VMware Carbon Black Cloud 2.14.1 | 24 MAY 2023 | Build 2.14.1 Check for additions and updates to these release notes. |
VMware Carbon Black Cloud 2.14.1 | 24 MAY 2023 | Build 2.14.1 Check for additions and updates to these release notes. |
This release includes bug fixes from the previous releases.
OS Distribution Updates
Support for the following minor OS updates are also included as part of this release:
Oracle 9.1
This section lists defects that have been resolved in the 2.14.1 Carbon Black Cloud Linux Sensor.
EA-22029: Fixed an issue when kernel module crash was caused by a memory reference issue
This impacted the sensor upgrade.
Associated with: PSCLNX-10655.
EA-22121, EA-21895: Fixed a kernel crash in event_collector module
Associated with: PSCLNX-12093.
EA-22349: Missing OS version information for Oracle Linux 9.0
Fixed the missing OS version information for Oracle Linux 9.0 on the sensor details page of the CBC console.
Associated with: PSCLNX-11569.
EA-22212: Fixed a file descriptor leak on failed upgrades that prevents the sensor from communicating to the backend
Added warning in installer if /usr/bin/gpg does not exist.
Associated with: PSCLNX-11593.
EA-19584, EA-19593, EA-22028: Fixed the creation of zombie/dead process on Ubuntu
Associated with: PSCLNX-11611.
PSCLNX-11588: Fixed segfault during shutdown or entering bypass
PSCLNX-11877: Fixed an issue where the sensor could get the wrong path for a bind mount
PSCLNX-11669: Fixed an issue with the event collector
Fixed an issue where, after the sensor uninstall, the event collector is still in use and cannot be removed.
The following table lists the known issues and limitations present in the Carbon Black Cloud 2.14.1 Linux Sensor.
PSCLNX-10923: Sensor might have some leftover files running after sensor shutdown
PSCLNX-10980: On kernel module distros, banned binaries are not allowed to execute even after the sensor shutdown
The expected behavior is for the sensor to allow the blocked binary after sensor shutdown.
PSCLNX-11089: A banned script results in a "Failed to terminate" error message
Execution of a banned script results in "Failed to terminate" error message in the threat hunter logs, and generates duplicate alerts.
PSCLNX-10216: Upgrading from sensor versions 2.7.1 and older might fail in some situations because the cbagentd service fails to stop
Customers experiencing this issue need to uninstall the sensor and reinstall the latest version.