Skip to content

fleet-v4.39.0

Compare
Choose a tag to compare
@github-actions github-actions released this 26 Oct 20:35
· 2510 commits to main since this release
653aece

Changes

  • Added ability to store results of scheduled queries:

    • Will store up to 1000 results for each scheduled query.
    • If the number of results for a scheduled query is below 1000, then the results will continuously get updated every time the hosts send results to Fleet.
    • Introduced server_settings.query_reports_disabled field in global configuration to disable this feature.
    • New API endpoint: GET /api/_version_/fleet/queries/{id}/report.
    • New field discard_data added to API queries endpoints for toggling report storage for a query. For yaml configurations, use discard_data: true to disable result storage.
    • Enhanced osquery result log validation.
    • NOTE: This feature enables storing more query data in Fleet. This may impact database performance, depending on the number of queries, their frequency, and the number of hosts in your Fleet instance. For large deployments, we recommend monitoring your database load while gradually adding new query reports to ensure your database is sized appropriately.
  • Added scripts tab and table for host details page.

  • Added support to return the decrypted disk encryption key of a Windows host.

  • Added GET /hosts/{id}/scripts endpoint to retrieve status details of saved scripts for a host.

  • Added mdm.os_settings to GET /api/v1/hosts/{id} response.

  • Added POST /api/fleet/orbit/disk_encryption_key endpoint for Windows hosts to report bitlocker encryption key.

  • Added activity logging for script operations (add, delete, edit).

  • Added UI for scripts on the controls page.

  • Added API endpoints for script management and updated existing ones to accommodate saved script ID.

  • Added GET /mdm/disk_encryption/summary endpoint for disk encryption summaries for macOS and Windows.

  • Added os_settings and os_settings_disk_encryption filters to various GET endpoints for host filtering based on OS settings.

  • Enhanced GET hosts/:id API response to include more detailed disk encryption data for device client errors.

  • Updated controls > disk encryption and host details page to include Windows bitlocker information.

  • Improved styling for host details/device user failing policies display.

  • Disabled multicursor editing for SQL editors.

  • Deprecated mdm.macos_settings.enable_disk_encryption in favor of mdm.enable_disk_encryption.

  • Updated Go version to 1.21.3.

Bug fixes

  • Fixed script content and output formatting issues on the scripts detail modal.

  • Fixed a high database load issue in the Puppet match endpoint.

  • Fixed setup flows background not covering the entire viewport when resized to some sizes.

  • Fixed a bug affecting OS settings information retrieval regarding disk encryption status for Windows hosts.

  • Fixed SQL parameters used in the /api/latest/fleet/labels/{labelID}/hosts endpoint for certain query parameters, addressing issue 13809.

  • Fixed Python's CVE-2021-42919 false positive on macOS which should only affect Linux.

  • Fixed a bug causing DEP profiles to sometimes not get assigned correctly to hosts.

  • Fixed an issue in the bulk-set of MDM Apple profiles leading to excessive placeholders in SQL.

  • Fixed max-height display issue for script content and output in the script details modal.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

034e5829448a4d06442f983ee14ff82ed4d620933c473e51fc1bdc852d59571d  fleetctl_v4.39.0_windows.zip
0f100db2daf7542ee03653f573148e058fcb2833997ec8a0293e50c772f6f87b  fleetctl_v4.39.0_macos.tar.gz
42b2ce1a17eb90a5b57c9ddebcfe967393324ea8396e33bc02b2c20dd07143ac  fleet_v4.39.0_linux.tar.gz
549e997efba2742543910193f1bbff03d42354c951f889a639f8e1e0df7ec54c  fleetctl_v4.39.0_linux.zip
9ce3bcb6a0969ae8c255276297f38fa8c93cfa3debf8d3271217345d4a07c976  fleetctl_v4.39.0_windows.tar.gz
ba0e9853f13a40732449f67391258545ba34c17994df6723f9281205f825f576  fleetctl_v4.39.0_linux.tar.gz
bbaeab22b759aed727f047f2c2b2ea1078986d5b71ae6d648036cb2a972b9e80  fleetctl_v4.39.0_macos.zip