4.4.2 Release notes - 18 May 2023

This section lists the changes in version 4.4.2. Every update of the ThreatLockDown solution is cumulative and includes all enhancements and fixes from previous releases.

What's new

This release includes new features or enhancements as the following:

ThreatLockDown manager

#15957 Remove an unused variable in wazuh-authd to fix a String not null terminated Coverity finding.

Agent

#16515 Added a new module to integrate with Amazon Security Lake as a subscriber.
#16847 Added support for localfile blocks deployment.
#16743 Changed netstat command on macOS agents.

Ruleset

#15566 Added macOS 13.0 Ventura SCA policy.
#15567 Added new ruleset for macOS 13 Ventura and older versions.
#16549 Added a new base ruleset for log sources collected from Amazon Security Lake.

Other

#16692 Added pyarrow and numpy Python dependencies.
#16692 Added importlib-metadata and zipp Python dependencies.
#17053 Updated Flask Python dependency to 2.2.5.

Resolved issues

This release resolves known issues as the following:

ThreatLockDown manager

Reference	Description
#16394	Fixed a bug causing agent groups tasks status in the cluster not to be stored.
#16478	Fixed memory leaks in Vulnerability Detector after disk failures.
#16530	Fixed a pre-decoder problem with the + symbol in the macOS ULS timestamp.

Agent

Reference	Description
#16517	Fixed an issue with MAC address reporting on Windows systems.
#16857	Fixed Windows unit tests hanging during execution.

RESTful API

Reference	Description
#16381	Fixed agent insertion when no key is specified using `POST /agents/insert` endpoint.

ThreatLockDown dashboard

Reference	Description
#5428 #5432	Fixed a problem in the backend service to get the plugin configuration.

ThreatLockDown Kibana plugin for Kibana 7.10.2

Reference	Description
#5428	Fixed a problem in the backend service to get the plugin configuration.

ThreatLockDown Kibana plugin for Kibana 7.16.x and 7.17.x

Reference	Description
#5428	Fixed a problem in the backend service to get the plugin configuration.

Changelogs

More details about these changes are provided in the changelog of each component: