Discharge7443/fleet
1
0
Fork 0
Code Issues Pull Requests Actions 19 Packages Projects Releases Wiki Activity
Files
235a79eeaaae7ea077032733499bfc20427d2dba
fleet/changes
T
History
jacobshandling 235a79eeaa Generate correct CPE from malformed ipswitch whatsup CPE, ensure matches relevant CVEs (#41704) 
**Related issue:** Resolves #32662 

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/`
- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **New Features**
* Use CPE alias handling to generate correct CPE from malformed one,
ensuring correct CVEs are matched.

* **Tests**
* Added comprehensive test coverage for the enhanced CPE alias
expansion, including malformed CPE mapping scenarios and CVE matching
validation for Ipswitch WhatsUp.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2026-03-16 16:17:47 -05:00
..
.keep
…
14276-post-json-redact-response-body
Log response body in PostJSONWithTimeout error case (#40509)
2026-02-25 15:35:29 -06:00
28091-vulnerabilities-cleanup
Added vulnerabilities cleanup cron (#41195)
2026-03-10 14:03:39 -05:00
31303-citrix-workspace-resolved-in-version
Reapply "Update Citrix Workspace CPE generation to distinguish betwee… (#41614)
2026-03-12 16:17:40 -07:00
31914-patch-policy
Feat/31914 patch policy (#41518)
2026-03-13 16:47:09 -04:00
31921-windows-profile-verification-without-osquery
remove windows profile osquery verification (#40539)
2026-02-27 12:21:45 -05:00
32026-last-opened-time
Decrease last opened time diff (#40506)
2026-03-02 09:18:30 -07:00
32662-include-correct-cpe
Generate correct CPE from malformed ipswitch whatsup CPE, ensure matches relevant CVEs (#41704)
2026-03-16 16:17:47 -05:00
33045-fleet-free-targetting-queries-by-label
Added license checks when targeting queries by label (33045) (#41255)
2026-03-09 16:54:53 -04:00
33421-ndes-windows
Added support for NDES CA for Windows hosts (#41356)
2026-03-12 15:36:44 -05:00
33427-batch-script-run-deleted-hosts-tooltip
Added tooltip to batch run host count
2026-02-26 07:43:24 -04:00
33495-list-arch-linux-together
Trim ARM suffixes from arch linux OS names (#41656)
2026-03-13 12:14:22 -07:00
33714-inconsistent-use-of-hyphen-scripts-host-results-endpoint
Made Host Results endpoint URL consistent (33714) (#41501)
2026-03-13 14:00:26 -04:00
34068-software-install-retries
Add retries for software installs (#39827)
2026-02-23 08:48:53 -05:00
35024-normalize-links-buttons
Fleet UI: Clean up link styling (#41485)
2026-03-12 14:11:14 -04:00
35484-improve-policy_membership-contention
Improve contention around policy_membership table (35484) (#40853)
2026-03-16 15:12:25 -04:00
35528-wrong-title-platform
Check platform when matching title ID to software installer (#39933)
2026-02-18 12:52:06 -05:00
35799-software-titles
Optimized api/latest/fleet/software/titles endpoint (#40458)
2026-02-27 14:30:05 -06:00
35805-zero-host-counts
Fixed dead rows accumulating in software host counts tables (#40288)
2026-02-24 15:35:02 -06:00
36032-eua-account-name
Add lock end user info migrations, API support and AccountConfiguration command updates (#40551)
2026-03-02 12:16:31 -05:00
36093-live-report-cross-team-targeting
Fix observer query bypass: prevent cross-team targeting (#40717)
2026-03-05 15:12:04 -03:00
36093-observer-query-bypass-followup
Follow-up changes to observer live query bypass (#41146)
2026-03-11 13:42:33 -03:00
36321-filevault-banner-hide-for-new-enrollments
Improve UI for FileVault "action required" notifications banner (#41594)
2026-03-16 11:21:25 -05:00
36682-orphan-mdm-command-refs
Log orphan MDM command references instead of returning 500 (#40877)
2026-03-09 09:54:14 -03:00
37092-idp-throttle
Added per-IP rate limiting and response caching (#41516)
2026-03-13 15:21:16 -05:00
37249-use-username-idp-email-for-maintenance-windows
Prioritize using IdP email address when available for maintenance window scheduling (#37250)
2026-02-27 14:57:43 -04:00
37802-fix-windows-fma-list
Match Windows Fleet maintained apps by similar name (#40544)
2026-02-26 12:47:52 -05:00
38036-gitops-ca-delete-order
Fixed GitOps failing to delete a certificate authority (#41693)
2026-03-16 15:51:28 -05:00
38254-new-app-categories-on-older-builds
Allow FMAs to be added when default categories don't exist (#38303)
2026-03-03 14:29:28 -05:00
38356-fix-pkg-metadata-extraction
