2024R1.3.2
- April 9, 2025
Security
- Fixed an issue where a non-admin user can shut down Elasticsearch via the API [GL:NLS#474] – JM
- Fixed an issue where a user can enumerate all the system users and retrieve their API tokens [GL:NLS#475] – JM
- Fixed a privilege escalation issue where a user can edit their own email and put in an invalid address [GL:NLS#476] – JM
Updated
- Updated NCPA installation to NCPA 3 for all distros [GL:NLS#431] – JS
- Updated cURL instructions to download scripts from Nagios Log Server to account for self-signed SSL certificates [GL:NLS#422] – JS
Fixed
- Fixed an issue where the edit user screen doesn’t always show the save/cancel buttons [GL: NLS#479] – JM
- Fixed an issue where alerts were causing warnings to be printed to the jobs log [GL:NLS#447, NLS#446, NLS#444] – JS
- Fixed an issue where background tasks would experience scheduling drift [GL:NLS#17] – SAW
