Skip to content

Releases: fleetdm/fleet

fleet-v4.47.2

25 Mar 20:29
fd71574
Compare
Choose a tag to compare

Bug fixes

  • Fixed false negative vulnerabilities on macOS Homebrew Python packages.
  • Fixed policies to check "disable guest user".
  • Resolved the issue where Microsoft Edge was not reporting vulnerabilities.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

a930c85fbceaf955c9ae865893b20a7164b0f8020b0a61ecee56d1a1490cc285  fleet_v4.47.2_linux.tar.gz
03b2d5858587fcf2c5d6f7cdc4a4401318ee63066f936e295f9e94e8c66f0a86  fleetctl_v4.47.2_linux.tar.gz
00b377900f7213590db683ce75b4d3ae6053633a5938148afeefd607d0e88319  fleetctl_v4.47.2_linux.zip
a908c8a15c730ce061360bcbb351135484b0f6e0a1fd19847888818bdab73d86  fleetctl_v4.47.2_macos.tar.gz
9fc6416952495e1c0a13f2b1af1bf774e6dc5a90fcf0a50c942bba56709cb921  fleetctl_v4.47.2_macos.zip
9d0c7f0c88518e5d682763f7697796846ba0c4156371bfc8df612f38b33b77e3  fleetctl_v4.47.2_windows.tar.gz
3fb343762a0cdfe57ac0e85f3b5cb93dc5579c9d820d4a268ca81e809bea089c  fleetctl_v4.47.2_windows.zip

fleet-v4.47.1

19 Mar 15:08
8393c17
Compare
Choose a tag to compare

Bug fixes

  • Removed outdated tooltips from UI.
  • Fixed an issue with Windows MDM profile processing where <Add> commands were being skipped.
  • Team users no longer have access to OS versions on hosts from other teams for GET fleet/os_versions and GET fleet/os_versions/[id].
  • Reduced the number of 'Deadlock found' errors seen by the server when multiple hosts share the same UUID.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

1078cdf24990c103ac9a35c7081bfdf4ea6d0d62d6c9b1a5624a6ab9c6fcb07b  fleet_v4.47.1_linux.tar.gz
edb82e0716aa844b2d6d8ebfe4d4e08f41a0618fdd62b64623c8f590a39bc207  fleetctl_v4.47.1_linux.tar.gz
1f615397bacd86a29514e0cc9981af1e76ba261c6634367508a7fd88bc088724  fleetctl_v4.47.1_linux.zip
f263d762ee5788d2773d167ed15e6fc41e874f8682b6df9c8f8215c07c836275  fleetctl_v4.47.1_macos.tar.gz
ac6ea42ae4f70b4b8bc0f1c0f6e453447d97c0f13eb5e2e1621765b304e43cdb  fleetctl_v4.47.1_macos.zip
1b60f0c6902fde29c56d8ef1df0be1b1ba81320c08aeeae8aa34b2f3698c5cae  fleetctl_v4.47.1_windows.tar.gz
4524035a526a4871f7165635991d84d188b944dcd74971d3db44335d1e7565fd  fleetctl_v4.47.1_windows.zip

fleet-v4.47.0

12 Mar 23:06
88d4191
Compare
Choose a tag to compare

Changes

Endpoint operations

  • Implemented UI for team-specific host status webhooks.
  • Added Unicode and emoji support for policy and team names.
  • Allowed gitops user to access specific endpoints.
  • Enabled setting host status webhook at the team level via REST API and fleetctl.
  • GET /hosts API endpoint now populates policies with populate_policies=true query parameter.
  • Supported custom options set via CLI in the UI for host status webhook settings.
  • Surfaced VS code extensions in the software inventory.
  • Added a "No team" team option when running live queries from the UI.
  • Fixed tranferring hosts between teams across multiple pages.
  • Fixed policy deletion not updating policy count.
  • Fixed RuntimeError in fleetd-chrome and buggy filters for exporting hosts.

