fleet-v4.50.2

Bug fixes

* Fixed a critical bug where S3 operation were not possible on a different AWS account.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

3071cf9b377f62becd8f5ede7a3370eb94499fe28e87a6f6a4be6f6df3c0ac12  fleet_v4.50.2_linux.tar.gz
c5185db5e8a84cb5fcad17d8501c2fd8aadb451d5c54fdda88af3504b4c850df  fleetctl_v4.50.2_linux.tar.gz
9507e23a60968916342e626ca86fdde847cb30dafbe12a3f50f8854efef0f62e  fleetctl_v4.50.2_linux.zip
a706b0c389ebfbd01cbdf08359c81497eda81c315a7963960ed8968a2173c866  fleetctl_v4.50.2_macos.tar.gz
bd7c78ae36f84966ffd5effbb9f9227d1a018d8cdb51a2e4e883d4d113453304  fleetctl_v4.50.2_macos.zip
56f939d7b5513df64ad63f7bf2da6cafa98778872aecfbce5f55161648ca4231  fleetctl_v4.50.2_windows.tar.gz
c488cce70defe02c6a90ebdfe276d88f4fdaab9264e157588bdb0e6dba9c5a91  fleetctl_v4.50.2_windows.zip

fleet-v4.50.1

Bug fixes

• Fixed a bug that might prevent enqueing commands to renew SCEP certificates if the host was enrolled more than once.
• Fixed a bug by preventing the host_ids field from being returned from the list labels endpoint.
• Fixed a number of related issues with the filtering and sorting of the queries table.
• Added various optimizations to the rendering of the queries table.
• Fixed a bug where Bulk Host Delete and Transfer now support status and labelID filters together.
• Added the ability to automatically log off and lock out Administrator users on Windows hosts.
• Removed references to Administrator accounts in the comments of the Windows lock script.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

1e938fb7b547413a088c96ada20ab163fe27f12d2124aa1cb652f68ec0448970  fleet_v4.50.1_linux.tar.gz
388d03b5f42d14e0d68541fa74da9abc891e3fb7f7f6daae98d8e0e963c255b4  fleetctl_v4.50.1_linux.tar.gz
af1fa340c0d3690024a828f2099482530d20351bafcd114860b7faf37ddf11cb  fleetctl_v4.50.1_linux.zip
376c1371b87dd3ea20ad65ada4ef47f811218382422843a4ecb3fd590fc62c8a  fleetctl_v4.50.1_macos.tar.gz
c0f76101eeb0225230ebae6e980fc1161eb5b3727c8d1fd9ccfe3ac1169ba5b7  fleetctl_v4.50.1_macos.zip
4655c54ddae45ebc1b2b32a9568af775791964cf9ed6e2198a5d11ce466c23fd  fleetctl_v4.50.1_windows.tar.gz
ee3e0370955bb5c44e5a5370bdd268e5e948e18dbe86ae89e9f243f4a1668850  fleetctl_v4.50.1_windows.zip

fleet-v4.50.0

Endpoint Operations

• Added optional AI-generated policy descriptions and remediations.
• Added flag to enable deletion of old activities and associated data in cleanup cron job.
• Added support for escaping $ (with \) in gitops yaml files.
• Optimized policy_stats updates to not lock the policy_membership table.
• Optimized the hourly host_software count query to reduce individual query runtime.
• Updated built-in labels to support being applied via fleetctl apply.

Device Management (MDM)

• Added endpoints to upload, delete, and download software installers.
• Added ability to upload software from the UI.
• Added functionality to filter hosts by software installer status.
• Added support to the global activity feed for "Added software" and "Deleted software" actions.
• Added the POST /api/fleet/orbit/software_install/result endpoint for fleetd to send results for a software installation attempt.
• Added the GET /api/v1/fleet/hosts/{id}/software endpoint to list the installed software for the host.
• Added support for uploading and running zsh scripts on macOS and Linux hosts.
• Added the cron job to periodically remove unused software installers from the store.
• Added a new command fleetctl api to easily use fleetctl to hit any REST endpoint via the CLI.
• Added support to extract package name and version from software installers.
• Added the uninstalled but available software installers to the response payload of the "List software titles" endpoint.
• Updated MySQL host_operating_system insert statement to reduce table lock time.
• Updated software page to support new add software feature.
• Updated fleetctl to print team id as part of the fleetctl get teams command.
• Implemented an S3-based and local filesystem-based storage abstraction for software installers.

