.png?sv=2022-11-02&spr=https&st=2024-11-21T06%3A57%3A45Z&se=2024-11-21T07%3A07%3A45Z&sr=c&sp=r&sig=npWLOgNKie4qOeFBZ51iRlaaahHZiJxNmYkMeVU9Wgk%3D){kind=logo}
IAP Bug Fixes & Improvements
- 20 Nov 2024
-
DarkLight
-
PDF
IAP Bug Fixes & Improvements
- Updated on 20 Nov 2024
-
DarkLight
-
PDF
Article summary
Did you find this summary helpful?
Thank you for your feedback
November 2024 Maintenance Release
IAP Versions
Consolidated Release Notes
Bug Fixes
This maintenance release of IAP includes fixes for bugs that were reported to Itential Product Support.
| Key ID | Release Note | Release Version Implemented |
|---|---|---|
| ENG-2698 | When the Itential Platform application unexpectantly stops working while processing service requests, the workflow tasks would remain in an indefinite running state and not return an error. Implemented error handling transition logic to error the tasks and alert users that a service stopped running. | IAP/2023.2.11 |
| ENG-2882 | Fixed an issue in JSON Golden Configuration which would cause JSON key-checking rule values to always be treated as string. The key-checking value is now saved as the same type as the value in the JSON. | IAP/2023.2.11 IAP/2023.1.22 |
| ENG-2932 | When importing a pre-built workflow to overwrite an existing workflow, the imported workflow remains in a draft state with validation errors or warnings until manually saved by the user. Applied a fix to processing workflows from pre-builts to always update the warnings and errors with the latest validation output. | IAP/2023.2.11 IAP/2023.1.22 IAP/2022.1.31 |
| ENG-2965 | When providing a template without an id property to the update legacy template API endpoints, the resulting template is unusable in IAP. Updated the update/create legacy template endpoints to ensure the id property matches the provided name to prevent issues using the template. The update legacy template endpoints will return an error if no id is provided. |
IAP/2023.2.11 IAP/2023.1.22 IAP/2022.1.31 |
| ENG-3034 | When creating a JSON Form with a multi-select dropdown dependency, the dropdown fields would not populate correctly or display any options. Updated the rodeo-ui to ensure that any JSON Form with a dropdown dependency that contains special characters now functions correctly. |
IAP/2023.2.11 IAP/2023.1.22 IAP/2022.1.31 |
| ENG-3143 | Fixed the migration scripts for Configuration Manager to automatically execute on IAP startup. | IAP/2023.2.11 IAP/2023.1.22 IAP/2022.1.31 |
| ENG-3320 | Some child job loop configurations involving JSTs would incorrectly report validation errors in the workflow validation API. Updated the validation method to correctly format JST related child job properties when validating a workflow. | IAP/2023.2.11 IAP/2023.1.22 IAP/2022.1.31 |
| ENG-4705 | Transformation functions do not render as expected in JST Designer if there is a function within the transformation that contains double quotes in its name. Fixed the rendering issues when opening functions in JST Designer. | IAP/2023.2.11 IAP/2023.1.22 IAP/2022.1.31 |
| ENG-4715 | When setting an operand source type to null in the evaluation task and then saving the task, it incorrectly displays the type as object instead of null. Updated the source type dropdown to display null if the value is null. |
IAP/2023.2.11 IAP/2023.1.22 |
| ENG-4854 | If you open a corrupted transformation when you already have a transformation open in Automation Studio, and then attempt to delete the transformation, it will delete the document you already had open. Updated the delete transformation dialog to display and delete the correct transformation document. | IAP/2023.2.11 IAP/2023.1.22 IAP/2022.1.31 |
| ENG-4874 | When checking the adapter status in the API after a JSON RPC connectivity issue, the adapter will display as degraded until it is restarted, regardless of current connectivity. Applied a fix in the NSO adapter that was causing the adapter to remain degraded even when connectivity was restored so that the adapter now returns to a connected state without needing a restart. | IAP/2023.2.11 IAP/2023.1.22 |
| ENG-4941 | When configuring the form elements in a dynamic form, there is no longer a UI crash when configuring a file upload field and then a dropdown on a JSON Form. | IAP/2023.2.11 IAP/2023.1.22 IAP/2022.1.31 |
