2022.1.31 Maintenance Release
  • 20 Nov 2024
  • Dark
    Light
  • PDF

2022.1.31 Maintenance Release

  • Dark
    Light
  • PDF

Article summary

Release Notes

Bug Fixes

This maintenance release of IAP includes fixes for bugs that were reported to Itential Product Support.

Key ID Release Note
ENG-2932 When importing a pre-built workflow to overwrite an existing workflow, the imported workflow remains in a draft state with validation errors or warnings until manually saved by the user. Applied a fix to processing workflows from pre-builts to always update the warnings and errors with the latest validation output.
ENG-2965 When providing a template without an id property to the update legacy template API endpoints, the resulting template is unusable in IAP. Updated the update/create legacy template endpoints to ensure the id property matches the provided name to prevent issues using the template. The update legacy template endpoints will return an error if no id is provided.
ENG-3034 When creating a JSON Form with a multi-select dropdown dependency, the dropdown fields would not populate correctly or display any options. Updated the rodeo-ui to ensure that any JSON Form with a dropdown dependency that contains special characters now functions correctly.
ENG-3143 Fixed the migration scripts for Configuration Manager to automatically execute on IAP startup.
ENG-3320 Some child job loop configurations involving JSTs would incorrectly report validation errors in the workflow validation API. Updated the validation method to correctly format JST related child job properties when validating a workflow.
ENG-4705 Transformation functions do not render as expected in JST Designer if there is a function within the transformation that contains double quotes in its name. Fixed the rendering issues when opening functions in JST Designer.
ENG-4854 If you open a corrupted transformation when you already have a transformation open in Automation Studio, and then attempt to delete the transformation, it will delete the document you already had open. Updated the delete transformation dialog to display and delete the correct transformation document.
ENG-4874 When checking the adapter status in the API after a JSON RPC connectivity issue, the adapter will display as degraded until it is restarted, regardless of current connectivity. Applied a fix in the NSO adapter that was causing the adapter to remain degraded even when connectivity was restored so that the adapter now returns to a connected state without needing a restart.
ENG-4941 When configuring the form elements in a dynamic form, there is no longer a UI crash when configuring a file upload field and then a dropdown on a JSON Form.
ENG-6688 When using the Golden Configuration feature in Compliance Manager to audit device configurations, line disparities were noted in the compliance report. Fixed an issue in Golden Configuration that would cause incorrect compliance failures when a line contained regular expressions.

Improvements

This section highlights featured improvements to functionality in this maintenance release.

Key ID Release Note
ENG-6829 IAP users with access to the LDAP adapter can now configure that adapter to perform single depth search in IAP Enterprise. Existing adapters will default to having a search scope of sub, keeping in line with their previous behavior.

Security Changes

This section highlights fixes and measures to prevent and minimize security risks and vulnerabilities.

Key ID Release Note
ENG-2819 Versions of semver prior to 7.0.0 are susceptible to ReDos (Regular Expression Denial of Service). Updated package-json and package-lock.json in Itential Core service to resolve ReDoS security vulnerability in semver package.
ENG-2820 Versions of semver prior to 7.0.0 are susceptible to ReDos (Regular Expression Denial of Service). Updated package-lock.json in Itential Core audit-trail to resolve ReDoS security vulnerability in semver package.
ENG-2822 Versions of fast-json-patch prior to 2.2.1 are vulnerable to prototype pollution. Fixed the vulnerability in @itential/lib-yang_parser by removing the dependency on fast-json-patch.
ENG-2824 Versions of micro-match prior to 4.0.8 are vulnerable to Inefficient Regular Expression (RegEx) Complexity. Updated package-lock.json in Itential Core iap-ui to resolve security vulnerability.
ENG-3331 Versions of pug-code-gen prior to 3.0.3 are vulnerable to Improper Control of Generation of Code ('Code Injection'). Updated package-json and package-lock.json in Itential Core pronghorn-core to resolve security vulnerability.

2022.1.31 Release Versions

Automation Platform Versions

component version
@itential/adapter-automation_gateway 4.26.1-2022.1.22
@itential/adapter-azure_aaa 1.4.2-2022.1.9
@itential/adapter-email 4.2.8-2022.1.7
@itential/adapter-ldap 2.13.8-2022.1.6
@itential/adapter-local_aaa 4.3.6-2022.1.3
@itential/adapter-nso 7.8.20-2022.1.49
@itential/adapter-radius 2.1.7-2022.1.3
@itential/app-admin_essentials 3.13.12-2022.1.68
@itential/app-ag_manager 1.18.3-2022.1.11
@itential/app-automation_catalog 2.12.11-2022.1.8
@itential/app-automation_studio 4.1.2-2022.1.158
@itential/app-configuration_manager 3.97.6-2022.1.59
@itential/app-form_builder 4.11.26-2022.1.5
@itential/app-json_forms 1.34.12-2022.1.40
@itential/app-jst 1.8.5-2022.1.50
@itential/app-mop 6.11.25-2022.1.23
@itential/app-nso_manager 2.23.3-2022.1.3
@itential/app-operations_manager 1.171.4-2022.1.198
@itential/app-service_catalog 3.12.0-2022.1.3
@itential/app-service_management 2.24.9-2022.1.10
@itential/app-template_builder 2.6.7-2022.1.11
@itential/app-workflow_builder 5.44.64-2022.1.81
@itential/app-workflow_engine 9.13.31-2022.1.134
@itential/audit-trail 1.5.3
@itential/database 1.11.11
@itential/event-system 1.1.31
@itential/itential-utils 2.10.1
@itential/logger 2.1.17
@itential/network 3.4.7
@itential/pronghorn-core 13.28.27-2022.1.151
@itential/search 1.1.25-2022.1.2
@itential/service 2.11.10
@itential/tags 3.1.12-2022.1.4

Was this article helpful?

Changing your password will log you out immediately. Use the new password to log back in.
First name must have atleast 2 characters. Numbers and special characters are not allowed.
Last name must have atleast 1 characters. Numbers and special characters are not allowed.
Enter a valid email
Enter a valid password
Your profile has been successfully updated.