Onefuzz

Latest version: v9.0.0

Safety actively analyzes 688532 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 9 of 18

3.0.0

Changed

* CLI/Deployment/Service: Move to using `api://` for AAD Application "identifier URIs".
Pre-3.0 clients will not be able to connect to newer instances.
(BREAKING CHANGE) [1243](https://github.com/microsoft/onefuzz/pull/1243)
* Agent/Supervisor/Proxy: Redact device, IP, and machine name in runtime statistics reported to Microsoft via Application Insights. [1242](https://github.com/microsoft/onefuzz/pull/1242)
* Agent/Supervisor/Proxy: Updated multiple third-party Rust dependencies. [1232](https://github.com/microsoft/onefuzz/pull/1232), [#1230](https://github.com/microsoft/onefuzz/pull/1230), [#1228](https://github.com/microsoft/onefuzz/pull/1228), [#1229](https://github.com/microsoft/onefuzz/pull/1229), [#1231](https://github.com/microsoft/onefuzz/pull/1231), [#1242](https://github.com/microsoft/onefuzz/pull/1242).

2.33.1

Fixed

* CLI: Fixed an issue printing results that include `SecretData`. [1223](https://github.com/microsoft/onefuzz/pull/1223)

2.33.0

Added

* Agent: Added `machine_id` [configuration value expansion](docs/command-replacements.md) for all tasks. [1217](https://github.com/microsoft/onefuzz/pull/1217), [#1216](https://github.com/microsoft/onefuzz/pull/1216)

Changed

* Agent/Supervisor/Proxy: Updated multiple third-party Rust dependencies. [1215](https://github.com/microsoft/onefuzz/pull/1215), [#1214](https://github.com/microsoft/onefuzz/pull/1214), [#1213](https://github.com/microsoft/onefuzz/pull/1213), [#1211](https://github.com/microsoft/onefuzz/pull/1211), [#1218](https://github.com/microsoft/onefuzz/pull/1218), [#1219](https://github.com/microsoft/onefuzz/pull/1219)

Fixed

* Deployment: Fixed the example deployment rule to include the required Azure Storage Queue support. [1207](https://github.com/microsoft/onefuzz/pull/1207)
* CLI: Fixed an issue printing results that include `set`, `datetime`, or `None`. [1208](https://github.com/microsoft/onefuzz/pull/1208), [#1221](https://github.com/microsoft/onefuzz/pull/1221)

2.32.0

Added

* CLI/Service: The Azure VM SKU used for proxies is now configurable via `onefuzz instance_config`. [1128](https://github.com/microsoft/onefuzz/pull/1128)
* CLI: Added `onefuzz status pool` command to give status information for a pool. [1170](https://github.com/microsoft/onefuzz/pull/1170)

Changed

* Agent/Supervisor/Proxy: Updated multiple third-party Rust dependencies. [1152](https://github.com/microsoft/onefuzz/pull/1152), [#1155](https://github.com/microsoft/onefuzz/pull/1155), [#1156](https://github.com/microsoft/onefuzz/pull/1156), [#1157](https://github.com/microsoft/onefuzz/pull/1157), [#1158](https://github.com/microsoft/onefuzz/pull/1158), [#1163](https://github.com/microsoft/onefuzz/pull/1163), [#1164](https://github.com/microsoft/onefuzz/pull/1164), [#1165](https://github.com/microsoft/onefuzz/pull/1165), [#1166](https://github.com/microsoft/onefuzz/pull/1166), [#1176](https://github.com/microsoft/onefuzz/pull/1176), [#1177](https://github.com/microsoft/onefuzz/pull/1177), [#1178](https://github.com/microsoft/onefuzz/pull/1178), [#1179](https://github.com/microsoft/onefuzz/pull/1179), [#1181](https://github.com/microsoft/onefuzz/pull/1181), [#1182](https://github.com/microsoft/onefuzz/pull/1182), [#1183](https://github.com/microsoft/onefuzz/pull/1183), [#1185](https://github.com/microsoft/onefuzz/pull/1185), [#1186](https://github.com/microsoft/onefuzz/pull/1186), [#1191](https://github.com/microsoft/onefuzz/pull/1191), [#1198](https://github.com/microsoft/onefuzz/pull/1198), [#1199](https://github.com/microsoft/onefuzz/pull/1199), [#1200](https://github.com/microsoft/onefuzz/pull/1200), [#1201](https://github.com/microsoft/onefuzz/pull/1201), [#1202](https://github.com/microsoft/onefuzz/pull/1202), [#1203](https://github.com/microsoft/onefuzz/pull/1203), [#1204](https://github.com/microsoft/onefuzz/pull/1204), [#1205](https://github.com/microsoft/onefuzz/pull/1205)
* Agent: Changed `azcopy` calls to always retry when source files are modified mid-copy. [1196](https://github.com/microsoft/onefuzz/pull/1196)
* Agent: Continued development related to upcoming features. [1146](https://github.com/microsoft/onefuzz/pull/1146)
* Agent: SAS URLs are now redacted in logged `azcopy` failures. [1194](https://github.com/microsoft/onefuzz/pull/1194)
* CLI: Include the number of VMs used per-task in `onefuzz status top`. [1169](https://github.com/microsoft/onefuzz/pull/1169)
* Deployment: Application credentials created during deployment are no longer logged. [1172](https://github.com/microsoft/onefuzz/pull/1172)
* Deployment: Clarify logging when retrying AAD interactions. [1173](https://github.com/microsoft/onefuzz/pull/1173)
* Deployment: Replaced custom Azure Storage Queue creation with ARM templates. [1193](https://github.com/microsoft/onefuzz/pull/1193)
* Service: The validity period for SAS URLs is now back-dated to avoid time synchronization issues. [1195](https://github.com/microsoft/onefuzz/pull/1195)

