Important: Grafana security update Type/Severity NetEye Product Security has rated this update as having a medium security impact. Topic An update for the grafana packages is now available for NetEye 4. Security Fix for NetEye 4.49 and 4.50 Summary Four medium-severity CVEs were fixed (CVSS 4.3–5.4). Three concern permission scoping: alert rules listable from folders a user may…
Read MoreFixes for nginx and nginx-satellite We identified and fixed two issues affecting nginx resource management during service and resource restarts. nginx-satellite.service An issue could leave nginx worker processes running after nginx-satellite.service entered a failed state. These processes could continue listening on the configured ports and cause Address already in use errors during a restart. The…
Read MoreWhen the GLPI inventory plugin is used to collect agent inventories, assets may fail to appear in GLPI even though the agents reach the server. The cause was a bug in the Icinga Web 2 SSO plugin: GLPI 11 marks the inventory plugin’s endpoints as “stateless,” and the SSO plugin wrongly treated them like static…
Read MoreKeycloak: Fix for Oversized Logout URL and Package Update This update addresses an issue where the logout redirect URL became excessively large, leading to failed logouts and HTTP 500 errors. When users belonged to a large number of groups, the ID token grew substantially (exceeding 8 KB) because the full group list was mapped into…
Read MoreImportant: GLPI security update Type/Severity NetEye Product Security has rated this update as having a high security impact. Topic An update for the glpi packages is now available for NetEye 4. Security Fix for NetEye 4.49 Summary This is the list of vulnerabilities patched in this update: For details on how to apply this update, which includes the…
Read MoreUpdate of Elastic Stack to Version 9.4.7 Elastic Stack 9.4.7 delivers targeted fixes across Elasticsearch, Kibana, Fleet Server, Logstash, Elastic Observability, and Elastic Security. Elasticsearch improves memory protection, ES|QL correctness, kNN filtering, vector compatibility, and data-stream auto-sharding. Kibana addresses issues across dashboards, alerting, Fleet, and platform stability, while Fleet Server fixes version-specific agent re-enrollment, upgrade…
Read MoreImportant: Grafana security update Type/Severity NetEye Product Security has rated this update as having a high security impact. Topic An update for the grafana packages is now available for NetEye 4. Security Fix for NetEye 4.49 Summary An authenticated user with permission to create or edit alert rules can bypass datasource query authorization by marking an alert rule…
Read MoreImportant: Keycloak security update Type/Severity NetEye Product Security has rated this update as having a high security impact. Topic An update for the keycloak packages is now available for NetEye 4. Security Fix for NetEye 4.49 Summary This Keycloak update (version 26.7.3) fixes 20 security issues found during internal review. None of them are rated Critical for running…
Read MoreIcinga 2 live-creation requests are no longer lost during reload During a Director deployment, Icinga 2 reloads its configuration in the background. Previously, live-creation requests could still be processed for a short time after a reload had been requested. This created a race condition: a request could be processed by the old Icinga 2 process…
Read MoreImportant: Elastic Stack security update Type/Severity NetEye Product Security has rated this update as having a High security impact. Topic Updates for the Elastic Stack packages are now available for NetEye 4. Security Fix for NetEye 4.49 CVEs Elastic Agent Kibana Most of the 11 CVEs are authorization and access control weaknesses affecting Kibana, including…
Read MoreImportant: Keycloak security update Type/Severity NetEye Product Security has rated this update as having a critical security impact. Topic An update for the keycloak packages is now available for NetEye 4. Security Fix for NetEye 4.49 Summary This vulnerability, tracked as CVE-2026-18963 (CVSS 9.1, Critical), affects the reset-credentials authentication flow in Keycloak. Due to improper state validation, an…
Read MoreImportant: Icinga 2 security update Type/Severity NetEye Product Security has rated this update as having a medium security impact. Topic An update for the icinga package is now available for NetEye 4. Security Fix for NetEye 4.49 Summary This release fixes authorization bypasses in /v1/events filter expressions and a node-to-node memory-exhaustion DoS, while also preventing sensitive data from…
Read MoreRKE2 Otel Collector DNS requirement During updates and first installations on systems where the Elastic Stack feature module was installed, an extra requirement was present. In particular, the DNS defined in the resolv.conf of the machine was required to resolve the domain set as frontend domain the in the /etc/neteye-environment.yaml. This requirement was now dropped…
Read MoreImportant: Elastic Stack security update Type/Severity NetEye Product Security has rated this update as having a High security impact. Topic Updates for the Elastic Stack packages are now available for NetEye 4. Security Fix for NetEye 4.49 CVEs Elasticsearch Fleet Server Kibana Most of the 36 CVEs are Denial of Service vulnerabilities affecting Elasticsearch (uncontrolled…
Read MoreGLPI 11 install and upgrade issue We identified and fixed a bug that could cause the neteye install or neteye upgrade command to fail on clusters in case the service was not running on the same node as Icingaweb2 Keycloak install issue We identified and fixed a bug that could cause the neteye install command…
Read More