Bugfix: ignore nested .app files in .pkg metadata extraction (#40851)
2026-03-03 12:33:31 -05:00
38366-contributor-flag-for-allowing-all-declarations
Skip MDM Declaration Validation logic with Configuration. (#38212)
2026-02-27 16:07:33 -05:00
38431-enforce-setup-experience-restrictions
Enforce GitOps setup experience when manual agent install is enabled (#39775)
2026-02-13 16:21:39 -05:00
38432-dont-allow-mai-without-bootstrap
don't allow manual_agent_install without bootstrap package (#40812)
2026-03-02 15:25:46 -05:00
38536-new-activity-bc
Move NewActivity to activity bounded context (#39521)
2026-02-25 14:11:03 -06:00
38585-ndes-selection
Fixed Microsoft NDES CA not being selectable (#41490)
2026-03-11 19:15:16 -05:00
38593-block-self-service-personal-enrollments
block self service on personal enrollments (#41054)
2026-03-06 10:23:15 -05:00
38611-remove-unused-var
Remove unused/confusing --mdm_apple_scep_signer_allow_renewal_days config (#40800)
2026-03-04 11:53:59 -05:00
38659-script-path-support
Add path support to script files (#40821)
2026-03-04 13:22:44 -05:00
38779-collect-fma-usage
Add Fleet-maintained apps to usage statistics payload (#38779)
2026-02-25 09:43:08 -04:00
38965-preserve-team-context
refactor path generation (#41126)
2026-03-06 12:11:37 -05:00
39150-cleanup-host-isssues-on-host-delete
clean up host_issues on host deletion (#40827)
2026-03-03 14:14:29 -05:00
39247-retry
retry software installer download and upload during gitops (#40643)
2026-02-27 14:05:15 -05:00
39308-team-ca-read-access
Fixed team maintainers, admins, and GitOps users being unable to add certificate templates (#41740)
2026-03-16 12:24:31 -05:00
39324-digicert-upn-host-isolation
Fix DigiCert CA UPN variable substitution cross-host contamination (#40474)
2026-02-27 10:34:46 -05:00
39325-dropdown-bugginess
Fleet UI: Fix dropdown rendering (#40418)
2026-02-26 11:42:00 -05:00
39465-transparency-url
Fleet UI: Fix dropdown rendering (#40418)
2026-02-26 11:42:00 -05:00
39713-min-os-dep
Update DEP enrollment flow to apply minimum macOS version check when specified (#40720)
2026-03-12 16:54:46 -05:00
39723-mac-recovery-lock-passwords
UI: Add ability to manually rotate Mac Recovery Lock passwords (#41420)
2026-03-11 14:01:56 -07:00
40007-mattermost-desktop-cpe
Fixed false positive vulnerabilities for Mattermost Desktop. (#41619)
2026-03-13 13:26:36 -05:00
40021-ubuntu-python-false-positive
Fixed python package false positives on Ubuntu (#40199)
2026-02-25 15:52:09 -06:00
40024-endpoint-to-create-android-webapp
Android WebApps: endpoint to create one, prevent android app configuration on webApps (#40329)
2026-03-02 15:14:19 -05:00
40036-windows-server-2025-vulns
Added vulnerability scanning support for Windows Server 2025 hosts (#41232)
2026-03-10 14:03:59 -05:00
40054-slog-2
Migrating MDM files to slog method signatures. (#40263)
2026-02-23 09:26:58 -06:00
40108-avoid-double-encoding-fleet-secrets
avoid double encoding $FLEET_SECRET in GitOps (#40866)
2026-03-03 14:14:58 -05:00
40260-5xx-on-scim-users-endpoint
Surface correct HTTP status on SCIM data constraint errors (40260) (#41530)
2026-03-13 13:22:10 -04:00
40284-android-certs
Modified Android certificate renewal logic to make it easier to test. (#40635)
2026-03-02 16:25:48 -08:00
40287-fix-certificate-details-modal-tooltip-alignment
Fix 'rolling' alignment on host vitals and key-value pairs alignment on Certificate details modal (#41124)
2026-03-06 14:02:51 -03:00
40302-support-glob-for-scripts
Support globs in script paths in GitOps (#40799)
2026-03-02 22:18:36 -06:00
40327-filter
always show the filters and search bar (#41163)
2026-03-09 09:05:36 -04:00
40415-conditional-access-critical-policy-rework
Rework conditional access policy bypass conditions to use critical column (#40736)
2026-03-05 17:05:03 -05:00
40488-add-more-aliases
Add aliases for macos fields (#40959)
2026-03-05 18:08:54 -06:00
40489-reorder-host-columns
Reorder columns on Host page (#41180)
2026-03-07 17:32:59 -06:00
40496-detect-unknown-fields
Detect unknown keys in GitOps (phase 1) (#40963)
2026-03-06 16:16:17 -06:00
40564-otel-http-client
Added OTEL instrumentation to Fleet's internal HTTP client. (#40568)
2026-02-26 12:49:52 -06:00
40607-copy-icon
Fixed table shifting left when clicking the copy hash icon (#41411)
