Onefuzz

Latest version: v9.0.0

Safety actively analyzes 688365 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 13 of 18

2.15.0

Not secure
Added

* Agent: Added context to errors generated during [configuration value expansion](docs/command-replacements.md). [835](https://github.com/microsoft/onefuzz/pull/835).
* CLI/Service: Added messages awaiting processing for a node to the node status API. [836](https://github.com/microsoft/onefuzz/pull/836)
* Agent: Continued development related to upcoming features. [844](https://github.com/microsoft/onefuzz/pull/844), [#852](https://github.com/microsoft/onefuzz/pull/852), [#850](https://github.com/microsoft/onefuzz/pull/850), [#843](https://github.com/microsoft/onefuzz/pull/843), [#837](https://github.com/microsoft/onefuzz/pull/837), [#838](https://github.com/microsoft/onefuzz/pull/838), [#844](https://github.com/microsoft/onefuzz/pull/844)

Changes

* Agent/Proxy/Supervisor : Updated multiple third-party Rust dependencies. [842](https://github.com/microsoft/onefuzz/pull/842), [#826](https://github.com/microsoft/onefuzz/pull/826), [#829](https://github.com/microsoft/onefuzz/pull/829)
* Service/Contrib: Updated multiple Python dependencies. [828](https://github.com/microsoft/onefuzz/pull/828), [#827](https://github.com/microsoft/onefuzz/pull/827), [#823](https://github.com/microsoft/onefuzz/pull/823), [#822](https://github.com/microsoft/onefuzz/pull/822), [#821](https://github.com/microsoft/onefuzz/pull/821), [#847](https://github.com/microsoft/onefuzz/pull/847)
* Service: Resetting nodes no longer requires waiting for the node to acknowledge the shutdown in some cases. [834](https://github.com/microsoft/onefuzz/pull/834)

Fixed

* Supervisor: Fixed an issue introduced in 2.14.0 that sometimes prevents nodes from stopping processing tasks. [833](https://github.com/microsoft/onefuzz/pull/833)
* Service: Fixed an issue related to Azure Storage Queues being deleted while in use. [832](https://github.com/microsoft/onefuzz/pull/832)
* Deployment: Fixed an issue where the CLI client application role was not assigned during deployment. [825](https://github.com/microsoft/onefuzz/pull/825)

2.14.0

Not secure
Added

* Contrib: Added a sample GitHub Actions workflow and an Azure DevOps Pipeline to demonstrate deploying OneFuzz jobs using CICD. [778](https://github.com/microsoft/onefuzz/pull/778)
* CLI/Service: Added creation timestamps to `Job`, `Node`, `Pool`, `Scaleset`, `Repro`, `Task`, and `TaskEvent` records returned by the service. [796](https://github.com/microsoft/onefuzz/pull/796), [#805](https://github.com/microsoft/onefuzz/pull/805), [#804](https://github.com/microsoft/onefuzz/pull/804)
* Agent/Proxy/Supervisor: Added additional context to web request failures to assist in debugging issues. [798](https://github.com/microsoft/onefuzz/pull/798)
* Service: Added task configuration to the [crash\_reported](docs/webhook_events.mdcrash_reported) and [regression\_reported](https://github.com/microsoft/onefuzz/blob/main/docs/webhook_events.md#regression_reported) events. [793](https://github.com/microsoft/onefuzz/pull/793)

Changes

* Agent: The full error context is now logged upon task failure. [802](https://github.com/microsoft/onefuzz/pull/802)
* CLI: The `libfuzzer-dotnet` template no longer defaults to failing the task if the fuzzer exits with a non-zero status but no crash artifact. [807](https://github.com/microsoft/onefuzz/pull/807)
* Agent/Proxy/Supervisor: Updated multiple Rust dependencies. [800](https://github.com/microsoft/onefuzz/pull/800)
* Service: When multiple failures are reported for a given task, only the first failure is recorded. [797](https://github.com/microsoft/onefuzz/pull/797)
* Agent: Continued development related to upcoming features. [820](https://github.com/microsoft/onefuzz/pull/820), [#816](https://github.com/microsoft/onefuzz/pull/816), [#790](https://github.com/microsoft/onefuzz/pull/790), [#809](https://github.com/microsoft/onefuzz/pull/809), [#812](https://github.com/microsoft/onefuzz/pull/812), [#811](https://github.com/microsoft/onefuzz/pull/811), [#810](https://github.com/microsoft/onefuzz/pull/810), [#794](https://github.com/microsoft/onefuzz/pull/794), [#799](https://github.com/microsoft/onefuzz/pull/799), [#779](https://github.com/microsoft/onefuzz/pull/779)

Fixed

* Deployment: Added missing actions to the example Custom Azure Role for deployment. [808](https://github.com/microsoft/onefuzz/pull/808)
* Service: Fixed an issue in scaleset creation with incompatible VM SKUs and VM Images. [803](https://github.com/microsoft/onefuzz/pull/803)
* Service: Fixed an issue removing user identity information from logging to user instances. [795](https://github.com/microsoft/onefuzz/pull/795)

2.13.0

Not secure
Added

* Deployment: Allow specifying the Azure subscription to use for deployment, instead of always using the default [774](https://github.com/microsoft/onefuzz/pull/774)

