W
coverity-w38-4.14.9
Merge pull request #39313 from wazuh/fix/39170-macos-logged-in-users-…
W
Wazuh v4.10.5
Manager Fixed Hardened RSA decryption to reject malformed ciphertext blobs. (#36243) Improved cluster merged file parameter validation to prevent directory escape. (#38375) Improved tmp_file path validation in cluster DAPI. (#38376) Improved cluster non-merged file path validation during worker file processing. (#38377) Improved cluster worker file path validation. (#38378) Improved destination pa…
W
Wazuh v4.14.8 RC 1
What's Changed Bump 4.14.8 branch by @wazuhci in #37404 Multi SCA, Decoder and Rule fixes by @Johnng007 in #37434 Maintain crypto_method on keystore rebuild by @jpcerrone in #37524 Merge 4.14.7 into 4.14.8 by @vikman90 in #37679 Fix RBAC permission bypass in GET /security/actions and /security/resources by @vikman90 in #37678 Validate destination paths when uploading list, rule, and decoder files…
W
Wazuh v5.0.0 Beta 5
What's Changed fix(ci): correct S3 artifact run directory layout for 4.14.7 by @jr0me in #37377 Lower log level of transient cluster failures by @ignaciogalle12git in #37338 Fix github actions shell by @Miguevrgo in #37355 SCA Policy Adjustments by @Johnng007 in #37385 Bump 4.14.8 branch by @wazuhci in #37404 fix(ci): grant OIDC to Coverity S3 jobs by @jr0me in #37406 Remove unnused assignment for…
W
Wazuh v4.10.5 RC 1
What's Changed Bump version to 4.10.5 r41050 by @jotacarma90 in #36313 Add missing 4.8.2 entry to packages changelogs by @jotacarma90 in #36406 Stabilize indexer_connector and keystore unit tests for 4.10.5 by @jotacarma90 in #36734 Improve cluster merged file parameter validation by @vikman90 in #38375 Improve tmp_file path validation in cluster DAPI by @vikman90 in #38376 Cluster file processing…
W
coverity-w35-4.14.8
Merge pull request #38254 from wazuh/fix/38194-aws-it-concurrent-runs…
W
coverity-w34-4.14.8
Merge pull request #38460 from wazuh/enhancement/38139-sccache-and-gh…
W
backup/38320-pre-rebase4-20260813: fix: point DEPS_VERSION at the bundle carrying the OpenSSL curl
Building curl with --with-openssl only changes the product if the agent build actually compiles curl, and it does not: make deps pulls a precompiled archive and the CMake short-circuits on it, which is the path 5_builderpackage_agent-windows.yml uses. Against 99-37702 the winagent kept getting the Schannel curl built on 2026-05-19, so the flag was inert everywhere except a local EXTERNAL_SRC_ONLY=…
W
backup/38320-pre-rebase3-20260812: fix: keep trusting the Windows certificate store
Now that the Windows agent's curl is OpenSSL-backed it has no CA bundle at all - configure reports "ca cert bundle: no" - so every HTTPS request would fail verification. Schannel used to read the machine's ROOT and CA stores on its own; CURLSSLOPT_NATIVE_CA asks OpenSSL for the same ones through the Win32 crypto API. Applied where the agent speaks HTTPS on Windows: the https_client transport, and…
W
backup/38320-pre-rebase2-20260811: fix: keep trusting the Windows certificate store
Now that the Windows agent's curl is OpenSSL-backed it has no CA bundle at all - configure reports "ca cert bundle: no" - so every HTTPS request would fail verification. Schannel used to read the machine's ROOT and CA stores on its own; CURLSSLOPT_NATIVE_CA asks OpenSSL for the same ones through the Win32 crypto API. Applied where the agent speaks HTTPS on Windows: the https_client transport, and…
W
backup/38320-pre-rebase-20260811: fix: keep trusting the Windows certificate store
Now that the Windows agent's curl is OpenSSL-backed it has no CA bundle at all - configure reports "ca cert bundle: no" - so every HTTPS request would fail verification. Schannel used to read the machine's ROOT and CA stores on its own; CURLSSLOPT_NATIVE_CA asks OpenSSL for the same ones through the Win32 crypto API. Applied where the agent speaks HTTPS on Windows: the https_client transport, and…
W
backup/38163-pre-rebase-20260811: fix(https_client): format the module to the astyle rules
The RTR job for client-agent/https_client stops at its AStyle stage, so cppcheck is the only check that ever runs on the module. Two files disagree with ci/input/astyle.config: a continuation line in httpsClientFacade.cpp and, in statelessStream_test.cpp, another continuation plus a braced initializer whose brace has to sit on its own line under Allman. Output of build.py --sformat, so it is white…
