| VMware Carbon Black Cloud 2.15.1 | 03 OCTOBER 2023 | Build 2.15.1 Check for additions and updates to these release notes. |
What's New
The 2.15.1 Carbon Black Cloud Linux Sensor is a maintenance release focusing on Amazon Linux 2 Graviton support, Rocky Linux Support, and minor OS distribution updates. As a continuous improvement, this sensor release also addresses major edge cases and defects.
OS Distribution Updates
Sensor support for the following minor OS updates are also included as part of this release:
-
Debian 11.7
-
Debian 12.0
-
OpenSUSE 15.5
-
SLES 15SP5
Product Features
-
Amazon Linux 2 Support for Graviton
2.15.1 sensor now supports Amazon Linux 2 on Graviton ARM architecture, removing the dependency of a higher glibc library version. Please refer to the VMware Carbon Black Cloud Installation Guide for more information on how to use the installer on rpm.
-
Rocky Linux Support
2.15.1 sensor now supports Rocky Linux versions 8.8 and 9.2. The sensor’s functionality remains intact with all other supported features. Users can now transition their endpoints running on older CentOS versions to the supported Rocky Linux versions. Please refer to the VMware Carbon Black Cloud Linux Sensor Operating Environment Requirements documentation for more information on the supported kernel versions.
Resolved Issues
This section lists the defects that were resolved in the 2.15.1 Carbon Black Cloud Linux Sensor.
-
EA-23618 and PSCLNX-13065: Resolved an issue when the 2.15.0 sensor was unable to download the upgrade package in the allotted 3 minute timeframe
Sensor now has the increased timeout limit from 3 minutes to 20 minutes allowing more time for download.
-
PSCLNX-12847: Unable to switch back to Carbon Black Cloud environment from Sensor Gateway Greenfield after upgrade to 2.15.0 from a 2.14.0
Users can now switch back to the Carbon Black Cloud environment after performing an upgrade to 2.15.0 from a 2.14.0 or earlier sensor that is running on a greenfield sensor gateway.
-
PSCLNX-12759: RHEL 9.2 issue with the install script
Resolved an issue on RHEL 9.2 distribution when install script prints a warning stating quarantine failure. Install script now identifies the iptables utility correctly.
Known Issues
This section lists the known issues and limitations present in the Carbon Black Cloud 2.15.1 Linux Sensor.
-
PSCLNX-12620: When the sensor is installed in bypass mode and bypass is disabled after install, local scan does not run
-
PSCLNX-10923: Sensor might have some leftover files running after sensor shutdown
-
PSCLNX-10980: On kernel module distros, banned binaries are not allowed to execute even after the sensor shutdown
The expected behavior is for the sensor to allow the blocked binary after sensor shutdown.
-
PSCLNX-11089: A banned script results in a "Failed to terminate" error message
Execution of a banned script results in "Failed to terminate" error message in the threat hunter logs, and generates duplicate alerts.
-
PSCLNX-12734: Warning messages printed in logs
Warning messages such as “remove failed: No such file or directory” printed in logs after sensor uninstall on the rpm based systems.
-
PSCLNX-12772: Sensor cannot collect mount point information for a container
