Download osquery 5.24.1

5.24.1
Security
- Update the Mozilla CA certificate bundle (removes eMudhra certificates) (#9206)
- Add _FORTIFY_SOURCE, CET/BTI on Linux, and explicit Windows mitigations (#9167)
- Disable TLS 1.0 and 1.1 in curl_certificate and the OpenSSL build (#9192, #9202)
- Limit decompressed JetBrains plugin metadata size (#9211)
- Disable shell command macro expansion in librpm (#9223)
- Fix bounds checks and traversal for package BOM paths (#9164, #9184, #9190)
- Correct the prefetch validation size check (#9177)
- Guard against npos when joining arguments in parseProcCmdline (#9176)
- Guard against truncated drive fields (#9218)
- Check registry value size before decoding fixed-width types (#9220)
Bug Fixes
- Restore BPF tables removed in 5.24.0 (#9225)
- Fix chrome_extensions state for modern Chromium profiles (#9170)
- Fix Linux Audit argument reconstruction (#9208)
- Fix an out-of-bounds read when comparing an empty path in PathSet (#9188)
- Fix extension-table links in shell warnings (#9186)
- Fix TLS connection reuse (#9199)
- Return the full result string from the carve() SQL function (#9191)
- Add a timeout around statfs() to handle hung filesystems (#9175)
- Keep host and instance UUIDs stable when the database is reset (#9203)
- Synchronize access to the custom flag map (#9195)
- Preserve IN constraints when xFilter runs again for the same plan (#9230)
- Record query performance when numeric monitoring is enabled (#9219)
- Register all foreign table specs with --enable_foreign (#9194)
- Serialize librpm global state in rpm_packages (#9173)
Documentation
- Make PacksTests.test_sharding independent of the shard cache (#9182)
- Make gpu_info and Sleuth Kit table specs available on Windows (#9210, #9212)
- Document Docker prerequisites for Linux tests (#9172)
- Fix the remote settings test walkthrough (#9161)
- Assorted documentation fixes (#9185)
Full Changelog: 5.24.0...5.24.1