fleetdm/fleet fleet-v4.41.0

on GitHub

Changes

• Endpoint operations:

  • Enhanced fleetctl and API to support PowerShell (.ps1) scripts.
  • Updated several API endpoints to support os_settings filter, including Windows profiles status.
  • Enabled after parameter for improved pagination in various endpoints.
  • Improved the fleet/queries/run endpoint with better error handling.
  • Increased frequency of metrics reporting from Fleet servers to daily.
  • Added caching for policy results in MySQL for faster operations.

• Device management (MDM):

  • Added database tables for Windows profiles support.
  • Added validation for WSTEP certificate and key pair before enabling Windows MDM.
  • Introduced support for Windows PowerShell scripts in the UI.

• Vulnerability management:

  • Fleet now uses NVD API 2.0 for CVE information download.
  • Added support for JetBrains application vulnerability data.
  • Tightened software matching to reduce false positives.
  • Stopped reporting Atom editor packages in software inventory.

• UI improvements:

  • Updated activity feed for better communication around JIT-provisioned user logins.
  • Query report now displays the host's display name instead of the hostname.
  • Improved UI components like the manage page's label filter and edit columns modal.
  • Enabled all sort headers in the UI to be fully clickable.
  • Removed the creation of OS policies from a host's operating system in the UI.
  • Ensured correct settings visibility in the Settings > Advanced section.

Bug fixes

• Fixed long result cell truncation in live query results and query reports.
• Fixed a Redis cluster mode detection issue for RedisLabs hosted instances.
• Fixed a false positive vulnerability report for Citrix Workspace.
• Fixed an edge case sorting bug related to the last_restarted value for hosts.
• Fixed an issue with creating .deb installers with different enrollment keys.
• Fixed SMTP configuration validation issues for TLS-only servers.
• Fixed caching of team MDM configurations to improve performance at scale.
• Fixed delete pending issue during orbit.exe installation.
• Fixed a bug causing the disk encryption key banner to not display correctly.
• Fixed various error code inconsistencies across endpoints.
• Fixed filtering hosts with invalid team_id now returns a 400 error.
• Fixed false positives in software matching for similar names.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

bc5dd476ea4108d2d26ea4eab99504f02492633c6f8fa9db01f8511099c9f57e  fleet_v4.41.0_linux.tar.gz
03da62accda22d3434d6be235e9b910e04b21aee84085097369707451dc4d219  fleetctl_v4.41.0_linux.tar.gz
ec10a2193a9075b668126b3700189c7fef232978ce8f3504128203afc865a619  fleetctl_v4.41.0_linux.zip
83d78374afdc8d49da20bbbd6fec966b082725aa4060c845f13c0efc7d607182  fleetctl_v4.41.0_macos.tar.gz
1390320c14410c298f4298bd171b257ca8fde0061a62388d5cab1f04c501e062  fleetctl_v4.41.0_macos.zip
7e5eb0b48c15670d75b34acbf8f9f9a470fad76a7c20d77b79e715a56a890f74  fleetctl_v4.41.0_windows.tar.gz
255f6260d5f7f76e7d279a649879d9a27d45a78b916ffbdb1303bc707ab3a745  fleetctl_v4.41.0_windows.zip