Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CHANGELOG 5.1.0 #7406

Merged
merged 2 commits into from
Dec 6, 2021
Merged

CHANGELOG 5.1.0 #7406

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
22311eb
CHANGELOG 5.1.0
directionless Dec 4, 2021
b650be2
Update CHANGELOG.md
theopolis Dec 6, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
59 changes: 59 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,64 @@
# osquery Changelog

<a name="5.1.0"></a>
## [5.1.0](https://github.com/osquery/osquery/releases/tag/5.1.0)

[Git Commits](https://github.com/osquery/osquery/compare/5.0.1...5.1.0)

Representing commits from 20 contributors! Thank you all.

### New Features

- Allow custom cpu limit duration for the watchdog ([#7348](https://github.com/osquery/osquery/pull/7348))
- Support custom endpoints for AWS Kinesis and Firehose. ([#7317](https://github.com/osquery/osquery/pull/7317))

### Table Changes

- Add `docker_container_envs` table for access to docker container environment ([#7313](https://github.com/osquery/osquery/pull/7313))
- `curl` table now returns peer certificates even if the TLS handshake does not complete ([#7349](https://github.com/osquery/osquery/pull/7349))

### Under the Hood improvements

- Allow tests and SDK to reset dispatcher state ([#7372](https://github.com/osquery/osquery/pull/7372))
- Avoid string copies when looping through cron search dirs ([#7331](https://github.com/osquery/osquery/pull/7331))
- Respect `read_max` flag when hashing using ssdeep ([#7367](https://github.com/osquery/osquery/pull/7367))

### Bug Fixes

- Detect when an extension has not started correctly on Windows ([#7355](https://github.com/osquery/osquery/pull/7355))
- Fix crash #7353 when osquery captures kill syscall when not subscribed to them ([#7354](https://github.com/osquery/osquery/pull/7354))
- Fix crash in AuditdNetlinkReader::configureAuditService when audit_add_rule_data returns an error ([#7337](https://github.com/osquery/osquery/pull/7337))
- Fix crash when `windows_security_products` errors out ([#7401](https://github.com/osquery/osquery/pull/7401))
- Fix for #7394 where cleanup of some event tables never occures ([#7395](https://github.com/osquery/osquery/pull/7395))
- Improve BPF publisher reliability ([#7302](https://github.com/osquery/osquery/pull/7302))
- Lower log level of "executing distributed query" ([#7386](https://github.com/osquery/osquery/pull/7386))
- Reduce excessive log messages from `authorized_keys` table implementation ([#7318](https://github.com/osquery/osquery/pull/7318))

### Documentation

- Add 5.0.1 CHANGELOG ([#7284](https://github.com/osquery/osquery/pull/7284))
- Fix typo in Everything in SQL docs ([#7338](https://github.com/osquery/osquery/pull/7338))
- Fix typo in SQL docs ([#7376](https://github.com/osquery/osquery/pull/7376))
- Update GitHub issue templates ([#7361](https://github.com/osquery/osquery/pull/7361), [#7396](https://github.com/osquery/osquery/pull/7396))
- Update installation guide to use newer macOS paths ([#7311](https://github.com/osquery/osquery/pull/7311))
- Update macOS ESF documentation ([#7303](https://github.com/osquery/osquery/pull/7303))

### Packs

- Add Forcepoint Endpoint Chrome Extension detection to packs ([#7346](https://github.com/osquery/osquery/pull/7346))
- Add `beurk` rootkit detection to packs ([#7345](https://github.com/osquery/osquery/pull/7345))

### Build

- Allow tests to reset the restarting state ([#7373](https://github.com/osquery/osquery/pull/7373))
- Build librpm with ndb support ([#7294](https://github.com/osquery/osquery/pull/7294))
- Customizable installation logic ([#7315](https://github.com/osquery/osquery/pull/7315))
- Fix ASL test on macOS 11 and later ([#7320](https://github.com/osquery/osquery/pull/7320))
- Restore query packs in Windows packaging ([#7388](https://github.com/osquery/osquery/pull/7388))
- Skip deprecated ASL test when targeting macOS 10.13+ SDK ([#7358](https://github.com/osquery/osquery/pull/7358))
- Update packaging commit to fix Linux symlinks ([#7404](https://github.com/osquery/osquery/pull/7404))
- Update the CI Linux Docker image ([#7332](https://github.com/osquery/osquery/pull/7332))

<a name="5.0.1"></a>
## [5.0.1](https://github.com/osquery/osquery/releases/tag/5.0.1)

Expand Down