Agent release notes

4.46.0 2023-09-14

• Added x86_64 and arm64 support for Debian 12 (bookworm)
• Added waf-data-log-all configuration option
• Added extend-content-types configuration option
• Improved CMDEXE detection
• Improved SQLI detection
• Improved XSS detection
• Updated base GeoIP data: September 2023
• Upgraded to Golang 1.20.8

4.45.0 2023-08-09

• Upgraded to Golang 1.20.7
• Improved CMDEXE detection
• Improved SQLI detection
• Improved XSS detection
• Updated base GeoIP data: August 2023

4.44.0 2023-07-12

• Added alpha support for API Schema Enforcement
• Improved stability of GraphQL inspection
• Improved detection when using examine-unknown-content-type feature
• Improved SQLI detection
• Improved release automation
• Upgraded to Golang 1.20.6
• Updated base GeoIP data: July 2023

4.43.0 2023-06-16

• Improved SQLI detection
• Added support for handling gRPC with gzip encoding
• Fixed v4.42.0 release issue where agent would incorrectly report its version number in some locations
• Updated base GeoIP data: June 2023

4.41.0 2023-05-11

• Improved SQLI detection
• Added x86_64 and arm64 support for Amazon Linux 2023
• Added x86_64 and arm64 support for Alpine Linux 3.18
• Upgraded to Golang 1.19.9
• Updated base GeoIP data: May 2023

4.40.0 2023-04-13

• Improved SQLI detection
• Improved RPM, DEB package upgrade scripts

4.39.1 2023-04-03

• Fixed resource leak when loading a new ruleset
• Fixed inspection regression causing internal errors for certain requests
• Improved SQLI detection
• Changed RPM package filenames to not specify el version in name

4.39.0 2023-03-15

• Improved detection of XSS
• Improved detection of SQLI
• Upgraded to Golang 1.19.7
• Updated base GeoIP data: March 2023

4.38.0 2023-02-15

• Improved detection of SQLI
• Improved detection of CMDEXE
• Updated base GeoIP data: February 2023

4.37.0 2023-01-12

• Upgraded to Golang 1.19.4
• Improved detection of SQLI
• Updated base GeoIP data: January 2023

4.36.1 2022-12-13

• Improved SQLI detection

4.36.0 2022-12-07

• Add support for Alpine 3.17
• Improved SQLI detection
• Updated base GeoIP data: December 2022

4.35.0 2022-11-09

• Added optional systemd based agent auto update for Debian, Ubuntu, and RHEL/CentOS
• Upgraded to Golang 1.19.3
• Improved GraphQL Parsing
• Improved CMDEXE detection
• Updated base GeoIP data: November 2022

4.34.0 2022-10-12

• Upgraded to Golang 1.19.2
• Improved SQLI detection
• Updated base geo IP data: October 2022

4.33.0 2022-09-14

• Added GA support for AWS Lambda
• Fixed HAProxy SPOA health check response
• Improved SQLI detection
• Improved CMDEXE detection
• Upgraded to Golang 1.18.6
• Updated base geo IP data: September 2022

4.32.1 2022-08-24

• Closed GraphQL related vulnerability
• Improved CMDEXE detection

4.32.0 2022-08-17

• Added x86_64 and arm64 support for Red Hat Enterprise Linux(RHEL9)/CentOS Stream 9
• Improved CODEINJECTION detection
• Improved CMDEXE detection
• Improved inspection of HTTP request bodies
• Updated base geo IP data: August 2022

4.31.0 2022-07-13

• Upgraded to Golang 1.18.4
• Improved SQLI detection
• Improved CMDEXE detection
• Updated base geo IP data: July 2022

4.30.0 2022-06-21

• Added Beta Support for AWS Lambda
• Added Fastly CDN endpoint for fetching updates, improving download performance
• Added x86_64 and arm64 support for Ubuntu 22.04
• Updated base geo IP data: June 2022
• Improved inspection for text/plain, CMDEXE, SQLI and Log4j

4.29.0 2022-05-11

• Updated base geo IP data: May 2022
• Improved inspection logic

4.28.0 2022-04-18

• Expanded GraphQL inspection to cover additional data types and anomalous behavior
• Improved XSS detection
• Enhanced inspection of multipart/form-data
• Updated base geo IP data: April 2022

4.27.0 2022-03-16

• Added arm64 Linux support and packages for Ubuntu, Debian, and CentOS
• Upgraded to Golang 1.17.8
• Updated base geo IP data: March 2022

4.26.0 2022-02-16

• Improved envoy v3 API compatibility
• Improved reporting of blocked WebSocket messages
• Improved reverse proxy WebSocket header forwarding
• Updated base geo IP data: February 2022

4.25.0 2022-01-19

• Improved reverse proxy Content-Type inspection
• Improved reverse proxy gRPC User-Agent forwarding
• Updated base geo IP data: January 2022

4.24.1 2021-12-10

• Improved Content-Type normalization when determining which types to inspect

4.24.0 2021-11-17

• Updated base geo IP data: November 2021

4.23.0 2021-10-21

• Fixed an inconsistency in determining the client IP when trust-proxy-headers is disabled and client-ip-header was set to the default of using the X-Forwarded-For proxy header
• Improved GraphQL query parsing
• Updated base geo IP data: October 2021

4.22.0 2021-09-16

• Added conn-max-per-host reverse proxy configuration option to allow limiting the number of upstream connections
• Improved generation of agent cache directory when non path-safe characters are present in the system hostname
• Improved handling of abstract socket namespaces in rpc-address
• Upgraded to Golang 1.17.1
• Updated base geo IP data: September 2021

4.21.1 2021-08-16

• Corrected deadlock issue
• Added Debian 11 (bullseye) support (released 2021-09-01)

4.21.0 2021-08-16

• Added external data information to SIGUSR1 diagnostic logs
• Added an experimental bypass-egress-proxy-for-upstreams configuration option to more easily exclude reverse proxy upstream traffic from an egress proxy
• Improved external data error handling and metrics
• Standardized release notes
• Updated base geo IP data: August 2021