1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by directionless

<https://github.com/osquery/osquery/commit/ecb354f2ac14bbd798b487a5144cb996bebe8076|ecb354f2>

- tests: fix race conditions in test_json_pretty_output and test_daemon_with_watchdog (#9240) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by mike-myers-aapl

<https://github.com/osquery/osquery/commit/f5518116d36ad402edcda983401c5b388dc9c4e6|f5518116>

- stop re-parsing buffered history lines in genShellHistoryFromFile (#9241) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by michael-myers

<https://github.com/osquery/osquery/commit/99ea20493a2614eab939cbc02ebfaa114a3caecb|99ea2049>

- Fail clearly when valgrind is missing for --leaks on Linux (#9237) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/981c4d3831aa8a27d21052e96f50e243d8f65ede|981c4d38>

- mdfind: Stop queries before releasing them to avoid leaking mds ports (#9248) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by directionless

<https://github.com/osquery/osquery/commit/e9cb4be410d3244f9e146f360aa50496588f5d83|e9cb4be4>

- check saddr length before reading IPv4/IPv6 fields in parseSockAddr (#9253) osquery/osquery

Hi All! I'm pleased to announce Osquery 5.24.1 has been promoted to stable. Enjoy!

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by mike-myers-aapl

<https://github.com/osquery/osquery/commit/711974b7dcddb83af0bbbb972fa930ed02046adc|711974b7>

- walk the whole environ block in genProcessEnvironment (#9245) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by directionless

<https://github.com/osquery/osquery/commit/93495615cfbf9953fda7f881bbe9d9852bc4f487|93495615>

- specs: correct crashes table description; system crashes are in

kernel_panics

(#9282) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by directionless

<https://github.com/osquery/osquery/commit/dfc1042eaba52d464fee45f95cdee7010efd19fa|dfc1042e>

- tests: retry

curl_certificate

query to mitigate random network-interruption causing test failure (#9278) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by directionless

<https://github.com/osquery/osquery/commit/561decc1239e799c7b40249f19e0ad5cb264fc73|561decc1>

- tests: allow the

crypto

subsystem in

system_controls

sanity test (#9273) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by mike-myers-aapl

<https://github.com/osquery/osquery/commit/9d639c434d88502c4a6959ef2ccc989d186dc43d|9d639c43>

- stop blocking on FIFOs in extended_attributes and certificates (#9281) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by mike-myers-aapl

<https://github.com/osquery/osquery/commit/2169fcd0024b615a2d5c576b0ae9024095efa62a|2169fcd0>

- `process_open_files`: skip namespace descriptors (#9275) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/595e6ad8ccce0463b80c7007eaf8ea802baa946a|595e6ad8>

- events/windows: Preserve mixed unnamed EventData values (#9249) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/9f942e9f84653ade24b7071c38581c0fc33ff03e|9f942e9f>

- stop running a backtracking regex over

plugin.xml

in

getContentFromTag

(#9255) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/22a519da8769869d36f98b6be8aa14313084fd9a|22a519da>

- Backport SQLite fix for CVE-2025-6965 (#9285) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/8d82d3e645fc52af23e232e66ff48223da1cb3a5|8d82d3e6>

- `startup_items`: fix parsing of Linux autostart desktop entries (#9269) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/d33b0c7a91b300ba3ae72bfc4c3b1b934ed4de61|d33b0c7a>

- sql: create table aliases as tables so they keep hidden columns (#9256) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/f5d28b4697543fb643e3fb3a408559c92fb119ec|f5d28b46>

- `deb_packages`: serialize libdpkg calls with a mutex (#9242) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/3c6d178493ad64db40f62cd10b47b5205f93576d|3c6d1784>

- Automatically keep the certs.pem file updated (#9214) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/f1d1dac58c6f33a43918b0c93bebfda4c8b3b8be|f1d1dac5>

- bound env string reads to the procargs buffer in getProcEnv (#9231) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/cf35ccb3b08186edb13ec66af6bcf43ed7817566|cf35ccb3>

- deployment: Update Mozilla CA certificate store (Thu Nov 5 041201 2026 GMT) (#9291) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by mike-myers-aapl

<https://github.com/osquery/osquery/commit/1e8580553d1e47df830b2c1f090a6fa780375699|1e858055>

- Agentic skill for CVE dependency triage (#9070) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by mike-myers-aapl

<https://github.com/osquery/osquery/commit/765b7e7e0904f26414941a21895de0d8d1a7eb86|765b7e7e>

- tests: exclude "gpg-pubkey" pseudo-packages from

rpm_packages

sanity test (#9270) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by mike-myers-aapl

<https://github.com/osquery/osquery/commit/5680605d819ef635272cad763df21cc4a5922997|5680605d>

- build: add a Linux bootstrap script, CMake presets, and a top-level Makefile (#9228) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by mike-myers-aapl

<https://github.com/osquery/osquery/commit/9f48501f07231c8872b86a9ca19a63c343f101ff|9f48501f>

- tests: expect the

firmware_type

column from

platform_info

on Linux too (#9274) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by mike-myers-aapl

<https://github.com/osquery/osquery/commit/48427e849866b4cdfa543d9bda7cf83064508ea0|48427e84>

- gitattributes: keep .conf files LF on checkout to fix Windows test hash failures (#9279) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by mike-myers-aapl

<https://github.com/osquery/osquery/commit/53075c23f37dfd4d27ad7a67555be00f70f741e5|53075c23>

- Fix extensions_socket deleting directories passed as its path (#9289) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by mike-myers-aapl

<https://github.com/osquery/osquery/commit/d9fd7b30bb1e8ea4e2fabbefbc7c0c01c378d195|d9fd7b30>

- Add cmake format_all target (#9061) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by mike-myers-aapl

<https://github.com/osquery/osquery/commit/27d1ee08e2c87facb0fbae044390726e4f9dff6e|27d1ee08>

- rocksdb: set events column family ttl to 1d to compact more often (#9251) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by mike-myers-aapl

<https://github.com/osquery/osquery/commit/2d52c0cc1eb5631b4c1986821472afcc3eb394b4|2d52c0cc>

- Security issue ignores (subset of recent sqlite issues) (#9277) osquery/osquery