« Changelog History


OSQuery v5.4.0 Release Notes

  • Git Commits

    Representing commits from 15 contributors! Thank you all.

    🆕 New Features

    • 🖨 We're extending macOS Endpoint Security to include File Integrity monitoring. Check out the new es_process_file_events table. (#7579)
    • ➕ Add Docker build scripts and configuration (#7619)

    🗄 Deprecation Notices

    • Prevent CLI_FLAGs to be set via config (#7561)
    • ✂ Remove the lldp_neighbors table (#7664)

    Table Changes

    • 🖨 New Table: es_process_file_events for macOS Endpoint Security based FIM (#7579)
    • 🆕 New Table: password_policy table for macOS (#7594)
    • ⚡️ New Table: windows_update_history (#7407)
    • 🐧 Add memory_available to linux memory_info table (#7669)
    • 🐧 Port the cpu_info table to linux (#7499)
    • ✂ Remove the lldp_neighbors table (#7664)
    • ⚡️ Update deb_packages table to not sisplay arch info in the package name (#7638)
    • Update hardware_model in the system_info table on Apple M1 machines to report correctly (#7662)
    • Update shared_resources table to add type names, fix type/maximum_allowed handling (#7645)

    Under the Hood improvements

    • 🏁 Expand env vars before trying to enumerate crashes in windows_crashes table (#7391)
    • Implement a split and trim function using std::string_view (#7636)
    • 👌 Improve scheduled query denylisting and scheduler shutdown (#7492)
    • Prevent CLI_FLAGs to be set via config (#7561)
    • ✂ Remove unnecessary string copy (#7625)

    🐛 Bug Fixes

    • ➕ Add linwin to list of supported PLATFORM_DIRS (#7646)
    • 🛠 Fix AWS certificate verification failing on all services (#7652)
    • 🛠 Fix MBCS support on Windows (#7593)
    • 🛠 Fix local_timezone column in the time table on Windows (#7656)
    • 🛠 Fix system_info table to support unicode on Windows (#7626)
    • 🛠 Fix multiple Yara leaks (#7615)
    • Fix std::bad_alloc on pci_devices on Apple Silicon macs (#7648)
    • 🛠 Fix tables spec files to specify linux and not posix (#7644)
    • 🛠 Fix thrift server shutting down when dropping privileges (#7639)

    📚 Documentation

    • 🔄 CHANGELOG 5.3.0 (#7575)
    • 📚 Exclude spec/example.table when generating documentation (#7647)
    • 🛠 Fix a UUID typo in the disk_encryption table (#7608)
    • 🛠 Fix spelling of the word "owned" (#7630)
    • 🛠 Fix typo in FIM docs for Windows (#7676)
    • 🚀 Update the "new release" issue template (#7607)
    • 🔌 clarify browser_plugins table is referencing basically unsupported CNPAPI tech (#7651)

    🏗 Build

    • ➕ Add an option to build with the leak sanitizer (#7609)
    • 🛠 Fix check for PIE support (#7234)
    • ⏱ Fix SchedulerTests.test_scheduler_drift_accumulation flakyness (#7613)
    • 👌 Improve config parsing and osqueryfuzz-config performance (#7635)
    • 🎉 Initialize users and groups services on all tests that need them (#7620)
    • ⚡️ ci: Update osquery-packaging commit to the latest one (#7667)
    • cmake: Add an option to enable or disable using ccache (#7671)
    • ⚡️ libs: Update OpenSSL to version 1.1.1o (#7629)
    • ⚡️ libs: Update OpenSSL to version 1.1.1q (#7674)
    • ⚡️ libs: Update libarchive to version 3.6.1 (#7654)
    • ⚡️ libs: Update sqlite to version 3.38.5 (#7628)