| ENG-5832 | When running compliance plans through a workflow, the compliance plan instance would not return properly. Fixed an aggregation issue with Compliance Plans in Configuration Manager that would prevent plan instances executed via workflows from displaying in the "Reports" tab. | IAP/2023.2.11 |
| ENG-6301 | Improved the URL sanitation that occurs when navigating to assets with special characters in Projects. | IAP/2023.2.11 |
| ENG-6465 | The runComplianceForDevice task would not run compliance for a Golden Config tree if the specified device only existed in the device group. Updated runComplianceForDevice to include devices that are only defined in a device group. |
IAP/2023.2.11 IAP/2023.1.22 |
| ENG-6499 | When upgrading a workflow that has a JST with a reference to a named job variable and a child job that contains a JST with a reference to a job variable that shares the same name, trying to run the workflow in versions 2023.2 and later will cause a validation error on the schema. Fixed the shared-nested JST input job variable name schema validation collision that occurs during workflow upgrade in IAP/2023.2 and later that was causing schema validation errors when attempting to run that upgraded workflow. | IAP/2023.2.11 |
| ENG-6688 | When using the Golden Configuration feature in Compliance Manager to audit device configurations, line disparities were noted in the compliance report. Fixed an issue in Golden Configuration that would cause incorrect compliance failures when a line contained regular expressions. | IAP/2023.2.11 IAP/2023.1.22 IAP/2022.1.31 |
| ENG-6725 | Golden Configuration would fail to send an error notification when a user attempted to save an invalid JSON configuration. Improved the JSON parsing in Configuration Manager to ensure an error toast is sent notifying users their invalid config was not saved. | IAP/2023.2.11 IAP/2023.1.22 |
Improvements
This section highlights featured improvements to functionality in this maintenance release.
| Key ID | Release Note | Release Version Implemented |
|---|---|---|
| ENG-5601 | The workflow task runAction used duplicated code that was supported separately. Modified components to remove duplicate code in runAction to ensure consistent support, and resolved bugs involving the runAction task. |
IAP/2023.2.11 |
| ENG-6829 | IAP users with access to the LDAP adapter can now configure that adapter to perform single depth search in IAP Enterprise. Existing adapters will default to having a search scope of sub, keeping in line with their previous behavior. |
IAP/2023.2.11 IAP/2023.1.22 IAP/2022.1.31 |
Security Changes
This section highlights fixes and measures to prevent and minimize security risks and vulnerabilities.
| Key ID | Release Note | Release Version Implemented |
|---|---|---|
| ENG-2633 | Versions of lodash prior to 4.17.21 are susceptible to Code Injection via template. Updated package-json in Itential Job Manager to resolve security vulnerability in package. |
IAP/2023.2.11 |
| ENG-2819 | Versions of semver prior to 7.0.0 are susceptible to ReDos (Regular Expression Denial of Service). Updated package-json and package-lock.json in Itential Core service to resolve ReDoS security vulnerability in semver package. |
IAP/2023.2.11 IAP/2023.1.22 IAP/2022.1.31 |
| ENG-2820 | Versions of semver prior to 7.0.0 are susceptible to ReDos (Regular Expression Denial of Service). Updated package-lock.json in Itential Core audit-trail to resolve ReDoS security vulnerability in semver package. |
IAP/2023.2.11 IAP/2023.1.22 IAP/2022.1.31 |
| ENG-2822 | Versions of fast-json-patch prior to 2.2.1 are vulnerable to prototype pollution. Fixed the vulnerability in @itential/lib-yang_parser by removing the dependency on fast-json-patch. |
IAP/2023.2.11 IAP/2023.1.22 IAP/2022.1.31 |
| ENG-2824 | Versions of micro-match prior to 4.0.8 are vulnerable to Inefficient Regular Expression (RegEx) Complexity. Updated package-lock.json in Itential Core iap-ui to resolve security vulnerability. |
IAP/2023.2.11 IAP/2023.1.22 IAP/2022.1.31 |
| ENG-3331 | Versions of pug-code-gen prior to 3.0.3 are vulnerable to Improper Control of Generation of Code ('Code Injection'). Updated package-json and package-lock.json in Itential Core pronghorn-core to resolve security vulnerability. |
IAP/2023.2.11 IAP/2023.1.22 IAP/2022.1.31 |
Was this article helpful?
