4.4.2 Release notes - 18 May 2023

This section lists the changes in version 4.4.2. Every update of the ThreatLockDown solution is cumulative and includes all enhancements and fixes from previous releases.

What's new

This release includes new features or enhancements as the following:

ThreatLockDown manager

  • #15957 Remove an unused variable in wazuh-authd to fix a String not null terminated Coverity finding.

Agent

  • #16515 Added a new module to integrate with Amazon Security Lake as a subscriber.

  • #16847 Added support for localfile blocks deployment.

  • #16743 Changed netstat command on macOS agents.

Ruleset

  • #15566 Added macOS 13.0 Ventura SCA policy.

  • #15567 Added new ruleset for macOS 13 Ventura and older versions.

  • #16549 Added a new base ruleset for log sources collected from Amazon Security Lake.

Other

  • #16692 Added pyarrow and numpy Python dependencies.

  • #16692 Added importlib-metadata and zipp Python dependencies.

  • #17053 Updated Flask Python dependency to 2.2.5.

Resolved issues

This release resolves known issues as the following:

ThreatLockDown manager

Reference

Description

#16394

Fixed a bug causing agent groups tasks status in the cluster not to be stored.

#16478

Fixed memory leaks in Vulnerability Detector after disk failures.

#16530

Fixed a pre-decoder problem with the + symbol in the macOS ULS timestamp.

Agent

Reference

Description

#16517

Fixed an issue with MAC address reporting on Windows systems.

#16857

Fixed Windows unit tests hanging during execution.

RESTful API

Reference

Description

#16381

Fixed agent insertion when no key is specified using POST /agents/insert endpoint.

ThreatLockDown dashboard

Reference

Description

#5428 #5432

Fixed a problem in the backend service to get the plugin configuration.

ThreatLockDown Kibana plugin for Kibana 7.10.2

Reference

Description

#5428

Fixed a problem in the backend service to get the plugin configuration.

ThreatLockDown Kibana plugin for Kibana 7.16.x and 7.17.x

Reference

Description

#5428

Fixed a problem in the backend service to get the plugin configuration.

Changelogs

More details about these changes are provided in the changelog of each component: