Skip to content

fleet-v4.41.0
Compare
Choose a tag to compare
@github-actions github-actions released this 29 Nov 01:33
· 2171 commits to main since this release
fleet-v4.41.0
f6cb052
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

IMPORTANT:

  • There’s a critical bug in Fleet 4.41.0.
  • This bug only affects you if you use query packs, set a custom pack_delimiter in agent options, or manage queries outside of Fleet (ex. via Chef).
  • If this sounds like your Fleet, please wait to upgrade to 4.41.0.
  • We’re working on cutting a patch (4.41.1) ASAP.

(2023-12-06)

Changes

  • Endpoint operations:

    • Enhanced fleetctl and API to support PowerShell (.ps1) scripts.
    • Updated several API endpoints to support os_settings filter, including Windows profiles status.
    • Enabled after parameter for improved pagination in various endpoints.
    • Improved the fleet/queries/run endpoint with better error handling.
    • Increased frequency of metrics reporting from Fleet servers to daily.
    • Added caching for policy results in MySQL for faster operations.

  • Device management (MDM):

    • Added database tables for Windows profiles support.
    • Added validation for WSTEP certificate and key pair before enabling Windows MDM.
    • Introduced support for Windows PowerShell scripts in the UI.

  • Vulnerability management:

    • Fleet now uses NVD API 2.0 for CVE information download.
    • Added support for JetBrains application vulnerability data.
    • Tightened software matching to reduce false positives.
    • Stopped reporting Atom editor packages in software inventory.

  • UI improvements:

    • Updated activity feed for better communication around JIT-provisioned user logins.
    • Query report now displays the host's display name instead of the hostname.
    • Improved UI components like the manage page's label filter and edit columns modal.
    • Enabled all sort headers in the UI to be fully clickable.
    • Removed the creation of OS policies from a host's operating system in the UI.
    • Ensured correct settings visibility in the Settings > Advanced section.

Bug fixes

  • Fixed long result cell truncation in live query results and query reports.
  • Fixed a Redis cluster mode detection issue for RedisLabs hosted instances.
  • Fixed a false positive vulnerability report for Citrix Workspace.
  • Fixed an edge case sorting bug related to the last_restarted value for hosts.
  • Fixed an issue with creating .deb installers with different enrollment keys.
  • Fixed SMTP configuration validation issues for TLS-only servers.
  • Fixed caching of team MDM configurations to improve performance at scale.
  • Fixed delete pending issue during orbit.exe installation.
  • Fixed a bug causing the disk encryption key banner to not display correctly.
  • Fixed various error code inconsistencies across endpoints.
  • Fixed filtering hosts with invalid team_id now returns a 400 error.
  • Fixed false positives in software matching for similar names.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

bc5dd476ea4108d2d26ea4eab99504f02492633c6f8fa9db01f8511099c9f57e  fleet_v4.41.0_linux.tar.gz
03da62accda22d3434d6be235e9b910e04b21aee84085097369707451dc4d219  fleetctl_v4.41.0_linux.tar.gz
ec10a2193a9075b668126b3700189c7fef232978ce8f3504128203afc865a619  fleetctl_v4.41.0_linux.zip
83d78374afdc8d49da20bbbd6fec966b082725aa4060c845f13c0efc7d607182  fleetctl_v4.41.0_macos.tar.gz
1390320c14410c298f4298bd171b257ca8fde0061a62388d5cab1f04c501e062  fleetctl_v4.41.0_macos.zip
7e5eb0b48c15670d75b34acbf8f9f9a470fad76a7c20d77b79e715a56a890f74  fleetctl_v4.41.0_windows.tar.gz
255f6260d5f7f76e7d279a649879d9a27d45a78b916ffbdb1303bc707ab3a745  fleetctl_v4.41.0_windows.zip
Assets 10