5.23.1
Fixed 3
- Fix incorrect permissions on temporary file carve directories
- Fix documentation for process_open_handles table
- Fix subject2 and issuer2 columns for Windows certificates table
Security 3
- Fix heap buffer overflow in Windows processes table
- Fix heap buffer overflow in Windows authenticode table
- Fix use-after-free in Linux process_file_events implementation
From osquery
This is a bug and security fix release.
What's Changed
Fixes
- Fix heap buffer overflow in Windows
processestable by @seph in https://github.com/osquery/osquery/pull/8934 - Fix heap buffer overflow in Windows
authenticodetable by @seph in https://github.com/osquery/osquery/pull/8923 - Fix use-after-free in Linux
process_file_events implementationby @zwass in https://github.com/osquery/osquery/pull/8950 - Fix incorrect permissions on temporary file carve directories by @zwass in https://github.com/osquery/osquery/pull/8961
- Fix documentation for
process_open_handlestable by @seph in https://github.com/osquery/osquery/pull/8853 - Fix
subject2andissuer2columns for Windowscertificatestable by @getvictor in https://github.com/osquery/osquery/pull/8963
Full Changelog: https://github.com/osquery/osquery/compare/5.23.0...5.23.1