Device management (MDM)

  • Added wipe command to fleetctl and the POST /api/v1/fleet/hosts/:id/wipe Fleet Premium API endpoint.
  • Updated fleetctl run-script to include new flags and POST /scripts/run/sync API to receive new parameters.
  • Enabled usage of <Add> nodes in Windows MDM profiles.
  • Added backend functionality for the new way of storing script contents and updated the script character limit.
  • Updated the database schema to support the increase in script size.
  • Prevented running cleanup tasks and re-enqueuing commands for hosts on SCEP renewals.
  • Improved osquery queries for MDM detection.
  • Prevented redundant ADE profile assignment.
  • Updated fleetctl gitops, default MDM configs were set to default values when not defined.
  • Displayed disk encryption status in macOS as "verifying."
  • Allowed GitOps user to access MDM hosts and profiles endpoints.
  • Added UI for wiping a host with Fleet MDM.
  • Rolled up MDM solutions by name on the dashboard MDM card.
  • Added functionality to surface MDM devices where DEP assignment failed.
  • Fixed MDM profile installation error visibility.
  • Fixed Windows MDM profile command "Type" column display.
  • Fixed an issue with macOS ADE enrollments getting a "method not allowed" error.
  • Fixed Munki issues truncated tooltip bug.
  • Fixed a bug causing Windows hosts to appear when filtering by bootstrap package status.

Vulnerability management

  • Reduced vulnerability processing time by optimizing the vulnerability dictionary grouping.
  • Fixed an issue with mdm.enable_disk_encryption JSON null values causing issues.
  • Fixed vulnerability processing for non-ASCII software names.

Bug fixes and improvements

  • Upgraded Golang version to 1.21.7.
  • Updated page descriptions and fixed alignment of critical policy checkboxes.
  • Adjusted font size for tooltips in the settings page to follow design guidelines.
  • Fixed a bug where the "Done" button on the add hosts modal could be covered.
  • Fixed UI styling and alignment issues across various pages and modals.
  • Fixed the position of live query/policy host search icon and UI loading states.
  • Fixed issues with how errors were captured in Sentry for improved precision and coverage.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Fleet's agent

The following version of Fleet's agent (fleetd) support the latest changes to Fleet:

  1. orbit-v1.22.0
  2. fleet-desktop-v1.22.0 (included with Orbit)
  3. fleetd-chrome-v1.2.0

While newer versions of fleetd still function with older versions of the Fleet server (and vice versa), Fleet does not actively test these scenarios and some newer features won't be available.

Binary Checksum

SHA256

74d130cad8acef03e4faa3b5befcb1351db038fa47421d6a5d3010f583ab0e47  fleet_v4.47.0_linux.tar.gz
91aceb4ee71ac847521007ac796e718ad5bb6577c28b5c992e810e2f4e402046  fleetctl_v4.47.0_linux.tar.gz
9b08ea44ec7fa2954c60c82ad8c4d54cdf84f3ea336639445b2b8b1d978551e0  fleetctl_v4.47.0_linux.zip
3a137179e0095bf147e50fea7bec3ffb989f0b53d0bbe5bdab21dba5c173b414  fleetctl_v4.47.0_macos.tar.gz
d44e3a415d99266b1759d1e452d3cf115ae01acb822bdff471f19f90c2cf7426  fleetctl_v4.47.0_macos.zip
a4e6692b22ae9d6e230116f6f530c9775ab4d38743c460dc099f948e92cf075d  fleetctl_v4.47.0_windows.tar.gz
2699a142ddf7b9f8c30c65c37f4511f6dfb7a8114eab3d4ef026f04a3944fac1  fleetctl_v4.47.0_windows.zip

fleet-v4.46.2

04 Mar 21:57
Compare
Choose a tag to compare

Bug fixes

  • Fixed a bug where the pencil icons next to the edit query name and description fields were inconsistently spaced.
  • Fixed an issue with mdm.enable_disk_encryption where a null JSON value caused issues with MDM profiles in the PATCH /api/v1/fleet/config endpoint.
  • Displayed disk encryption status in macOS as "verifying" while Fleet verified if the escrowed key could be decrypted.
  • Fixed UI styling of loading state for automatic enrollment settings page.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

