Disclaimer: Three of the security issues referenced below do not yet have public CVE identifiers, so they are referenced by their GHSA ID. This post will be updated as soon as CVEs become available. Important: Icinga Web 2 security update Type/Severity NetEye Product Security has rated this update as having a High security impact. Topic…
Read MoreImportant: Elastic Stack security update Type/Severity NetEye Product Security has rated this update as having a High security impact. Topic Updates for the Elastic Stack packages are now available for NetEye 4. Security Fix for NetEye 4.50 CVEs Elasticsearch Kibana Logstash Logstash shares the two eMudhra trust-store CVEs listed under Elasticsearch (CVE-2026-91403, CVE-2026-114820) through its…
Read MoreUpdate: Elastic Stack v9.5.6 also includes important security fixes. You can find more details here. Update of Elastic Stack to Version 9.5.6 Elastic Stack 9.5.6 is a maintenance release that brings a large set of stability, correctness and hardening fixes across Elasticsearch, Kibana, Fleet Server, Logstash, Elastic Agent, Beats, Elastic Observability, and Elastic Security. Elasticsearch…
Read MoreDisclaimer: The security issues referenced below do not yet have publicly disclosed CVE identifiers, so they are referenced by GHSA ID. This post will be updated as soon as CVEs become available. Important: Icinga 2 security update Type/Severity NetEye Product Security has rated this update as having a Medium security impact. Topic An update for the icinga…
Read MoreAsset Management: GLPI agent inventory submissions through satellites now work with the glpiinventory plugin On NetEye satellites, nginx proxies GLPI inventory submissions from agents to the GLPI instance running on the master. Until now, the proxy covered only one endpoint, /glpi/front/inventory.php. However, agents that rely on the glpiinventory plugin may also exchange data with the…
Read MoreNagVis: honor recognize_services and exclude_members for Icinga DB hostgroups When NagVis renders a hostgroup summary object, two map options control which member states may influence the icon: The Icinga DB backend silently ignored both options, so service states were always merged into the hostgroup summary, and exclusion rules were never applied. As a result, a…
Read MoreRKE2: Fix of the upgrade to NetEye 4.49 and NetEye 4.50 fresh installations During an upgrade to NetEye 4.49 or a fresh installation of NetEye 4.50, the configuration of the RKE2 service could cause PCS to report all *_virt_ip resources as failed, potentially resulting in brief service interruptions. This behavior was triggered by a routine…
Read MoreGraph titles no longer disappear We fixed an issue where graph titles on ICW2 dashboards disappeared a few seconds after the page loaded.Graph titles now remain visible as expected. List of updated packages To solve the issue mentioned above, the following packages have been updated: Reduced unnecessary Keycloak login events We fixed an issue that…
Read MoreImportant: GLPI security update Type/Severity NetEye Product Security has rated this update as having a medium security impact. Topic An update for the glpi packages is now available for NetEye 4. Security Fix for NetEye 4.50 Summary The list of vulnerabilities, regarding to the bundled plugins, patched in this update is: For details on how to apply this…
Read MoreGLPI: Fix of the upgrade to NetEye 4.50 when custom GLPI plugins are installed During the upgrade to NetEye 4.50, NetEye moves the GLPI plugins that you installed manually out of the folder /usr/share/glpi/plugins. Before this fix, NetEye did not correctly identify which plugins were installed manually. On NetEye clusters with manually installed plugins, the…
Read MoreTornado: Allow disabling forwarding of local system logs to Tornado By default, rsyslog on NetEye nodes forwards all logs it handles to the Tornado event engine. These include the system logs of the NetEye node itself, which can generate a large number of syslog events on Tornado. Until now, there was no way to turn…
Read MoreImportant: Elastic Stack security update Type/Severity NetEye Product Security has rated this update as having a High security impact. Topic Updates for the Elastic Stack packages are now available for NetEye 4. Security Fix for NetEye 4.50 CVEs Elastic Agent Elasticsearch Kibana Most of the 8 CVEs are resource-exhaustion weaknesses in Elasticsearch. These are Uncontrolled…
Read MoreOIDC group synchronization with read-only LDAP federation Fixed an issue that occurred when OIDC group synchronization was enabled alongside a read-only LDAP federation. The OIDC mapper attempted to modify LDAP-managed group memberships, resulting in the error: Not possible to delete LDAP group mappings as mapper mode is READ_ONLY. The synchronization logic now respects the LDAP…
Read MoreImportant: GLPI security update Type/Severity NetEye Product Security has rated this update as having a high security impact. Topic An update for the glpi packages is now available for NetEye 4. Security Fix for NetEye 4.50 Summary This is the list of vulnerabilities patched in this update: For details on how to apply this update, which includes the…
Read MoreNATS: Fix multi-tenancy configuration corruption in cluster environments When executing commands such as neteye install –restrict-services-to nats-server, neteye tenant config apply, or neteye satellite config create from a cluster node while nats-server was active on a different node, the shared /neteye/shared/nats-server/conf/multi-tenancy.conf configuration file could get corrupted. Unreplaced template placeholders (such as @@ACCOUNTS@@, @@TORNADO_IMPORTS@@, and @@TELEGRAF_IMPORTS@@)…
Read More