This repository was archived by the owner on Nov 1, 2023. It is now read-only.
Releases: microsoft/onefuzz
Releases · microsoft/onefuzz
2.33.1
2.33.0
2.32.0
Added
- CLI/Service: The Azure VM SKU used for proxies is now configurable via
onefuzz instance_config
. #1128 - CLI: Added
onefuzz status pool
command to give status information for a pool. #1170
Changed
- Agent/Supervisor/Proxy: Updated multiple third-party Rust dependencies. #1152, #1155, #1156, #1157, #1158, #1163, #1164, #1165, #1166, #1176, #1177, #1178, #1179, #1181, #1182, #1183, #1185, #1186, #1191, #1198, #1199, #1200, #1201, #1202, #1203, #1204, #1205
- Agent: Changed
azcopy
calls to always retry when source files are modified mid-copy. #1196 - Agent: Continued development related to upcoming features. #1146
- Agent: SAS URLs are now redacted in logged
azcopy
failures. #1194 - CLI: Include the number of VMs used per-task in
onefuzz status top
. #1169 - Deployment: Application credentials created during deployment are no longer logged. #1172
- Deployment: Clarify logging when retrying AAD interactions. #1173
- Deployment: Replaced custom Azure Storage Queue creation with ARM templates. #1193
- Service: The validity period for SAS URLs is now back-dated to avoid time synchronization issues. #1195
Fixed
2.31.0
Added
- Supervisor: Added recording of STDOUT and STDERR of the supervisor to file. #1109
- CLI/Service/Agent: Supervisor tasks can now optionally have a managed coverage container. #1123
Changed
- Agent/Supervisor/Proxy: Updated multiple third-party Rust dependencies. #1151, #1149, #1145, #1134, #1135, #1137, #1133, #1138, #1132, #1140,
- Service: Enabled testing of the Azure Devops work item rendering. #1144
- Agent: Continued development related to upcoming features. #1142
- CLI: No longer retry service API requests that fail with service-level errors. #1129
- Agent/Supervisor/Proxy: Addressed multiple new
cargo-clippy
warnings. #1125 - CLI/Service: Updated third-party Python dependencies. #1124
Fixed
- Service: Fixed an issue with incomplete authorization in multi-tenant deployments. CVE-2021-37705 #1153
2.30.0
2.29.1
2.29.0
Added
- Service: PII is now removed from Jobs, Tasks, and Repros after 18 months. #1051
- Service: Unused notifications are now removed after 18 months. #1051
Changed
- Service: SignalR events are routed through an Azure Storage Queue to prevent SignalR outages from impacting the entire service. #1100, #1102
- Service: Functionality used prior to 1.0.0 for assigning tasks to VMs rather than Pools is no longer supported. #1105
- Service: The
coverage
andgeneric_generator
tasks now verify{input}
is used intarget_env
ortarget_options
. #1106
Fixed
2.28.0
Added
- CLI: Added the ability to remove existing container notifications upon creating a notification integration. #1084
- CLI/Documentation: Added an example
generic_analysis
task that demonstrates collecting LLVM source-based coverage. #1072 - Supervisor: Added service-interaction resiliency for node commands. #1098
Changed
- Agent/Supervisor/Proxy: Addressed multiple new
cargo-clippy
warnings. #1089 - Agent: Added more context to errors in generator tasks. #1094
- Agent: Added support for ASAN runtime identification of format string bugs. #1093
- Agent: Added verification that
{input}
is provided to the application under test viatarget_env
ortarget_options
. #1097 - Agent: Continued development related to upcoming features. #1090, #1091
- CLI/Service: Updated multiple first-party and third-party Python dependencies. #1086
- CLI: Changed job templates to replace existing notifications for the unique report container. #1084
- Service: Added more context to Azure DevOps errors. #1082
- Service: Notification secrets are now deleted from Azure KeyVault upon notification deletion. #1085