osquery 5.24.0

What's new in 5.24.0

What's Changed

• file table : lnk-related columns were not always computed on Windows by @thierryfranzetti in #8855
• Fix process_open_handles comments and spec by @directionless in #8853
• Remove cleanup_ec2_runners action by @zwass in #8856
• Upgrade Linux toolchain to 1.3.0 by @zwass in #8814
• Update Linux build docs for toolchain 1.3.0 by @zwass in #8868
• fix: clear errno before getmntent_r to avoid false error logs at EOF by @stefanamaerz in #8875
• Conditionally install init.d script and fix postrm cleanup by @a-cognet in #8857
• Remove older cipher suites from kTLSCiphers by @thom-bartlett in #8872
• feat: Add the column protector_types to the table bitlocker_info by @rchan-cjj in #8873
• Fix: Windows prefetch table does not report full executable path by @raaz252 in #8924
• Fix heap buffer overflow in Windows processes table (GHSA-4r78-6hg6-33gg) by @directionless in #8934
• Preserve object identifiers in Windows certificates table via subject2/issuer2 by @getvictor in #8963
• Switch authenticode getOriginalProgramName to CryptDecodeObjectEx by @directionless in #8923
• Fix Linux audit-based process_file_events cache cleanup by @zwass in #8950
• Ensure in-progress file carves are readable only by the user running osquery by @zwass in #8961
• bitlocker_info: read ProtectionStatus via GetProtectionStatus() method to avoid stale cached value by @rodchristiansen in #8931
• Update macOS CI configurations by @zwass in #8871
• Fix macOS build for Boost by @zwass in #8982
• Document macOS platform support status by @thebeaverliam in #8926
• Scan XDG Base Directory Firefox profiles in firefox_addons by @munzzyy in #8986
• Add .devin path to vscode_extensions for the Windsurf rebrand by @munzzyy in #8987
• Update GitHub Actions caching strategy by @zwass in #8866
• Update ccache configurations for CI and local development by @zwass in #8865
• Fix wrong end-iterator guard in vscode_extensions (one-past-end deref) by @munzzyy in #8990
• Add Microsoft Edge and Flatpak paths to chrome_extensions on Linux by @munzzyy in #8991
• docs: fix SECURITY.md vulnerability-reporting link (dead CONTRIBUTING anchor → GitHub advisory) by @kobihikri in #8994
• Add missing Chromium browser variants to chrome_extensions table by @FritzX6 in #8995
• Set default build options for macOS builds by @zwass in #8867
• Use pre-compiled headers to optimize clean build times by @zwass in #8843
• libs: Remove unused libexpat by @Smjert in #8997 …

Full release notes »