fleet-v4.22.0

Changes

• Fleet Premium: Add ability to see how many and which hosts have low disk space (less than 32GB available) on the Home page.

• Fleet Premium: Add ability to see how many and which hosts are missing (offline for at least 30 days) on the Home page.

• Improved the query console by indicating which columns are required in the WHERE clause, indicated which columns are platform-specific, and adding example queries for almost all osquery tables in the right sidebar. These improvements are also live on fleetdm.com/tables

• Added a new display name for hosts in the Fleet UI. To determine the display name, Fleet uses the computer_name column in the system_info table. If computer_name isn't present, the hostname is used instead.

• Added functionality to consider device tokens as expired after one hour. This change is not compatible with older versions of Fleet Desktop. We recommend to manually update Orbit and Fleet Desktop to > v1.0.0 in addition to upgrading the server if:

  • You're managing your own TUF server.
  • You have auto-updates disabled (fleetctl package [...] --disable-updates)
  • You have channels pinned to an older version (fleetctl package [...] --orbit-channel 1.0.0 --desktop-channel 1.1.0).

• Added security headers to HTML, CSV, and installer responses.

• Added validation of the command_line_flags object in the Agent Options section of Organization Settings and Team Settings.

• Added logic to clean up irrelevant policies for a host on re-enrollment (e.g., if a host changes its OS from linux to macOS or it changes teams).

• Added the inherited_policies array to the GET /teams/{team_id}/policies endpoint that lists the global policies inherited by the team, along with the pass/fail counts for the hosts on that team.

• Added a new UI state for when results are coming in from a live query or policy query.

• Added better team name suggestions to the Create teams modal.

• Clarified last seen time and last fetched time in the Fleet UI.

• Translated technical error messages returned by Agent options validation to be more user-friendly.

• Renamed machine serial to serial number and IPv4 properly to private IP address.

• Fleet Premium: Updated Fleet Desktop to use the /device/{token}/desktop API route to display the number of failing policies.

• Made host details software tables more responsive by adding links to software details.

• Added usage statistics for the weekly count of aggregate policy violation days. One policy violation day is counted for each policy that a host is failing, measured as of the time the count increments. The count increments once per 24-hour interval and resets each week.

• Fixed a bug in which a user would not be rerouted to the Home page if already logged in.

• Fixed a bug in which clicking the select all checkbox did not select all in some cases.

• Fixed a bug introduced in 4.21.0 where a Windows-specific query was being sent to non-Windows hosts, causing an error in query ingestion for directIngestOSWindows.

• Fixed a bug in which uninstalled software (DEB packages) appeared in Fleet.

• Fixed a bug in which a team that didn't have config.features settings was edited via the UI, then both features.enable_host_users and features.enable_software_inventory would be false instead of the global default.

• Fixed a bug that resulted in false negatives for vulnerable versions of Zoom, Google Chrome, Adobe Photoshop, Node.js, Visual Studio Code, Adobe Media Encoder, VirtualBox, Adobe Premiere Pro, Pip, and Firefox software.

• Fixed bug that caused duplicated vulnerabilities to be sent to third-party integrations.

• Fixed panic in ingestKubequeryInfo query ingestion.

• Fixed a bug in which host_count and user_count returned as 0 in the teams/{id} endpoint.

• Fixed a bug in which tooltips for Munki issue would be cut off at the edge of the browser window.

• Fixed a bug in which tooltips for Munki issue would be cut off at the edge of the browser window.

• Fixed a bug in which running fleetctl apply with the --dry-run flag would fail in some cases.

• Fixed a bug in which Hosts table displayed 20 hosts per page.

• Fixed a server panic that occured when a team was edited via YAML without an agent_options key.

