fleet-v4.53.0

Fleet 4.53.0 (Jun 25, 2024)

Endpoint Operations

• Enabled fleetctl gitops to create teams with no enroll secrets, or clear enroll secrets for an existing team.
• Added support for upgrades to fleetd RPMs packages.
• Changed activities.created_at timestamp precision to microseconds.
• Added character validation to /api/fleet/orbit/device_token endpoint.
• Cleaned up count rendering fixing clientside flashing counts.
• Improved performance by removing unnecessary database query that listed host software during
  initial page load of the "My device" page.
• Made the rendering of empty text cell values consistent. Also render the '0' value as a number instead of the default value.
• Added a server setting to configure the query report max size.
• Fixed a bug where scrollbars were always present on modal backgrounds.
• Fixed bug in fleetctl preview caused by creating enroll secrets.

Device Management (MDM)

• Extended the timeout for the endpoint to upload a software installer.
• Improved the logic used by Fleet to detect if a host is currently MDM-managed.
• Added S3 config variables with a carves_ and software_installers prefix.
• Fixed bug where MDM migration failed when attempting to renew enrollment profiles on macOS Sonoma devices.
• Fixed issue where Windows-specific error message was displayed when failing to parse macOS configuration profiles.
• Fixed a bug where MDM migration failed when attempting to renew enrollment profiles on macOS Sonoma devices.
• Fixed a server panic when sending a request to /mdm/apple/mdm without certificate headers.
• Fixed issue where profiles larger than 65KB were being truncated when stored on MySQL 8.
• Fixed a bug that prevented unused script contents to be periodically cleaned up from the database.
• Fixed UI bug where error detail was overflowing the table in "OS settings" modal in "My device"
  page UI.
• Fixed a bug where the software installer exists in the database but the installer does not exist
  in the storage.
• Added a "soft-delete" approach when deleting a host so that its script execution details are still
  available for the activities feed.
• Fixed UI bug where Zoom icon was displayed for ZoomInfo.
• Fixed issue with backwards compatibility with the deprecated FLEET_S3_* environment variables.
• Fixed a code linter issue where a slice was created non-empty and appended-to, instead of empty with the required capacity.

Vulnerability Management

• Added vulnerabilities matching for applications that include an OS scope.
• Added vulnerability detection in NVD for custom ubuntu kernels.
• Removed duplicate os_versions results in /api/latest/fleet/vulnerabilities/:cve endpoint.
• Removed vscode false positive vulnerabilities.
• Clarified Fleet uses CVSS base score version 3.x.

Fleet's agent

The following version of Fleet's agent (fleetd) support the latest changes to Fleet:

1. orbit-v1.27.0
2. fleet-desktop-v1.27.0 (included with Orbit)
3. fleetd-chrome-v1.3.1

While newer versions of fleetd still function with older versions of the Fleet server (and vice versa), Fleet does not actively test these scenarios and some newer features won't be available.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

881f6c9e3c1e70dd076b850c146352b733957e1ef90a76c46595631f2cd5ff7c  fleet_v4.53.0_linux.tar.gz
710c8601b26a63482c9d8044bfb12d8dec9297aaa593942cb68185276dd304b6  fleetctl_v4.53.0_linux.tar.gz
3ba1b87c659e4c9ca752c50c7e9414ed46f982ce88d668e7d918a95af13315c9  fleetctl_v4.53.0_linux.zip
0fdf8c16ffc44fe0006ac5e07721c17a7995c0bcdb4309d3d66697a8f153b402  fleetctl_v4.53.0_macos.tar.gz
c4d9880b59c833dd69c78533381854a62dd100fc738c15780f512ec879018864  fleetctl_v4.53.0_macos.zip
df1ecdc0031475f4481f32911d5222f265ca016bc23a2ce5febe24339f473c02  fleetctl_v4.53.0_windows.tar.gz
6ebf021ec1ecf18a97b59fcf9c045aa245120b84a84a5319dbbc5ff4c34f42ee  fleetctl_v4.53.0_windows.zip