.png?sv=2022-11-02&spr=https&st=2024-12-21T18%3A38%3A04Z&se=2024-12-21T18%3A48%3A04Z&sr=c&sp=r&sig=Zk59c3zR7yKaQV5tZO3tAuPoHSSc4PbsYBIkM%2Blmb5k%3D){kind=logo}
December 2024 IAP Maintenance Release
- 18 Dec 2024
-
DarkLight
-
PDF
December 2024 IAP Maintenance Release
- Updated on 18 Dec 2024
-
DarkLight
-
PDF
Article summary
Did you find this summary helpful?
Thank you for your feedback
IAP Versions
Consolidated Release Notes
Bug Fixes
This maintenance release of IAP includes fixes for bugs that were reported to Itential Product Support.
| Key ID | Release Note | Release Version Implemented |
|---|---|---|
| ENG-209 | Resolved an issue with spiked CPU demand and data consumption when making job view queries via API in Operations Manager. | IAP/2023.2.3 IAP/2023.1.23 |
| ENG-340 | When doing load configuration for offline NSO devices in Configuration Manager, getConfig API will cause or return status code 200, a positive status code with Mappi errors. Fixed this false positive issue by keeping checks on Mappi errors and returning the correct status code. |
IAP/2023.2.9 IAP/2023.1.18 IAP/2022.1.27 |
| ENG-1070 | When running a JST, the result from any Set entries, Set values, or String matchAll method will yield an iterator instead of an array, which will cause these returns to appear as an empty object. These methods should now return an array, as expected. | IAP/2023.2.5 IAP/2023.1.16 IAP/2022.1.25 |
| ENG-3195 | When doing unit tests in adapter-nso, saw an unnecessary empty device string check added inside the BuildTemplateAction function. This will not cause any issues, but this is not a required check. Removed unnecessary empty string checks to enhance code quality by removing unnecessary checks. |
IAP/2023.2.9 IAP/2023.1.18 IAP/2022.1.27 |
| ENG-4248 | When creating a large number of integrations from multiple integration models, IAP would take a long time to restart. To resolve this issue, modified the in-memory global config object within Itential Core to reduce high CPU usage and support a quick start-up time. | IAP/2023.2.12 IAP/2023.1.23 IAP/2022.1.32 |
| ENG-4483 | When passing HTML into the message field of the ViewData task, the HTML was rendered incorrectly. HTML is now rendered correctly in the message field of the ViewData task. |
IAP/2023.2.10 |
| ENG-4676 | When the systemProps.shutdownTimeout property is missing in Profiles in Admin Essentials, it causes Workflow Engine to orphan the event listener task. Consequently, the event listener task runs continuously and never completes. To fix this issue, added a default shutdownTimeout property of 3 seconds if the systemProps.shutdownTimeout property does not exist on Profiles. The shutdownTimeout property is used to determine how long to wait before a service shuts down to perform clean-up. |
IAP/2023.2.12 IAP/2023.1.23 IAP/2022.1.32 |
| ENG-5019 | When looping on a job, the response of the child job task is displayed as an array of job IDs instead of job values in the merge task. Updated the merge logic to use a centralized helper function to obtain task variables instead of custom code to ensure we are obtaining the child job response appropriately. |
IAP/2023.1.23 IAP/2022.1.32 |
| ENG-6311 | When using the export and import API in the Service Catalog on IAP version 2023.2, the operation fails due to an issue with the ObjectId reference in the updated MongoDB driver. Corrected the ObjectId reference, ensuring that the export and import API in the Service Catalog functions as expected. | IAP/2023.2.11 |
| ENG-6440 | Fixed an issue where public RSA Keys going stale would never be updated, resulting in users not being able to verify JSON Web Tokens (JWT). | IAP/2023.2.12 IAP/2023.1.23 IAP/2022.1.32 |
| ENG-6533 | When running a transformation, nested default and const keywords are not being used if an assignment is made from the parent object. Updated the logic for obtaining instance data to check for nested default and const values within incoming schemas of type object. | IAP/2023.2.12 IAP/2023.1.23 IAP/2022.1.32 |
