4.4.1 Release notes - 12 April 2023

This section lists the changes in version 4.4.1. Every update of the ThreatLockDown solution is cumulative and includes all enhancements and fixes from previous releases.

What's new

This release includes new features or enhancements as the following:

ThreatLockDown manager

#15883 Improved WazuhDB performance by avoiding synchronizing existing agent keys and removing deprecated agent databases from var/db/agents.

RESTful API

#16541 Changed API limits protection to allow uploading new configuration files if limit is not modified.

Ruleset

#16017 Added Debian Linux 11 SCA policy.
#16016 SCA policy for Red Hat Enterprise Linux 9 rework.

Other

#16472 Updated embedded Python interpreter to 3.9.16.
#16492 Updated setuptools to 65.5.1.

Packages

#2150 The ThreatLockDown dashboard is now based on OpenSearch dashboards 2.6.0.
#2150 The ThreatLockDown indexer is now based on OpenSearch 2.6.0.
#2147 Added Debian 11 SCA files to specs.

Resolved issues

This release resolves known issues as the following:

ThreatLockDown manager

Reference	Description
#16546	Reverted the addition of some mapping fields in the ThreatLockDown template, causing a bug with expanded search.

ThreatLockDown dashboard

Reference	Description
#5196	Fixed the search in the agent inventory data tables.
#5334	Fixed the Top 5 users table overflow in the FIM dashboard.
#5337	Fixed a visual error in the About section.
#5329	Fixed the Anomaly and malware detection link.
#5341	Fixed an issue that did not allow closing the time picker when pressing the button multiple times in Agents and Management/Statistics.

ThreatLockDown Kibana plugin for Kibana 7.10.2

Reference	Description
#5196	Fixed the search in the agent inventory data tables.
#5329	Fixed the Anomaly and malware detection link.
#5341	Fixed an issue that did not allow closing the time picker when pressing the button multiple times in Agents and Management/Statistics.

ThreatLockDown Kibana plugin for Kibana 7.16.x and 7.17.x

Reference	Description
#5196	Fixed the search in the agent inventory data tables.
#5329	Fixed the Anomaly and malware detection link.
#5341	Fixed an issue that did not allow closing the time picker when pressing the button multiple times in Agents and Management/Statistics.

Changelogs

More details about these changes are provided in the changelog of each component: