2023.2.12 Maintenance Release
  • 17 Dec 2024
  • Dark
    Light
  • PDF

2023.2.12 Maintenance Release

  • Dark
    Light
  • PDF

Article summary

Release Notes

Bug Fixes

This maintenance release of IAP includes fixes for bugs that were reported to Itential Product Support.

Key ID Release Note
ENG-4248 When creating a large number of integrations from multiple integration models, IAP would take a long time to restart. To resolve this issue, modified the in-memory global config object within Itential Core to reduce high CPU usage and support a quick start-up time.
ENG-4676 When the systemProps.shutdownTimeout property is missing in Profiles in Admin Essentials, it causes Workflow Engine to orphan the event listener task. Consequently, the event listener task runs continuously and never completes. To fix this issue, added a default shutdownTimeout property of 3 seconds if the systemProps.shutdownTimeout property does not exist on Profiles. The shutdownTimeout property is used to determine how long to wait before a service shuts down to perform clean-up.
ENG-6440 Fixed an issue where public RSA Keys going stale would never be updated, resulting in users not being able to verify JSON Web Tokens (JWT).
ENG-6533 When running a transformation, nested default and const keywords are not being used if an assignment is made from the parent object. Updated the logic for obtaining instance data to check for nested default and const values within incoming schemas of type object.
ENG-6603 When adding a schema combination with options to a JSON Form and setting the format to oneOf, the required fields within the schema combination option were not working correctly. Modified the required array for schema combinations to respond to all formats instead of just oneOf.
ENG-7126 The Documentation links in Configuration Manager were invalid. Fixed the links to the documentation.
ENG-7158 When trying to work custom manual tasks in Pre-built Wizard Rediscover, the manual tasks failed. Modified the call in Workflow Engine to use an absolute path instead of a relative path when running custom manual tasks written in angular.
ENG-7438 When running a transformation that contains schema keys with special characters without a "default" keyword set, the transformation fails when the revertToDefaultValue option is set to true. Updated the run transformation logic to ensure the provided input is used in this case.
ENG-7453 When opening a function that is used as a function step, the step object is corrupted which causes runtime issues if the step is part of a conditional path, e.g. if...else or switch paths. Updated the open function logic to prevent the step object from being corrupted.
ENG-7732 When more than one workflow tab is open and the user swtiches between tabs, all unsaved data on the initial tab is deleted while viewing other tabs. To fix this issue, reorganized workflow and tab render logic. Unsaved workflow changes now persist between workflow tabs and non-workflow tabs to workflow tabs.
ENG-7861 Upon editing a newly saved Command Template or Analytic Template in Projects, the template editor UI would go blank while the remainder of Projects would remain functional. To fix this issue, added a check to the template URL after an asset is saved. The template editor in Projects now works as expected after editing a newly saved template.

IAP Security Changes

This section highlights fixes and measures to prevent and minimize security risks and vulnerabilities.

Key ID Release Note
ENG-1831 When running security scans, it shows affected versions of the adapter-nso package.json were vulnerable to Command Injection. A fix was applied to the NSO adapter by updating ssh2 to version 1.0.0.
ENG-7337 Versions of dompurify prior to 2.5.4 are susceptible to Prototype Pollution. Updated rodeo-ui in Configuration Manager to resolve security vulnerability.
ENG-7418 Versions of dompurify prior to 2.5.4 are susceptible to Prototype Pollution. Updated rodeo-ui in Automation Studio to resolve security vulnerability.
ENG-7496 Versions of the json-path.plus package prior to 10.2.0 are susceptible to Remote Code Execution (RCE) due to improper input sanitization. Updated json-schema-faker in Automation Studio to support the latest version of json-path.plus and resolve security vulnerability.

2023.2.12 Release Versions

Automation Platform Versions

component version
@itential/adapter-automation_gateway 4.31.4-2023.2.1
@itential/adapter-azure_aaa 1.7.5-2023.2.1
@itential/adapter-email 4.2.20-2023.2.0
@itential/adapter-ldap 2.14.3-2023.2.2
@itential/adapter-local_aaa 4.5.2-2023.2.0
@itential/adapter-nso 7.9.4-2023.2.13
@itential/adapter-radius 2.2.2-2023.2.0
@itential/app-admin_essentials 5.4.10-2023.2.17
@itential/app-ag_manager 1.20.3-2023.2.1
@itential/app-automation_catalog 2.13.7-2023.2.1
@itential/app-automation_studio 4.69.3-2023.2.166
@itential/app-configuration_manager 3.117.5-2023.2.25
@itential/app-form_builder 4.15.3-2023.2.4
@itential/app-json_forms 1.42.3-2023.2.19
@itential/app-jst 1.15.11-2023.2.9
@itential/app-lifecycle_manager 1.38.4-2023.2.15
@itential/app-mop 6.21.1-2023.2.14
@itential/app-nso_manager 2.25.2-2023.2.2
@itential/app-operations_manager 1.215.10-2023.2.47
@itential/app-service_catalog 3.14.1-2023.2.3
@itential/app-service_management 3.0.2-2023.2.3
@itential/app-template_builder 2.9.1-2023.2.8
@itential/app-workflow_builder 5.55.2-2023.2.14
@itential/app-workflow_engine 11.9.6-2023.2.37
@itential/database 2.0.8
@itential/iap-ui 1.14.3-2023.2.7
@itential/itential-utils 3.2.1
@itential/logger 3.1.2
@itential/network 4.1.5
@itential/pronghorn-core 15.8.10-2023.2.54
@itential/search 1.3.3-2023.2.0
@itential/service 3.1.17
@itential/tags 3.2.2-2023.2.0

Was this article helpful?

Changing your password will log you out immediately. Use the new password to log back in.
First name must have atleast 2 characters. Numbers and special characters are not allowed.
Last name must have atleast 1 characters. Numbers and special characters are not allowed.
Enter a valid email
Enter a valid password
Your profile has been successfully updated.