All Versions
87
Latest Version
Avg Release Cycle
29 days
Latest Release
610 days ago

Changelog History
Page 4

  • v3.13.4 Changes

    May 30, 2022

    🛠 Fixed

    • 🛠 Fixed a crash in Vuln Detector when scanning agents running on Windows (backport from 4.3.2). (#13624)

  • v3.13.3 Changes

    April 28, 2021

    🛠 Fixed

    • 🛠 Fixed a bug in Vulnerability Detector that made Modulesd crash while updating the NVD feed due to a missing CPE entry. (#8346)

  • v3.13.2 Changes

    September 21, 2020

    🛠 Fixed

    • ⚡️ Updated the default NVD feed URL from 1.0 to 1.1 in Vulnerability Detector. (#6056)

  • v3.13.1 Changes

    July 14, 2020

    ➕ Added

    • Added two new settings and to adjust the agent failover interval. (#5433)

    🛠 Fixed

    • 🛠 Fixed a crash in Modulesd caused by Vulnerability Detector when skipping a kernel package if the agent has OS info disabled. (#5467)

  • v3.13.0 Changes

    June 29, 2020

    ➕ Added

    • Vulnerability Detector improvements. (#5097)
      • Include the NVD as feed for Linux agents in Vulnerability Detector.
      • Improve the Vulnerability Detector engine to correlate alerts between different feeds.
      • Add Vulnerability Detector module unit testing for Unix source code.
      • A timeout has been added to the updates of the vulnerability detector feeds to prevent them from getting hung up. (#5153)
    • 🆕 New option for the JSON decoder to choose the treatment of Array structures. (#4836)
    • ➕ Added mode value (real-time, Who-data, or scheduled) as a dynamic field in FIM alerts. (#5051)
    • 🔧 Set a configurable maximum limit of files to be monitored by FIM. (#4717)
    • 🆕 New integration for pull logs from Google Cloud Pub/Sub. (#4078)
    • ➕ Added support for MITRE ATT&CK knowledge base. (#3746)
    • ⚡️ Microsoft Software Update Catalog used by vulnerability detector added as a dependency. (#5101)
    • ➕ Added support for aarch64 and armhf architectures. (#5030)

    🔄 Changed

    • 🔧 Internal variable rt_delay configuration changes to 5 milliseconds. (#4760)
    • Who-data includes new fields: process CWD, parent process id, and CWD of parent process. (#4782)
    • FIM opens files with shared deletion permission. (#5018)
    • Extended the statics fields comparison in the ruleset options. (#4416)
    • 🚚 The state field was removed from vulnerability alerts. (#5211)
    • 🐧 The NVD is now the primary feed for the vulnerability detector in Linux. (#5097)
    • ✂ Removed OpenSCAP policies installation and configuration block. (#5061)
    • 🔄 Changed the internal configuration of Analysisd to be able to register by default a number of agents higher than 65536. (#4332)
    • Changed same/different_systemname for same/different_system_name in Analysisd static filters. (#5131)
    • ⚡️ Updated the internal Python interpreter from v3.7.2 to v3.8.2. (#5030)

    🛠 Fixed

    • 🛠 Fixed a bug that, in some cases, kept the memory reserved when deleting monitored directories in FIM. (#5115)
    • Freed Inotify watches moving directories in the real-time mode of FIM. (#4794)
    • 🛠 Fixed an error that caused deletion alerts with a wrong path in Who-data mode. (#4831)
    • 🛠 Fixed generating alerts in Who-data mode when moving directories to the folder being monitored in Windows. (#4762)
    • 🌲 Avoid truncating the full log field of the alert when the path is too long. (#4792)
    • 🛠 Fixed the change of monitoring from Who-data to real-time when there is a failure to set policies in Windows. (#4753)
    • 🛠 Fixed an error that prevents restarting Windows agents from the manager. (#5212)
    • 🛠 Fixed an error that impedes the use of the tag URL by configuring the NVD in a vulnerability detector module. (#5165)
    • 🛠 Fixed TOCTOU condition in Clusterd when merging agent-info files. (#5159)
    • 🛠 Fixed race condition in Analysisd when handling accumulated events. (#5091)
    • Avoided to count links when generating alerts for ignored directories in Rootcheck. Thanks to Artur Molchanov (@Hexta). (#4603)
    • 🛠 Fixed typo in the path used for logging when disabling an account. Thanks to Fontaine Pierre (@PierreFontaine). (#4839)
    • 🛠 Fixed an error when receiving different Syslog events in the same TCP packet. (#5087)
    • 🛠 Fixed a bug in Vulnerability Detector on Modulesd when comparing Windows software versions. (#5168)
    • 🛠 Fixed a bug that caused an agent's disconnection time not to be displayed correctly. (#5142)
    • ⚡️ Optimized the function to obtain the default gateway. Thanks to @WojRep
    • 🛠 Fixed host verification when signing a certificate for the manager. (#4963)
    • 🛠 Fixed possible duplicated ID on 'client.keys' adding new agent through the API with a specific ID. (#4982)
    • 🔧 Avoid duplicate descriptors using wildcards in 'localfile' configuration. (#4977)
    • ➕ Added guarantee that all processes are killed when service stops. (#4975)
    • 🛠 Fixed mismatch in integration scripts when the debug flag is set to active. (#4800)

