Prepare v4.38.0 (#14123)

fleetdm · Sep 25, 2023 · 6807cfe · 6807cfe
1 parent 9ec5aae
commit 6807cfe
Show file tree

Hide file tree

Showing 37 changed files with 75 additions and 46 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,65 @@
+## Fleet 4.38.0 (Sep 25, 2023)
+
+### Changes
+
+* Updated MDM profile verification so that an install profile command will be retried once if the command resulted in an error or if osquery cannot confirm that the expected profile is installed.
+
+* Ensured post-enrollment commands are sent to devices assigned to Fleet in ABM.
+
+* Ensured hosts assigned to Fleet in ABM come back to pending to the right team after they're deleted.
+
+* Added `labels` to the fleetd extensions feature to allow deploying extensions to hosts that belong to certain labels.
+
+* Changed fleetd Windows extensions file extension from `.ext` to `.ext.exe` to allow their execution on Windows devices (executables on Windows must end with `.exe`).
+
+* Surfaced chrome live query errors to Fleet UI (including errors for specific columns while maintaining successful data in results).
+
+* Fixed delivery of fleetd extensions to devices to only send extensions for the host's platform.
+
+* (Premium only) Added `resolved_in_version` to `/fleet/software` APIs pulled from NVD feed.
+
+* Added database migrations to create the new `scripts` table to store saved scripts.
+
+* Allowed specifying `disable_failing_policies` on the `/api/v1/fleet/hosts/report` API endpoint for increased performance. This is useful if the user is not interested in counting failed policies (`issues` column).
+
+* Added the option to use locally-installed WiX v3 binaries when generating the Fleetd installer for Windows on a Windows machine.
+
+* Added CVE descriptions to the `/fleet/software` API.
+
+* Restored the ability to click on and select/copy text from software bundle tooltips while maintaining the abilities to click the software's name to get more details and to click anywhere else in the row to view all hosts with that software installed.
+
+* Stopped 1password from overly autofilling forms.
+
+* Upgraded Go version to 1.21.1.
+
+### Bug Fixes
+
+* Fixed vulnerability mismatch between the flock browser and the discoteq/flock binary.
+
+* Fixed v4.37.0 performance regressions in the following API endpoints:
+  * `/api/v1/fleet/hosts/report`
+  * `/api/v1/fleet/hosts` when using `per_page=0` or a large number for `per_page` (in the thousands).
+
+* Fixed script content and output formatting on the scripts detail modal.
+
+* Fixed wrong version numbers for Microsoft Teams in macOS (from invalid format of the form `1.00.XYYYYY` to correct format `1.X.00.YYYYY`).
+
+* Fixed false positive CVE-2020-10146 found on Microsoft Teams.
+
+* Fixed CVE-2013-0340 reporting as a valid vulnerability due to NVD recommendations.
+
+* Fixed save button for a new policy after newly creating another policy.
+
+* Fixed empty query/policy placeholders.
+
+* Fixed used by data when filtering hosts by labels.
+
+* Fixed small copy and alignment issue with status indicators in the Queries page Automations column.
+
+* Fixed strict checks on Windows MDM Automatic Enrollment.
+
+* Fixed software vulnerabilities time ago column for old CVEs.
+
 ## Fleet 4.37.0 (Sep 8, 2023)
 