• Fixed an bug where Pop!_OS hosts were not being included in the linux hosts count on the hosts dashboard page.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

00661a87d7d3692ff9d3eb09152317b503f30198d79e37357381bdab8ee3d556  fleetctl_v4.22.0_macos.zip
142fd577a9fb781643189c5c110e3cb8a530300d5796bca2fdc8ca4f45bb8fb7  fleetctl_v4.22.0_macos.tar.gz
66967c861974f2cfa450ab2a091c873a81f58a866cb591b19d993e949aa875c6  fleetctl_v4.22.0_linux.tar.gz
846f49f33cd6ff73eaab9a12b9d093b36b68325fdbf271bac433a51dbfb12051  fleetctl_v4.22.0_windows.zip
cf937d8b50fbb8e141c26662db56b88df00ea750ff91301f0163e955196f8f0c  fleetctl_v4.22.0_linux.zip
d272bebf4c055cd5b3bbdb551f9d8c8ade5d6fcb5072a57450706ff084175a5c  fleetctl_v4.22.0_windows.tar.gz
ff678646cacba70da49a98b20c45c604a0314b6567f3af0d0c596dc2f8f3cca8  fleet_v4.22.0_linux.tar.gz

fleet-v4.21.0

Changes

• Fleet Premium: Added the ability to know how many hosts and which hosts, on a team, are failing a global policy.

• Added validation to the config and teams configuration files. Fleet can be managed with configuration files (YAML syntax) and the fleetctl command line tool.

• Added the ability to manage osquery flags remotely. This requires Orbit, Fleet's agent manager. If at some point you revoked an old enroll secret, this feature won't work for hosts that were added to Fleet using this old enroll secret. To manage osquery flags on these hosts, we recommend deploying a new package. Check out the instructions here on GitHub.

• Added a /api/v1/fleet/device/{token}/desktop API route that returns only the number of failing policies for a specific host.

• Added support for kubequery.

• Added support for an AC_TEAM_ID environment variable when creating signed installers for macOS hosts.

• Made cards on the Home page clickable.

• Added es_process_file_events, password_policy, and windows_update_history tables to osquery.

• Added activity items to capture when, and by who, agent options are edited.

• Added logging to capture the user’s email upon successful login.

• Increased the size of placeholder text from extra small to small.

• Fixed an error that cleared the form when adding a new integration.

• Fixed an error generating Windows packages with the fleetctl package on non-English localizations of Windows.

• Fixed a bug that showed the small screen overlay when trying to print.

• Fixed the UI bug that caused the label filter dropdown to go under the table header.

• Fixed side panel tooltips to not be wider than side panel causing scroll bug.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

2a5a3c3739d5239cfd30e1aac2d287598ff833bc6933f6a7f8ff3cd213288099 fleet_v4.21.0_linux.tar.gz
3417e6394ec99f7286423545f94d04574c93ef4b4b31196bc2545a5eef1a7574 fleetctl_v4.21.0_linux.zip
34ec5b4cc7a958725e7017693088123af7cfa05c8b08aa5ddd118e156ca0a888 fleetctl_v4.21.0_windows.zip
8af0f3703df8e53ca7747bc9f5faa4655327ab1c9488f1b6f776efe749037413 fleetctl_v4.21.0_macos.tar.gz
b01d5596873134c5676ba0241a952852055883199e6c08505cf22882a84fdef2 fleetctl_v4.21.0_linux.tar.gz
e2a1d52924be2d8e687450dd16557cddd51f71130be4ce1d1525362a7e98720c fleetctl_v4.21.0_macos.zip
ed6791f19d5f5cf6c23375fd8831932d873bafed7589953e01e8d8763962e456 fleetctl_v4.21.0_windows.tar.gz

fleet-v4.20.1

Changes

This is a security release.

• Security: Upgrade Go to 1.19.1 to resolve a possible HTTP denial of service vulnerability (CVE-2022-27664).

• Fixed a bug in which vulnerability automations sent duplicate webhooks.

• Fixed a bug in which logging in with single sign-on (SSO) did not work after a failed authorization attempt.

• Fixed a migration error. This only affects Fleet instances that use MariaDB. MariaDB is not officially supported. Future issues specific to MariaDB may not be fixed quickly (or at all). We strongly advise migrating to MySQL 8.0.19+.

