|
| 1 | +.. Copyright (C) 2015, Wazuh, Inc. |
| 2 | +
|
| 3 | +.. meta:: |
| 4 | + :description: Wazuh 4.14.1 has been released. Check out our release notes to discover the changes and additions of this release. |
| 5 | + |
| 6 | +4.14.1 Release notes - 12 November 2025 |
| 7 | +======================================= |
| 8 | + |
| 9 | +This section lists the changes in version 4.14.1. Every update of the Wazuh solution is cumulative and includes all enhancements and fixes from previous releases. |
| 10 | + |
| 11 | +What's new |
| 12 | +---------- |
| 13 | + |
| 14 | +This release includes new features or enhancements as the following: |
| 15 | + |
| 16 | +Wazuh manager |
| 17 | +^^^^^^^^^^^^^ |
| 18 | + |
| 19 | +- `#32009 <https://github.com/wazuh/wazuh/pull/32009>`__ Added IAM role support for VPC flow logs in the AWS wodle. |
| 20 | +- `#32514 <https://github.com/wazuh/wazuh/pull/32514>`__ Added support for static and temporary AWS credentials in the Amazon Security Lake subscriber. |
| 21 | +- `#32401 <https://github.com/wazuh/wazuh/pull/32401>`__ Optimized wazuh-db startup by executing agent schema creation in a single transaction. |
| 22 | +- `#32463 <https://github.com/wazuh/wazuh/pull/32463>`__ Improved vulnerabilities index upgrade with hash-based mapping validation, automatic safe reindex, and backup cleanup. |
| 23 | +- `#32069 <https://github.com/wazuh/wazuh/pull/32069>`__ Improved C++ logging mechanism to avoid unnecessary heap allocations. |
| 24 | +- `#32521 <https://github.com/wazuh/wazuh/pull/32521>`__ Improved IndexerConnector error handling and response parsing to provide structured logging of 4xx/5xx errors. |
| 25 | +- `#32525 <https://github.com/wazuh/wazuh/pull/32525>`__ Reduced default verbosity of wazuh-authd when handling invalid connections. |
| 26 | +- `#32697 <https://github.com/wazuh/wazuh/pull/32697>`__ Remoted now reads internal options at process startup. |
| 27 | + |
| 28 | +Wazuh agent |
| 29 | +^^^^^^^^^^^ |
| 30 | + |
| 31 | +- `#32746 <https://github.com/wazuh/wazuh/pull/32746>`__ Added support for Homebrew 2.0+ in IT Hygiene for macOS. |
| 32 | +- `#31080 <https://github.com/wazuh/wazuh/pull/31080>`__ Changed how the ``fim_check_ignore`` function works in negative regex cases. |
| 33 | +- `#31375 <https://github.com/wazuh/wazuh/pull/31375>`__ Changed how null values for hotfixes are handled in the Windows agent. |
| 34 | +- `#32874 <https://github.com/wazuh/wazuh/pull/32874>`__ Improved service shutdown procedure. |
| 35 | + |
| 36 | +Ruleset |
| 37 | +^^^^^^^ |
| 38 | + |
| 39 | +- `#31449 <https://github.com/wazuh/wazuh/pull/31449>`__ Reworked SCA policy for Microsoft Windows 10 Enterprise. |
| 40 | + |
| 41 | +Other |
| 42 | +^^^^^ |
| 43 | + |
| 44 | +- `#31422 <https://github.com/wazuh/wazuh/pull/31422>`__ Upgraded the ``starlette`` dependency to version 0.47.2. |
| 45 | +- `#32782 <https://github.com/wazuh/wazuh/pull/32782>`__ Upgraded the embedded Python interpreter to version 3.10.19. |
| 46 | +- `#32900 <https://github.com/wazuh/wazuh/pull/32900>`__ Updated ``curl`` dependency to version 8.12.1. |
| 47 | +- `#32294 <https://github.com/wazuh/wazuh/pull/32294>`__ Updated ``LUA`` to version 5.4.6. |
| 48 | +- `#32294 <https://github.com/wazuh/wazuh/pull/32294>`__ Updated ``libarchive`` to version 3.8.0. |
