fleetdm/fleet fleet-v4.9.1

on GitHub

Changes

This is a security release.

• Security: Fix a vulnerability in Fleet's SSO implementation that could allow a malicious or compromised SAML Service Provider (SP) to log into Fleet as an existing Fleet user. See GHSA-ch68-7cf4-35vr for details.

• Allow MSI packages generated by fleetctl package to reinstall on Windows without uninstall.

• Fix a bug in which a team's scheduled queries didn't render correctly on the Schedule page.

• Fix a bug in which a new policy would always get added to "All teams" rather than the selected team.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available on fleetdm.com/docs.

Binary Checksum

SHA256

9f2ca99d482d249d0fc7d17f71a11592155c7f0cb43fff019da30ed1b875bf42  fleetctl_v4.9.1_macos.tar.gz
2f7e1b857eaee1c66bc1ccf2bfc3a0195c44a5c2f3831ad4fc938c5312d541e5  fleetctl_v4.9.1_macos.zip
3f22f610d7e46c66b9eeb4ff4b6eb87ce5452b3ec1473f6ecabb0086a07db415  fleet_v4.9.1_linux.tar.gz
9153bbd792ebb1fc154cd742c19cd2248137bab49968bcaf5c0ac6ee577718fb  fleetctl_v4.9.1_windows.zip
a255c0ab198ceaf4344b80e7d7fc2fd307b98d223fc1ffcadf2df9d0729e981b  fleetctl_v4.9.1_linux.zip
bf29eb09d0583bb629893bb7a6177cbef4fbc967996c7db77471a4585085c2a3  fleetctl_v4.9.1_windows.tar.gz
c930085bae6d8ad852924d4ec5d2b0dec33abd7c621452a0c365a61f75088fb9  fleetctl_v4.9.1_linux.tar.gz