9456bf9d11fd8cee55619fc0a2ffe3443f9bfea51589af5c3b1282dfa50eb2a7  fleet_v4.46.2_linux.tar.gz
9506632b80989310f2d2cca6a35e036d21213776cfff6623c28f1c5d3b8588c7  fleetctl_v4.46.2_linux.tar.gz
0d34f8d272ad4e604c2798ad670d2a2b06d397cc38fa3d84382a16d014c43925  fleetctl_v4.46.2_linux.zip
221696c07ae07e3e5892f0538003c1ff036a5a1a89e6a2260fe435695214e3b0  fleetctl_v4.46.2_macos.tar.gz
d1a23b9adddc0a6dc7806cb8fb9db94adc7263f2712f379dafe654ed38fc6bec  fleetctl_v4.46.2_macos.zip
6e12d0f2f68b89133032436717f20a60bc8b9b0e116f2985e658dfb0f1e46066  fleetctl_v4.46.2_windows.tar.gz
8c38c4c17d8d8382d9fe1f98db556bca3cfeb3fef0359d9d7c01ab73477b4a48  fleetctl_v4.46.2_windows.zip

fleet-v4.46.1

29 Feb 22:23
Compare
Choose a tag to compare

Bug fixes

  • Fixed a bug in running queries via API.
    • Query campaign not clearing from Redis after timeout
  • Added logging when a Redis connection is blocked for a long time waiting for live query results.
  • Added support for the redis.conn_wait_timeout configuration setting for Redis standalone (it was previously only supported on Redis cluster).
  • Added Redis cleanup of inactive queries in a cron job, so temporary Redis failures to stop a live query doesn't leave such queries around for a long time.
  • Fixed orphaned live queries in Redis when client terminates connection
    • POST /api/latest/fleet/queries/{id}/run
    • GET /api/latest/fleet/queries/run
    • POST /api/latest/fleet/hosts/identifier/{identifier}/query
    • POST /api/latest/fleet/hosts/{id}/query
  • Added --server_frequent_cleanups_enabled (FLEET_SERVER_FREQUENT_CLEANUPS_ENABLED) flag to enable cron job to clean up stale data running every 15 minutes. Currently disabled by default.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

9c3262961652f77177675bb812a2e5037223505b780999dc4a57c656afe9e1e6  fleet_v4.46.1_linux.tar.gz
0f7e030eec92ad940dbdafa3806a0140d7589219d7de05301e8cf622e63683df  fleetctl_v4.46.1_linux.tar.gz
811febc6169517fbd42233cdc003fcaf660f1ee969fcea98261647274ae27f2a  fleetctl_v4.46.1_linux.zip
bf2893ace82d8952c00dfaefc48cfb09e2d58fc2cf3553aadfdc250f4b03ccbd  fleetctl_v4.46.1_macos.tar.gz
1bcbac2e969778df504fbe04dd5bfb1e337c141869efdca9c3974e8c97296e18  fleetctl_v4.46.1_macos.zip
a1d79ad7af2af9ffbcad20b0b5555f6a64d46eb19deada41d93e8becbd4866e3  fleetctl_v4.46.1_windows.tar.gz
4d95694b73357e0e304b68cdbb00bd65da3ffcaa7e2148141dbc4e29357b5a52  fleetctl_v4.46.1_windows.zip

fleet-v4.46.0

26 Feb 22:01
Compare
Choose a tag to compare

Changes

  • Fixed issues with how errors were captured in Sentry:
    - The stack trace is now more precise.
    - More error paths were captured in Sentry.
    - Note: Many more entries could be generated in Sentry compared to earlier Fleet versions. Sentry capacity should be planned accordingly.
  • User settings/profile page officially renamed to account page

  • UI Edit team more properly labeled as rename team

  • Fixed issue where the "Type" column was empty for Windows MDM profile commands when running fleetctl get mdm-commands and fleetctl get mdm-command-results.

