4.7.1 Release notes - 20 December 2023

This section lists the changes in version 4.7.1. Every update of the Wazuh solution is cumulative and includes all enhancements and fixes from previous releases.

What's new

This release includes new features or enhancements as the following:


  • #20616 Improved WPK upgrade scripts to ensure safe execution and backup generation.


  • #20149 Upgraded external certifi library dependency version to 2023.07.22.

  • #20149 Upgraded external requests library dependency version to 2.31.0.

  • #18800 Upgraded embedded Python version to 3.9.18.


  • #2559 Updated Wazuh assistant help text for offline download option.

  • #2627 Updated error message for CentOS GPG key import failure.

  • #2624 Added macOS 14 Sonoma SCA files.

Resolved issues

This release resolves known issues as the following:





Fixed a thread lock bug that slowed down wazuh-db performance.


Fixed a bug in Vulnerability detector that skipped vulnerabilities for Windows 11 21H2.


The installer now updates the merged.mg file permissions on upgrade.


Fixed an insecure request warning in the Shuffle integration.


Fixed a bug that corrupted cluster logs when rotated.


Fixed a bug causing the Canonical feed parser to fail in Vulnerability Detector.





Fixed a bug that prevented the local IP address from appearing in the port inventory from macOS agents.


Fixed the default Logcollector settings on macOS to collect logs out-of-the-box.


Fixed a bug in the FIM decoder at wazuh-analysisd that ignored Windows Registry events from agents earlier than 4.6.0.


Fixed multiple bugs in the Syscollector decoder at wazuh-analysisd that did not sanitize the input data properly.


Added the pyarrow_hotfix dependency to fix the pyarrow CVE-2023-47248 vulnerability in the AWS integration.


Fixed a bug that allowed two simultaneous updates to occur through WPK.





Fixed inconsistencies in the behavior of the q parameter of some endpoints.


Fixed a bug in the q parameter of the GET /groups/{group_id}/agents endpoint.


Fixed bug in the regular expression used to reject non ASCII characters in some endpoints.

Wazuh dashboard




Fixed problem when using non latin characters in the username.


Fixed UI crash on retrieving log collection configuration for macos agent.


Fixed incorrect validation of the agent name on the Deploy new agent window.


Fixed missing columns in the agent table of Groups.





Fixed network.host fetching in Password tool. A commented line like #network.host: "XXX.XXX.XXX.XXX" is now ignored.


Fixed issue where Intel64 macos packages failed to install on ARM-based machines.


Fixed file permissions issue in merged.mg files when updating a manager using packages update.


More details about these changes are provided in the changelog of each component: