Onefuzz

Latest version: v9.0.0

Safety actively analyzes 688532 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 17 of 18

1.6.0

Not secure
Added

* Service: The service now auto-scales the number of Azure Functions instances as needed [238](https://github.com/microsoft/onefuzz/pull/238)
* CLI/Service/Agent: Added the ability to configure ensemble synchronization interval (including disabling ensemble altogether) [229](https://github.com/microsoft/onefuzz/pull/229)
* Contrib: Added sample Azure Devops pipeline to maintain instances of OneFuzz [233](https://github.com/microsoft/onefuzz/pull/233)
* Deployment: Added utility to create CLI application registrations [236](https://github.com/microsoft/onefuzz/pull/236)
* Deployment/Service/Agent: Added a per-instance uniquely generated UUID to telemetry (see [docs/telemetry.md](docs/telemetry.md) for more information) [245](https://github.com/microsoft/onefuzz/pull/245)

Changed

* CLI: The CLI now internally caches container authorization tokens [224](https://github.com/microsoft/onefuzz/pull/224)
* Service: Moved to using user-assigned managed identities for Scalesets [219](https://github.com/microsoft/onefuzz/pull/219)
* Agent: Added stdout to azcopy error logs [247](https://github.com/microsoft/onefuzz/pull/247)
* Service: Increased function timeouts to 5 minutes

1.5.0

Not secure
Added

* CLI/Service: Added the ability to prevent a VM from getting reset in order to debug tasks [201](https://github.com/microsoft/onefuzz/pull/201)
* SDK: Add examples directory to the python package [216](https://github.com/microsoft/onefuzz/pull/216)
* Agent: Added connection resiliency via automatic retry (with back-off) throughout the agent [153](https://github.com/microsoft/onefuzz/pull/153)
* Deployment: Added the ability to log the application passwords during registration [214](https://github.com/microsoft/onefuzz/pull/214)
* Agent: LibFuzzer Coverage metrics are now reported after the batch processing phase [218](https://github.com/microsoft/onefuzz/pull/218)
* Deployment: Added a utility to assign scalesets to roles [185](https://github.com/microsoft/onefuzz/pull/185)
* Contrib: Added a utility to automate deployment of new releases of OneFuzz via Azure Devops pipelines [208](https://github.com/microsoft/onefuzz/pull/208)

Fixed

* Agent: Addressed a race condition syncing input seeds [204](https://github.com/microsoft/onefuzz/pull/204)

Changed

* Agent: Instead of ignoring all access violations during libFuzzer coverage processing, stop on second-chance access violations [210](https://github.com/microsoft/onefuzz/pull/210)
* Agent: During libFuzzer coverage, disable default symbol paths unless `_NT_SYMBOL_PATH` is set via `target_env`. [222](https://github.com/microsoft/onefuzz/pull/222)

1.4.0

Not secure
Added

* CLI: Added `onefuzz containers reset` to delete containers by type en masse. [198](https://github.com/microsoft/onefuzz/pull/198), [#202](https://github.com/microsoft/onefuzz/pull/202)
* Agent: Added missing approved telemetry as to tool names & crash report identification. [203](https://github.com/microsoft/onefuzz/pull/203)

Changed

* Service: Enabled log sampling at the service at 20 items per second. [174](https://github.com/microsoft/onefuzz/pull/174)

Fixed

* Service: Fixed multiple bugs in the service, including an exception due to invalid format string proxy or repro VM creation [206](https://github.com/microsoft/onefuzz/pull/206)

1.3.4

Not secure
Fixed

* CLI: Fixed incorrect resetting of granularly selected components introduced in 1.3.3 [193](https://github.com/microsoft/onefuzz/pull/193)
* Service: Fixed rate-limiting issues requesting MSI and Storage Account tokens [195](https://github.com/microsoft/onefuzz/pull/195)

Changed

* Service: Moved the SDK to use the same `pydantic` models as the service in request generation [191](https://github.com/microsoft/onefuzz/pull/191)
* Service: Improved performance of container validation [196](https://github.com/microsoft/onefuzz/pull/196)

1.3.3

Not secure
Fixed

* Service: Fixed exception generated when deleting repro & proxy VMs [188](https://github.com/microsoft/onefuzz/pull/188)

1.3.2

Not secure
Added

* Service/Agent: Non-functional nodes are now automatically re-imaged [154](https://github.com/microsoft/onefuzz/pull/154), [#164](https://github.com/microsoft/onefuzz/pull/164), [#30](https://github.com/microsoft/onefuzz/pull/30)
* CLI: Added more granularity for the `onefuzz reset` sub-command [161](https://github.com/microsoft/onefuzz/pull/161), [#182](https://github.com/microsoft/onefuzz/pull/182)
* Deployment/Agent: Now includes AFL++ [7](https://github.com/microsoft/onefuzz/pull/7)
* Deployment/Agent: Now includes Radamsa for Windows [143](https://github.com/microsoft/onefuzz/pull/143)
* CLI: The `onefuzz status top` TUI now allows filtering based on job ID, project, or name [152](https://github.com/microsoft/onefuzz/pull/152)

Changed

* Service: Nodes no longer have to wait for the scaleset to finish setup before being able to fuzz [144](https://github.com/microsoft/onefuzz/pull/144)
* Agent: Agent now only notifies the service about its current state upon state change [175](https://github.com/microsoft/onefuzz/pull/175)
* Service: Task error messages now limit the stdout and stderr to the last 4096 bytes [170](https://github.com/microsoft/onefuzz/pull/170)
* Service: Replaced custom queue based event loop with timers [160](https://github.com/microsoft/onefuzz/pull/160), [#159](https://github.com/microsoft/onefuzz/pull/159)
* Agent: Uploads that fail now report the failure earlier [166](https://github.com/microsoft/onefuzz/pull/166)
* Agent: All timers now include automatic jitter to reduce request storms [180](https://github.com/microsoft/onefuzz/pull/180)
* Agent: Ensemble container synchronization has been unified to once every 60 seconds (plus jitter) [180](https://github.com/microsoft/onefuzz/pull/180)
* Agent: Upon agent failure, it will no longer incorrectly re-register and request new work. [150](https://github.com/microsoft/onefuzz/pull/150), [#146](https://github.com/microsoft/onefuzz/pull/146)

Fixed

* Deployment: Addressed an issue with nested exceptions triggered during a failed deployment [172](https://github.com/microsoft/onefuzz/pull/172)
* Deployment: Addressed incompatible prerequisite library warnings during deployment [167](https://github.com/microsoft/onefuzz/pull/167)

Page 17 of 18

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.