More
Important: Elastic Stack security update Type/Severity NetEye Product Security has rated this update as having a High security impact. Topic Updates for the Elastic Stack packages are now available for NetEye 4. Security Fix for NetEye 4.50 9.5.6_neteye3.105.5-1 CVEs Elasticsearch Read More
Update: Elastic Stack v9.5.6 also includes important security fixes. You can find more details here. Update of Elastic Stack to Version 9.5.6 Elastic Stack 9.5.6 is a maintenance release that brings a large set of stability, correctness and hardening fixes Read More