 ### Changes

diff --git a/changes/11099-mdm-profiles-retries b/changes/11099-mdm-profiles-retries
diff --git a/changes/11346-add-used-by-data-filtered-by-labels b/changes/11346-add-used-by-data-filtered-by-labels
diff --git a/changes/11666-add-nvd-resolved-version b/changes/11666-add-nvd-resolved-version
diff --git a/changes/11922-microsoft-teams-fp b/changes/11922-microsoft-teams-fp
diff --git a/changes/11925-flock-vuln-false-positive b/changes/11925-flock-vuln-false-positive
diff --git a/changes/11926-python-vuln-false-positive b/changes/11926-python-vuln-false-positive
diff --git a/changes/12383-improve-chrome-live-query-error-handling b/changes/12383-improve-chrome-live-query-error-handling
diff --git a/changes/12948-fix-software-bundle-clickability b/changes/12948-fix-software-bundle-clickability
diff --git a/changes/13095-fix-empty-query-policy-placeholders b/changes/13095-fix-empty-query-policy-placeholders
diff --git a/changes/13287-filter-extensions-by-labels b/changes/13287-filter-extensions-by-labels
diff --git a/changes/13287-fix-bugs-in-fleetd-extensions b/changes/13287-fix-bugs-in-fleetd-extensions
diff --git a/changes/13338-use-local-wix b/changes/13338-use-local-wix
diff --git a/changes/13368-disable-1password-over-autofill b/changes/13368-disable-1password-over-autofill
diff --git a/changes/13702 b/changes/13702
diff --git a/changes/13715-bump-go-version b/changes/13715-bump-go-version
diff --git a/changes/13875-fix-windows-automatic-enrollment b/changes/13875-fix-windows-automatic-enrollment
diff --git a/changes/13926-fix-performance-regression-in-hosts-report b/changes/13926-fix-performance-regression-in-hosts-report
diff --git a/changes/14038-fix-save-multiple-new-policies b/changes/14038-fix-save-multiple-new-policies
diff --git a/changes/14087-status-indicator-alignment b/changes/14087-status-indicator-alignment
diff --git a/changes/14346-fix-cve-time-ago b/changes/14346-fix-cve-time-ago
diff --git a/changes/9835-cve-descriptions b/changes/9835-cve-descriptions
diff --git a/changes/issue-13847-fix-script-content-and-output-formatting b/changes/issue-13847-fix-script-content-and-output-formatting
diff --git a/changes/issue-9827-migrations-saved-scripts b/changes/issue-9827-migrations-saved-scripts
diff --git a/charts/fleet/Chart.yaml b/charts/fleet/Chart.yaml
@@ -8,4 +8,4 @@ version: v5.0.1
 home: https://github.com/fleetdm/fleet
 sources:
   - https://github.com/fleetdm/fleet.git
-appVersion: v4.37.0
+appVersion: v4.38.0
diff --git a/charts/fleet/values.yaml b/charts/fleet/values.yaml
@@ -2,7 +2,7 @@
 # All settings related to how Fleet is deployed in Kubernetes
 hostName: fleet.localhost
 replicas: 3 # The number of Fleet instances to deploy
-imageTag: v4.37.0 # Version of Fleet to deploy
+imageTag: v4.38.0 # Version of Fleet to deploy
 podAnnotations: {} # Additional annotations to add to the Fleet pod
 serviceAccountAnnotations: {} # Additional annotations to add to the Fleet service account
 resources:

diff --git a/infrastructure/dogfood/terraform/aws/variables.tf b/infrastructure/dogfood/terraform/aws/variables.tf
@@ -56,7 +56,7 @@ variable "database_name" {
 
 variable "fleet_image" {
   description = "the name of the container image to run"
-  default     = "fleetdm/fleet:v4.37.0"
+  default     = "fleetdm/fleet:v4.38.0"
 }
 
 variable "software_inventory" {

diff --git a/infrastructure/dogfood/terraform/gcp/variables.tf b/infrastructure/dogfood/terraform/gcp/variables.tf
@@ -68,5 +68,5 @@ variable "redis_mem" {
 }
 
 variable "image" {
-  default = "fleet:v4.37.0"
+  default = "fleet:v4.38.0"
 }
diff --git a/infrastructure/sandbox/JITProvisioner/jitprovisioner.tf b/infrastructure/sandbox/JITProvisioner/jitprovisioner.tf
@@ -206,7 +206,7 @@ resource "random_uuid" "jitprovisioner" {
 