  • Upgraded Golang version to 1.21.7

  • Updated UI's empty policy states

  • Automatically renewed macOS identity certificates for devices 30 days prior to their expiration.

  • Fixed bug where updating policy name could result in multiple policies with the same name in a team.

    • This bug was introduced in Fleet v4.44.1. Any duplicate policy names in the same team were renamed by adding a number to the end of the policy name.
  • Fixed an issue where some MDM profile installation errors would not be shown in Fleet.

  • Deleting a policy updated the policy count

  • Moved show query button to show in report page even with no results

  • Updated page description styling

  • Fixed UI loading state for software versions and OS for the initial request.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

81336615ec3491b5ef7770fefaaa4c955dc1bc123d79bb90b24a86989c95aa86  fleet_v4.46.0_linux.tar.gz
f6b2697a2c40fee8c1aeac7133b205797cf4d877500e96951199c06422a66e33  fleetctl_v4.46.0_linux.tar.gz
026fd2dd800e84250a19978fc4df8d1c2ff01b61cafdc0aeeb205efb9259fd73  fleetctl_v4.46.0_linux.zip
3212ec3f0ece0d3d4df29f816f2928ca98398c57f110f3e18dbbb656ff56f073  fleetctl_v4.46.0_macos.tar.gz
189d2b311c47271dd6c1bed36d8531cdf20e2f21aff699d1fe6d8e29020bde63  fleetctl_v4.46.0_macos.zip
e54a67a249e4e87a3ee0ab2c0cd5edf58cd52eee67b5f2df4d15fad38c1880b3  fleetctl_v4.46.0_windows.tar.gz
7b5de4f0a090f29dd3d63a3d773b792cb059e2b39497ff4d633fcabb2afbc297  fleetctl_v4.46.0_windows.zip

fleet-v4.45.1

23 Feb 22:51
Compare
Choose a tag to compare

Changes

  • Fixed a bug that caused macOS ADE enrollments gated behind SSO to get a "method not allowed" error.
  • Fixed a bug where the "Done" button on the add hosts modal for plain osquery could be covered.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

0bec3d7403f9a089a30003eb12d000cfac25e12e826055d87dd111f3e7bb8559  fleet_v4.45.1_linux.tar.gz
6b5f393778459329dbdc69151a3492bb3f18b798bc6e9a7707219923b2a0aab9  fleetctl_v4.45.1_linux.tar.gz
a8a9b5fd7a0cc44f6874c90b4170009a46a88adc92367fcafb2acd32958afc98  fleetctl_v4.45.1_linux.zip
1d6101c42021d29583532660865649b7e609b0862e3bd0b164ec794b2953a2f0  fleetctl_v4.45.1_macos.tar.gz
17419f33715f3074f54f71fdaf6e732a28da9961b7143de67e7d91dd6e885191  fleetctl_v4.45.1_macos.zip
e4997313fa56907981be64b670a5609df81c55ebeecc8fd26a8d7471c4f62317  fleetctl_v4.45.1_windows.tar.gz
80cd76926ec4cf711da761f81d469824ebfc21388b3e062fee509ea087f23a5a  fleetctl_v4.45.1_windows.zip

fleet-v4.45.0

21 Feb 18:10
7361f4d
Compare
Choose a tag to compare

Critical bug report

Fleet Premium users

There is a bug in Fleet v4.45.0 affecting the MacOS MDM automatic setup flow when user authentication is enabled.

If you are using Fleet's MDM for MacOS, please skip this release and upgrade to fleet-v4.45.1.

