1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/2a8f4547998d8d7ec4d3a513305967a6b3085ac1|2a8f4547>

- npm_packages: extend license parsing test coverage (#9171) osquery/osquery

Hi everyone, in the past week, I have created a number of PRs to upstream the changes we make in the osquery fork we use at my job. Thanks @zwass for being on top of things and help review and merge. I finally created 3 more PRs that may be controversial: • reverting optimization in RPM table github.com/osquery/osquery/pull/9178 , it was terrible on our performance • reverting readfile github.com/osquery/osquery/pull/9179 for the same reason, it made reading through /proc too expensive • adding containerd tables for linux github.com/osquery/osquery/pull/9180 with a dependency on grpc. Please check them out, I am interested in your take on these.

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/23a2797f11b0ad9ad139284c74069886fb173699|23a2797f>

- docs: document Docker prerequisites for the Linux tests (#9172) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/59509721507e2c418d77524d1602310a02915c35|59509721>

- Don't link extension tables to the osquery schema in shell warnings (#9186) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/82ad7fa967ebe50d3494a3b7b1bf26b04a1ea017|82ad7fa9>

- docs: Assorted fixes (#9185) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/bf8c07615b80c89596724ce246f0c356ed874878|bf8c0761>

- events: fix out-of-bounds read comparing an empty path in PathSet (#9188) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/8737d2a102818fc799a6bf94f8f0bc9f040d5403|8737d2a1>

- Cleanup: consolidate duplicate disk encryption status constants (#9196) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/68ef057b392fb23582ef6f5948ffe4d13c135acd|68ef057b>

- fix(test-server): acknowledge carve block requests (#9193) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/e34b5160a84fd860ede278d61de9174769651c93|e34b5160>

- build: register every foreign table spec with --enable_foreign (#9194) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/f2457e5ed73e1237cb1de021a7ddd6cf16f476c3|f2457e5e>

- tables: disable TLS 1.0 and 1.1 in curl_certificate (#9192) osquery/osquery

Any emudhra/php concerns?

Certs compromise is a good question for office hours, but on php I think there's no exposure

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/3041a5ccc831a5c6958faf46d5762e4a504dcaea|3041a5cc>

- tls: disable TLS 1.0 and 1.1 in the OpenSSL build (#9202) osquery/osquery

https://github.com/osquery/osquery/issues/9204 came out of the certs discussion

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/ddea7071fdbc1380cb06f42dc7d4b042db4efee2|ddea7071>

- carver: return the full result string from the carve() SQL function (#9191) osquery/osquery

I'm pleased to announce that Osquery 5.24.0 has been releases as stable. Enjoy!

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/056957aa4534b919de074e4db5f41f5ce275644f|056957aa>

- Fix TLS connection reuse (#9199) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/e17c959df5d4f267b9d7bcf65eb53c156a15a31e|e17c959d>

- Fix sizeof(pointer) vs sizeof(struct) in prefetch validation (#9177) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/c2a112c69f7be31db0af30a6293b02c2130a728d|c2a112c6>

- guard against npos when joining args in parseProcCmdline (#9176) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/b63472acdc8b2b28a2d5763376e969f5dc5c9bd3|b63472ac>

- docs: explain

--extensions_require

for

osqueryi

command-line queries (#9187) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/105b0074c5bb874aeb26839ac8d7af5463fdaa25|105b0074>

- Add vscode_extensions support for VS Code named profiles (#9200) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/f81936ac93c4dffb96366bcc704ab51e6bd8878d|f81936ac>

- rocksdb: support RocksDB 11 DB::Open API (#9201) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/d0e3472ff23d57306700ed1b059bb4868d40bb91|d0e3472f>

- mounts: bound statfs() with a timeout to survive hung filesystems (#9175) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by mike-myers-aapl

<https://github.com/osquery/osquery/commit/82d2ff427a591dfde0437289498c5a500e3a7a6d|82d2ff42>

- check block size before reading BOMPathInfo structs in genBOMPaths (#9184) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/79b680aedd3b5badae8424bdb5bacae5df0eeba5|79b680ae>

- Update Mozilla CA certificate bundle (#9206) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/2230eb7efeff6694994ab33ea6b737ae41af3361|2230eb7e>

- gpu_info: move spec out of posix/ since the table is also built on Windows (#9210) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/33c218b033cb6d61735d365a401a572720c67b9e|33c218b0>

- Fix chrome_extensions state for modern Chromium profiles (#9170) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by directionless

<https://github.com/osquery/osquery/commit/7336fdf2e92e4c66558e43dc00e78cf1826d9739|7336fdf2>

- Add Example Linux SSH investigation query pack (#9118) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by michael-myers

<https://github.com/osquery/osquery/commit/527b236370acc5f5693028776827b6664da34fc8|527b2363>

- Fix host and instance UUID changing when the database is reset (#9203) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by michael-myers

<https://github.com/osquery/osquery/commit/6120b19944d8ff89bd40072f4ff02639049f4257|6120b199>

- logger, distributed: bound memory used by unsent logs and results (#9209) osquery/osquery