Vulnerability Management

• Added OVAL vulnerability scanning support on Ubuntu 22.10, 23.04, 23.10, and 24.04.

Bug fixes and improvements

• Fixed ingestion of private IPv6 address from agent.
• Fixed a bug where a singular software version in the Software table generated a tooltip unnecessarily.
• Fixed bug where updating user via /api/v1/fleet/users/:id endpoint sometimes did not update activity feed.
• Fixed bug where hosts query results were not cleared after transferring the host to other teams.
• Fixed a bug where the returned count field included hosts that the user did not have permission to see.
• Fixed issue where resolved_in_version was not returning if the version number differed by a 4th part.
• Fixed MySQL sort buffer overflow when fetching activities.
• Fixed a bug with users not being collected on Linux devices.
• Fixed typo in Powershell scripts for installing Windows software.
• Fixed an issue with software severity column display in Fleet UI.
• Fixed the icon on Software OS table to show a Linux icon for Linux operating systems.
• Fixed missing tooltips in disabled "Calendar events" manage automations dropdown option.
• Updated switched accordion text.
• Updated sort the host details page queries table case-insensitively.
• Added support for ExternalId in STS Assume Role APIs.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

d7102b8487a285583c69c54bf0bb7a40148eee6050e45ced1d0380bf83ae7aaa  fleet_v4.50.0_linux.tar.gz
33afcd4459db6fdcd977d24963acff551615be452d0fe8e1df8f862f058d6c48  fleetctl_v4.50.0_linux.tar.gz
91e7b6bf8831219775f176389103295d7065a7e6eb74c68c1093416be508ba14  fleetctl_v4.50.0_linux.zip
2c775985d8d4e0262216794d6924aea06a6f9ce9888c6918347e3df3886e8579  fleetctl_v4.50.0_macos.tar.gz
a25a28812d135f5a5dbc0a5a697cce19d94acd80913472d3dcc61178f9479e40  fleetctl_v4.50.0_macos.zip
f3f3cc358d84f4adca20bf1ba7a0a08d733d54cfd6a62276b7b465a58902bf99  fleetctl_v4.50.0_windows.tar.gz
0b860218a265d58208a132a83dcf04780635337c722caa05cbbd281b32749a91  fleetctl_v4.50.0_windows.zip

fleet-v4.49.4

Bug fixes

• Fixed an issue with SCEP renewals that could prevent commands to renew from being enqueued.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

7d49e7215481d044c66c2af30c063b4253e2086be6b20f6c99142ad3b6fb4fbe  fleet_v4.49.4_linux.tar.gz
8ddb38319fb34f580a0f3732fcf3f40b13c2b562fd676b189481e1cc0e361381  fleetctl_v4.49.4_linux.tar.gz
2e8d4bdf96c2294bb242e69f02fb44afcc5b710bb99d45047ee39d8d22f3f025  fleetctl_v4.49.4_linux.zip
4e021eda86591c657ec781b77472518ecbf51b4f2a1b63e2ab53ac7289e59428  fleetctl_v4.49.4_macos.tar.gz
f193e6dd7595ee4163e6299c5196dcee429046f0f99175f5058ddce9348057bf  fleetctl_v4.49.4_macos.zip
ba2b81d69ca915132c560a787698e84bf530236a234dd7163e391feb82858bb0  fleetctl_v4.49.4_windows.tar.gz
3ff86dceb685d7dc4b7c14553cc557a3a9eac36e0f0565d8a4c0576f6eee242c  fleetctl_v4.49.4_windows.zip

fleet-v4.49.3

Bug fixes

• Improved Windows OS version reporting.
• Fixed a bug where when updating a policy's 'platform' field, the aggregated policy stats were not cleared.
• UI: Improved URL and email validation.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

