fleetdm/fleet fleet-v4.23.0

on GitHub

Changes

• Added preview screenshots for Jira and Zendesk vulnerability tickets for Premium users.

• Improve host detail query to populate primary ip and mac address on host.

• Add option to show public IP address in Hosts table.

• Improve ingress resource by replacing the template with a most recent version, that enables:

  • Not having any annotation hardcoded, all annotations are optional.
  • Custom path, as of now it was hardcoded to /*, but depending on the ingress controller, it can require an extra annotation to work with regular expressions.
  • Specify ingressClassName, as it was hardcoded to gce, and this is a setting that might be different on each cluster.

• Added ingestion of host orbit version from orbit_info osquery extension table.

• Added number of hosts enrolled by orbit version to usage statistics payload.

• Added number of hosts enrolled by osquery version to usage statistics payload.

• Added arch and linuxmint to list of linux distros so that their data is displayed and host count includes them.

• When submitting invalid agent options, inform user how to override agent options using fleetctl force flag.

• Exclude Windows Servers from mdm lists and aggregated data.

• Activity feed includes editing team config file using fleetctl.

• Update Go to 1.19.3.

• Host details page includes information about the host's disk encryption.

• Information surfaced to device user includes all summary/about information surfaced in host details page.

• Support low_disk_space filter for endpoint /labels/{id}/hosts.

• Select targets pages implements cleaner icons.

• Added validation of unknown keys for the Apply Teams Spec request payload (POST /spec/teams endpoint).

• Orbit MSI installer now includes the necessary manifest file to use windows_event_log as a logger_plugin.

• UI allows for filtering low disk space hosts by platform.

• Add passed policies column on the inherited policies table for teams.

• Use the MSRC security bulletins to scan for Windows vulnerabilities. Detected vulnerabilities are inserted in a new table, 'operating_system_vulnerabilities'.

• Added vulnerability scores to Jira and Zendesk integrations for Fleet Premium users.

• Improve database usage to prevent some deadlocks.

• Added ingestion of disk encryption status for hosts, and added that flag in the response of the GET /hosts/{id} API endpoint.

• Trying to add a host with 0 enroll secrets directs user to manage enroll secrets.

• Detect Windows MDM solutions and add mdm endpoints.

• Styling updates on login and forgot password pages.

• Add UI polish and style fixes for query pages.

• Update styling of tooltips and modals.

• Update colors, issues icon.

• Cleanup dashboard styling.

• Add tooling for writing integration tests on the frontend.

• Fixed host details page so munki card only shows for mac hosts.

• Fixed a bug where duplicate vulnerability webhook requests, jira, and zendesk tickets were being
  made when scanning for vulnerabilities. This affected ubuntu and redhat hosts that support OVAL
  vulnerability detection.

• Fixed bug where password reset token expiration was not enforced.

• Fixed a bug in fleetctl apply for teams, where a missing agent_options key in the YAML spec
  file would clear the existing agent options for the team (now it leaves it unchanged). If the key
  is present but empty, then it clears the agent options.

• Fixed bug with our CPE matching process. UTM.app was matching to the wrong CPE.

• Fixed an issue where fleet would send invalid usage stats if no hosts were enrolled.

• Fixed an Orbit MSI installer bug that caused Orbit files not to be removed during uninstallation.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

010850f10cddaa40b346071f12c8cb61d41a5e7970dbdadcd1e786dcbb7597ac  fleet_v4.23.0_linux.tar.gz
1850e3ddd1a6130167c254fb6ebbd99128f4e6d80731eed6e948f20bcbff05a1  fleetctl_v4.23.0_macos.tar.gz
39a8a4626f15b36e905d513ffffe625b14cba9e13bd4b6c9f36740791ee3e3bb  fleetctl_v4.23.0_windows.tar.gz
682880dfedc52792645842e70c97c733c5cac70734a704dfa8e9ad00672c6b8b  fleetctl_v4.23.0_linux.tar.gz
6c3827505fc72e0c6f9cdbda175502fba29f6d50199f15c57d601c90e78a7fe9  fleetctl_v4.23.0_linux.zip
81145904ef4e5d237ffde63b55654e5c29f5bb38a996e4fc421bbf5796e96d76  fleetctl_v4.23.0_windows.zip
93003e1ff46f40175ac0f02055b1d64d6cec212d291075b9d30c95303964bc79  fleetctl_v4.23.0_macos.zip