Fleet device management

vfleet-v4.85.2 scope: fleet Bugfix

This release fixes issues for SREs watching stability and regressions.

Published 1d Configuration Management

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

binary-authorization configuration-management device-management gitops ios linux

+11 more

macos mdm orchestration osquery patching powershell scripting security software-management telemetry vulnerability-management

Summary

AI summary

Fixed server out-of-memory crash caused by repeated transient errors from Apple's VPP API.

Changes in this release

Type	Severity	Summary	CVE
Bugfix	High	Fixes server out-of-memory crash caused by repeated Apple VPP API transient errors (HTTP 500, Retry‑After, error 9646). Fixes server out-of-memory crash caused by repeated Apple VPP API transient errors (HTTP 500, Retry‑After, error 9646). Source: llm_adapter@2026-06-03 Confidence: high	—

Full changelog

Bug fixes

Fixed a server out-of-memory crash that could occur when Apple's VPP (App and Book Management) API repeatedly returned transient errors (HTTP 500 with Retry-After, or error 9646) during VPP API operations (e.g., app installs, user registration, license seat releases).

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

78ebca78943efcd4e86a0096ab60520014261e2081446e9ef6452c50430d4eea  fleet_v4.85.2_linux.tar.gz
d86d60c67b45fa02de9408a5a8d8ed9770c95ceeb9e0709be17aa65ce9d06b0d  fleetctl_v4.85.2_linux_amd64.tar.gz
ba300343e351f9fe514b46147115836ecb61eaf479ef28e2918eb5d55dec8641  fleetctl_v4.85.2_linux_amd64.zip
8611adc78afb8556b14e745616355a870e85ea6d32e9d11e2e0ae9724841c689  fleetctl_v4.85.2_linux_arm64.tar.gz
642cd1a47ed8e13214785d0fc0c8892d8690adbca062ea3a7bab715983e7a20d  fleetctl_v4.85.2_linux_arm64.zip
2f84e5fe342117b7f1eb4a4349eeaf8a1b6ceaf7b5454230a9cc751c9c1c95bb  fleetctl_v4.85.2_macos.tar.gz
26b95926eb50904b5302f83c0a47760f486c08b1e8c9fb3703ba9a331fe9cd70  fleetctl_v4.85.2_macos.zip
a85f85b022c850a70372e7c1707f76c8f87f187758c5289ed570e26065c430b8  fleetctl_v4.85.2_windows_amd64.tar.gz
8473a426386690468bf4a689027eab588fdaeb73cb4b701fd4e5eb50a5e44a2e  fleetctl_v4.85.2_windows_amd64.zip
c155bb3393354c33da9c8b67ff5974fff690a11af1857d3d5e44008fd47df148  fleetctl_v4.85.2_windows_arm64.tar.gz
4b38085f4df9574f27a1a36f73a2d192f3faeee973face0c357c4b4dc94b7b2d  fleetctl_v4.85.2_windows_arm64.zip

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Fleet device management

Get notified when new releases ship.

About Fleet device management

Open device management

All releases →

Related context

Related tools

Earlier breaking changes

vfleet-v4.86.0 Required `--host` flag for `fleetctl get mdm-commands`; deprecated `GET /api/v1/fleet/commands` without a `host_identifier`.
vfleet-v4.85.0 Enforced fleet name uniqueness across UI, API, and GitOps paths, returning 409 on conflicts