  • v3.12.3 Changes

    April 27, 2020

    🔄 Changed

    • Disable WAL in databases handled by Wazuh DB to save disk space. (#4949)

    🛠 Fixed

    • 🛠 Fixed a bug in Remoted that could prevent agents from connecting in UDP mode. (#4897)
    • 🛠 Fixed a bug in the shared library that caused daemons to not find the ossec group. (#4873)
    • 🚑 Prevent Syscollector from falling into an infinite loop when failed to collect the Windows hotfixes. (#4878)
    • 🛠 Fixed a memory leak in the system scan by Rootcheck on Windows. (#4948)
    • 🛠 Fixed a bug in Logcollector that caused the out_format option not to apply for the agent target. (#4942)
    • 🛠 Fixed a bug that caused FIM to not handle large inode numbers correctly. (#4914)
    • 🛠 Fixed a bug that made ossec-dbd crash due to a bad mutex initialization. (#4552)

  • v3.12.2 Changes

    April 09, 2020

    🛠 Fixed

    • 🛠 Fixed a bug in Vulnerability Detector that made wazuh-modulesd crash when parsing the version of a package from a RHEL feed. (#4885)

  • v3.12.1 Changes

    April 06, 2020

    🔄 Changed

    • ⚡️ Updated MSU catalog on 31/03/2020. (#4819)

    🛠 Fixed

    • 🛠 Fixed compatibility with the Vulnerability Detector feeds for Ubuntu from Canonical, that are available in a compressed format. (#4834)
    • ➕ Added missing field ‘database’ to the FIM on-demand configuration report. (#4785)
    • 🛠 Fixed a bug in Logcollector that made it forward a log to an external socket infinite times. (#4802)
    • 🛠 Fixed a buffer overflow when receiving large messages from Syslog over TCP connections. (#4778)
    • 🛠 Fixed a malfunction in the Integrator module when analyzing events without a certain field. (#4851)
    • 🛠 Fix XML validation with paths ending in \. (#4783)

    ✂ Removed

    • ✂ Removed support for Ubuntu 12.04 (Precise) in Vulneratiliby Detector as its feed is no longer available.

  • v3.12.0 Changes

    March 24, 2020

    ➕ Added

    • ➕ Add synchronization capabilities for FIM. (#3319)
    • ➕ Add SQL database for the FIM module. Its storage can be switched between disk and memory. (#3319)
    • ➕ Add support for monitoring AWS S3 buckets in GovCloud regions. (#3953)
    • ➕ Add support for monitoring Cisco Umbrella S3 buckets. (#3890)
    • ➕ Add automatic reconnection with the Eventchannel service when it is restarted. (#3836)
    • ➕ Add a status validation when starting Wazuh. (#4237)
    • ➕ Add FIM module unit testing for Unix source code. (#4688)
    • ➕ Add multi-target support for unit testing. (#4564)
    • ➕ Add FIM module unit testing for Windows source code. (#4633)

    🔄 Changed

    • 🚚 Move the FIM logic engine to the agent. (#3319)
    • 👉 Make Logcollector continuously attempt to reconnect with the agent daemon. (#4435)
    • 🏁 Make Windows agents to send the keep-alive independently. (#4077)
    • 0️⃣ Do not enforce source IP checking by default in the registration process. (#4083)
    • ⚡️ Updated API manager/configuration endpoint to also return the new synchronization and whodata syscheck fields (#4241)
    • Disabled the chroot jail in Agentd on UNIX.

    🛠 Fixed

    • Avoid reopening the current socket when Logcollector fails to send a event. (#4696)
    • Prevent Logcollector from starving when has to reload files. (#4730)
    • 🛠 Fix a small memory leak in clusterd. (#4465)
    • 🛠 Fix a crash in the fluent forwarder when SSL is not enabled. (#4675)
    • Replace non-reentrant functions to avoid race condition hazards. (#4081)
    • 🛠 Fixed the registration of more than one agent as any when forcing to use the source IP. (#2533)
    • 🛠 Fix Windows upgrades in custom directories. (#2534)
    • 🛠 Fix the format of the alert payload passed to the Slack integration. (#3978)

  • v3.12-fim Changes

    February 21, 2020

    2019-10-18