157f7d3b048d686f719fdbfe50ee4bc9676d6443211d13cdf0a49b108f1fd6eb  fleet_v4.49.3_linux.tar.gz
0ffa09304c7f2966f94a1acc5848c0adfa1cdf70525ec51f52722af4624572c3  fleetctl_v4.49.3_linux.tar.gz
4a5635751d0b33ed9473bee0c056269d17d33aa3c4a5019d9bb5947a61cb081a  fleetctl_v4.49.3_linux.zip
2f1f3b1b11933cc4f1396967bc588143aaa84313f08cf5aa1c4d009509d4d20d  fleetctl_v4.49.3_macos.tar.gz
7a64765efe8fe0d9f6a346e5f38aae30a3534f931e539890114aea698d8960cb  fleetctl_v4.49.3_macos.zip
7b89ba929cc86c0b945cef5168476ba82ac80d19c9c2111d816643eb453cb14d  fleetctl_v4.49.3_windows.tar.gz
b31716aa1e425286ea9372e2f72fa7e99e5df62dbe9ac54838d55a877a45abe1  fleetctl_v4.49.3_windows.zip

fleet-v4.49.2

Bug fixes

• Restored missing tooltips when hovering over the disabled "Calendar events" manage automations dropdown option.
• Fixed an issue on Windows hosts enrolled in MDM via Azure AD where the command to install Fleetd on the device was sent repeatedly, even though fleetd had been properly installed.
• Improved handling of different scenarios and edge cases when hosts turned on/off MDM.
• Fixed issue with uploading of some signed Apple mobileconfig profiles.
• Added an informative flash message when the user tries to save a query with invalid platform(s).
• Fixed bug where Linux host wipe would repeat if the host got re-enrolled.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Fleet's agent

The following version of Fleet's agent (fleetd) support the latest changes to Fleet:

1. orbit-v1.24.0
2. fleet-desktop-v1.24.0 (included with Orbit)
3. fleetd-chrome-v1.2.0

While newer versions of fleetd still function with older versions of the Fleet server (and vice versa), Fleet does not actively test these scenarios and some newer features won't be available.

Binary Checksum

SHA256

47076023e33117b13ed9e9ef7be415067600c180b460a1c73823560de005eb0d  fleet_v4.49.2_linux.tar.gz
e626c24d81970be447e683730e22ff4fccfbc720b6b9dff41bbd2f2419766380  fleetctl_v4.49.2_linux.tar.gz
cfa2c04ccd3a209c5a01db6de5b393dc2f1f038add46d45e957490c990a47c62  fleetctl_v4.49.2_linux.zip
1d7c4f0e2045835904ee9c994212605d67aef12c7899d8d203039100dc038db7  fleetctl_v4.49.2_macos.tar.gz
9dffd0600ac3634e75d99c867d2ca3791cd3a302513c42b4465c6300977d824c  fleetctl_v4.49.2_macos.zip
c38560c8536e3c4b0d7a072e373009b03aaf63e58114deef576808c82eb62596  fleetctl_v4.49.2_windows.tar.gz
635c9083e14310cee41e7f5caaa91249130280aca25911346a82e5edbbbeebf9  fleetctl_v4.49.2_windows.zip

fleet-v4.49.1

Bug fixes

• Fixed a bug that prevented the Fleet server from starting if Windows MDM was configured but Apple MDM wasn't.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Fleet's agent

The following version of Fleet's agent (fleetd) support the latest changes to Fleet:

1. orbit-v1.24.0
2. fleet-desktop-v1.24.0 (included with Orbit)
3. fleetd-chrome-v1.2.0

While newer versions of fleetd still function with older versions of the Fleet server (and vice versa), Fleet does not actively test these scenarios and some newer features won't be available.

Binary Checksum

SHA256

149ca8b9b2f375a73adf0ae4739f7ab0c83477202c5875ef7f3e2716a087d2ee  fleet_v4.49.1_linux.tar.gz
4625292d15399581f185b11ab34ba654c5b10f25bfe917132f7e1dcd19dddc94  fleetctl_v4.49.1_linux.tar.gz
5dc1924bef12ac4d6b3a428b16f92545e54a4f2a53ccf416f327cab35eed20b5  fleetctl_v4.49.1_linux.zip
1f88f58c10b8f936cf8058e5effdef6a88ece05393f3c3df2a1247c3d6e651c0  fleetctl_v4.49.1_macos.tar.gz
8f798e081ea1cb1e106552ab9a7241994d3c05dd18970f3e1ad8329d3738bd7e  fleetctl_v4.49.1_macos.zip
94253480a0f1e3be221902d60f94463420057f8d84f9136abd6b7448332a1fe6  fleetctl_v4.49.1_windows.tar.gz
e7aed3b9cea264001849c7bb2bbd56a8772816c065663c6e954890a72be441b7  fleetctl_v4.49.1_windows.zip

fleet-v4.49.0

Changes

Endpoint operations

• Added integration with Google Calendar for policy compliance events.
• Added new API endpoints to add/remove manual labels to/from a host.
• Updated the POST /api/v1/fleet/labels and PATCH /api/v1/fleet/labels/{id} endpoints to support creation and update of manual labels.
• Implemented changes in fleetctl gitops for batch processing queries and policies.
• Enabled setting host status webhook at the team level via REST API and fleetctl apply/gitops.

