Fix missing event module field in El Proxy signed documents We recently identified and fixed a bug affecting Elasticsearch logs signed by El Proxy. The issue stemmed from missing index templates for Elastic Agent integrations, causing logs to match the default El Proxy templates, which lacked essential fields like “event.module.” To resolve this, we’ve automated…
Read MoreImportant: Icingaweb2 Module Geomap security update Type/Severity NetEye Product Security has rated this update as having a security impact of Low Topic An update for the package icingaweb2-module-geomap is now available for NetEye 4. Security Fix for NetEye 4.40 For details on how to apply this update, which includes the changes described in this advisory, refer…
Read MoreImportant: GLPI security update Type/Severity NetEye Product Security has rated this update as having a security impact of Low Topic An update for the package glpi is now available for NetEye 4. Security Fix for NetEye 4.40 For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to…
Read MoreFix for icinga2 check processing We fixed a race-condition in icinga2, where a lock was not held long enough, causing threads to overwrite local state when processing two simultaneous check results for the same object. List of updated packages To solve the issue, the following packages have been updated:
Read MoreImportant: GeoMap update Type/Severity NetEye Product Security has rated this update as having a High security impact. Topic An update for the package icingaweb2-module-geomap is now available for NetEye 4. Security Fix for NetEye 4.40 CVSSv3.1: 7.3(High) – CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N For a detailed overview of the security issue(s), including the impact, CVSS score, acknowledgments, and other relevant information, please…
Read MoreImportant: Elastic Stack security update (installed with SIEM) Type/Severity NetEye Product Security has rated this update as having a Critical security impact. Topic An update for the package kibana is now available for NetEye 4. Security Fix for NetEye 4.40 CVSSv3.1: 9.9(Critical) – CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H For a detailed overview of the security issue(s), including the impact, CVSS score, acknowledgments,…
Read MoreFix for icinga2 satellites zone validation Fixed an issue with the icinga2 satellites zone validation that caused the neteye satellite config create to fail if one of the icinga2-zone is a sub-string of the others List of updated packages To solve the issue, the following packages have been updated
Read MoreRemove “Drop non-existing group during Sync” on LDAP user federations Remove flag “Drop non-existing group during Sync” on LDAP user federations List of updated packages To solve the issue, the following packages have been updated: keycloak, keycloak-autosetup, keycloak-configurator, keycloak-python, to versions:
Read MoreImportant: IcingWeb2 Module Analytics security update Type/Severity NetEye Product Security has rated this update as having a Medium security impact. Topic An update for the package icingaweb2-module-analytics is now available for NetEye 4. Security Fix for NetEye 4.40 CVSS: 6.3 (medium): CVSS3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N For a detailed overview of the security issue(s), including the impact, CVSS score, acknowledgments, and other…
Read MoreImportant: GLPI security update Type/Severity NetEye Product Security has rated this update as having a security impact of High Topic An update for the package glpi is now available for NetEye 4. Security Fix for NetEye 4.40 For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to…
Read MoreFix for after-login redirect in IcingaWeb2 Fixed an issue with the post-login redirect that, in cases of session expiration, would cause navigation to an incorrect page after re-authentication. List of updated packages To solve the issue, the following packages have been updated
Read MoreRenewed Elastic Enterprise License We renewed the Elastic Enterprise license, which was originally scheduled to expire on February 28, 2025. The new expiration date is now February 28, 2026. If your NetEye version is older than 4.39 and you wish to utilize the Elastic Enterprise license, you will need to upgrade to at least NetEye…
Read MoreRenewed Elastic Enterprise License We renewed the Elastic Enterprise license, which was originally scheduled to expire on February 28, 2025. The new expiration date is now February 28, 2026. If your NetEye version is older than 4.39 and you wish to utilize the Elastic Enterprise license, you will need to upgrade to at least NetEye…
Read MoreFix of an unnecessary Elasticsearch restart We’ve fixed an issue during the Elasticsearch update and upgrade procedures which, in case of the availability of a kernel update, would have caused an unnecessary restart of the service even if Elasticsearch itself was not updated. List of updated packages To solve the aforementioned issues, the following packages…
Read MoreSIEM – Log Management We’ve enhanced the installation process for the SIEM module. The Filebeat setup will now use a dedicated user instead of the Kibana root user. This change strengthens the security of the installation process by reducing the risk associated with using elevated privileges. General – NetEye Setup We’ve resolved an issue in…
Read More