2023.2.12 Maintenance Release
- 17 Dec 2024
-
DarkLight
-
PDF
2023.2.12 Maintenance Release
- Updated on 17 Dec 2024
-
DarkLight
-
PDF
Article summary
Did you find this summary helpful?
Thank you for your feedback
Release Notes
Bug Fixes
This maintenance release of IAP includes fixes for bugs that were reported to Itential Product Support.
Key ID | Release Note |
---|---|
ENG-4248 | When creating a large number of integrations from multiple integration models, IAP would take a long time to restart. To resolve this issue, modified the in-memory global config object within Itential Core to reduce high CPU usage and support a quick start-up time. |
ENG-4676 | When the systemProps.shutdownTimeout property is missing in Profiles in Admin Essentials, it causes Workflow Engine to orphan the event listener task. Consequently, the event listener task runs continuously and never completes. To fix this issue, added a default shutdownTimeout property of 3 seconds if the systemProps.shutdownTimeout property does not exist on Profiles. The shutdownTimeout property is used to determine how long to wait before a service shuts down to perform clean-up. |
ENG-6440 | Fixed an issue where public RSA Keys going stale would never be updated, resulting in users not being able to verify JSON Web Tokens (JWT). |
ENG-6533 | When running a transformation, nested default and const keywords are not being used if an assignment is made from the parent object. Updated the logic for obtaining instance data to check for nested default and const values within incoming schemas of type object. |
ENG-6603 | When adding a schema combination with options to a JSON Form and setting the format to oneOf , the required fields within the schema combination option were not working correctly. Modified the required array for schema combinations to respond to all formats instead of just oneOf . |
ENG-7126 | The Documentation links in Configuration Manager were invalid. Fixed the links to the documentation. |
ENG-7158 | When trying to work custom manual tasks in Pre-built Wizard Rediscover, the manual tasks failed. Modified the call in Workflow Engine to use an absolute path instead of a relative path when running custom manual tasks written in angular . |
ENG-7438 | When running a transformation that contains schema keys with special characters without a "default" keyword set, the transformation fails when the revertToDefaultValue option is set to true . Updated the run transformation logic to ensure the provided input is used in this case. |
ENG-7453 | When opening a function that is used as a function step, the step object is corrupted which causes runtime issues if the step is part of a conditional path, e.g. if...else or switch paths. Updated the open function logic to prevent the step object from being corrupted. |
ENG-7732 | When more than one workflow tab is open and the user swtiches between tabs, all unsaved data on the initial tab is deleted while viewing other tabs. To fix this issue, reorganized workflow and tab render logic. Unsaved workflow changes now persist between workflow tabs and non-workflow tabs to workflow tabs. |
ENG-7861 | Upon editing a newly saved Command Template or Analytic Template in Projects, the template editor UI would go blank while the remainder of Projects would remain functional. To fix this issue, added a check to the template URL after an asset is saved. The template editor in Projects now works as expected after editing a newly saved template. |
IAP Security Changes
This section highlights fixes and measures to prevent and minimize security risks and vulnerabilities.
Key ID | Release Note |
---|---|
ENG-1831 | When running security scans, it shows affected versions of the adapter-nso package.json were vulnerable to Command Injection. A fix was applied to the NSO adapter by updating ssh2 to version 1.0.0. |
ENG-7337 | Versions of dompurify prior to 2.5.4 are susceptible to Prototype Pollution. Updated rodeo-ui in Configuration Manager to resolve security vulnerability. |
ENG-7418 | Versions of dompurify prior to 2.5.4 are susceptible to Prototype Pollution. Updated rodeo-ui in Automation Studio to resolve security vulnerability. |
ENG-7496 | Versions of the json-path.plus package prior to 10.2.0 are susceptible to Remote Code Execution (RCE) due to improper input sanitization. Updated json-schema-faker in Automation Studio to support the latest version of json-path.plus and resolve security vulnerability. |
2023.2.12 Release Versions
Automation Platform Versions
component | version |
---|---|
@itential/adapter-automation_gateway | 4.31.4-2023.2.1 |
@itential/adapter-azure_aaa | 1.7.5-2023.2.1 |
@itential/adapter-email | 4.2.20-2023.2.0 |
@itential/adapter-ldap | 2.14.3-2023.2.2 |
@itential/adapter-local_aaa | 4.5.2-2023.2.0 |
@itential/adapter-nso | 7.9.4-2023.2.13 |
@itential/adapter-radius | 2.2.2-2023.2.0 |
@itential/app-admin_essentials | 5.4.10-2023.2.17 |
@itential/app-ag_manager | 1.20.3-2023.2.1 |
@itential/app-automation_catalog | 2.13.7-2023.2.1 |
@itential/app-automation_studio | 4.69.3-2023.2.166 |
@itential/app-configuration_manager | 3.117.5-2023.2.25 |
@itential/app-form_builder | 4.15.3-2023.2.4 |
@itential/app-json_forms | 1.42.3-2023.2.19 |
@itential/app-jst | 1.15.11-2023.2.9 |
@itential/app-lifecycle_manager | 1.38.4-2023.2.15 |
@itential/app-mop | 6.21.1-2023.2.14 |
@itential/app-nso_manager | 2.25.2-2023.2.2 |
@itential/app-operations_manager | 1.215.10-2023.2.47 |
@itential/app-service_catalog | 3.14.1-2023.2.3 |
@itential/app-service_management | 3.0.2-2023.2.3 |
@itential/app-template_builder | 2.9.1-2023.2.8 |
@itential/app-workflow_builder | 5.55.2-2023.2.14 |
@itential/app-workflow_engine | 11.9.6-2023.2.37 |
@itential/database | 2.0.8 |
@itential/iap-ui | 1.14.3-2023.2.7 |
@itential/itential-utils | 3.2.1 |
@itential/logger | 3.1.2 |
@itential/network | 4.1.5 |
@itential/pronghorn-core | 15.8.10-2023.2.54 |
@itential/search | 1.3.3-2023.2.0 |
@itential/service | 3.1.17 |
@itential/tags | 3.2.2-2023.2.0 |
Was this article helpful?