2023.2.34
Platform 2023.2.34 is a maintenance release that addresses security vulnerabilities in third-party dependencies across Gateway Manager, Core, Product Adapters, Workflow Engine, Admin Essentials, and other Platform components.
Security fixes (13)
This release includes security updates that address vulnerabilities in third-party packages and platform components.
| Component | Feature | Description |
|---|---|---|
| Admin Essentials | Applied security patches to Admin Essentials dependencies (ENG-26821) | Applied security patches to third-party dependencies in Admin Essentials, including updates to dompurify, axios, and swagger-ui-react. |
| Core | Fixed OpenAPI 3.0.4 import failures and updated dependencies (ENG-26835) | Resolved an issue where OpenAPI 3.0.4 integration specs could fail to import. Also updated third-party dependencies in pronghorn-core to address security vulnerabilities. |
| Core | Updated iap-ui security dependencies (ENG-26839) | Updated dependencies in iap-ui to pull in the latest security fixes, including a DOMPurify sanitization fix. |
| Core | Updated service security dependencies (ENG-26865) | Updated third-party dependencies in service, including ajv, ioredis, and semver, to resolve known security vulnerabilities. |
| Core | Updated network security dependencies (ENG-26866) | Updated the uuid dependency and other sub-dependencies in network to address known security vulnerabilities. |
| Core | Updated event-system security dependencies (ENG-26869) | Updated dependencies and sub-dependencies in event-system to pull in security fixes. |
| Gateway Manager | Implemented Snyk scanning and package upgrades on adapter-automation_gateway (ENG-26952) | Upgraded the following packages in adapter-automation_gateway to address security vulnerabilities: minimatch 5.1.8, brace-expansion 2.1.4, picomatch 2.3.2, braces 3.0.3, jws 3.2.3, serialize-javascript 7.0.5, js-yaml 4.3.1, form-data 4.0.6, diff 5.2.2, ip-address 10.3.1, and fast-uri 3.1.5. |
| itential-utils | Updated itential-utils security dependencies (ENG-26867) | Updated dependencies in itential-utils, including axios, to pull in security fixes. |
| Job Viewer | Resolved several security vulnerabilities requiring dependency updates (ENG-26940) | Updated dependencies to resolve security vulnerabilities that required minor package changes or an npm install. |
| Operations Manager | Resolved several security vulnerabilities requiring dependency updates (ENG-26940) | Updated dependencies to resolve security vulnerabilities that required minor package changes or an npm install. |
| Product Adapters | Updated adapter-azure_aaa security dependencies (ENG-26868) | Updated jsonwebtoken and other dependencies in adapter-azure_aaa to pull in security fixes. |
| Product Adapters | Updated adapter-email security dependencies (ENG-26864) | Updated nodemailer and mail-listener6 and their sub-dependencies in adapter-email to resolve security vulnerabilities. |
| Workflow Engine | Updated app-workflow_engine security dependencies (ENG-26863) | Updated npm dependencies, such as uuid, in app-workflow_engine to fix known security vulnerabilities. |