Inventory of node artifact versions¶

This document lists available patch versions of Wallarm node 4.8 in different form-factors. You can track new patch version releases and plan timely upgrades based on this document.

All-in-one installer¶

History of updates simultaneously applies to the x86_64 and ARM64 (beta) versions of all-in-one installer.

How to migrate from DEB/RPM packages

How to migrate from previous all-in-one installer version

4.8.4 (2023-11-17)¶

Added support for NGINX Mainline 1.25.3 for musl-based Linux distributions
Fixed issues with bundled Python for musl-based Linux distributions

4.8.3 (2023-11-07)¶

Fixed issues with SELinux on certain Linux distributions, including Oracle Linux 9, Red Hat 9, and others that employ strict SELinux policies

4.8.2 (2023-11-03)¶

Improved detection of brute-force attacks
Added support for NGINX Mainline 1.25.3

4.8.1 (2023-10-30)¶

Bug fixes

4.8.0 (2023-10-19)¶

Initial release 4.8, see changelog

DEB/RPM packages for NGINX¶

How to upgrade

4.8.0 (2023-10-19)¶

Initial release 4.8, see changelog

Helm chart for Wallarm NGINX Ingress controller¶

How to upgrade

4.8.5 (2023-11-24)¶

Optimize Wallarm Cloud's export of brute, dirbust, and BOLA statistics to avoid delays in reaction to attacks under high request loads and numerous triggers

4.8.4 (2023-11-13)¶

Helm chart version of the NGINX Ingress controller bumped to 4.8.3
NGINX Ingress controller version bumped to 1.9.4
Fixed CVE-2022-4886, CVE-2023-5043 and CVE-2023-5044 in the controller image

4.8.3 (2023-10-30)¶

This release fixes CVE-2023-5363 and CVE-2023-44487 in the controller image

4.8.2 (2023-10-20)¶

Resolved statistics errors for denylisted requests connected with non-standard HTTP port (80) upstreams

4.8.1 (2023-10-19)¶

Added support for ARM64 processors
Fix the bug when Wallarm API token could not be applied by helm upgrade
Fix the following CVE in golang.org/x/net: CVE-2023-39325, CVE-2023-3978, CVE-2023-44487

4.8.0 (2023-10-19)¶

Initial release 4.8, see changelog

Helm chart for Sidecar¶

How to upgrade

4.8.1 (2023-11-15)¶

Optimize Wallarm Cloud's export of brute, dirbust, and BOLA statistics to avoid delays in reaction to attacks under high request loads and numerous triggers

4.8.0 (2023-10-19)¶

Initial release 4.8, see changelog
Added support for API tokens to create filtering nodes and connect them to the Cloud during solution deployment. With API tokens, you can control the lifetime of your tokens and enhance node organization in the UI by setting a node group name.

Node group names are set using the config.wallarm.api.nodeGroup parameter in values.yaml, with defaultSidecarGroup as the default name. Optionally, you can control the names of node groups based on the applications' pods using the sidecar.wallarm.io/wallarm-node-group annotation.
Fix CVE-2023-38039

NGINX-based Docker image¶

How to upgrade

4.8.1-1 (2023-11-03)¶

Improved detection of brute-force attacks

4.8.0-1 (2023-10-19)¶

Initial release 4.8, see changelog

Envoy-based Docker image¶

How to upgrade

4.8.0-1 (2023-10-19)¶

Initial release 4.8, see changelog

Amazon Machine Image (AMI)¶

How to upgrade

4.8.1-1 (2023-12-01)¶

Optimize Wallarm Cloud's export of brute, dirbust, and BOLA statistics to avoid delays in reaction to attacks under high request loads and numerous triggers
The wallarm-appstructure package bumped to 1.7.6
Removed apt cache for Vim package, which previously provoked false positive vulnerability detection by AWS Inspector

4.8.0-1 (2023-10-19)¶

Initial release 4.8, see changelog

Google Cloud Platform Image¶

How to upgrade

wallarm-node-4-8-20231019-221905 (2023-10-19)¶

Initial release 4.8, see changelog