wazuh

# [v4.14.3] ## Manager ### Fixed - Scaped document ID when necessary before sending document to indexer. ([#33464](https://github.com/wazuh/wazuh/pull/33464)) - Extended timestamp conversion helpers to support additional input formats and normalize ISO8601 strings. ([#33551](https://github.com/wazuh/wazuh/pull/33551)) - Restricted cluster file transfer write paths. ([#33705](https://github.com/wazuh/wazuh/pull/33705)) - Hardened cluster deserialization by restricting callable decoding to Wazuh modules and improving error handling. ([#33910](https://github.com/wazuh/wazuh/pull/33910)) - Added query size checks for syscollector delta sync SQL generation to prevent buffer overflows. ([#33803](https://github.com/wazuh/wazuh/pull/33803)) - Replaced unsafe `sprintf` calls in the SCA decoder to prevent buffer overflows. ([#33756](https://github.com/wazuh/wazuh/pull/33756)) - Fixed a memory leak in the CIS-CAT decoder when database operations fail. ([#33739](https://github.com/wazuh/wazuh/pull/33739)) - Fixed ruleset hot reload on workers by awaiting `send_reload_ruleset_msg`. ([#34184](https://github.com/wazuh/wazuh/pull/34184)) ## Agent ### Added - Added hostname and architecture metadata to Windows keep-alive messages. ([#33831](https://github.com/wazuh/wazuh/pull/33831)) ### Fixed - Fixed UTF-16 casting when updating `report_changes`. ([#33495](https://github.com/wazuh/wazuh/pull/33495)) - Improved Active Response key handling in wazuh-execd. ([#33665](https://github.com/wazuh/wazuh/pull/33665)) - Added bounds checking to Logcollector `max-size` configuration serialization. ([#33704](https://github.com/wazuh/wazuh/pull/33704)) - Hardened Logcollector multiline backup handling to use full-buffer copies. ([#33926](https://github.com/wazuh/wazuh/pull/33926)) - Fixed label formatting edge cases in keep-alive notify messages. ([#33708](https://github.com/wazuh/wazuh/pull/33708)) - Fixed a false positive in vulnerability detection for Oracle Linux 8. ([#33583](https://github.com/wazuh/wazuh/pull/33583)) - Extended Windows network path restrictions to block extended-length UNC paths. ([#34115](https://github.com/wazuh/wazuh/pull/34115)) - Fixed crash in network path detection on Windows. ([#34162](https://github.com/wazuh/wazuh/pull/34162)) - Fixed Agent reload failure on Linux systems with systemd version 219 or lower. ([#34064](https://github.com/wazuh/wazuh/pull/34064)) ## RESTful API ### Changed - Improved authentication performance by caching generated keypairs and clearing the cache when key files change. ([#33702](https://github.com/wazuh/wazuh/pull/33702)) ### Fixed - Improved configuration upload validation by parsing and comparing Wazuh XML configurations more reliably. ([#33683](https://github.com/wazuh/wazuh/pull/33683)) - Fixed protected settings checks when multiple ` ` blocks are present. ([#33807](https://github.com/wazuh/wazuh/pull/33807)) ## Ruleset ### Added - Added a CIS SCA policy for macOS 26 Tahoe. ([#33492](https://github.com/wazuh/wazuh/pull/33492)) ### Fixed - Fixed SCA policy execution on Windows Server 2019 by using the correct PowerShell path. ([#34141](https://github.com/wazuh/wazuh/pull/34141)) ## Other ### Changed - Updated the `werkzeug` dependency to 3.1.4. ([#33569](https://github.com/wazuh/wazuh/pull/33569)) - Updated the `urllib3` dependency to 2.6.3. ([#33927](https://github.com/wazuh/wazuh/pull/33927))

wazuh

Wazuh v4.14.3 - RC 3

[v4.14.3]

Manager

Fixed

Related Projects

mapbox-navigation-android

ToastFish

barcodelib

haze

Wazuh v4.14.3 - RC 3

[v4.14.3]

Manager

Fixed

Agent

Added

Fixed

RESTful API

Changed

Fixed

Ruleset

Added

Fixed

Other

Changed

Related Projects

mapbox-navigation-android

ToastFish

barcodelib

haze