Release Notes for Open-AudIT v7.0.1
Released - 2026-11-10
Linux SHA256: 626fbbb923a2bb11f93a1fb20ca4c630f0afa1dff2ca4cac10d80bac989303ae
Windows SHA256: a82fc73fa48ca3166aa294b98afa84a691134678ca20d7ef1e8fb97eea25a544
This is our first Windows release for the 7.x series. Along with some feedback from the Linux 7.0.0 we are releasing 7.0.1 for both platforms.
Upgrading - Open-AudIT 7.0.1 upgrades in place from 7.0.0 (take a database backup first). The upgrade adds two new benchmark history settings, delete_noncurrent_benchmark and feature_benchmarks_expire_noncurrent, and bumps the version to 7.0.1. There are no new database tables.
Version | Type | Collection | Description |
|---|---|---|---|
All | Improvement | Discoveries | Windows host - default the discovery queue limit to 4 on Windows client editions |
All | Improvement | Discoveries | WinRM - retry NTLM with the NetBIOS domain, and fall back to the computer name, when a DNS domain is rejected |
All | Improvement | Discoveries | WMIC - fall back to a usable domain so local Windows accounts authenticate |
All | Bug Fix | Devices | Windows audit result is posted as raw bytes so it is no longer double-encoded |
Enterprise | Bug Fix | Clouds | A Cloud can be viewed with decrypt_credentials off, with the secret field removed |
All | Bug Fix | Discoveries | Recover scanned-but-abandoned IPs into devices so a discovery can finish, and recover stalled queue workers from the scheduled task |
All | Bug Fix | Discoveries | Excluded IPs are honored for ping-discovered hosts |
All | Improvement | Discoveries | Blocking probes capped with a shared timeout, and the nmap usability probe cached per process with a longer timeout |
All | Bug Fix | Discoveries | The discovery read page counts devices and icons to match the Devices tab |
All | Improvement | Devices | SNMP audit - collect disk and processor components, CPU count and memory from HOST-RESOURCES-MIB |
All | Improvement | Devices | ESXi audit over the SOAP API - network interfaces and more of the audit_esxi.sh data |
All | Bug Fix | Devices | Cap and silence the legacy smartctl disk probe for Linux |
All | Improvement | Credentials | Show the username and password fields on the credentials read page for VMware credentials |
Enterprise | New Feature | Benchmarks | Word compliance Benchmarks report with per-policy time series charts |
Enterprise | New Feature | Directories | Word security Benchmarks report of the directory benchmark results |
Enterprise | Improvement | Benchmarks | Benchmark (STIG/SCAP) results keep history via a current flag, with two new settings to control retention |
Enterprise | Bug Fix | Benchmarks | Create the benchmark header when storing STIG/MSSB results, and link the Being Benchmarked widget to the right device list |
Enterprise | Improvement | People | Link the manager column and stat widgets to the matching person and filtered views, and offer every column in the picker |
Enterprise | Improvement | People | Store the AD user DistinguishedName in people.ou |
Enterprise | Bug Fix | Directories | Directory submissions fail loudly with a 400 on bad input |
Enterprise | New Feature | Vulnerabilities | Execute a single vulnerability from its read page |
Enterprise | Improvement | Vulnerabilities | Stream rows and batch CVE updates to stop memory exhaustion, and keep devices.cve a clean, de-duplicated list |
All | Improvement | Users | Prefill the current password for a user who has not changed it from their username, so the forced change is one step |
All | Improvement | Dashboards | Create form - build the widget grid from the chosen layout, stop repeating the widget type, align the grid and buttons |
All | Bug Fix | GUI | Underline links in alerts, allow a trusted red span in alert text, fix the device IP-address section toggle, and resolve device icons under the front-controller path |