• Fixed a bug on the Edit pack page in which no targets are shown in the target picker.

• Fixed a styling bug on the Host details > Query > Select a query modal.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

04f0e251b182120bf23ae3c736ac1ada5c442f99fab02a1faec7c6ccc368ae8c fleetctl_v4.20.1_macos.zip
177b28735aba69cb2c0e809b5f795c2ea732a85e9877654a8a00ff4ec96e7133 fleet_v4.20.1_linux.tar.gz
30e279b28d71c4f89080b445ccfca8b38633fdd78ab33cbc5c3fa31fbdaf119e fleetctl_v4.20.1_linux.zip
630c8e2301fb649c5cbf4333f55265124146e73230c863cd690428679f000e3c fleetctl_v4.20.1_windows.tar.gz
7440f0d22d3eb8d110d179af76e438f0e25e19801f708486a9a21894b1373a14 fleetctl_v4.20.1_macos.tar.gz
9ddb735375891d544e192641756b69df7d103633bf19a61dc215ff2f40d1a879 fleetctl_v4.20.1_linux.tar.gz
d5a079d1b5a0713b510770e56d5ad9a1b2504e2194f2983a3969e74b8b65bed6 fleetctl_v4.20.1_windows.zip

fleet-v4.20.0

Changes

Fleet Premium Users, please review the Upgrading section before updating to this version.

• Add ability to know how many hosts, and which hosts, have Munki issues. This information is presented on the Home > macOS page and Host details page. This information is also available in the GET /api/v1/fleet/macadmins and GET /api/v1/fleet/hosts/{id}/macadmins and API routes.

• Fleet Premium: Added ability to test features, like software inventory, on canary teams by adding a features section to the teams YAML document.

• Improved vulnerability detection for macOS hosts by improving detection of Zoom, Ruby, and Node.js vulnerabilities. Warning: For users that download and sync Fleet's vulnerability feeds manually, there are required adjustments or else vulnerability processing will stop working. Users with the default vulnerability processing settings can safely upgrade without adjustments.

• Fleet Premium: Improved the vulnerability automations by adding vulnerability scores (EPSS probability, CVSS scores, and CISA-known exploits) to the webhook payload. Read more about vulnerability automations on fleetdm.com/docs.

• Renamed the host_settings section to features in the the config YAML file. But host_settings is still supported for backwards compatibility.

• Improved the activity feed by adding the ability to see who modified agent options and when modifications occurred. This information is available on the Home page in the Fleet UI and the GET /activites API route.

• Improved the config YAML documentation.

• Improved the Hosts page for smaller screen widths.

• Improved the building of osquery installers for Windows (.msi packages).

• Added a Show query button on the Schedule page, which adds the ability to quickly see a query's SQL.

• Improved the Fleet UI by adding loading spinners to all buttons that create or update entities in Fleet (e.g., users).

• Fixed a bug in which a user could not reach some teams in the UI via pagination if there were more than 20 teams.

• Fixed a bug in which a user could not reach some users in the UI via pagination if there were more than 20 users.

• Fixed a bug in which duplicate vulnerabilities (CVEs) sometimes appeared on Software details page.

• Fixed a bug in which the count in the Issues column (exclamation tooltip) in the Hosts table would sometimes not appear.

• Fixed a bug in which no error message would appear if there was an issue while setting up Fleet.

• Fixed a bug in which no error message would appear if users were creating or editing a label with a name or description that was too long.

• Fixed a big in which the example payload for usage statistics included incorrect key names.

• Fixed a bug in which the count above the Software table would sometimes not appear.

• Fixed a bug in which the Add hosts button would not be displayed when search returned 0 hosts.

• Fixed a bug in which modifying filters on the Hosts page would not return the user to the first page of the Hosts table.

Upgrading

Fleet Premium Updating to this version will cause additional_queries to be removed from hosts that are enrolled in a team. If you are currently using additional_queries in your Global Agent Options, they will also need to be applied to each team's Agent Options.

