fleetdm/fleet fleet-v4.38.0 on GitHub

Changes

Updated MDM profile verification so that an install profile command will be retried once if the command resulted in an error or if osquery cannot confirm that the expected profile is installed.
Ensured post-enrollment commands are sent to devices assigned to Fleet in ABM.
Ensured hosts assigned to Fleet in ABM come back to pending to the right team after they're deleted.
Added labels to the fleetd extensions feature to allow deploying extensions to hosts that belong to certain labels.
Changed fleetd Windows extensions file extension from .ext to .ext.exe to allow their execution on Windows devices (executables on Windows must end with .exe).
Surfaced chrome live query errors to Fleet UI (including errors for specific columns while maintaining successful data in results).
Fixed delivery of fleetd extensions to devices to only send extensions for the host's platform.
(Premium only) Added resolved_in_version to /fleet/software APIs pulled from NVD feed.
Added database migrations to create the new scripts table to store saved scripts.
Allowed specifying disable_failing_policies on the /api/v1/fleet/hosts/report API endpoint for increased performance. This is useful if the user is not interested in counting failed policies (issues column).
Added the option to use locally-installed WiX v3 binaries when generating the Fleetd installer for Windows on a Windows machine.
Added CVE descriptions to the /fleet/software API.
Restored the ability to click on and select/copy text from software bundle tooltips while maintaining the abilities to click the software's name to get more details and to click anywhere else in the row to view all hosts with that software installed.
Stopped 1password from overly autofilling forms.
Upgraded Go version to 1.21.1.

Bug Fixes

Fixed vulnerability mismatch between the flock browser and the discoteq/flock binary.
Fixed v4.37.0 performance regressions in the following API endpoints:
- /api/v1/fleet/hosts/report
- /api/v1/fleet/hosts when using per_page=0 or a large number for per_page (in the thousands).
Fixed script content and output formatting on the scripts detail modal.
Fixed wrong version numbers for Microsoft Teams in macOS (from invalid format of the form 1.00.XYYYYY to correct format 1.X.00.YYYYY).
Fixed false positive CVE-2020-10146 found on Microsoft Teams.
Fixed CVE-2013-0340 reporting as a valid vulnerability due to NVD recommendations.
Fixed save button for a new policy after newly creating another policy.
Fixed empty query/policy placeholders.
Fixed used by data when filtering hosts by labels.
Fixed small copy and alignment issue with status indicators in the Queries page Automations column.
Fixed strict checks on Windows MDM Automatic Enrollment.
Fixed software vulnerabilities time ago column for old CVEs.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

1726447569f5bf476916375e989c9e3f17c5ae6ebc684ee33471981dee4260c5  fleetctl_v4.38.0_linux.tar.gz
173cad4a08496654a2a00944759796665dc72b565a767a2c3c8a183a89eb45ee  fleet_v4.38.0_linux.tar.gz
39ba4a75bc7d87c757b1b5672507f89e6f13e515d593d1c0d219f6ae36dd1dee  fleetctl_v4.38.0_linux.zip
84c0ac95bd399c96c2ccd2d2deb161757f83ed49caae819cc243493eda800e9a  fleetctl_v4.38.0_windows.zip
d1d6b3d14b4cb003f207d3f59682443a2d8d552d8427c6dcff5fdf9aa46d05c4  fleetctl_v4.38.0_windows.tar.gz
d845e5d9f63b9b56e73d791477349e65236acb833e6009ed99771af19cdce49a  fleetctl_v4.38.0_macos.zip
f6e735da4bf6c41dab3c30d9c6709d73fc90308dfa28603f8c382c795b7d57b3  fleetctl_v4.38.0_macos.tar.gz