Changed

* Agent/Supervisor: Added automatic retry when executing `azcopy`. [701](https://github.com/microsoft/onefuzz/pull/701)
* Service: When task setup fails, the error that caused the setup failure is now included in the Task error message. [781](https://github.com/microsoft/onefuzz/pull/781)
* Agent: The `libfuzzer-fuzz` task no longer queries the full local system status when only reporting process status. [784](https://github.com/microsoft/onefuzz/pull/784)
* Agent: The `libfuzzer-fuzz` task now limits the stderr collected to the last 1024 lines for potential failure reporting. [785](https://github.com/microsoft/onefuzz/pull/785)
* Agent: The `libfuzzer-fuzz` task now summarizes the executions per second and iteration counts from all of the workers on each VM. [786](https://github.com/microsoft/onefuzz/pull/786)
* Agent: The `libfuzzer-coverage` task no longer removes the initial copy of inputs. [788](https://github.com/microsoft/onefuzz/pull/788)
* Agent: Debugger scripts for extracting libFuzzer coverage are now embedded in the agent. [783](https://github.com/microsoft/onefuzz/pull/783)
* Agent: Continued development related to upcoming features. [787](https://github.com/microsoft/onefuzz/pull/787), [#776](https://github.com/microsoft/onefuzz/pull/776), [#663](https://github.com/microsoft/onefuzz/pull/663)

Fixed

* CLI: Fixed issue relating to line endings in the `libfuzzer-qemu` job template setup script. [782](https://github.com/microsoft/onefuzz/pull/782)
* Service: Fixed backward compatibility issue in ephemeral disk support when creating scalesets. [780](https://github.com/microsoft/onefuzz/pull/780)
* Deployment: Fixed issue in multi-tenant deployment support. [773](https://github.com/microsoft/onefuzz/pull/773)

2.12.0

Not secure
Added

* Agent: LibFuzzer tasks now include a verification step that verifies the fuzzer can test a small number of seeds at the start of the task. [752](https://github.com/microsoft/onefuzz/pull/752)
* Integration Tests: Added verification that no errors are logged to Application Insights during testing. [700](https://github.com/microsoft/onefuzz/pull/700)
* Agent/Supervisor/Service/Deployment: Added support for multi-tenant authentication. [746](https://github.com/microsoft/onefuzz/pull/746)
* CLI/Service: Added support for [Ephemeral OS Disks](https://docs.microsoft.com/en-us/azure/virtual-machines/ephemeral-os-disks). [#461](https://github.com/microsoft/onefuzz/pull/461), [#761](https://github.com/microsoft/onefuzz/pull/761)

Changed

* Agent: Continued development related to upcoming features. [765](https://github.com/microsoft/onefuzz/pull/765), [#762](https://github.com/microsoft/onefuzz/pull/762), [#754](https://github.com/microsoft/onefuzz/pull/754), [#756](https://github.com/microsoft/onefuzz/pull/756), [#750](https://github.com/microsoft/onefuzz/pull/750), [#744](https://github.com/microsoft/onefuzz/pull/744), [#753](https://github.com/microsoft/onefuzz/pull/753)
* Contrib: Updated multiple python dependencies. [764](https://github.com/microsoft/onefuzz/pull/764)
* CLI/Agent: LibFuzzer fuzzing tasks no longer default to failing the task if the fuzzer exits with a non-zero status but no crash artifact. [748](https://github.com/microsoft/onefuzz/pull/748)

Fixed

* Agent/Proxy/Supervisor: Fixed issues prevent HTTPS retries. [766](https://github.com/microsoft/onefuzz/pull/766)
* Agent/Service/Proxy/Supervisor: Fixed logging and telemetry from the agent. [769](https://github.com/microsoft/onefuzz/pull/769)

2.11.1

Fixed

* Agent/Proxy/Supervisor: Fixed issues preventing heartbeats. [749](https://github.com/microsoft/onefuzz/pull/749)

2.11.0

Changed

* Agent: Continued log simplification and clarification. [736](https://github.com/microsoft/onefuzz/pull/736), [#740](https://github.com/microsoft/onefuzz/pull/740), [#742](https://github.com/microsoft/onefuzz/pull/742)
* Agent: Prevent invalid queue messages from being ignored. [731](https://github.com/microsoft/onefuzz/pull/731)
* Agent: Separated module and symbol names for Windows debugger-based crash reports. [723](https://github.com/microsoft/onefuzz/pull/723)
* Deployment/Agent: Updated AFL++ to 3.11c. [728](https://github.com/microsoft/onefuzz/pull/728)
* CLI/Deployment: Updated Python dependencies. [721](https://github.com/microsoft/onefuzz/pull/721)
* Agent: Updated stack minimization regular expressions from ClusterFuzz. [722](https://github.com/microsoft/onefuzz/pull/722)
* Service: Removed user's identity information from logging to user instances. [724](https://github.com/microsoft/onefuzz/pull/724), [#725](https://github.com/microsoft/onefuzz/pull/725)
* Agent: Continued development related to upcoming features. [699](https://github.com/microsoft/onefuzz/pull/699), [#729](https://github.com/microsoft/onefuzz/pull/729), [#733](https://github.com/microsoft/onefuzz/pull/733), [#735](https://github.com/microsoft/onefuzz/pull/735), [#738](https://github.com/microsoft/onefuzz/pull/738), [#739](https://github.com/microsoft/onefuzz/pull/739)

Fixed

* Deployment: Worked around a race condition in service principal creation. [716](https://github.com/microsoft/onefuzz/pull/716)
* Agent: Dotfiles are now ignored in libFuzzer-related directories. [741](https://github.com/microsoft/onefuzz/pull/741)

Page 13 of 18

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.