fleet/changes
Ian Littman 2e58aabeee
Avoid unnecessary prepared statements in "select config from team" uncached queries (#30206)
For #30199. This is one of a few approaches to mitigate the issue the
customer is seeing.

This is SQLi-safe because we're dealing with an unsigned int parameter,
sprintf'd %d. Existing tests fully cover this path.

# Checklist for submitter

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Manual QA for all new/changed functionality
2025-06-23 21:09:55 -05:00
..
.keep Issue 1009 calculate diff software (#1305) 2021-07-08 13:57:43 -03:00
10606-cors-content-type Check content-type header when parsing cross-origin JSON (#29497) 2025-05-29 15:26:55 -04:00
10607-user-invite-race-condition Prevent user invite race condition (#29559) 2025-05-29 15:26:02 -04:00
10744-calendar-webhook-deleted-hosts Handle null HostID on calendar webhook endpoint (#30130) 2025-06-23 13:10:10 -04:00
21539-macos-redis-cluster Add macOS redis cluster support (#29433) 2025-05-27 11:38:59 -04:00
21947-oval-amzn-cleanup Clean up OVAL-sourced vulnerabilities reported on Amazon Linux 2 hosts prior to v4.56 (#30078) 2025-06-17 09:15:15 -05:00
21979-do-wipe-command 21979: Extended wipe end-point to allow for doWipe Win CMD (#29770) 2025-06-11 13:56:07 -04:00
22796-tooltip-flashing Fleet UI: Fix os settings tooltips from flashing during refetch (#30080) 2025-06-17 09:35:03 -04:00
25827-ios-refetch Delete iOS host refetch commands on MDM re-enrollment (#30158) 2025-06-23 10:14:00 -05:00
26375-fixes-duplicates-when-listing-software-titles Removes duplicates when listing software titles on 'All teams' (#29459) 2025-06-07 10:47:53 -04:00
26403-db-collation add a test that checks collation on new migrations (#29309) 2025-05-29 17:00:30 -04:00
26519-android Update 26519-android changelog (#29996) 2025-06-13 13:27:44 -04:00
27577-docker-install use a check for dir existence that doesn't set exit code 1 if the dir doesn't exist (#29952) 2025-06-13 10:26:54 -04:00
27951-font-size Fleet UI: Consistent font size across input fields and dropdowns (#29865) 2025-06-10 15:04:18 -04:00
27961-delete-calendar-event Fixed error deleting calendar event for non-existent user. (#30009) 2025-06-18 17:03:06 -05:00
28109-zero-result-when-running-policy Fixes 28109: UI bug related to policy reported results (#29562) 2025-05-30 16:34:52 -04:00
28224-team-name-null 28224: Added missing property to hosts/identifier/:id endpoint (#30097) 2025-06-23 13:01:33 -04:00
28259-software-auto-install-policy-activity add activity for automatic install policy creation (#29409) 2025-05-28 17:58:58 -04:00
28261-cvss-fallback Include non-primary CVSS scores from NVD when a primary score doesn'texist for a given CVSS version (#29199) 2025-05-29 13:03:19 -05:00
28338-apply-builtin-label Don't allow fleetctl apply with builtin label type (#29601) 2025-06-09 13:05:11 -04:00
28420-delete-object-gcp-interoperability Switched to DeleteObject for gcp interoperability (#29553) 2025-06-02 20:07:15 -05:00
28488-ms-utf16-endianness Fix Microsoft UTF16 endianness. (#29708) 2025-06-04 12:02:28 -06:00
28511-gitops-labels-hardware_serial Select hosts for gitops labels using hardware_serial (#29639) 2025-06-09 13:37:00 -04:00
28589-include-any-config-profile-verification Honor "include any" when querying profiles for verification (#29557) 2025-06-02 10:03:02 -04:00
28613-filesystem-log-tooltip Fixed tooltip not showing the correct log destination (#30124) 2025-06-19 10:39:07 -04:00
28687-fma-to-custom Uploading new installer to FMA turns FMA to custom package (#29959) 2025-06-13 11:36:10 -04:00
28821-frequency-to-interval UI: Query "frequency" -> "interval" (#29518) 2025-05-28 09:40:13 -07:00
28822-teams-dropdown-search UI: Make teams dropdowns searchable (#29928) 2025-06-11 15:11:12 -07:00
28823-UI-disable-EUMF-in-GOM UI: Disable MDM > End user migration section when GitOps mode enabled (#29968) 2025-06-12 15:21:01 -07:00