| 49 | + |
| 50 | +Wazuh dashboard |
| 51 | +^^^^^^^^^^^^^^^ |
| 52 | + |
| 53 | +- `#7804 <https://github.com/wazuh/wazuh-dashboard-plugins/pull/7804>`__ Upgraded the ``axios`` dependency to version 1.12.2. |
| 54 | +- `#7841 <https://github.com/wazuh/wazuh-dashboard-plugins/pull/7841>`__ Improved column order in **IT Hygiene** > **Network** > **Traffic** view to follow a logical source-to-destination flow. |
| 55 | +- `#7639 <https://github.com/wazuh/wazuh-dashboard-plugins/issues/7639>`__ Improved integrity monitoring settings terminology by clarifying file and registry labels, and updating component names for better user understanding. |
| 56 | + |
| 57 | +Resolved issues |
| 58 | +--------------- |
| 59 | + |
| 60 | +This release resolves known issues as the following: |
| 61 | + |
| 62 | +Wazuh manager |
| 63 | +^^^^^^^^^^^^^ |
| 64 | + |
| 65 | +- `#32045 <https://github.com/wazuh/wazuh/pull/32045>`__ Fixed manager vulnerability scan not triggering due to incorrect Syscollector event provider topic name. |
| 66 | +- `#32787 <https://github.com/wazuh/wazuh/pull/32787>`__ Fixed IndexerConnector abuse control to prevent data loss on failed syncs. |
| 67 | +- `#32107 <https://github.com/wazuh/wazuh/pull/32107>`__ Fixed user tag handling by adding ``user`` as an alias for the ``dstuser`` static field. |
| 68 | +- `#32057 <https://github.com/wazuh/wazuh/pull/32057>`__ Fixed JSON validation issues in Analysisd and SCA components. |
| 69 | +- `#32829 <https://github.com/wazuh/wazuh/pull/32829>`__ Fixed a bug in Vulnerability Scanner where the database offset was updated even in error cases. |
| 70 | + |
| 71 | +Wazuh agent |
| 72 | +^^^^^^^^^^^ |
| 73 | + |
| 74 | +- `#32383 <https://github.com/wazuh/wazuh/pull/32383>`__ Fixed indefinite waiting in FIM whodata health check. |
| 75 | +- `#31241 <https://github.com/wazuh/wazuh/pull/31241>`__ Fixed graceful shutdown in FIM. |
| 76 | +- `#32049 <https://github.com/wazuh/wazuh/pull/32049>`__ Verified the SHA256 of commands on every execution. |
| 77 | +- `#32528 <https://github.com/wazuh/wazuh/pull/32528>`__ Fixed duplicate ``<ca_store>`` configuration block during RPM package upgrades. |
| 78 | +- `#31144 <https://github.com/wazuh/wazuh/pull/31144>`__ Fixed a bug that prevented overwriting ``<registry_limit>`` or ``<file_limit>`` options from remote configuration. |
| 79 | +- `#29853 <https://github.com/wazuh/wazuh/pull/29853>`__ Fixed a bug in Logcollector that prevented following symlinks when resolving wildcarded files. |
| 80 | +- `#31222 <https://github.com/wazuh/wazuh/pull/31222>`__ Unified detection logs for wildcarded files in Logcollector. |
| 81 | +- `#32027 <https://github.com/wazuh/wazuh/pull/32027>`__ Fixed a bug in FIM that did not recognize Registry keys unless they were UTF-8. |
| 82 | +- `#32731 <https://github.com/wazuh/wazuh/pull/32731>`__ Fixed a bug in Logcollector that ignored all files with ``<age>`` filter on Windows. |
| 83 | +- `#32812 <https://github.com/wazuh/wazuh/pull/32812>`__ Reverted IT Hygiene package vendor format on Debian to include name and email again. |
| 84 | +- `#32785 <https://github.com/wazuh/wazuh/pull/32785>`__ Fixed a bug in IT Hygiene that reported duplicated Edge browser extensions. |
