Version 10.2.4.1
Release date
April 7, 2022
The goal of the patch is to fix the vulnerabilities in third-party libraries and plugins used in the IA Cloud Enterprise components through the updates:
- ZooKeeper is updated to version 3.6.0 to remove vulnerable Log4j files.
- Zoonavigator is updated to version 1.2.0 to remove vulnerable Log4j JAR files.
- The Log4j dependency in the
logstash-jdbc-outputplugin is updated to version 2.17.2. - The
log4j-core.2.10.0.jardependency is removed from the AutoML SDK package. - Also, the installer is improved to clean up vulnerable Log4j files from the Nexus repository during the upgrades.
To apply the patch, refer to the Upgrade guide.