From b8dc1e7249b31878c499786c032efce09e114258 Mon Sep 17 00:00:00 2001 From: Tim Smith Date: Wed, 22 May 2024 18:55:19 -0700 Subject: [PATCH] Add 11.6 release notes New week. New release Signed-off-by: Tim Smith --- releases/2024-05-28-mondoo-11.6-is-out.md | 80 +++++++++++++++++++++++ 1 file changed, 80 insertions(+) create mode 100644 releases/2024-05-28-mondoo-11.6-is-out.md diff --git a/releases/2024-05-28-mondoo-11.6-is-out.md b/releases/2024-05-28-mondoo-11.6-is-out.md new file mode 100644 index 000000000..c8623ec89 --- /dev/null +++ b/releases/2024-05-28-mondoo-11.6-is-out.md @@ -0,0 +1,80 @@ +--- +slug: mondoo-11.6-is-out/ +title: Mondoo 11.6 is out! +description: Announcing the 11.6 release of Mondoo, with FOO, BAR, BAZ, and more! +author: Tim Smith +author_title: Mondoo Core Team +author_url: https://github.com/tas50 +tags: [release, mondoo] +--- + +## ๐Ÿฅณ Mondoo 11.6 is out! This release includes FOO, BAR, BAZ, and more! + +Get this release: [Installation Docs](https://mondoo.com/docs/cnspec/) | [Package Downloads](https://releases.mondoo.com/cnspec/) | [Docker Container](https://hub.docker.com/r/mondoo/cnspec) + +--- + +## ๐ŸŽ‰ NEW FEATURES + +### Fine grained cloud asset scanning + +DEETS + +### Space wide software vulnerability page + +DEETS + +## ๐Ÿงน IMPROVEMENTS + +### CIS Microsoft 365 Foundations Benchmark 3.1.0 + +DEETS + +### Alpine 3.20 support + +DEETS + +### Fedora 41 CVE detection support + +DEETS + +### Oracle Unbreakable Enterprise Kernel CVE detection + +https://github.com/mondoohq/server/pull/8342 + +### Improved Arista EOS support + +- New resource defaults +- Expanded asset overview information +- Grouping under network devices in inventory +- `asset.runtime` is now `arista` + +### Resource improvements + +#### aws.eks.cluster + +- New `nodeGroups` field + +#### aws.eks.nodegroup + +- New resource for AWS EKS node groups + +#### aws.sqs.queues + +- New resource for [Amazon Simple Queue Service (SQS)](https://aws.amazon.com/sqs/) queues + +## ๐Ÿ› BUG FIXES AND UPDATES + +- Prevent the `tls.ciphers` resource from hanging if the server returns a [Hello Retry Request](https://www.rfc-editor.org/rfc/rfc8446#section-4.1.4). +- Improve reliability of TLS scans by using a secp256r1 curve in the hello, which some servers require. +- Scan all images in Amazon ECR registries, not just those with tags. +- Improve rendering of CVEs with short descriptions. +- Don't show the "Copy Table" button on the Asset Software tab when there is no table shown. +- Add `asset.kind` value on Arista EOS devices. +- Ensure HTTP Security do not apply to non-host systems that include a TLS certificate. +- Group Arista EOS devices under "Network Devices" in the console inventory list. +- Improve asset overview data for Arista EOS devices. +- Fix incorrect CVE pagination on assets. +- Fix display of remote code exploitation risk badges +- Fix display of tool tips in light mode. +- Fix sorting of CVEs and Advisories in the Assets pages.