28865-disk-encryption-key-font UI: Update disk encryption key font (#29514) 2025-05-28 09:44:04 -07:00
28884-update-manage-query-automations-modal UI: Update query automations modal (#29517) 2025-05-28 13:06:33 -07:00
29044-add-missing-tooltip-styles Fixes 29044: UI bug due to missing style for tooltip. (#29556) 2025-05-30 19:02:58 -04:00
29078-update-opa-dependency Update OPA dependency to v1.4.2 (#29454) 2025-05-27 11:48:38 -05:00
29127-cis-no-require-username Remove username requirement from some CIS policies (#29842) 2025-06-12 15:22:35 -04:00
29220-fma-uninstall FMA uninstall (#29977) 2025-06-19 16:14:06 -05:00
29323-ingest-source-of-host-certificate DCLK: Ingest login-keychain certificates for macOS (#29555) 2025-06-11 11:13:44 -04:00
29325-apple-mdm-user-channel Apple mdm user channel initial support (#29882) 2025-06-16 16:46:38 -04:00
29349-custom-scep-challenges Add one-time challenge support to custom SCEP proxy (#29832) 2025-06-12 08:56:13 -05:00
29444-filter-hosts-by-batch-execution-status UI: Filter hosts by batch execution status (#29612) 2025-06-09 10:53:17 -07:00
29447-hide-broken-sort-ui Fleet UI: Remove unsupported sorting arrows from host software table (#29966) 2025-06-12 14:30:38 -04:00
29474-speedup-ade-enrollment-macos-release-device Speedup worker-based device release on ADE enrollment setup (#29892) 2025-06-16 13:14:25 -04:00
29506-ios-and-darwin-vpp stop erroring if a VPP app with darwin and ios versions is added to setup experience (#30187) 2025-06-20 13:17:25 -04:00
29632-macos-missing-uid-ingest Fixed broken macos users causing errors during query ingestion (#30128) 2025-06-23 09:37:35 -04:00
29715-bugfix-host-uuid-column-too-small Bugfix: wiped ADE-enrolled iOS device remains wiped on re-enroll (#29715) 2025-06-09 10:18:03 -04:00
29728-host-software-page-updates Fleet UI: Revamp host > software page with inventory/library tabs (#29759) 2025-06-20 15:02:22 -04:00
29739-make-password-spaces-consistent UI: Consistent password field styling (#29984) 2025-06-13 11:37:26 -04:00
29762-run-script-modal-free-tier 29762: Fixed bug with run script modal on FreeTier. (#30138) 2025-06-23 13:03:22 -04:00
29822-self-service-loading-error-state Fleet UI: Improved error and loading state for self-service page (#30042) 2025-06-16 11:23:19 -04:00
29823-26258-empty-host Host API: Return empty array instead of 404 for software filter not found (#30045) 2025-06-17 09:20:09 -04:00
30001-fix-manage-automations-bug Add null check to fix manage automations issue (#30154) 2025-06-19 14:51:49 -05:00
30066-policy-autofill-media-type Fix policy autofill using incorrect media-type for query (#30112) 2025-06-18 13:12:58 -04:00
30199-stmt-tweak Avoid unnecessary prepared statements in "select config from team" uncached queries (#30206) 2025-06-23 21:09:55 -05:00
30200-hide-sw-details-teams-dropdowns UI: Hide teams dropdown on software details pages in Primo mode (#30218) 2025-06-23 09:55:36 -07:00
fleetctl-outfile Adding optional parameter outfile to fleetctl package (#29579) 2025-06-12 10:25:40 -05:00
issue-28143-disable-ui-eula-upload-gitops disable uploading EULA in UI when gitops is enabled (#30174) 2025-06-23 14:27:33 +01:00
issue-29505-idp-premium-message fix typos and add premium feature message to idp integration page (#30079) 2025-06-19 12:34:53 +01:00
issue-29696-fix-truncation-mdm-server-url fix truncation of mdm server url value in about card (#30085) 2025-06-19 12:34:06 +01:00
issue-29827-update-ui-for-certs update host details cert card (#29827) 2025-06-13 13:00:41 +01:00
issue-30059-fix-no-delete-bootstrap Fix issue where you cant delete a bootstrap package (#30146) 2025-06-20 17:05:16 +01:00
issue-30063-fix-end-user-migration-enable Fix bug for not being to reenable end user migration in UI (#30106) 2025-06-20 17:04:30 +01:00
update-go-1.24.4 Update go to 1.24.4 and add some automation (#29954) 2025-06-13 13:08:14 -05:00