XI and Core version

[jkinning]

I am running the latest Nagios XI version 5.3.3 with Nagios Core 4.1.1. I am curious why Core is not running the latest version 4.2.3 or should it be and I need to do something to upgrade my Core instance?

[dwhitfield]

4.1.1 is exactly right. Integrating and testing Core in XI takes some time. It's really that simple.

It is technically possible to upgrade Core from within XI, but it is not something we typically advise unless you have a very specific need that 4.1.1/XI do not fill. Even when people do this, we make it very clear that upgrading Core within XI is *not* supported. If you think you might be in a situation where a Core upgrade is warranted, please let us know and we will try to help as much as we can.

Assuming you are happy with 4.1.1, is ok to go ahead and close this thread? Thanks!

[jkinning]

Sure, you can close. I was just asked seeing there are some CVE's that are addressed in the newer core version. I am assuming these are all backported to remediate the same vulnerability>

[tmcdonald]

To add on, being an open-source project without as many developers as we staff for our commercial offerings, Core lags behind in XI to give the latest version time to be tested by the community before we include it in XI. We do our own testing of course, but there are just some things we won't test and we want XI to be stable. Also, by definition XI will need to lag a bit since it takes time for the XI devs to write up anything that needs to take advantage of new Core features.

In regards to backporting, this is not the case in XI, though we do try to update the included Core version when there are major vulnerabilities.