Changes

  • Endpoint operations:

    • Updated policy names to be unique per team.
    • Updated fleetd-chrome to use the latest wa-sqlite v0.9.11.
    • Updated "Add hosts" modal UI to dynamically include the --enable-scripts flag.
    • Added count of upcoming activities to host vitals UI.
    • Updated UI to include upcoming activity counts in host vitals.
    • Updated 405 response for POST requests on the root path to highlight misconfigured osquery instances.
  • Device management (MDM):

    • Added MDM command payloads to the response of GET /api/_version_/fleet/mdm/commandresults.
    • Changed several MDM-related endpoints to be platform-agnostic.
    • Added script capabilities to UI for Linux hosts.
    • Added UI for locking and unlocking hosts managed by Fleet MDM.
    • Added fleetctl mdm lock and fleetctl mdm unlock commands.
    • Added validation to reject script enqueue requests for hosts without fleetd.
    • Added the host_mdm_actions DB table for MDM lock and wipe functionality.
    • Updated backend MDM migration flow and added logging.
    • Updated UI text for disk encryption to reflect cross-platform functionality.
    • Renamed and updated fields in MDM configuration profiles for clarity.
    • Improved validation of Windows profiles to prevent delivery errors.
    • Improved Windows MDM profile error tooltip messages.
    • Fixed MDM unlock flow and updated lock/unlock functionality for Windows and Linux.
    • Fixed a bug that would cause OS Settings verification to fail with MySQL's only_full_group_by mode enabled.
  • Vulnerability management:

    • Windows OS Vulnerabilities now include a resolved_in_version in the /os_versions API response.
    • Fixed an issue where software from a Parallels VM would incorrectly appear as the host's software.
    • Implemented permission checks for software and software titles.
    • Fixed software title aggregation when triggering vulnerability scans.

Bug fixes and improvements

  • Updated text and style across the app for consistency and clarity.
  • Improved UI for the view disk encryption key, host details activity card, and "Add hosts" modal.
  • Addressed a bug where updating the search field caused unwanted loss of focus.
  • Corrected alignment bugs on empty table states for software details.
  • Updated URL query parameters to reset when switching tabs.
  • Fixed device page showing invalid date for the last restarted.
  • Fixed visual display issues with chevron right icons on Chrome.
  • Fixed Windows vulnerabilities without exploit/severity from crashing the software page.
  • Fixed issues with checkboxes in hidden modals and long enroll secrets overlapping action buttons.
  • Fixed a bug with built-in platform labels.
  • Fixed enroll secret error messaging showing secret in cleartext.
  • Fixed various UI bugs including disk encryption key input icons, alignment issues, and dropdown menus.
  • Fixed dropdown behavior in administrative settings and software title/version tables.
  • Fixed various UI and style bugs, including issues with long OS names causing table render issues.
  • Fixed a bug where checkboxes within a hidden modal were not correctly hidden.
  • Fixed vulnerable software dropdown from switching back to all teams.
  • Fixed wall_time to report in milliseconds for consistency with other query performance stats.
  • Fixed generating duplicate activities when locking or unlocking a host with scripts disabled.
  • Fixed how errors are reported to APM to avoid duplicates and improve stack trace accuracy.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

452ef95ff3475ce13c5533a13d6f3e084ec940091c710a75a335d2cdf47ce846  fleet_v4.45.0_linux.tar.gz
c8d5f96c3f1d9054427004f52d87d081f0bd05e4f104eaee857c10bab7400c2d  fleetctl_v4.45.0_linux.tar.gz
ef67236f50b717490ba2d02669aac749eab81b805285e5780cb691006f26f742  fleetctl_v4.45.0_linux.zip
950ecb779365ffc85a6eba98a8d8dd5dfad765692385a2f59bc93ddbf13a489a  fleetctl_v4.45.0_macos.tar.gz
0cfb5b4de55c4affbc5df2d949015300f554d0eca7bb925a79db14997d5c18e2  fleetctl_v4.45.0_macos.zip
035a602153cd10af0c370d9863749b006a2590a7c274bb1cb698016a98ccab3f  fleetctl_v4.45.0_windows.tar.gz
f0585309751d285f47ef51783422235b20248a430dc6daca9d13e4755fd02721  fleetctl_v4.45.0_windows.zip