Device management (MDM)

• Added API functionality for creating DDM declarations, both individually and as a batch.
• Added creation or update of macOS DDM profile to enforce OS Updates settings whenever the settings are changed.
• Updated fleetctl run-script to include new --team and --script-name flags.
• Displayed disk encryption status in macOS as "verifying" while verifying the escrowed key.
• Added the enable_release_device_manually configuration setting for teams and no team, which controls the automatic release of a macOS DEP-enrolled device.

Vulnerability management

• Ignored Valve Corporation's Steam client's vulnerabilities on Windows and macOS due to retrieval challenges of the true version.
• Updated the GET fleet/os_versions and GET fleet/os_versions/[id] to restrict team users from accessing os versions on hosts from other teams.

Bug fixes and improvements

• Upgraded Golang version to 1.21.7.
• Added a minimum supported node version in the package.json.
• Made block_id mismatch errors more informative as 400s instead of 500s.
• Added Windows MDM support to the osquery-perf host-simulation command.
• Updated calendar events automations to not show error validation on enabling the feature.
• Migrated MDM-related endpoints to new paths while maintaining support for old endpoints indefinitely.
• Added a missing database index to the MDM Windows enrollments table to improve performance at scale.
• Added cross-platform check for duplicate MDM profiles names in batch set MDM profiles API.
• Fixed a bug where Microsoft Edge was not reporting vulnerabilities.
• Fixed an issue with the 20240327115617_CreateTableNanoDDMRequests database migration.
• Fixed the error message to indicate if a conflict on uploading an Apple profile was caused by the profile's name or its identifier.
• Fixed license checks to allow migration and restoring DEP devices during trial.
• Fixed a 500 error in MySQL 8 and when DB user has insufficient privileges for fleetctl debug db-locks and fleetctl debug db-innodb-status.
• Fixed a bug where values not derived from "actual" fleetd-chrome tables were not being displayed correctly.
• Fixed a bug where values were not being rendered in host-specific query reports.
• Fixed an issue with automatic release of the device after setup when a DDM profile is pending.
• Fixed UI issues: alignment bugs, padding around empty states, tooltip rendering, and incorrect rendering of the global Host status expiry settings page.
• Fixed a bug where null or excluded smtp_settings caused a UI 500 error.
• Fixed an issue where a bad request response from a 3rd party MDM solution would result in a 500 error in Fleet during MDM migration.
• Fixed a bug where updating policy name could result in multiple policies with the same name in a team.
• Fixed potential server panic when events are created with calendar integration, but then global calendar integration is disabled.
• Fixed fleetctl gitops dry-run validation issues when enabling calendar integration for the first time.
• Fixed a bug where all Windows MDM enrollments were detected as automatic.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Fleet's agent

The following version of Fleet's agent (fleetd) support the latest changes to Fleet:

1. orbit-v1.24.0
2. fleet-desktop-v1.24.0 (included with Orbit)
3. fleetd-chrome-v1.2.0

While newer versions of fleetd still function with older versions of the Fleet server (and vice versa), Fleet does not actively test these scenarios and some newer features won't be available.

Binary Checksum

SHA256

017439a15b04aafd322811f9812262e02f5f0bdf2aa252d46a06d7d118dd24f4  fleet_v4.49.0_linux.tar.gz
92f9a5bbfd116c4e20227af72b651b95a4190b346cb391762d0d50f5245d3355  fleetctl_v4.49.0_linux.tar.gz
54d84eaf8b6d8d6d0b865c39b39a8253c079d571e066d02b50c5d0dd50d1be74  fleetctl_v4.49.0_linux.zip
5b0b491a401d5031b75aaa1bfe8ab32d55befb03d7cb627de72409fce0b5a103  fleetctl_v4.49.0_macos.tar.gz
2fc0ed12ef82482e5f7afc1fc61e25f43139421f3a999d366ac1a403b33ece3c  fleetctl_v4.49.0_macos.zip
fb998e66174bc1cee14dff001bec28d4a43ad753885a95f25015d71db8ff39fb  fleetctl_v4.49.0_windows.tar.gz
b7678c523152e65ff7b537cafde3fd5ef076ea35e59c3c9148b44a7e6aee796d  fleetctl_v4.49.0_windows.zip

