From 12094d5305ee014f7796360da03009802ab77aaa Mon Sep 17 00:00:00 2001 From: George Karr Date: Thu, 5 Sep 2024 18:43:25 -0500 Subject: [PATCH] Adding changes for Fleet v4.55.2 (#21832) --- CHANGELOG.md | 63 ++++++++++++++++++++++++++-------------------------- 1 file changed, 32 insertions(+), 31 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 7ff505690d..24d768a609 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,4 +1,11 @@ -## Fleet 4.55.1 (Aug 15, 2024) +## Fleet 4.55.2 (Sep 05, 2024) + +### Bug fixes + +* Removed validation of APNS certificate from server startup. This was no longer necessary because we now allow for APNS certificates to be renewed in the UI. +* Fixed logic to properly catch and log APNs errors. + +## Fleet 4.55.1 (Aug 14, 2024) ### Bug fixes @@ -13,16 +20,11 @@ * Added index to query_results DB table to speed up finding the last query timestamp for a given query and host. * Displayed the label names in case-insensitive alphabetical order in the fleet UI. -## Fleet 4.55.0 (Aug 9, 2024) +## Fleet 4.55.0 (Aug 8, 2024) **NOTE:** Beginning with v4.55.0, Fleet no longer supports MySQL 5.7 because it has reached [end of life](https://mattermost.com/blog/mysql-5-7-reached-eol-upgrade-to-mysql-8-x-today/#:~:text=In%20October%202023%2C%20MySQL%205.7,to%20upgrade%20to%20MySQL%208.). The minimum version supported is MySQL 8.0.36. -**NOTE:** Changes to software field in [GitOps](https://fleetdm.com/docs/using-fleet/gitops): -- `software` field is optional for TEAMs in 4.54.1 and lower -- `software` field should NOT be added to NO-TEAM before 4.55.0 -- `software` field is mandatory for NO-TEAM and TEAMs in 4.55.0 and up - -### Endpoint operations +### Endpoint Operations - Added support for generating `fleetd` packages for Linux ARM64. - Added new `fleetctl package` --arch flag. @@ -32,7 +34,7 @@ - Fleet server watches for potential changes for up to 1 week after original event time. If event is moved forward more than 1 week, then after 1 week Fleet server will check for event changes once every 30 minutes. - **NOTE:** These near real-time updates may add additional load to the Google Calendar API, so it is recommended to use API usage alerts or other monitoring methods. -### Device management +### Device Management - Integrated [Escrow Buddy](https://github.com/macadmins/escrow-buddy) to add enforcement of FileVault during the MacOS Setup Assistant process for hosts that are enrolled into teams (or no team) with disk encryption turned on. Thank you [homebysix](https://github.com/homebysix) and team! @@ -63,7 +65,7 @@ enrolled into teams (or no team) with disk encryption turned on. Thank you [home - Added a special-case to properly name the Notion .exe Windows installer the same as how it will be reported by osquery post-install. - Increased threshold to renew Apple SCEP certificates for MDM enrollments to 180 days. -### Vulnerability management +### Vulnerability Management - Fixed CVEs identified as 'Rejected' in NVD not matching against software. - Fixed false negative vulnerabilities with IntelliJ IDEA CE and PyCharm CE installed via Homebrew. @@ -93,13 +95,13 @@ enrolled into teams (or no team) with disk encryption turned on. Thank you [home ### Bug fixes -* Fixed a startup bug by performing an early restart of orbit if an agent options setting has changed. -* Implemented a small refactor of orbit subsystems. -* Removed the `--version` flag from the `fleetctl package` command. The version of the package can now be controlled by the `--orbit-channel` flag. -* Fixed a bug that set `last_enrolled_at` during orbit re-enrollment, which caused osquery enroll failures when `FLEET_OSQUERY_ENROLL_COOLDOWN` is set . -* In `fleetctl package` command, removed the `--version` flag. The version of the package can be controlled by `--orbit-channel` flag. -* Fixed a bug where Fleet google calendar events generated by Fleet <= 4.53.0 were not correctly processed by 4.54.0. -* Re-enabled cached logins after windows Unlock. +- Fixed a startup bug by performing an early restart of orbit if an agent options setting has changed. +- Implemented a small refactor of orbit subsystems. +- Removed the `--version` flag from the `fleetctl package` command. The version of the package can now be controlled by the `--orbit-channel` flag. +- Fixed a bug that set `last_enrolled_at` during orbit re-enrollment, which caused osquery enroll failures when `FLEET_OSQUERY_ENROLL_COOLDOWN` is set . +- In `fleetctl package` command, removed the `--version` flag. The version of the package can be controlled by `--orbit-channel` flag. +- Fixed a bug where Fleet google calendar events generated by Fleet <= 4.53.0 were not correctly processed by 4.54.0. +- Re-enabled cached logins after windows Unlock. ## Fleet 4.54.0 (Jul 17, 2024) @@ -186,19 +188,19 @@ enrolled into teams (or no team) with disk encryption turned on. Thank you [home ### Bug fixes -* Updated fleetctl get queries/labels/hosts descriptions. -* Fixed exporting CSVs with fields that contain commas to render properly. -* Fixed link to fleetd uninstall instructions in "Delete device" modal. -* Rendered only one banner on the my device page based on priority order. -* Hidden query delete checkboxes from team observers. -* Fixed issue where the Fleet UI could not be used to renew the ABM token after the ABM user who created the token was deleted. -* Fixed an issue where special characters in HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall broke the "installer_utils.ps1 -uninstallOrbit" step in the Windows MSI installer. -* Fixed counts for hosts with low disk space in summary page. -* Fleet UI fixes: Hide CTA on inherited queries/policies from team level users. -* Updated software updated timestamp tooltip. -* Fixed issue where some Windows applications were getting matched against Windows OS vulnerabilities. -* Fixed crash in `fleetd` installer on Windows if there are registry keys with special characters on the system. -* Fixed UI capitalizations. +- Updated fleetctl get queries/labels/hosts descriptions. +- Fixed exporting CSVs with fields that contain commas to render properly. +- Fixed link to fleetd uninstall instructions in "Delete device" modal. +- Rendered only one banner on the my device page based on priority order. +- Hidden query delete checkboxes from team observers. +- Fixed issue where the Fleet UI could not be used to renew the ABM token after the ABM user who created the token was deleted. +- Fixed an issue where special characters in HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall broke the "installer_utils.ps1 -uninstallOrbit" step in the Windows MSI installer. +- Fixed counts for hosts with low disk space in summary page. +- Fleet UI fixes: Hide CTA on inherited queries/policies from team level users. +- Updated software updated timestamp tooltip. +- Fixed issue where some Windows applications were getting matched against Windows OS vulnerabilities. +- Fixed crash in `fleetd` installer on Windows if there are registry keys with special characters on the system. +- Fixed UI capitalizations. ## Fleet 4.53.0 (Jun 25, 2024) @@ -756,7 +758,6 @@ enrolled into teams (or no team) with disk encryption turned on. Thank you [home * Fixed an issue where software from a Parallels VM on a MacOS host would show up in Fleet as if it were the host's software. * Removed unnecessary nested database transactions in batch-setting of MDM profiles. * Added count of upcoming activities to host vitals UI. -* Fixed a bug where the manage query automations modal would lose its state when the user clicks "Preview data". ## Fleet 4.44.0 (Jan 31, 2024)