fleet-v4.44.1

14 Feb 13:59
Compare
Choose a tag to compare

Changes

  • Fixed a bug where long enrollment secrets would overlap with the action buttons on top of them.
  • Fixed a bug that caused OS Settings to never be verified if the MySQL config of Fleet's database had 'only_full_group_by' mode enabled (enabled by default).
  • Ensured policy names are now unique per team, allowing different teams to have policies with the same name.
  • Fixed the visual display of chevron right icons on Chrome.
  • Renamed the 'mdm_windows_configuration_profiles' and 'mdm_apple_configuration_profiles' 'updated_at' field to 'uploaded_at' and removed the automatic setting of the value, setting it explicitly instead.
  • Fixed a small alignment bug in the setup flow.
  • Improved the validation of Windows profiles to prevent errors when delivering the profiles to the hosts. If you need to embed a nested XML structure (for example, for Wi-Fi profiles), you can either:
  • Escape the XML.
  • Use a wrapping <![CDATA[ ... ]]> element.
  • Fixed an issue where an inaccurate message was returned after running an asynchronous (queued) script.
  • Fixed URL query parameters to reset when switching tabs.
  • Fixed the vulnerable software dropdown from switching back to all teams.
  • Added fleetctl gitops command:
  • Synchronize Fleet configuration with the provided file. This command is intended to be used in a GitOps workflow.
  • Updated the response for 'GET /api/v1/fleet/hosts/:id/activities/upcoming' to include the count of all upcoming activities for the host.
  • Fixed an issue where software from a Parallels VM on a MacOS host would show up in Fleet as if it were the host's software.
  • Removed unnecessary nested database transactions in batch-setting of MDM profiles.
  • Added count of upcoming activities to host vitals UI.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

9147ff5871fe6cfb56f5ad85e69570ef5d904a20b4cf8135a59ea687e9efe7b0  fleet_v4.44.1_linux.tar.gz
321f8b3fa818470657f9bf25d73016bf13ca8833c32f3c2fd98e54f4ef5d00d2  fleetctl_v4.44.1_linux.tar.gz
2ce1530925d694ce72da0deda5dc3f7f8ee6b5fe2b3b3ade80973e5b72c35e96  fleetctl_v4.44.1_linux.zip
8a589ad4b3ec87077fb149d95a7c53d4a9422c2270b8d83a17c2ae0e2bcc816f  fleetctl_v4.44.1_macos.tar.gz
82d32160a4bc234ba3e1d34412e65ee7a74c904df4156a896f71c422a103abd6  fleetctl_v4.44.1_macos.zip
fc9a33902b9f6efc6ade3bd7cff30f476d6e7fcfa68d57d063c3ec03f8ac2bf8  fleetctl_v4.44.1_windows.tar.gz
3277b33dfc78aeaf0a039394592d87ecbdd8a1964a0cca388df58a5684f796c1  fleetctl_v4.44.1_windows.zip

fleet-v4.44.0

05 Feb 23:08
Compare
Choose a tag to compare

Changes

  • Endpoint operations:

    • Removed rate-limiting from /api/fleet/orbit/ping and /api/fleet/device/ping endpoints.
    • For Windows hosts, fleetd now uses Windows Credential Manager for enroll secret.
    • For macOS hosts, fleetd stores and retrieves enroll secret from macOS keychain for non-MDM flow.
    • Query reports feature now supports a custom pack_delimiter in agent settings.
    • Packaged fleetctl for macOS as a universal binary (native support for both amd64 and arm64 architectures).
    • Added new flow for fleetctl package --type=msi on macOS using arm64 processor.
    • Teams can now configure their own host expiry settings.
    • Added UI for host details activity card.
    • Added host_count_updated_at to policy API responses.
    • Added "Run script" action to host details page.
    • Created the "script ran" activity linked to its host.
    • Updated host details page and GET /api/v1/fleet/hosts/:id endpoint so that failing policies are listed first.
  • Device management (MDM):