2026-03-11 19:15:36 -05:00
40627-add-webhooks-and-tickets-enabled-flag
Implement webhooks_and_tickets_enabled flag for policies in GitOps (#41183)
2026-03-10 15:11:27 -05:00
40641-fix-arch-linux-rolling-tooltip-alignment
Fix 'rolling' alignment on host vitals and key-value pairs alignment on Certificate details modal (#41124)
2026-03-06 14:02:51 -03:00
40642-add-new-fleet-saml-attribute-prefix
Alias JIT Saml "team" attribute to FLEET_JIT_USER_ROLE_FLEET_<FLEET ID> (#41402)
2026-03-13 08:34:29 -05:00
40685-smallstep-proxy
Added Content-Type header to Smallstep authorization requests (#40686)
2026-02-27 08:37:07 -06:00
40789-fix-select-all-header-checkbox
Fix select-all header checkbox not selecting rows in a specific case (#40940)
2026-03-04 11:39:04 -03:00
40790-fix-clear-idp-error-message
Update error message when clearing End Users settings while EUA is enabled (#41243)
2026-03-10 13:20:43 -03:00
40859-update-stored-results-ui
Update stored results setting UI (#40874)
2026-03-04 09:58:27 -06:00
40881-fix-stuck-setup-experience-with-scep-renewal
don't short circuit scep renewal if awaiting configuration (#41523)
2026-03-16 10:37:06 -05:00
40887-fix-file-permission-self-heal
Fix orbit crash loop on incorrect file permissions (#40887)
2026-03-06 17:41:31 -03:00
40900-allow-omitting-secrets-key-in-gitops
Allow secrets: key to be optional in GitOps (#40901)
2026-03-03 17:16:10 -06:00
40944-fix-gitops-policy-linked-to-software-with-env-var
Bugfix: gitops policy linked to software package with env var fails to apply (#40944)
2026-03-04 14:03:34 -05:00
41006-support-more-globs
Add glob support to more labels, policies and reports (#41141)
2026-03-09 15:39:13 -05:00
41012-allow-omitting-top-level-gitops-keys
Make most GitOps top-level optional (#41138)
2026-03-09 08:56:05 -05:00
41073-update-table-heading-styles
UI: Update table heading and result filter styles (#41072)
2026-03-06 17:41:28 -06:00
41074-add-fleet-columns-to-csv
Add fleet_id / fleet_name columns to CSV hosts export (#41446)
2026-03-11 11:38:07 -05:00
41091-update-multiplatform-keys
Add aliases for more multi-platform setup experience fields (#41599)
2026-03-13 15:17:05 -05:00
41111-fix-table-footer-rendering
Do not show table footer under Target specific hosts table (#41252)
2026-03-09 17:23:44 -03:00
41190-audit-log-entries
Don't clear past lock/wipe (#41504)
2026-03-13 15:21:24 -05:00
41225-cpe-matching-reserved-keywords
Fixed CPE matching failing for software names that sanitize to FTS5 reserved keywords (AND, OR, NOT) (#41226)
2026-03-10 14:03:25 -05:00
41239-dont-trigger-resend-on-device-mapping-if-no-changes
Don't resend profiles if IdP values do not change (41239) (#41662)
2026-03-13 14:16:07 -04:00
41532-ca-delete-error-message
Fixed error message when deleting a certificate authority (#41635)
2026-03-13 13:25:35 -05:00
41652-fix-reports-edit
Fixed editing reports on free tier failing due to triggering a premium license check (#41747)
2026-03-16 11:42:58 -03:00
41653-disallow-header-button-wraps
Disallow manage hosts page header buttons from wrapping text (#41654)
2026-03-13 09:02:40 -07:00
41663-duplicates
fix issue with duplicate entries in setup experience for FMAs (#41685)
2026-03-13 18:10:55 -04:00
41664-vulnerability-cron-db-contention
Reduced database contention during the vulnerability cron (#41667)
2026-03-14 09:31:58 -05:00
41742-fix-my-device-500-fleet-free
Fixed 500 and 402 on My Device page. (#41748)
2026-03-16 16:09:43 -05:00
bump-mysql
Bump supported MySQL versions (#40892)
2026-03-04 12:25:20 -06:00
fix-end-user-auth-clear-form
Fix end user auth form: allow saving cleared IdP settings (#40424)
2026-02-27 17:09:54 -03:00
host-search-always-match-email
Improve host search by end user email address (#40197)
2026-02-24 11:25:00 -03:00
issue-38546-fix-mdm-page-update
fix issue where mdm page wasnt updating properly when turning off apple mdm (#40854)
2026-03-05 17:02:21 +00:00
issue-39184-apns-banner-fix
show apns expiration banner in UI for free tier (#40936)
2026-03-04 13:12:33 +00:00
issue-40684-no-resend-button
allow ios and ipados hosts profiles to be resent (#40684)
2026-02-27 17:03:52 +00:00
issue-40697-fix-os-setting-overflow
fix overflow of button off the table on the os settings modal (#40697)
2026-02-27 17:04:14 +00:00