IAG 4.3.2 Maintenance Release

Prev Next

Automation Gateway Versions

component version
automation_gateway 4.3.16

Bug Fixes

This maintenance release of IAG/4.3.2 includes fixes for bugs that were reported to Itential Product Support.

Key ID Release Note
ENG-6097 When using gNOI reboot/cancel_reboot, the subcomponents object holds an unexpected key. Applied a fix to the params definition within reboot/cancel_reboot.reboot_status, the GRPC execute panel, and APIs to ensure the input is validated as a proper JSON object to match requirements.
ENG-7702 Fixed an issue where the browser window would stop working when opening the Execution History tab with large result sets. Added a feature that allows customers to download large results directly to a log, thereby preventing display errors.
ENG-8925 When upgrading the rodeo package to the latest version, IAG encountered several UI styling issues. Applied fixes to address UI inconsistencies, ensuring a correct and consistent display of the UI.

Security Changes

This section highlights fixes and measures to prevent and minimize security risks and vulnerabilities.

Key ID Release Note
ENG-7441 When running security scans, it showed known vulnerabilities in the rodeo-ui package. Updated rodeo-ui to version 21.33.7-2022.1.230 to resolve security vulnerabilities.
ENG-7481 When running security scans, it showed the axios package was vulnerable to Server-Side Request Forgery (SSRF). Updated axios to version 1.7.4 or higher to resolve security vulnerability.
ENG-7583 Updated the swagger-ui-react package and refactored web-app to resolve UI build errors and address security vulnerabilities.