New Features, Improvements and Enhancements
New Operating System Support: Ubuntu 24.04
This release introduces support for Ubuntu 24.04 across most engines. The majority of engines are now compatible and operational on this new operating system. MetaDefender Core now also supports CIS Level 2 system hardening benchmarks on this OS. For more details, refer to $link[page,367648,auto$].
Few engines still require additional time for full compatibility with Ubuntu 24.04:
- Adaptive Sandbox
- File-based Vulnerability Assessment
- Reputation
- YARA
Further updates will be provided in future releases.
New Operating System Support: Windows Server 2025
This release of MetaDefender Core also introduces official support for Windows Server 2025, expanding platform compatibility for our suite.
Few engines still require additional time for full compatibility with Windows Server 2025:
- Adaptive Sandbox
- File-based Vulnerability Assessment
- Reputation
- YARA
Further updates will be provided in future releases.
Support Advanced Log Configurations on Web Console
Starting with MetaDefender Core version 5.15.1, the following advanced log configurations including local time zone, Common Event Format, product logs and syslog settings are supported.
Most settings, except for the product file path, do not require a service restart to take effect.
The product now offers three means of log configurations:
- Through MetaDefender Core web console ($link[page,367602,auto$]).
- Using REST API endpoints ($link[ref,7342,PUT - Update log configuration,putlogfileconfig]).
- Enrolling and managing with My OPSWAT Central Management.
Processing History Export as CSV Supports More Filters
Added support for additional filters in the CSV export functionality for processing history. Users can now apply the following filters for CSV export:
- Result
- User
- Status
- Request Type (Batch, File, Object)
REST API Enhancements
Introduced a new field, post_processing.sanitization_details.status, to the response JSON when retrieving processing results. This field indicates the status of the sanitization process with the following possible values:
Queued: The file is currently waiting in the MetaDefender Core's queue before being sent to the Deep CDR engine.Processing: The file has been sent to the Deep CDR engine and is currently being processed.Finished: The Deep CDR process has completed, with additional states available for further inspection.
Impacted REST API endpoints:
- $link[ref,7342,GET /file/{data ID},fileanalysisget]
- $link[ref,7342,POST /file/sync,fileanalysissyncpost]
- $link[ref,7342,GET /hash/{hash value},hashget]
- $link[ref,7342,GET /file/archive/{data ID},fileanalysisgetallchildfiles]
Further Enhancements
1) Optimized PostgreSQL Query Performance: Enhanced the PostgreSQL query to improve performance when handling a large number of batches, resulting in faster data retrieval and processing.
2) Enhanced Connection Persistence to My OPSWAT Central Management: Improved handling of connection persistence for MetaDefender Core to My OPSWAT Central Management (MOCM) in specific edge cases, enhancing user experience by avoiding the need for re-enrollment. Key scenarios addressed include:
- When the machine loses internet connectivity to MOCM and the service is subsequently restarted.
- When the system's root certificates are corrupted or invalid and are later updated or restored.
3) A tool for Admin to remove an existing PIN code or set a new one. More details at $link[page,368402,auto$].
4) Audit Log covers activities related to API $link[ref,7342,PUT - Update list of custom response headers,configputcustomresponseheader].
5) Extended the option "Fallback file type detection to current extension" to Adaptive Sandbox.
6) No longer processing zero-byte files with Adaptive Sandbox.
7) Enhanced engineprocess's thread pool mechanism to achieve immediate response post-termination and improved thread reusability. This increases the total number of tasks handled over time. Nevertheless, at the cost of performance boost, it could increase the load on the service if clients frequently request scan results.
Security Enhancements
Upgraded libraries for vulnerability fixes:
- Libxml2 v2.14.5
- 7z v25.0
- OpenLDAP v2.6.10
- Redis++ v1.3.14
Bug Fixes
- Resolved an issue that caused slowdowns in warehouse updates for the Executive Report and high CPU consumption when the service received a large volume of requests in a short period.
- Resolved an issue that caused Executive Report data to freeze following a sudden shutdown of the service.
- Resolved an issue that caused unnecessary retry attempts when Adaptive Sandbox returned a SKIPPED result.
- Resolved an issue where slots in the queue for Batch processing were not released and temporary files were not cleaned up when the client connection was closed, resulting in improper transmission of error responses.
- Resolved a potential issue that could cause the service to crash due to incompatibility between a library with Qt6.