Fixed

* Deployment: Invalid preauthorized application references are removed during application registration. [1175](https://github.com/microsoft/onefuzz/pull/1175)
* Service: Fixed an issue logging node status. [1160](https://github.com/microsoft/onefuzz/pull/1160)

2.31.0

Added

* Supervisor: Added recording of STDOUT and STDERR of the supervisor to file. [1109](https://github.com/microsoft/onefuzz/pull/1109)
* CLI/Service/Agent: Supervisor tasks can now optionally have a managed coverage container. [1123](https://github.com/microsoft/onefuzz/pull/1123)

Changed

* Agent/Supervisor/Proxy: Updated multiple third-party Rust dependencies. [1151](https://github.com/microsoft/onefuzz/pull/1151), [#1149](https://github.com/microsoft/onefuzz/pull/1149), [#1145](https://github.com/microsoft/onefuzz/pull/1145), [#1134](https://github.com/microsoft/onefuzz/pull/1134), [#1135](https://github.com/microsoft/onefuzz/pull/1135), [#1137](https://github.com/microsoft/onefuzz/pull/1137), [#1133](https://github.com/microsoft/onefuzz/pull/1133), [#1138](https://github.com/microsoft/onefuzz/pull/1138), [#1132](https://github.com/microsoft/onefuzz/pull/1132), [#1140](https://github.com/microsoft/onefuzz/pull/1140)
* Service: Enabled testing of the Azure Devops work item rendering. [1144](https://github.com/microsoft/onefuzz/pull/1144)
* Agent: Continued development related to upcoming features. [1142](https://github.com/microsoft/onefuzz/pull/1142)
* CLI: No longer retry service API requests that fail with service-level errors. [1129](https://github.com/microsoft/onefuzz/pull/1129)
* Agent/Supervisor/Proxy: Addressed multiple new `cargo-clippy` warnings. [1125](https://github.com/microsoft/onefuzz/pull/1125)
* CLI/Service: Updated third-party Python dependencies. [1124](https://github.com/microsoft/onefuzz/pull/1124)

Fixed

* Service: Fixed an issue with incomplete authorization in multi-tenant deployments. CVE-2021-37705 [1153](https://github.com/microsoft/onefuzz/pull/1153)

2.30.0

Not secure
Changed

* Agent/Supervisor/Proxy: Updated multiple third-party Rust dependencies. [1116](https://github.com/microsoft/onefuzz/pull/1116)

Fixed

* Service: Fixed an error when replacing notifications for a container. [1115](https://github.com/microsoft/onefuzz/pull/1115)
* Service: Fixed Python 3.9 compatibility issues. [1117](https://github.com/microsoft/onefuzz/pull/1117)
* Agent/Supervisor/Proxy: Addressed multiple new `cargo-clippy` warnings. [1118](https://github.com/microsoft/onefuzz/pull/1118)

Page 9 of 18

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.