File Inspection Engine changelog
The changelog contains references to our internal ticketing system. We use the Keep a Changelog format.
v1.1.1
January 2025
Fixed
- Fixed multiple security vulnerabilities [FIE-170, FIE-172]
v1.1.0
January 2025
Added
- Spectra Core updated to version 5.2.1. [FIE-77]
- Configurable maximum allowable decompression factor for files. [FIE-133]
- Added logic to retry failed updates with the threat-data command. All attempts are logged, and the command exits with an error code if retries are exhausted. [FIE-42]
- File Inspection Engine now logs configuration parameters at application start. [FIE-21]
Changed
- The
/version
endpoint was replaced with/status
, and now also returns application configuration and the license expiration date. [FIE-21]
Fixed
- Typo in error messages related to misconfigured Cloud account. [FIE-57]
- Fixed security vulnerabilities. [FIE-46] [FIE-148]
Deprecated
- The
/version
endpoint, while still available, is considered deprecated. [FIE-21]
v1.0.2
November 2024
Added
- Implemented configurable concurrency rate limiting for HTTP requests, with a default limit of 20. [FIE-41]
- Improved logging. [FIE-96]
- Stop the application if
tmpfs
reaches 100% usage. [FIE-112]
Fixed
- Fixed high security vulnerabilities. [FIE-54, FIE-55]
- Fixed a medium security vulnerability. [FIE-86]
v1.0.1
November 2024
- Fixed a high security vulnerability. [FIE-76]
v1.0.0
November 2024
General Availability
This is the first public release of the product, moving from Alpha to General Availability.
Added
- Users can now configure the depth of file unpacking at container startup. [FIE-32]
- Configurable timeout option added to limit the maximum scan time in Docker. If the scan exceeds this limit, the application returns an error message. [FIE-29]
Updated
- Updated to the latest Red Hat Universal Base Image (UBI8) to address vulnerabilities.
- Integrated the latest release of the ReversingLabs static analysis engine to improve scanning capabilities.
Fixed
- Corrected processing behavior for empty files. [FIE-35]
- Removed certain error messages that appeared at startup without providing actionable information.
- Resolved multiple STIG (Security Technical Implementation Guides) requirements to enhance system security and compliance.