Please visit our update guide for additional upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

1d0b05f9c8084c0882def77acbd35b8b1ef7240c81b113a00bd030703df6cf16 fleetctl_v4.20.0_macos.tar.gz
41b618a6e4d9a707ef0a1f5f23692ac6b22fb1ee4108561cabdab456f0650207 fleetctl_v4.20.0_macos.zip
778c0f112f7e85f72e8c3b098297f1fcf841deb1d6a0c458f549a2c913c99eeb fleetctl_v4.20.0_linux.tar.gz
954e49e11f95332497e1a94169efdea30584336196daf8022c45212a1f10c925 fleet_v4.20.0_linux.tar.gz
9873a7d2e99f25d307de247ff2cdeb150e2a8f5afb19a25c40cf919afb415ecf fleetctl_v4.20.0_linux.zip
bbfde0fc7a8580e77587399b9b8728181e4dd605cbd810649e6b57ca35dce8c0 fleetctl_v4.20.0_windows.tar.gz
e6567e49b021fa51105731dcd31755c331aa498494beccf027512ea0c795c620 fleetctl_v4.20.0_windows.zip

fleet-v4.19.1

Changes

• Fix a migration error that may occur when upgrading to Fleet 4.19.0.

• Fix a bug in which the incorrect operating system was displayed for Windows hosts on the Hosts page and Host details page.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

5cb88254e7afc8acfe5920070e075857238b348068526e74ac3b4900b1b831b4  fleetctl_v4.19.1_linux.zip
92a8c17fa8c79a77d009f95184ae1e655e0d5015f863dc8f115d733747e307cc  fleetctl_v4.19.1_macos.tar.gz
9f354f18afda05be35d5fa22bb36622bd959b6480ccf8e10129c4b49a1e8fa66  fleet_v4.19.1_linux.tar.gz
c2c8408069c123bd5a546015cdade8226fc75d137289dc83232f4a96eff9dfe6  fleetctl_v4.19.1_windows.zip
c4b599b73b2550af2802721e2f7869d40a38b2b58faf54fa34f282966b427e18  fleetctl_v4.19.1_linux.tar.gz
e9184737276593d2d5a1985a4af3f89b1f8a0a34b093ca184c85bb7f39a96b8e  fleetctl_v4.19.1_macos.zip
f51ec21998b299846bad9d8ad157e75e96e6b22d0b56e86b399eed976b4e56a8  fleetctl_v4.19.1_windows.tar.gz

fleet-v4.19.0

We have found an issue in v4.19.0 that may cause migration errors if you have hosts with multiple versions of the same software installed from different sources.

Please skip this release and install v4.19.1

If you have already upgraded Fleet and are seeing issues with software inventory or are seeing error with migrations, dropping the software table from the Fleet database should resolve those issues. The table will be repopulated as hosts check back in.

We’re sorry this one slipped past us! If you have any questions, comments or concerns please don’t hesitate to reach out. We’re more than happy to help!

Changes

• Fleet Premium: De-anonymize usage statistics by adding an organization property to the usage statistics payload. For Fleet Free instances, organization is reported as "unknown". Documentation on how to disable usage statistics, can be found here on fleetdm.com.

• Fleet Premium: Added support for Just-in-time (JIT) user provisioning via SSO. This adds the ability to
  automatically create Fleet user accounts when a new users attempts to log in to Fleet via SSO. New
  Fleet accounts are given the Observer role.

• Improved performance for aggregating software inventory. Aggregate software inventory is displayed on the Software page in the Fleet UI.

• Added the ability to see the vendor for Windows programs in software inventory. Vendor data is available in the GET /software API route.

• Added a Mobile device management (MDM) solutions table to the Home > macOS page. This table allows users to see a list of all MDM solutions their hosts are enrolled to and drill down to see which hosts are enrolled to each solution. Note that MDM solutions data is updated as hosts send fresh osquery results to Fleet. This typically occurs in an hour or so of upgrading.

