2022.1.36 Maintenance Release

Article summary

Did you find this summary helpful?

Thank you for your feedback!

Release Notes

This maintenance release of Itential Platform includes fixes for bugs that were reported to Itential Product Support.

Key ID	Release Note
ENG-9018	In a JSON Form with a table that has a custom key, adding a form element to the table and then changing the custom key no longer removes the added element.
ENG-9268	When collapsing a schema in JST Designer, any nested assignments disappear which allows users to create invalid duplicate assignments. Fixed the schema collapse issue to ensure assignments persist and prevent invalid assignments.
ENG-9478	Added ancestor-checking in the cancel jobs endpoint to only cancel the greatest ancestor within a batch, and removing any unnecessary compute without affecting cancellation results. This also mitigates the likelihood of runaway recursive looping into high memory usage.
ENG-10179	Added a type check to the JSON form dropdown to confirm source items are valid and prevent search issues in the Render JSON Schema task.
ENG-10263	Updated the `axios` dependency across Itential Platform to resolve XSS and SSRF vulnerabilities.

This section highlights fixes and measures to prevent and minimize security risks and vulnerabilities.

Key ID	Release Note
ENG-9964	When running security scans, it showed affected versions of `jsonpath-plus` in Studio were vulnerable to Remote Code Execution (RCE) risks. Upgraded the `jsonpath-plus` dependency to 10.3.0 or higher to resolve security vulnerability.
ENG-10286	When running security scans, it showed affected versions of the `axios` package in Pronghorn Core were vulnerable to Server Side Request Forgery (SSRF) risks. Updated `axios` to version 1.7.4 or higher to resolve security vulnerability.

component	version
itential/adapter-automation_gateway	4.26.1-2022.1.22
itential/adapter-azure_aaa	1.4.2-2022.1.11
itential/adapter-email	4.2.8-2022.1.7
itential/adapter-ldap	2.13.8-2022.1.6
itential/adapter-local_aaa	4.3.6-2022.1.3
itential/adapter-nso	7.8.20-2022.1.49
itential/adapter-radius	2.1.7-2022.1.3
itential/app-admin_essentials	3.13.12-2022.1.71
itential/app-ag_manager	1.18.3-2022.1.12
itential/app-automation_catalog	2.12.11-2022.1.9
itential/app-automation_studio	4.1.2-2022.1.175
itential/app-configuration_manager	3.97.6-2022.1.64
itential/app-form_builder	4.11.26-2022.1.5
itential/app-json_forms	1.34.12-2022.1.47
itential/app-jst	1.8.5-2022.1.52
itential/app-mop	6.11.25-2022.1.23
itential/app-nso_manager	2.23.3-2022.1.4
itential/app-operations_manager	1.171.4-2022.1.209
itential/app-service_catalog	3.12.0-2022.1.3
itential/app-service_management	2.24.9-2022.1.10
itential/app-template_builder	2.6.7-2022.1.11
itential/app-workflow_builder	5.44.64-2022.1.85
itential/app-workflow_engine	9.13.31-2022.1.142
itential/audit-trail	1.5.3
itential/database	1.11.11
itential/event-system	1.1.31
itential/itential-utils	2.10.1
itential/logger	2.1.17
itential/network	3.4.7
itential/pronghorn-core	13.28.27-2022.1.157
itential/search	1.1.25-2022.1.2
itential/service	2.11.10
itential/tags	3.1.12-2022.1.4

Was this article helpful?

Table of contents