wazuh releases

Manager

Fixed

• Fixed DAPI callable resolution to restrict invocations to exposed resources only. (#34889)
• Fixed uncontrolled memory allocation in cluster caused by crafted packet length. (#35173) (#35412)
• Fixed rate limit bypass for the /events endpoint. (#35077)
• Fixed buffer overflow in analysisd regex match processing. (#35106)
• Fixed path traversal in authd via agent group name validation. (#35230)
• Fixed size_t underflow in remoted ReadSecMSG causing potential heap overflow. (#35193)
• Fixed RBAC bypass in DAPI allowing privilege escalation. (#35307)
• Fixed analysisd plugin decoder argument alignment. (#35176)

Agent

Fixed

• Fixed rootcheck false positive for /dev/.blkid.tab. (#34734)
• Fixed ORDER_REVERSAL deadlocks in FIM. (#34735)
• Fixed Roundcube decoder regex to prevent srcip truncation in "Failed login ... in session" logs. (#34793)
• Fixed macOS Ventura SCA policy incorrectly passing pmset checks. (#34693)
• Fixed Office365 integration pagination by trimming HTTP header values. (#34673)
• Fixed FIM false positives caused by double readdir check. (#34880)
• Fixed audit log cache overflow for events with many records in logcollector. (#35285)
• Fixed daily marker for GuardDuty log collector. (#35110)
• Fixed rootcheck not generating findings. (#35297)
• Fixed heap buffer overflow in syscheck Registry Wildcard Expansion. (#35287)

Changed

• Changed RHEL init script with SUSE variant on SLES 11. (#34563)
• Changed service check from WMI to sc.exe. (#34543)
• Changed windows syscollector to include command arguments. (#34727)

RESTful API

Fixed

• Fixed allow_higher_versions validation in API upload_configuration. (#34905)
• Fixed nested JSON depth limit in API request processing. (#35224)
• Fixed upload size limit config mismatch. (#35141)

Ruleset

Fixed

• Fixed bug in CIS SCA checks 35675 and 35689 for Ubuntu 24.04. (#35088)
• Fixed Dovecot decoders to correctly extract rip and lip fields. (#35089)

Other

Changed

• Updated dependencies cryptography to 46.0.5, Werkzeug to 3.1.6, pip to 26.0.1 and wheel to 0.46.3. (#34907)
• Updated embedded Python to 3.10.20 and dependencies pyjwt, pyasn1. (#35135)
• Updated dependencies cryptography, requests. (#35331)