Manager
Added
- The manager now supports alert forwarding to Fluentd. (#17306)
Fixed
- Fixed compilation issue for local installation. (#20505)
- Fixed malformed JSON error in wazuh-analysisd. (#16666)
Changed
- Changed error messages about
recv()messages from wazuh-db to debug logs. (#20285)
Agent
Added
- Added debug logging in FIM to detect invalid report change registry values. Thanks to Zafer Balkan (@zbalkan). (#21690)
- Added Amazon Linux 1 and 2023 support for the installation script. (#21287)
- Added Journald support in Logcollector. (#23137)
Fixed
- Fixed loading of whodata through timeouts and retries. (#21455)
- Avoided backup failures during WPK update by adding dependency checking for the tar package. (#21729)
- Fixed using memmove instead of memcpy to avoid unwanted behavior. (#21595)
- Fixed a crash in the agent due to a library incompatibility. (#22210)
- Fixed an error in the osquery integration on Windows that avoided loading osquery.conf. (#21728)
- Fixed a crash in the agent's Rootcheck component when using
<ignore>. (#22588) - Fixed command wodle to support UTF-8 characters on windows agent. (#19146)
- Fixed Windows agent to delete wazuh-agent.state file when stopped. (#20425)
- Fixed Windows Agent 4.8.0 permission errors on Windows 11 after upgrade. (#20727)
- Fixed Syscollector not checking if there's a scan in progress before starting a new one. (#22440)
- Fixed alerts are created when syscheck diff DB is full. (#16487)
- Fixed Wazuh deb uninstallation to remove non-config files. (#2195)
- Fixed Auditd issue on newer OSs caused by the default audit rule "-a never,task". (#7283)
- Fixed improper Windows agent ACL on non-default installation directory. (#23273)
- Fixed socket configuration of an agent is displayed. (#17664)
- Fixed wazuh-modulesd printing child process not found error. (#18494)
- Fixed issue with an agent starting automatically without reason. (#23848)
- Fixed GET /syscheck to properly report size for files larger than 2GB. (#17415)
Changed
- The directory /boot has been removed from the default FIM settings for AIX. (#19753)
Ruleset
Changed
- The solved vulnerability rule has been clarified. (#19754)
Fixed
- Fixed audit decoders to parse the new heading field "node=". (#22178)
Other
Changed
- Upgraded external OpenSSL library dependency version to 3.0. (#20778)
- Migrated QA framework. (#17427)
- Improved WPKs. (#21152)
- Migrated and adapted Wazuh subsystem repositories as part of Wazuh packages redesign. (#23508)
Fixed
- Fixed a buffer overflow hazard in HMAC internal library. (#19794)