| ENG-6603 | When adding a schema combination with options to a JSON Form and setting the format to oneOf, the required fields within the schema combination option were not working correctly. Modified the required array for schema combinations to respond to all formats instead of just oneOf. |
IAP/2023.2.12 IAP/2023.1.23 IAP/2022.1.32 |
| ENG-7126 | The Documentation links in Configuration Manager were invalid. Fixed the links to the documentation. | IAP/2023.2.12 IAP/2023.1.23 IAP/2022.1.32 |
| ENG-7158 | When trying to work custom manual tasks in Pre-built Wizard Rediscover, the manual tasks failed. Modified the call in Workflow Engine to use an absolute path instead of a relative path when running custom manual tasks written in angular. |
IAP/2023.2.12 |
| ENG-7438 | When running a transformation that contains schema keys with special characters without a "default" keyword set, the transformation fails when the revertToDefaultValue option is set to true. Updated the run transformation logic to ensure the provided input is used in this case. |
IAP/2023.2.12 IAP/2023.1.23 IAP/2022.1.32 |
| ENG-7453 | When opening a function that is used as a function step, the step object is corrupted which causes runtime issues if the step is part of a conditional path, e.g. if...else or switch paths. Updated the open function logic to prevent the step object from being corrupted. |
IAP/2023.2.12 IAP/2023.1.23 IAP/2022.1.32 |
| ENG-7455 | IAP users with access to the LDAP adapter can now configure that adapter to perform single depth search in 2022.1, 2023.1, and 2023.2 IAP Enterprise versions. Existing adapters will default to having a search scope of 'sub', keeping in line with their previous behavior. To change the depth of search, go to Admin Essentials → Adapters → {your ldap adapter} and change the 'searchScope' property, e.g. to 'single' for single-depth search. | IAP/2023.1.23 IAP/2022.1.32 |
| ENG-7732 | When more than one workflow tab is open and the user swtiches between tabs, all unsaved data on the initial tab is deleted while viewing other tabs. To fix this issue, reorganized workflow and tab render logic. Unsaved workflow changes now persist between workflow tabs and non-workflow tabs to workflow tabs. | IAP/2023.2.12 |
| ENG-7861 | Upon editing a newly saved Command Template or Analytic Template in Projects, the template editor UI would go blank while the remainder of Projects would remain functional. To fix this issue, added a check to the template URL after an asset is saved. The template editor in Projects now works as expected after editing a newly saved template. | IAP/2023.2.12 |
Security Changes
This section highlights fixes and measures to prevent and minimize security risks and vulnerabilities.
| Key ID | Release Note | Release Version Implemented |
|---|---|---|
| ENG-1831 | When running security scans, it shows affected versions of the adapter-nso package.json were vulnerable to Command Injection. A fix was applied to the NSO adapter by updating ssh2 to version 1.0.0. |
IAP/2023.2.12 |
| ENG-7337 | Versions of dompurify prior to 2.5.4 are susceptible to Prototype Pollution. Updated rodeo-ui in Configuration Manager to resolve security vulnerability. |
IAP/2023.2.12 IAP/2023.1.23 IAP/2022.1.32 |
| ENG-7418 | Versions of dompurify prior to 2.5.4 are susceptible to Prototype Pollution. Updated rodeo-ui in Automation Studio to resolve security vulnerability. |
IAP/2023.2.12 IAP/2023.1.23 |
| ENG-7496 | Versions of the json-path.plus package prior to 10.2.0 are susceptible to Remote Code Execution (RCE) due to improper input sanitization. Updated json-schema-faker in Automation Studio to support the latest version of json-path.plus and resolve security vulnerability. |
IAP/2023.2.12 IAP/2023.1.23 IAP/2022.1.32 |
Was this article helpful?