• Added a Operating systems table to the Home > Windows page. This table allows users to see a list of all Windows operating systems (ex. Windows 10 Pro 21H2) their hosts are running and drill down to see which hosts are running which version. Note that Windows operating system data is updated as hosts send fresh osquery results to Fleet. This typically occurs in an hour or so of upgrading.

• Added a message in fleetctl to that notifies users to run fleet prepare instead of fleetctl prepare when running database migrations for Fleet.

• Improved the Fleet UI by maintaining applied, host filters when a user navigates back to the Hosts page from an
  individual host's Host details page.

• Improved the Fleet UI by adding consistent styling for Cancel buttons.

• Improved the Queries, Schedule, and Policies pages in the Fleet UI by page size to 20
  items.

• Improve the Fleet UI by informing the user that Fleet only supports screen widths above 768px.

• Added support for asynchronous saving of the hosts' scheduled query statistics. This is an
  experimental feature and should only be used if you're seeing performance issues. Documentation
  for this feature can be found here on fleetdm.com.

• Fixed a bug in which the Operating system and Munki versions cards on the Home > macOS
  page would not stack vertically at smaller screen widths.

• Fixed a bug in which multiple Fleet Desktop icons would appear on macOS computers.

• Fixed a bug that prevented Windows (.msi) installers from being generated on Windows machines.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

452ca07f5123a6173dd6342440bdcdc4acae5a020284805bdf2cf8452f0bc1a1  fleetctl_v4.19.0_linux.zip
545782e246fc91b501cad2bb688173d89b297afc9d78d76af41473e70fb0cb13  fleet_v4.19.0_linux.tar.gz
5867be4e25d18c94e8cb10af27c024ff0755f1c62f7c07568835917e4565b336  fleetctl_v4.19.0_windows.tar.gz
88cbbf39a58a72e5c891277d78315b08ff295b57dc6eff3645f1c08ae5cd5687  fleetctl_v4.19.0_linux.tar.gz
b525ec428a0f290475148fd3e49a1043dd62199afeca10ca9f26f109aa61ae5a  fleetctl_v4.19.0_macos.zip
d40dd7dbc4c715dfebc04b3dd5eaefeb7283b241f13df756ab3b224f69a7ddce  fleetctl_v4.19.0_windows.zip
e187db62dec21c3aad1884506ec30ed67c3748ae1d438e5935121d6e117e02cf  fleetctl_v4.19.0_macos.tar.gz

fleet-v4.18.0

Changes

• Added a Call to Action to the failing policy banner in Fleet Desktop. This empowers end-users to manage their device's compliance.

• Introduced rate limiting for device authorized endpoints to improve the security of Fleet Desktop.

• Improved styling for tooltips, dropdowns, copied text, checkboxes and buttons.

• Fixed a bug in the Fleet UI causing text to be truncated in tables.

• Fixed a bug affecting software vulnerabilities count in Host Details.

• Fixed "Select Targets" search box and updated to reflect currently supported search values: hostname, UUID, serial number, or IPv4.

• Improved disk space reporting in Host Details.

• Updated frequency formatting for Packs to match Schedules.

• Replaced "hosts" count with "results" count for live queries.

• Replaced "Uptime" with "Last restarted" column in Host Details.

• Removed vulnerabilities that do not correspond to a CVE in Fleet UI and API.

• Added standard password requirements when users are created by an admin.

• Updated the regexp we use for detecting the major/minor version on OS platforms.

• Improved calculation of battery health based on cycle count. “Normal” corresponds to cycle count < 1000 and “Replacement recommended” corresponds to cycle count >= 1000.

• Fixed an issue with double quotes usage in SQL query, caused by enabling ANSI_QUOTES in MySQL.

