IAG 4.3.3 Maintenance Release

Prev Next

Automation Gateway Versions

component version
automation_gateway 4.3.21

Bug Fixes

This maintenance release of IAG/4.3.3 includes fixes for bugs that were reported to Itential Product Support.

Key ID Release Note
ENG-7108 When executing an Ansible Modules command in Automation Gateway, the History tab showed the wrong job run data. Updated the logic in the History Table to accurately display a failed job.
ENG-8220 When selecting an inventory device in Configuration Manager, it loads the entire device inventory entry from IAG in the background, including device passwords. To resolve, added the "mask_device_passwords" property to the IAG system configuration (properties.yml) file. Enabling this property masks the device variables "password" and "ansible_password" in any GET request response for any device type.
ENG-10115 When executing an audit_id query script, a SQL Server error occurred. Updated the scheduled audit_db_cleanup process to batch deletions to remain within SQLite3 limits.

Security Changes

This section highlights fixes and measures to prevent and minimize security risks and vulnerabilities.

Key ID Release Note
ENG-8991 When running security scans, it showed the setuptools package was vulnerable to code injection. Updated setuptools to version 70.0.0 or higher to resolve security vulnerability.
ENG-8993 When running security scans, it showed the grpcio package was vulnerable to excessive iteration. Updated grpcio to version 1.56.2 or higher to resolve security vulnerability.