Onefuzz

Latest version: v9.0.0

Safety actively analyzes 688365 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 12 of 18

2.21.0

Not secure
Added

* CLI: Added `onefuzz debug job rerun` command. [960](https://github.com/microsoft/onefuzz/pull/960)

Changed

* Agent: Added more context to coverage recording errors. [979](https://github.com/microsoft/onefuzz/pull/979)
* Agent: The coverage task now retries an input in the case of coverage recording failure. [978](https://github.com/microsoft/onefuzz/pull/978)
* Service: Nodes with the `debug_keep_node` flag will now be reimaged once the node is 7 days old. [968](https://github.com/microsoft/onefuzz/pull/968)
* Service: Updates to scalesets can now be requested while the node is in the `resize` state. [969](https://github.com/microsoft/onefuzz/pull/969)

Fixed

* Service: Fixed an issue when reimaging nodes that previously failed to reimage as expected. [970](https://github.com/microsoft/onefuzz/pull/970)
* Service: Fixed an issue when resizing scalesets that exceed Azure VM quotas. [967](https://github.com/microsoft/onefuzz/pull/967)
* Supervisor: Fixed an issue with refreshing service authentication tokens. [976](https://github.com/microsoft/onefuzz/pull/976)

2.20.0

Not secure
Added

* Agent: Added a new `coverage` task that enables coverage analysis for both uninstrumented and Sancov targets on Linux and Windows. [763](https://github.com/microsoft/onefuzz/pull/763)

Changed

* Agent: Improved performance of the libFuzzer fuzzing tasks. [941](https://github.com/microsoft/onefuzz/pull/941)
* CLI: Changed the `libfuzzer basic` job template to use the new `coverage` task. [763](https://github.com/microsoft/onefuzz/pull/763)
* Deployment: Added automatic retry when authorizing newly-created applications during deployment. [959](https://github.com/microsoft/onefuzz/pull/959)
* Supervisor: Simplified the service coordination logic and added increased context upon failure. [963](https://github.com/microsoft/onefuzz/pull/963)

2.19.0

Not secure
Added

* Agent/Supervisor: Added azcopy log recording upon azcopy failure. [945](https://github.com/microsoft/onefuzz/pull/945)
* CLI: Added `onefuzz jobs containers delete` command. [949](https://github.com/microsoft/onefuzz/pull/949)
* CLI: Added `onefuzz jobs containers download` command. [953](https://github.com/microsoft/onefuzz/pull/953)

Changed

* Agent/Service: Agents scheduled to shut down no longer wait for work prior to shutting down. [940](https://github.com/microsoft/onefuzz/pull/940)
* Agent/Supervisor/Proxy: Updated multiple third-party Rust dependencies. [942](https://github.com/microsoft/onefuzz/pull/942)
* Agent: Continued deveopment related to upcoming features. [937](https://github.com/microsoft/onefuzz/pull/937), [#929](https://github.com/microsoft/onefuzz/pull/929), [#919](https://github.com/microsoft/onefuzz/pull/919)
* CLI: Message details are now always shown in `onefuzz status top`. [933](https://github.com/microsoft/onefuzz/pull/933)
* CLI: Renamed template helper methods for uploading task setup files. [926](https://github.com/microsoft/onefuzz/pull/926)
* Contrib: Updated multiple third-party Python dependencies. [950](https://github.com/microsoft/onefuzz/pull/950)
* Service: Tasks that are stopped without ever having started are now marked as failed. [935](https://github.com/microsoft/onefuzz/pull/935)
* Supervisor: Added increased context when recording supervisor failures. [931](https://github.com/microsoft/onefuzz/pull/931)

Fixed

* CLI/Service: Worked around a third-party dependency issue in handling Python Unions in Events. [939](https://github.com/microsoft/onefuzz/pull/939)
* Deployment: Fixed an authentication issue during deployment. [947](https://github.com/microsoft/onefuzz/pull/947), [#954](https://github.com/microsoft/onefuzz/pull/954)
* Deployment: Fixed an issue limiting application creation logs. [952](https://github.com/microsoft/onefuzz/pull/952)
* Service: Fixed an issue deleting nodes with expired heartbeats. [930](https://github.com/microsoft/onefuzz/pull/930)
* Service: Fixed an issue deleting nonexistent containers. [948](https://github.com/microsoft/onefuzz/pull/948)
* Service: Fixed an issue deleting proxies. [932](https://github.com/microsoft/onefuzz/pull/932)
* Service: Fixed an issue that prevented automatic migration of notification secrets to Azure KeyVault in some cases. [936](https://github.com/microsoft/onefuzz/pull/936)
* Supervisor: Fixed an issue adding multiple SSH keys to Windows VMs. [928](https://github.com/microsoft/onefuzz/pull/928)