 # Use the local to make the trigger work.
 locals {
-  fleet_tag = "v4.37.0"
+  fleet_tag = "v4.38.0"
 }
 
 resource "null_resource" "standard-query-library" {

diff --git a/infrastructure/sandbox/PreProvisioner/lambda/deploy_terraform/main.tf b/infrastructure/sandbox/PreProvisioner/lambda/deploy_terraform/main.tf
@@ -165,7 +165,7 @@ resource "helm_release" "main" {
 
   set {
     name  = "imageTag"
-    value = "v4.37.0"
+    value = "v4.38.0"
   }
 
   set {

diff --git a/terraform/byo-vpc/byo-db/byo-ecs/variables.tf b/terraform/byo-vpc/byo-db/byo-ecs/variables.tf
@@ -13,7 +13,7 @@ variable "fleet_config" {
   type = object({
     mem                          = optional(number, 4096)
     cpu                          = optional(number, 512)
-    image                        = optional(string, "fleetdm/fleet:v4.37.0")
+    image                        = optional(string, "fleetdm/fleet:v4.38.0")
     family                       = optional(string, "fleet")
     sidecars                     = optional(list(any), [])
     depends_on                   = optional(list(any), [])

diff --git a/terraform/byo-vpc/byo-db/variables.tf b/terraform/byo-vpc/byo-db/variables.tf
@@ -74,7 +74,7 @@ variable "fleet_config" {
   type = object({
     mem                          = optional(number, 4096)
     cpu                          = optional(number, 512)
-    image                        = optional(string, "fleetdm/fleet:v4.37.0")
+    image                        = optional(string, "fleetdm/fleet:v4.38.0")
     family                       = optional(string, "fleet")
     sidecars                     = optional(list(any), [])
     depends_on                   = optional(list(any), [])

diff --git a/terraform/byo-vpc/example/main.tf b/terraform/byo-vpc/example/main.tf
@@ -17,7 +17,7 @@ provider "aws" {
 }
 
 locals {
-  fleet_image = "fleetdm/fleet:v4.37.0"
+  fleet_image = "fleetdm/fleet:v4.38.0"
 }
 
 resource "random_pet" "main" {}

diff --git a/terraform/byo-vpc/variables.tf b/terraform/byo-vpc/variables.tf
@@ -163,7 +163,7 @@ variable "fleet_config" {
   type = object({
     mem                          = optional(number, 4096)
     cpu                          = optional(number, 512)
-    image                        = optional(string, "fleetdm/fleet:v4.37.0")
+    image                        = optional(string, "fleetdm/fleet:v4.38.0")
     family                       = optional(string, "fleet")
     sidecars                     = optional(list(any), [])
     depends_on                   = optional(list(any), [])

diff --git a/terraform/example/main.tf b/terraform/example/main.tf
@@ -73,7 +73,7 @@ module "vulnprocessing" {
   ecs_cluster     = module.main.byo-vpc.byo-db.byo-ecs.cluster.cluster_arn
   vpc_id          = module.main.vpc.vpc_id
   fleet_config = {
-    image = "fleetdm/fleet:v4.37.0"
+    image = "fleetdm/fleet:v4.38.0"
     database = {
       password_secret_arn = module.main.byo-vpc.secrets.secret_arns["${var.rds_config.name}-database-password"]
       user                = module.main.byo-vpc.rds.db_instance_username

diff --git a/terraform/variables.tf b/terraform/variables.tf
@@ -215,7 +215,7 @@ variable "fleet_config" {
   type = object({
     mem                          = optional(number, 4096)
     cpu                          = optional(number, 512)
-    image                        = optional(string, "fleetdm/fleet:v4.37.0")
+    image                        = optional(string, "fleetdm/fleet:v4.38.0")
     family                       = optional(string, "fleet")
     sidecars                     = optional(list(any), [])
     depends_on                   = optional(list(any), [])

diff --git a/tools/fleetctl-npm/package.json b/tools/fleetctl-npm/package.json
@@ -1,6 +1,6 @@
 {
   "name": "fleetctl",
-  "version": "v4.37.0",
+  "version": "v4.38.0",
   "description": "Installer for the fleetctl CLI tool",
   "bin": {
     "fleetctl": "./run.js"