We fixed a race condition in El Proxy for which sometimes Logstash was failing to recognize whether an incoming log should be signed by El Proxy or not.
We fixed a bug in El Proxy, which caused the verify command to report corruptions in the blockchain if newly signed documents were still waiting to be indexed by Elasticsearch.
We fixed a bug in Geomap that did not allow automatic updates of hosts’ status.
Moreover, we fixed a bug that prevented the installation of the perl-JSON-XS package, which can be required by external checks.
We fixed two bugs in the Eventhandler. One bug causing a certificates verification error while using the GUI and another one causing the Eventhandler GUI to freeze when a particular race condition was encountered.
We fixed a bug in Tornado that led to a privilege escalation to Icinga2 system user.
For NetEye 4.25 we updated the following packages:
icingaweb2-module-geomap, icingaweb2-module-geomap-autosetup to version 1.17.1-1
neteye-setup to version 1.90.2-1
eventhandler, eventhandler-autosetup, eventhandler-neteye-config to version 1.8.3-1
icingaweb2-module-eventhandler, icingaweb2-module-eventhandler-autosetup to version 1.12.1-2
perl-nats to version 0.2.2_neteye1.0.1-1
tornado-common, tornado-rsyslog-collector-logmanager, tornado, tornado-dto,tornado-neteye-config, tornado-autosetup to version 1.19.6-1
icinga2-autosetup, icinga2-common, icinga2-ido-mysql, icinga2-resources, icinga2-neteye-config, icinga2, icinga2-bin, icinga2-debuginfo, icinga2-doc to version 2.11.9_neteye1.48.5-1
elastic-blockchain-proxy, elastic-blockchain-proxy-autosetup to version 0.20.2-1
Important: GeoMap update Type/Severity NetEye Product Security has rated this update as having a High security impact. Topic An update for the package icingaweb2-module-geomap is now available for NetEye 4. Security Fix for NetEye 4.40 1.22.4 - 1 CVSSv3.1: 7.3(High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N For Read More
Important: Elastic Stack security update (installed with SIEM) Type/Severity NetEye Product Security has rated this update as having a Critical security impact. Topic An update for the package kibana is now available for NetEye 4. Security Fix for NetEye 4.40 8.17.3_neteye3.72.11-1 CVSSv3.1: 9.9(Critical) Read More
Fix for icinga2 satellites zone validation Fixed an issue with the icinga2 satellites zone validation that caused the neteye satellite config create to fail if one of the icinga2-zone is a sub-string of the others List of updated packages To Read More
Remove "Drop non-existing group during Sync" on LDAP user federations Remove flag “Drop non-existing group during Sync” on LDAP user federations List of updated packages To solve the issue, the following packages have been updated: keycloak, keycloak-autosetup, keycloak-configurator, keycloak-python, to Read More
Important: IcingWeb2 Module Analytics security update Type/Severity NetEye Product Security has rated this update as having a Medium security impact. Topic An update for the package icingaweb2-module-analytics is now available for NetEye 4. Security Fix for NetEye 4.40 1.60.3-1 CVSS: 6.3 (medium): CVSS3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N Read More