2.18.0

Not secure
Added

* Agent: Added `setup_dir` [configuration value expansion](docs/command-replacements.md) for generator tasks. [901](https://github.com/microsoft/onefuzz/pull/901)
* CLI: Enable specifying alternate tenant configuration via command line arguments. [900](https://github.com/microsoft/onefuzz/pull/900)
* CLI/Service: Proxy status is now available via `onefuzz scaleset_proxy list` command. [905](https://github.com/microsoft/onefuzz/pull/905)

Changes

* Deployment: Moved to using Microsoft Graph `User.Read` rather than Azure AD Graph. [894](https://github.com/microsoft/onefuzz/pull/894)
* Service: Tasks are now stopped on nodes before task related storage queues are deleted. [801](https://github.com/microsoft/onefuzz/pull/801)
* Proxy: Proxies are automatically deployed and always available based on regions with active fuzzing scalesets. [839](https://github.com/microsoft/onefuzz/pull/839), [#908](https://github.com/microsoft/onefuzz/pull/908), [#907](https://github.com/microsoft/onefuzz/pull/907), [#909](https://github.com/microsoft/onefuzz/pull/909), [#904](https://github.com/microsoft/onefuzz/pull/904)
* CLI: Added explanations to errors generated when parsing arguments whose values are key/value pairs. [910](https://github.com/microsoft/onefuzz/pull/910), [#911](https://github.com/microsoft/onefuzz/pull/911)
* Agent: Continued development related to upcoming features. [913](https://github.com/microsoft/onefuzz/pull/913), [#918](https://github.com/microsoft/onefuzz/pull/918)
* Service: Updated first-party Python libraries [903](https://github.com/microsoft/onefuzz/pull/903)

2.17.0

Not secure
Added

* Documentation: Added [descriptions](docs/AADEntitites.md) for the Azure AD entities used by OneFuzz. [896](https://github.com/microsoft/onefuzz/pull/896)
* Service: Added the [scaleset\_state\_updated](docs/webhook_events.mdscaleset_state_updated) event. [882](https://github.com/microsoft/onefuzz/pull/882)

Changes

* Agent/Supervisor/Proxy: Addressed multiple new `cargo-clippy` warnings. [884](https://github.com/microsoft/onefuzz/pull/884)
* Agent/Supervisor/Proxy: Updated and removed third-party Rust dependencies. [892](https://github.com/microsoft/onefuzz/pull/892), [#873](https://github.com/microsoft/onefuzz/pull/873), [#865](https://github.com/microsoft/onefuzz/pull/865)
* Service: Improved the Python typing signatures used in the service. [881](https://github.com/microsoft/onefuzz/pull/881)
* Service: Updated multiple first-party and third-party Python libraries. [893](https://github.com/microsoft/onefuzz/pull/893), [#889](https://github.com/microsoft/onefuzz/pull/889), [#866](https://github.com/microsoft/onefuzz/pull/886), [#885](https://github.com/microsoft/onefuzz/pull/885), [#861](https://github.com/microsoft/onefuzz/pull/861), [#890](https://github.com/microsoft/onefuzz/pull/890)
* Supervisor: The supervisor now includes the full error context upon failure. [879](https://github.com/microsoft/onefuzz/pull/879)
* Service: Cleaned up scaleset update logs. [880](https://github.com/microsoft/onefuzz/pull/880)
* Agent: Continued development related to upcoming features. [874](https://github.com/microsoft/onefuzz/pull/874), [#868](https://github.com/microsoft/onefuzz/pull/868), [#864](https://github.com/microsoft/onefuzz/pull/864)
* SDK/CLI: Replaced Python based directory uploading with `azcopy sync`. [878](https://github.com/microsoft/onefuzz/pull/878)

Fixed

* Service/Supervisor: Fixed an issue shrinking scalesets where idle nodes would not shut down as expected. [866](https://github.com/microsoft/onefuzz/pull/866)
* Deployment: Fixed an issue deploying to non-Microsoft single-tenant instances. [872](https://github.com/microsoft/onefuzz/pull/872), [#898](https://github.com/microsoft/onefuzz/pull/898)

2.16.0

Not secure
Aded

* Deployment: Added ability to only deploy RBAC rsources. [818](https://github.com/microsoft/onefuzz/pull/818)
* Agent: Continued development related to upcoming features. [855](https://github.com/microsoft/onefuzz/pull/855), [#858](https://github.com/microsoft/onefuzz/pull/858)

Fixed

* Agent: Fixed issue where directory monitoring would fail due to `azcopy` temporary files. [859](https://github.com/microsoft/onefuzz/pull/859)
* Service: Fixed issue where scalesets could get stuck trying to resize if also manually deleted. [860](https://github.com/microsoft/onefuzz/pull/860)

Page 12 of 18

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.