Announcing Graylog 2.4.6

Today we are releasing Graylog v2.4.6 to fix a few bugs.

DOWNLOAD LINKS

Download Graylog v2.4.6:

DEB or RPM packages are available in our repositories. Check our documentation for details.

Docker image

OVA / Appliance

Tarball (manual installation)

Please report bugs and any other issues in our GitHub issue tracker.

Thank you!

CHANGES

CORE

• Unbreak input throttling by publishing throttle state again. Graylog2/graylog2-server#4850Graylog2/graylog2-server#4321
• Check for permission before terminating input. Graylog2/graylog2-server#4867Graylog2/graylog2-server#4858
• Require user to be authenticated to retrieve plugin list. Graylog2/graylog2-server#4868Graylog2/graylog2-server#4863
• Add missing permission checks. Graylog2/graylog2-server#4873 Graylog2/graylog2-server#4861 Graylog2/graylog2-server#4859
• UI fixes for index rotation strategy dropdown. Graylog2/graylog2-server#4826Graylog2/graylog2-server#4769
• XSS fix for typeahead components. Graylog2/graylog2-server#4904 (Thanks to Jesper den Boer for finding and responsibly disclosing this vulnerability.)
• Fix potential NullPointerException in csv and maxmind data adapters. Graylog2/graylog2-server#4912 Graylog2/graylog2-server#4748
• Add “http_non_proxy_hosts” configuration option. Graylog2/graylog2-server#4915Graylog2/graylog2-server#4905 Graylog2/graylog2-server#4392

‍

You can also view our complete documentation for the complete changelog:

Graylog Server

Graylog Enterprise