4.0.4 Release notes¶
This section lists the changes in version 4.0.4. More details about these changes are provided in the changelog of each component:
Wazuh core¶
Added¶
API
Missing secure headers for API responses to fulfill the OWASP recommendations.
New option to disable uploading configurations containing remote commands.
New option to choose the SSL ciphers. Default value TLSv1.2.
Changed¶
API
Restore and update API configuration endpoints have been deprecated.
JWT token expiration time set to 15 minutes.
Fixed¶
API
Input validators for /manager/files and /cluster/{node_id}/files endpoints.
Framework
Bug with client.keys file handling when adding agents without authd.
Core
The purge of the Redhat vulnerabilities database before updating it.