| 85 | +- `#32838 <https://github.com/wazuh/wazuh/pull/32838>`__ Fixed reload of the ``<labels>`` block via remote configuration. |
| 86 | +- `#32836 <https://github.com/wazuh/wazuh/pull/32836>`__ Fixed Windows installer to deploy SCA policies for Windows 2022 instead of Windows Server 2025. |
| 87 | + |
| 88 | +Ruleset |
| 89 | +^^^^^^^ |
| 90 | + |
| 91 | +- `#31349 <https://github.com/wazuh/wazuh/pull/31349>`__ Fixed bug in Windows SCA. |
| 92 | +- `#31102 <https://github.com/wazuh/wazuh/pull/31102>`__ Fixed mistaken alert. |
| 93 | +- `#31886 <https://github.com/wazuh/wazuh/pull/31886>`__ Fixed SCA checks in Oracle Linux 9. |
| 94 | +- `#32509 <https://github.com/wazuh/wazuh/pull/32509>`__ Fixed bugs in Windows Server 2016 SCA. |
| 95 | +- `#32523 <https://github.com/wazuh/wazuh/pull/32523>`__ Fixed bugs in PAM decoder. |
| 96 | +- `#32480 <https://github.com/wazuh/wazuh/pull/32480>`__ Fixed macOS Sequoia SCA scans that produced errors. |
| 97 | +- `#32802 <https://github.com/wazuh/wazuh/pull/32802>`__ Fixed Windows Server 2016 SCA policy configuration issue. |
| 98 | + |
| 99 | +Wazuh dashboard |
| 100 | +^^^^^^^^^^^^^^^ |
| 101 | + |
| 102 | +- `#7689 <https://github.com/wazuh/wazuh-dashboard-plugins/pull/7689>`__ Fixed navigation issue in the MITRE ATT&CK framework details flyout. |
| 103 | +- `#7710 <https://github.com/wazuh/wazuh-dashboard-plugins/issues/7710>`__ Fixed event count evolution visualization in the Endpoint Details view to use the server API context filter. |
| 104 | +- `#7783 <https://github.com/wazuh/wazuh-dashboard-plugins/pull/7783>`__ Fixed sorting by agent count in **Top 5 Groups** visualization in **Endpoints** summary. |
| 105 | +- `#7803 <https://github.com/wazuh/wazuh-dashboard-plugins/pull/7803>`__ Fixed System Inventory displaying incorrect agent data after switching agents in the Endpoint Details view. |
| 106 | +- `#7838 <https://github.com/wazuh/wazuh-dashboard-plugins/pull/7838>`__ Replaced the Microsoft Graph API module icon with the official Microsoft Graph API logo for better specificity. |
| 107 | + |
| 108 | +Changelogs |
| 109 | +---------- |
| 110 | + |
| 111 | +The repository changelogs provide more details about the changes. |
| 112 | + |
| 113 | +Product repositories |
| 114 | +^^^^^^^^^^^^^^^^^^^^ |
| 115 | + |
| 116 | +- `wazuh/wazuh <https://github.com/wazuh/wazuh/blob/v4.14.1/CHANGELOG.md>`__ |
| 117 | +- `wazuh/wazuh-dashboard-plugins <https://github.com/wazuh/wazuh-dashboard-plugins/blob/v4.14.1/CHANGELOG.md>`__ |
| 118 | + |
| 119 | +Auxiliary repositories |
| 120 | +^^^^^^^^^^^^^^^^^^^^^^^ |
| 121 | + |
| 122 | +- `wazuh/wazuh-ansible <https://github.com/wazuh/wazuh-ansible/blob/v4.14.1/CHANGELOG.md>`__ |
| 123 | +- `wazuh/wazuh-kubernetes <https://github.com/wazuh/wazuh-kubernetes/blob/v4.14.1/CHANGELOG.md>`__ |
| 124 | +- `wazuh/wazuh-puppet <https://github.com/wazuh/wazuh-puppet/blob/v4.14.1/CHANGELOG.md>`__ |
| 125 | +- `wazuh/wazuh-docker <https://github.com/wazuh/wazuh-docker/blob/v4.14.1/CHANGELOG.md>`__ |
| 126 | + |
| 127 | +- `wazuh/qa-integration-framework <https://github.com/wazuh/qa-integration-framework/blob/v4.14.1/CHANGELOG.md>`__ |
| 128 | + |
| 129 | +- `wazuh/wazuh-documentation <https://github.com/wazuh/wazuh-documentation/blob/v4.14.1/CHANGELOG.md>`__ |
0 commit comments