1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/909a441866f84d26ba7a563f4dcfc655efff9feb|909a4418>

- docs: fix the remote settings test walkthrough (#9161) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/390c347286ec759b630c24d1dd12e6988661900e|390c3472>

- Add sshd_config table (#9132) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/dc4585516a9cdb27fcb406f3938bc751050fc32c|dc458551>

- tests: make PacksTests.test_sharding independent of the shard cache (#9182) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/02fc50fb4139dc6cab8760fdf506d8b0b15501ba|02fc50fb>

- libs: make OpenSSL tests optional and stop building RocksDB test utils (#9168) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/a30ce45ca54e5db2e7799c6f943bfcf26504b795|a30ce45c>

- account for BOMPaths header in bounds check in BOM::getPaths (#9164) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/dd05a7ff99eb454bb734cdaf217d817d4ea47eb8|dd05a7ff>

- processes: add LSM security label column (Linux) (#9165) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/a90d8e9f5e17566d7f098ff4ce38a78585c12f49|a90d8e9f>

- os_version: collect CPE_NAME from /etc/os-release on Linux (#9166) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/be923ba7c3ef933480ebed59742c835cff80ad12|be923ba7>

- build: add _FORTIFY_SOURCE, CET/BTI (Linux), and explicit Windows mitigations (#9167) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/2a8f4547998d8d7ec4d3a513305967a6b3085ac1|2a8f4547>

- npm_packages: extend license parsing test coverage (#9171) osquery/osquery

Hi everyone, in the past week, I have created a number of PRs to upstream the changes we make in the osquery fork we use at my job. Thanks @zwass for being on top of things and help review and merge. I finally created 3 more PRs that may be controversial: • reverting optimization in RPM table github.com/osquery/osquery/pull/9178 , it was terrible on our performance • reverting readfile github.com/osquery/osquery/pull/9179 for the same reason, it made reading through /proc too expensive • adding containerd tables for linux github.com/osquery/osquery/pull/9180 with a dependency on grpc. Please check them out, I am interested in your take on these.

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/23a2797f11b0ad9ad139284c74069886fb173699|23a2797f>

- docs: document Docker prerequisites for the Linux tests (#9172) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/59509721507e2c418d77524d1602310a02915c35|59509721>

- Don't link extension tables to the osquery schema in shell warnings (#9186) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/82ad7fa967ebe50d3494a3b7b1bf26b04a1ea017|82ad7fa9>

- docs: Assorted fixes (#9185) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/bf8c07615b80c89596724ce246f0c356ed874878|bf8c0761>

- events: fix out-of-bounds read comparing an empty path in PathSet (#9188) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/8737d2a102818fc799a6bf94f8f0bc9f040d5403|8737d2a1>

- Cleanup: consolidate duplicate disk encryption status constants (#9196) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/68ef057b392fb23582ef6f5948ffe4d13c135acd|68ef057b>

- fix(test-server): acknowledge carve block requests (#9193) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/e34b5160a84fd860ede278d61de9174769651c93|e34b5160>

- build: register every foreign table spec with --enable_foreign (#9194) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/f2457e5ed73e1237cb1de021a7ddd6cf16f476c3|f2457e5e>

- tables: disable TLS 1.0 and 1.1 in curl_certificate (#9192) osquery/osquery

Any emudhra/php concerns?

Certs compromise is a good question for office hours, but on php I think there's no exposure

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/3041a5ccc831a5c6958faf46d5762e4a504dcaea|3041a5cc>

- tls: disable TLS 1.0 and 1.1 in the OpenSSL build (#9202) osquery/osquery

https://github.com/osquery/osquery/issues/9204 came out of the certs discussion

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/ddea7071fdbc1380cb06f42dc7d4b042db4efee2|ddea7071>

- carver: return the full result string from the carve() SQL function (#9191) osquery/osquery

I'm pleased to announce that Osquery 5.24.0 has been releases as stable. Enjoy!

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/056957aa4534b919de074e4db5f41f5ce275644f|056957aa>

- Fix TLS connection reuse (#9199) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/e17c959df5d4f267b9d7bcf65eb53c156a15a31e|e17c959d>

- Fix sizeof(pointer) vs sizeof(struct) in prefetch validation (#9177) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/c2a112c69f7be31db0af30a6293b02c2130a728d|c2a112c6>

- guard against npos when joining args in parseProcCmdline (#9176) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/b63472acdc8b2b28a2d5763376e969f5dc5c9bd3|b63472ac>

- docs: explain

--extensions_require

for

osqueryi

command-line queries (#9187) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/105b0074c5bb874aeb26839ac8d7af5463fdaa25|105b0074>

- Add vscode_extensions support for VS Code named profiles (#9200) osquery/osquery

1 new commit pushed to

<https://github.com/osquery/osquery/tree/master|master>

by zwass

<https://github.com/osquery/osquery/commit/f81936ac93c4dffb96366bcc704ab51e6bd8878d|f81936ac>

- rocksdb: support RocksDB 11 DB::Open API (#9201) osquery/osquery