Resolved issues

Prev Next

The following issues were resolved in the Endpoint Security Agent (HX) 36.30.37 release.

Tracking number

Summary

ENDPT-228812

The agent installation process aborts when EDRF (xclient) is detected on the system.

ENDPT-112757

Resolved an issue with the Event sensor that prevented the agent from receiving alerts. The agent now restarts the sensor when the connection between it and the sensor is dropped due to errors occurring in the sensor. This connection provides events to the agent, which are subsequently processed by RTID to determine IOC matches. If matches occur, then an alert is generated.

ENDPT-226236

Resolved an issue where malware detected in a filesystem path from a scanned registry value caused Malware Protection to fail in a Windows environment.

ENDPT-227734

The agent has been upgraded to utilize OpenSSL 3.5.0.

ENDPT-227817

ENDPT-228346

Resolved an issue relating to several CVEs in GoLang. The Linux sensor (rte-sensor) has been upgraded to version 5. This enhancement improves stability for GoLang standard library updates and resolves a wide range of CVEs.

ENDPT-228348

Resolved an issue where access to the fekern.sys driver is now restricted to the local system. Memory audits now restrict dumping of virtual memory for critical Windows processes.

ENDPT-227971

Resolved an issue where a hang occurred in the agent during shutdown. This was because the operating system still registered the fekern.sys as being loaded.

ENDPT-227561

Resolved an issue where Exploit Guard initialization could cause Chrome to hang on Windows when Chrome is used to view pdf files.

ENDPT-228071

ENDPT-229261

Resolved a bugcheck (BSOD) where deferencing elements within an empty list element in the MD5 file event cache caused a bugcheck in the fekern.sys.

ENDPT-228560

Resolved an issue where user-defined proxies were not connecting to client machines in IPv6 environment when configured in HX policies. User-defined proxies are now correctly handled for IPv6 network connections to HX.

ENDPT-228688

ENDPT-225809

Agent/HX communication now supports larger RSA key lengths of 4096 bits.

ENDPT-229282

Resolved an issue where a process hang may occur during agent shutdown (either as a result of an agent restart or upgrade) when the agent's network filters are being removed on Windows. This rare issue is caused by systems handling a large number of short-lived network connections.

ENDPT-229391

Resolved an issue where a memory leak stemmed from cleanup activity when Real Time Indicator Detection (IOC) content was loaded, and existing content was unloaded.