10.2.4

Edit

Version 10.1.7.1

Release date

May 10, 2022

The goal of the patch is to fix the vulnerabilities in third-party libraries and plugins used in the IA Cloud Enterprise components through the updates:

  • ZooKeeper is updated to version 3.8.0 to remove vulnerable Log4j files.
  • Zoonavigator is updated to version 1.1.2 to remove vulnerable Log4j .JAR files.
  • The Log4j dependency in the logstash-output-jdbc plugin is updated from version 1.1 to 2.17.2.
  • The Log4j dependencies are removed from the ODF and ODF 2.0 components.
  • The log4j-core.2.9.1.jar dependency is removed from the AutoML-SDK package.
  • The installer is updated to clean up the old Zoonavigator directory if it exists.
  • Also, the installer is improved to clean up vulnerable Log4j files from the Nexus repository during the upgrades.
  • The Activity Log in Control Tower is fixed. The BP update records no longer contain ambiguous information on users incorrectly tracked as actors, even if they don't interfere with the ordinary BP run.
← Version 10.1.7.2Version 10.1.7 →