    • Added new endpoints GET /api/v1/fleet/mdm/manual_enrollment_profile and scripts related endpoints (/hosts/:id/activity, /hosts/:id/activity/upcoming).
    • Added support for label-based MDM profiles reconciliation.
    • Improved MDM migration puppet module.
    • Added Windows scripts for MDM unenrollment and fleetd removal.
    • Added the profile's labels object to MDM profiles response payload.
    • Updated UI with ability to target MDM profiles by label.
    • Added ability to configure custom configuration_web_url values in DEP profile.
    • Fixed a bug causing MDM SSO to fail with certain configurations.
    • Fixed queries reporting inconsistent MDM enrollment status in Windows.
  • Vulnerability management:

    • Added support for detecting operating system vulnerabilities for macOS and Windows.
    • Corrected Windows OS false negative for multiple OS build remediations.
    • Fixed issue with incorrect resolved_in_version for vulnerabilities.

Bug fixes and improvements

  • Added "No report" text for query results not saved in Fleet.
  • Updated forms across the UI for consistent styling.
  • Improved UX for globally enabling/disabling SSO.
  • Added new consistent header styling across the app.
  • Clearer browser page titles and CTAs for Observer+.
  • Updated logging destination failure response to return a 4xx error instead of 500.
  • Addressed issues with query reports and host expiry settings.
  • Resolved platform compatibility checker issues with deprecated osquery tables.
  • Updated Go to version 1.21.6.
  • osquery flag validation updated for osquery 5.11.
  • Fixed validation and error handling for /api/fleet/orbit/device_token and other endpoints.
  • Fixed UI bugs in script functionality, side navigation content headers, and premium message alignment.
  • Fixed a bug in searching for hosts by email addresses.
  • Fixed issues with sticky errors in fleetd-chrome after querying privacy_preferences table.
  • Fixed a bug where Munki issues section was incorrectly displayed.
  • Fixed OS compatibility calculation for certain queries.
  • Fixed a bug where capital characters would not match labels containing them.
  • Fixed bug in manage hosts UI where changing the dropdown filter did not clear OS settings filter.
  • Fixed a bug in fleetctl where --context and --debug flags were not allowed after certain commands.
  • Fixed a bug where the UUID for Windows updates profiles was missing the "w" prefix.
  • Fixed a UI bug on the controls page in team targeting forms.
  • Fixed a bug where policy automations when saved were resetting automations on other pages.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

85f0b24d9e734c48dfe285aece6b7decb23eaa976590245adf67e43b1bc222d1  fleet_v4.44.0_linux.tar.gz
6de3528cac2c68c0f14a98474db820bb8291b49ab63727e52d58d29288af3fa7  fleetctl_v4.44.0_linux.tar.gz
0cbf3ed058d43997b5b034e7c60de64b16ef94a3578358eaf0b4b4a9e6777446  fleetctl_v4.44.0_linux.zip
3f3ab39136e22d9cf714ab609d182d079a5cf2c6acf36d26ec9d88b64b209509  fleetctl_v4.44.0_macos.tar.gz
69ea24257c033294c33d7bb036d7ea550a75d00c2313c6d4ef25126b67d7a574  fleetctl_v4.44.0_macos.zip
b3f41948b9d55320be0884cdf9634a30089348e31bcb8a6675f75094167c741e  fleetctl_v4.44.0_windows.tar.gz
40c8f1e14c24fe384c4ed1845716ea52b391c9a867838f0a817e60d9eff6f941  fleetctl_v4.44.0_windows.zip