W
coverity-w33-4.14.8
Merge pull request #38271 from wazuh/fix/38265-remove-stale-ec2-timin…
W
Wazuh v4.14.7
Manager Removed Removed deprecated wazuh-dbd daemon and database_output configuration. (#37035) Fixed Improved cluster payload buffer allocation strategy. (#37280) Improved cluster archive decompression limits. (#37119) Improved cluster worker file path validation. (#36998) Improved API authentication stability with bounded thread pools, regex timeouts and payload size limits. (#37034) Updated aio…
W
coverity-w31-4.14.8
Merge pull request #38059 from wazuh/fix/37526-error-1720-installing-…
W
Wazuh v5.0.0 Beta 4
What's Changed fix: persist engine startup state for CMSync route logging by @jam300 in #37356 Fix invalid MTU value reported for Windows network interfaces by @vikman90 in #37394 Restore modern.bpf.o checkfiles baseline reverted by 4.14.7 merge by @lchico in #37414 Suppress version-coordination WARNINGs on stop/unavailable module by @lchico in #37372 Clarify security policy for pre-release versio…
W
Wazuh v4.14.7-rc1
Manager Removed Removed deprecated wazuh-dbd daemon and database_output configuration. (#37035) Fixed Improved cluster payload buffer allocation strategy. (#37280) Improved cluster archive decompression limits. (#37119) Improved cluster worker file path validation. (#36998) Improved API authentication stability with bounded thread pools, regex timeouts and payload size limits. (#37034) Updated aio…
W
coverity-w29-4.14.7: Merge pull request #37545 from wazuh/fix/887-hp-ux-compilation-error
Compilation error in HP-UX arch
W
W
Wazuh v4.14.6
Manager Removed Removed unused SSL/TLS transport option from cluster. (#35648) Fixed Improved message decompression handling in remoted. (#35773) Improved agent name validation to reject names starting with dot. (#35833) Fixed segfault in vulnerability scanner module shutdown when disabled. (#36011) Fixed string buffer handling in version comparison function. (#36059) Improved cluster file synchro…
W
Wazuh v5.0.0 Beta 3
What's Changed Improve cluster file synchronization error handling by @TomasTurina in #36129 Update trojan signatures to avoid false positives on modern distros by @Miguevrgo in #35927 Improve cluster merged file parameter validation by @vikman90 in #36204 Create a backup of local_rules.xml during execution of IT analysisd tier 0 1 by @Antoniogm03 in #36201 Improve tmp_file path validation in clus…
W
coverity-w27-4.14.7: Merge pull request #37358 from wazuh/merge-4.14.6-into-4.14.7
Merge 4.14.6 into 4.14.7
W
Wazuh v4.14.6-rc2
Manager Removed Removed unused SSL/TLS transport option from cluster. (#35648) Fixed Improved message decompression handling in remoted. (#35773) Improved agent name validation to reject names starting with dot. (#35833) Fixed segfault in vulnerability scanner module shutdown when disabled. (#36011) Fixed string buffer handling in version comparison function. (#36059) Improved cluster file synchro…
W
coverity-w26-4.14.6-fix-check2
fix: additional fix.
W
coverity-w26-4.14.6
Merge pull request #37010 from wazuh/task/37009-gha-codebuild-runners…
W
Wazuh v4.14.6-rc1
Manager Removed Removed unused SSL/TLS transport option from cluster. (#35648) Fixed Improved message decompression handling in remoted. (#35773) Improved agent name validation to reject names starting with dot. (#35833) Fixed segfault in vulnerability scanner module shutdown when disabled. (#36011) Fixed string buffer handling in version comparison function. (#36059) Improved cluster file synchro…
W
Wazuh v5.0.0 Beta 2
What's Changed Coding style clang format by @jotacarma90 in #35051 Dovecot decoders don't match correctly by @hossam1522 in #35089 Fixing CIS 35675 and 35689 rules bug by @hossam1522 in #35088 Improve buffer handling in regex match processing by @vikman90 in #35106 Fix empty-message failure in Windows enrollment integration test by @hernanvalenzuela in #35078 Use daily marker for GuardDuty log col…
W
v4.10.4: Merge pull request #36211 from wazuh/fix/4.10.4-workflows
Backport 4.10.4: Update workflows names
W
coverity-w20-4.14.6: Merge pull request #36060 from wazuh/fix/4791-cluster-path-validation
Improve cluster file handling path validation in end_receiving_file
W
coverity-w19-4.14.6: Merge pull request #35866 from wazuh/fix/4713-api-log
Validate user name in API