4.3.7 Release notes - 24 August 2022
This section lists the changes in version 4.3.7. Every update of the Wazuh solution is cumulative and includes all enhancements and fixes from previous releases.
What's new
This release includes new features or enhancements as the following:
Wazuh manager
#14540 A cluster command to obtain custom ruleset files and their hash is added.
Wazuh agent
#13958 The logs of the Office365 integration module are improved.
RESTful API
Ruleset
#13806 An SCA Policy for CIS Microsoft Windows 11 Enterprise Benchmark v1.0.0 is added.
#13879 The SCA Policy for CIS Microsoft Windows 10 Enterprise is updated with the benchmark v1.12.0 for the release 21H2.
#13843 An SCA policy for Red Hat Enterprise Linux 9 (RHEL9) is added.
#13899 An SCA policy for CIS Microsoft Windows Server 2022 Benchmark 1.0.0 is added.
Wazuh dashboard
#4350 The deprecated
manager_host
field in Wazuh API responses about agent information is no longer used.
Wazuh Kibana plugin for Kibana 7.10.2
#4350 The deprecated
manager_host
field in Wazuh API responses about agent information is no longer used.
Wazuh Kibana plugin for Kibana 7.16.x and 7.17.x
#4350 The deprecated
manager_host
field in Wazuh API responses about agent information is no longer used.
Wazuh Splunk app
Wazuh Splunk app is now compatible with Wazuh 4.3.7.
Packages
#1737 passwords-tool tests are added with the files
passwords-tool.yml
andtests-stack.sh
.#1742 A port status check is added to the Wazuh installation assistant to avoid the installation ending up in failure if one of the Wazuh default ports is being used.
#1754 Skipping the OS check of the
wazuh-install.sh
script when downloading files is added.#1629 The
-tmp
option is added to the thewazuh-certs-tool
script in order to specify thetmp
directory.#1685 The RHEL 9 SCA files are added to the specs.
#1734 All Zypper references are removed from the unattended and test directories.
#1753 TLS versions lower than v1.2 are disabled to avoid using weak cipher suites.
#1641 Removed the revision variables from the Wazuh installation assistant.
#1750 The OVA generation scripts are modified to adapt them to the newest changes in
wazuh-passwords-tool.sh
.#1769 The path when copying Fedora SCA files is fixed with the new versions.
RPM revision 2
v4.3.7-2 A bug related to the installation of the SCA policy in RHEL8 is fixed. This error caused the RHEL 9 SCA policy to be installed in RHEL 8 machines instead of the correct one.
Resolved issues
This release resolves known issues as the following:
Wazuh manager
Reference |
Description |
---|---|
A bug in Analysisd that may make it crash when decoding regexes with more than 14 subpatterns is fixed. |
|
The risk of a crash when Vulnerability Detector parses OVAL feeds is fixed. |
|
A busy-looping in |
|
A segmentation fault in |
Wazuh agent
Reference |
Description |
---|---|
A code defect in the GitHub integration module reported by Coverity is fixed. |
|
An undefined behavior in the agent unit tests is fixed. |
Ruleset
Reference |
Description |
---|---|
A bug found in the regular expression used for check 5.1.1 (ID 19137) of the Ubuntu 20 SCA policy file that caused false positives is fixed. |
|
An error when a Wazuh agent runs an AWS Amazon Linux SCA policy is fixed. |
|
Amazon Linux 2 SCA policy is modified to resolve rules and conditions on control 1.5.2. |
|
Missing SCA files are added to the Wazuh manager installation. |
|
OS detection in Ubuntu 20.04 LTS SCA policy is now fixed. |
Wazuh dashboard
Reference |
Description |
---|---|
Link to web documentation and some grammatical errors in the file |
|
The |
|
An error during the generation of a group's report, if the request to the Wazuh API fails, is fixed. |
|
A problem with the group's report, when the group has no agents, is fixed. |
|
A path in the logo customization section is fixed. |
|
A TypeError in a resource that fails in Chrome and Firefox browsers is fixed. |
|
An error creating PDF reports when using Kibana with X-Pack without authentication context is fixed. |
|
Module settings not persisting between updates is fixed. |
|
A search bar error on the SCA Inventory table is fixed. |
|
A routing loop when reinstalling the Wazuh indexer is fixed. |
Wazuh Kibana plugin for Kibana 7.10.2
Reference |
Description |
---|---|
Link to web documentation and some grammatical errors in the file |
|
The |
|
An error during the generation of a group's report, if the request to the Wazuh API fails, is fixed. |
|
A problem with the group's report, when the group has no agents, is fixed. |
|
A path in the logo customization section is fixed. |
|
A TypeError in a resource that fails in Chrome and Firefox browsers is fixed. |
|
An error creating PDF reports when using Kibana with X-Pack without authentication context is fixed. |
|
The persistence of the plugin registry file between updates is fixed. |
|
A search bar error on the SCA Inventory table is fixed. |
|
A routing loop when reinstalling the Wazuh indexer is fixed. |
Wazuh Kibana plugin for Kibana 7.16.x and 7.17.x
Reference |
Description |
---|---|
Link to web documentation and some grammatical errors in the file |
|
The |
|
An error during the generation of a group's report, if the request to the Wazuh API fails, is fixed. |
|
A problem with the group's report, when the group has no agents, is fixed. |
|
A path in the logo customization section is fixed. |
|
A TypeError in a resource that fails in Chrome and Firefox browsers is fixed. |
|
An error creating PDF reports when using Kibana with X-Pack without authentication context is fixed. |
|
Module settings not persisting between updates is fixed. |
|
A search bar error on the SCA Inventory table is fixed. |
|
A routing loop when reinstalling the Wazuh indexer is fixed. |
Wazuh Splunk app
Reference |
Description |
---|---|
The API console suggestions were not working in version 4.3.6 and are now fixed. |
Packages
Reference |
Description |
---|---|
The Wazuh GPG key is now removed when uninstalling all the Wazuh components using the installation assistant. |
|
Handling of errors that might happen when downloading Filebeat files is added. |
|
A check of the indentation of the |
|
An error when installing every component of a distributed installation in the same host using the 127.0.0.1 IP address is fixed. |
|
The code of the Wazuh installation assistant has been improved. |
Changelogs
More details about these changes are provided in the changelog of each component: