Skip to content

Wazuh 3.10.0
Compare
Choose a tag to compare
@bah07 bah07 released this 18 Sep 08:27
· 22135 commits to master since this release
v3.10.0
b511e31

Added

  • Add framework function to obtain a full summary of agents. (#3842)
  • SCA improvements. (#3286)
    Refactor de SCA internal logic and policy syntax. (#3249)
    Support to follow symbolic links. (#3228)
    Add numerical comparator for SCA rules. (#3374)
    Add SCA decoded events count to global stats. (#3623)
  • Extend duplicate file detection for LogCollector. (#3867)
  • Add HIPAA and NIST 800 53 compliance mapping as rule groups.(#3411 & #3420)
  • Add SCA compliance groups to rule groups in alerts. (#3427)
  • Add IPv6 loopback address to localhost list in DB output module (by @aquerubin). (#3140)
  • Accept ] and > as terminal prompt characters for Agentless. (#3209)

Changed

  • Modify logs for agent authentication issues by Remoted. (#3662)
  • Make Syscollector logging messages more user-friendly. (#3397)
  • Make SCA load by default all present policies at the default location. (#3607)
  • Increase IPSIZE definition for IPv6 compatibility (by @aquerubin). (#3259)
  • Replace local protocol definitions with Socket API definitions (by @aquerubin). (#3260)
  • Improved error message when some of required Wazuh daemons are down. Allow restarting cluster nodes except when ossec-execd is down. (#3496)
  • Allow existing aws_profile argument to work with vpcflowlogs in AWS Wodle configuration. Thanks to Adam Williams (@awill1988). (#3729)

Fixed

  • Fix exception handling when using an invalid bucket in AWS Wodle (#3652)
  • Fix error message when an AWS bucket is empty (#3743)
  • Fix error when getting profiles in custom AWS buckets (#3786)
  • Fix SCA integrity check when switching between manager nodes. (#3884)
  • Fix alert email sending when no_full_log option is set in a rule. (#3174)
  • Fix error in Windows who-data when handling the directories list. (#3883)
  • Fix error in the hardware inventory collector for PowerPC architectures. (#3624)
  • Fix the use of mutexes in the OS_Regex library. (#3533)
  • Fix invalid read in the OS_Regex library. (#3815)
  • Fix compilation error on FreeBSD 13 and macOS 10.14. (#3832)
  • Fix typo in the license of the files. (#3779)
  • Fix error in execd when upgrading agents remotely while auto-restarting. (#3437)
  • Prevent integrations from inheriting descriptors. (#3514)
  • Overwrite rules label fix and rules features tests. (#3414)
  • Fix typo: replace readed with read. (#3328)
  • Introduce global mutex for Rootcheck decoder. (#3530)
  • Fix errors reported by scan-build. (#3452 & #3785)
  • Fix the handling of wm_exec() output.(#3486)
  • Fix FIM duplicated entries in Windows. (#3504)
  • Remove socket deletion from epoll(). (#3432)
  • Let the sources installer support NetBSD. (#3444)
  • Fix error message from openssl v1.1.1. (#3413)
  • Fix compilation issue for local installation. (#3339)
  • Fix exception handling when /tmp have no permissions and tell the user the problem. (#3401)
  • Fix who-data alerts when audit logs contain hex fields. (#3909)
  • Remove useless select() calls in Analysisd decoders. (#3964)
Assets 2