• Added automated tests for Fleet upgrades.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

39820710f7979598df931d66e5ad10bd64f5ad2278546bdfc0c9f022e26361ef  fleetctl_v4.18.0_windows.tar.gz
5cd874fccdde12a7a066cd59099b3cba42471290b5bcb8436faab2a7a6e8e20e  fleetctl_v4.18.0_linux.zip
9613e28c977288ef96a9c1114842db9655ace6ef5ebaff0809395270a07697fe  fleetctl_v4.18.0_windows.zip
b592d9c90cecc3255c3176870d379ed99c0359876b39da8ca84d111c383add4f  fleet_v4.18.0_linux.tar.gz
c23d23184341dd40b01b68ce110edc3af8fc11e40809063ac8f040517948784b  fleetctl_v4.18.0_linux.tar.gz
f3f37048af3ac746edd3f1eecfabf3e46feaa539e1317e0ab68c96d957c17937  fleetctl_v4.18.0_macos.tar.gz
b63c467af524690ed7475e5d1dcd210faa58766530a3f92a58a647dfb3b5be6d  fleetctl_v4.18.0_macos.zip

fleet-v4.17.1

Changes

• Fixed a bug causing an error when converting users to SSO login.

• Fixed a bug causing the Edit User modal to hang when editing multiple users.

• Fixed a bug that caused Ubuntu hosts to display an inaccurate OS version.

• Fixed a bug affecting exporting live query results.

• Fixed a bug in the Fleet UI affecting live query result counts.

• Improved Battery Health processing to better reflect the health of batteries for M1 Macs.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

d8934c9dcb7f762beb86fbb2e20d62e3fea3ce93bcd5c347c416c682064ff47e  fleetctl_v4.17.1_macos.tar.gz
b57efe08b92dacb34fe279a2c95f23f41ab97f066e14e8939873d0681b0b8361  fleetctl_v4.17.1_macos.zip
4c8fd03b92ec4e4110bd0afa1dff66d1984da2d2f91f5717d7daad3ae76b2abf  fleetctl_v4.17.1_linux.zip
79324f092c29d3482adddad90916eb8c85e86101add81ae1527d4ca1b717d5fe  fleetctl_v4.17.1_windows.zip
bbce831b0996be1263002e9987dcd4e532e9146087c8d41678b38d2a9ff3407d  fleet_v4.17.1_linux.tar.gz
d7444355d6da9fce05e1df4adff0f28a0d7eb62cb69cfe1cc7cb38a900c6b48e  fleetctl_v4.17.1_windows.tar.gz
e8a48b5b491e72c13644cea7cc7f6197e4247200ffdf3a95a1b1e7c507e0d411  fleetctl_v4.17.1_linux.tar.gz

fleet-v4.17.0

Changes

• Added the number of hosts enrolled by operating system (OS) and its version to usage statistics. Also added the weekly active users count to usage statistics. Documentation on how to disable usage statistics, can be found here on fleetdm.com.

• Fleet Premium and Fleet Free: Fleet Desktop is officially out of beta. This application shows users exactly what's going on with their device and gives them the tools they need to make sure it is secure and aligned with policies. They just need to click an icon in their menu bar.

• Fleet Premium and Fleet Free: Fleet's osquery installer is officially out of beta. Orbit is a lightweight wrapper for osquery that allows you to easily deploy, configure and keep osquery up-to-date across your organization.

• Added native support for M1 Macs in Fleet Desktop.

• Added battery health tracking to Host details page.

• Improved reporting of error states on the health dashboard and added separate health checks for MySQL and Redis with /healthz?check=mysql and /healthz?check=redis.

• Improved SSO login failure messaging.

• Fixed osquery tables that report incorrect platforms.

• Added docker_container_envs table to the osquery table schema on the *Query page.

• Updated Fleet host detail query so that the os_version for Ubuntu hosts reflects the accurate patch number.

• Improved accuracy of software_host_counts by removing hosts from the count if any software has been uninstalled.

• Improved accuracy of the last_restarted date.

• Fixed /api/_version_/fleet/hosts/identifier/{identifier} to return the correct value for host.status.

• Improved logging when fleetctl encounters permissions errors.

• Added support for scanning RHEL-based and Fedora hosts for vulnerable software using OVAL definitions.