fleet-v4.48.3

Bug fixes

• Updated calendar webhook to retry if it receives response 429 "Too Many Requests". Webhook request will retry for 30 minutes with a 1 minute max delay between retries.
• Updated label endpoints and UI to prevent creating, updating, or deleting built-in labels.
• Fixed edge cases of team ID being lost in various flows.
• Fixed queries to correctly parse params for GET ...policies/count, GET ...teams/:id/policies/count, and GET ...vulnerabilities.
• Fixed 'GET ...labelsto return400when the non-supportedqueryurl param was included in the request. Previous behavior was to silently ignore that param and return200`.
• Casted windows exit codes to signed integers to match windows interpreter.
• Fixed a bug where some scripts got stuck in "upcoming" activity permanently.
• Fixed a bug where the translate API returned "forbidden" instead of "bad request" for an empty JSON body.
• Fixed an uncaught bug where "forbidden" would be returned for invalid payload type, which should also be a bad request.
• Fixed an issue where applying Windows MDM profiles using fleetctl apply would cause Fleet to overwrite the reserved profile used to manage Windows OS updates.
• Fixed a bug where we were not ignoreing leading and trailing whitespace when filtering Fleet entities by name.
• Fixed a bug where query retrieving bitlocker info from windows server wouldn't return.
• Fixed MDM migration starting when the device didn't have the right ADE JSON profile already assigned.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

917759e1b76b72229b5dc928b07af4a4d1f99b41111da42580aeb28ef2aefd3e  fleet_v4.48.3_linux.tar.gz
7d739b6a0667be4e84dff7ad01ae6db2369aac0bb8685d1eafb74a239cf3dde4  fleetctl_v4.48.3_linux.tar.gz
54ef26ef5847752d4acc732de7e294cb02766d89fc5eb30ead4de42cea331d79  fleetctl_v4.48.3_linux.zip
8a9035a8ebb7500049aacb7291c559d29a2db2024cfdac39fbdd6ff277dc2764  fleetctl_v4.48.3_macos.tar.gz
ddfb0598ad97db5738e82403d0e932d2df9591e7e2998f425b56360b75d56c71  fleetctl_v4.48.3_macos.zip
ff91f0d3a6ffcf273c455b50cd84d306e03e1ec0b650175bee3dde1480d1d113  fleetctl_v4.48.3_windows.tar.gz
4bf552065bb179e2da10c1e65463ccc68f451faae21468ebc91ec83308ebbe36  fleetctl_v4.48.3_windows.zip

fleet-v4.48.2

Bug fixes

• Fixed an issue with the 20240327115617_CreateTableNanoDDMRequests database migration where it could fail if the database did not default to the utf8mb4_unicode_ci collation.
• Fixed an issue with automatic release of the device after setup when a DDM profile is pending.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

a12f1b3315057920742569bb98f5031bfd200c52c6a808b327e5048a4f4991a4  fleet_v4.48.2_linux.tar.gz
ac1f545786b7014c5a247d8854f114611814ed5f63232a9098f549732fa8814d  fleetctl_v4.48.2_linux.tar.gz
c7bdf687d8aff0ab4ddb28fa9c633f416ae82b201f3c51898136c9a26631a7f1  fleetctl_v4.48.2_linux.zip
f7a9240b781a22fc573a4780da8dadaa761853d1247f21b9306083962e0197d0  fleetctl_v4.48.2_macos.tar.gz
069a56ca99f366c294536ade1d99de76e68aac6450bdb5f8b59258295bb1ff22  fleetctl_v4.48.2_macos.zip
b069bee7a2a19e296886fb26862e7432e0b2a0fbde72db072f369a0c0e990955  fleetctl_v4.48.2_windows.tar.gz
9f6fbc95920e22acace881c5702a9fda81104d98ff5f37ed2c343898d371c8b3  fleetctl_v4.48.2_windows.zip