• Fixed SQL generated for operating system version policies to reduce false negatives.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

5e33fda754a0530464843b876630e44e8a5bc8ce5ddb41af0976f8eb7d5c8dfa  fleetctl_v4.17.0_linux.tar.gz
78c68d8033cdeaab2720e58ddde663c807ce865ea8d39d91358f1d90cbfee3fd  fleetctl_v4.17.0_windows.zip
9ab0f76ad56bc8de1402c0bc5446263ea4bbfcd7842b446e0c258a709a4e42b7  fleetctl_v4.17.0_linux.zip
a2c55ceb92a88cc83f376ef08fc275412d8fa86788b6d16718782c799b73e0e6  fleetctl_v4.17.0_windows.tar.gz
f43c3a13c0de38332f24860c49a1c53c260a94a5e8dfe6ef18fe55d73504dee5  fleet_v4.17.0_linux.tar.gz
11b8fd0af84363a3eb0f44dcf96048df0f0df3420daaf9d9873b2c4b8e6c77d5  fleetctl_v4.17.0_macos.tar.gz
471e23651feb6a52a6b3c6500e2018d1a936c08ac70bbb0c55cbe1cb335d3c2a  fleetctl_v4.17.0_macos.zip

fleet-v4.16.0

Fleet 4.16.0 (Jun 20, 2022)

• Fleet Premium: Added the ability to set a Custom URL for the "Transparency" link included in Fleet Desktop. This allows you to use custom branding, as well as gives you control over what information you want to share with your end-users.

• Fleet Premium: Added scoring to vulnerability detection, including EPSS probability score, CVSS base score, and known exploits. This helps you to quickly categorize which threats need attention today, next week, next month, or "someday."

• Added a ticket-workflow for policy automations. Configured Fleet to automatically create a Jira issue or Zendesk ticket when one or more hosts fail a specific policy.

• Added Open Vulnerability and Assement Language (OVAL) processing for Ubuntu hosts. This increases the accuracy of detected vulnerabilities.

• Added software details page to the Fleet UI.

• Improved live query experience by saving the state of selected targets and adding count of visible results when filtering columns.

• Fixed an issue where the Device user page redirected to login if an expired session token was present.

• Fixed an issue that caused a delay in availability of My device in Fleet Desktop.

• Added support for custom headers for requests made to fleet instances by the fleetctl command.

• Updated to an improved users query in every query we send to osquery.

• Fixed no such table errors for mdm and munki_info for vanilla osquery MacOS hosts.

• Fixed data inconsistencies in policy counts caused when a host was re-enrolled without a team or in a different one.

• Fixed a bug affecting fleetctl debug archive and errors commands on Windows.

• Added /api/_version_/fleet/device/{token}/policies to retrieve policies for a specific device. This endpoint can only be accessed with a premium license.

• Added POST /targets/search and POST /targets/count API endpoints.

• Updated GET /software, GET /software/{:id}, and GET /software/count endpoints to no include software that has been removed from hosts, but not cleaned up yet (orphaned).

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksums

SHA256

6e07d250d31c0614d879dd24e8649c8b7fa460a789dd10b87d09166bbdabdef5  fleetctl_v4.16.0_windows.zip
9102a84cdeaed83e36079a63639d84c72a5cde4661cc8c35baac5768448dda69  fleet_v4.16.0_linux.tar.gz
960a9eb2aa2afaebe22bc979549851720feedfa4b194bd56146beb41272b7704  fleetctl_v4.16.0_linux.tar.gz
9ad3352d16fa53ce2a1da2a41e95a231c559265bd2307b7521fe731af7dd9671  fleetctl_v4.16.0_windows.tar.gz
d82f6f404b5bb43f38fca4ff437bb50376ad1e43f375ce60726893ea09c21ad5  fleetctl_v4.16.0_linux.zip
7d8a5263a344d7e4a307503526cdd9da08e9420f4363197c069dd790574e3f4d  fleetctl_v4.16.0_macos.tar.gz
3230af343abf3c0a1627b3082a5676ba19416bf0f3df1bd8f07037174d50a788  fleetctl_v4.16.0_macos.zip