Bug Fixes (2.2)

2.2

Version	Case ID	Internal ID	Components	Summary
2.2		XE-6802	Aggregation	Unexpected Index Files Error from Aggregation Agent Description If a file aggregation workflow was running on a different execution context, it is possible to find unexpected temporary files. This is due to a bug in the storage synchronization mechanism. Resolution The bug has been fixed and the storage synchronization mechanism handles locks correctly.
2.2		XE-6750	HTTP/2	Initial Number of Connections Cannot be Configured for HTTP/2 Description The HTTP/2 Client does not provide a way to use multiple connections immediately after a workflow starts. Resolution This issue has now been fixed and it is possible to configure the initial number of connections.
2.2		XE-6749	HTTP/2	Unable to Configure Maximum Concurrent Streams Setting for HTTP2 Client Description The HTTP2 Client uses a default value of 32 for the maximum number of concurrent streams, and this cannot be configured differently. Resolution This issue has now been fixed and the default value is updated to 1000. The user can configure this value and the field has been renamed to Default connection concurrent streams.
2.2	33128	XE-6732	Aggregation	Aggregation Sessions for Aggregation Profile Using External References Not Displayed in Inspector Description If an aggregation profile has a storage path configured with an external reference, then the session inspector does not show the contents of that aggregation storage. Resolution The function that reads the aggregation profile configuration for the session inspector is now changed to one that handles external references properly.
2.2	32923	XE-6697	Aggregation	Changing EC Execution of the Workflow Results in Incorrect Session Count Description If the Platform and ECs do not share the storage, then the session count will be incorrect after changing the EC for the profile. Resolution The property {{mz.aggregation.storage.file.shared}} needs to be set to false for every EC. Also, the aggregation session lock mechanism is fixed for profiles with separate storage per workflow settings.
2.2		XE-6677	Core	CVE in OWASP ESAPI Description A CVE was detected in the version of OWASP ESAPI library bundled with the product. Resolution OWASP ESAPI was upgraded to version 2.4.0.0.
2.2	32942	XE-6661	External References	Users Without Read/Write Permissions Can Edit and Save External Reference Profiles Description When working in MZOnline, users that are in groups without read or write permission are still able to edit and save External Reference profiles, while in Desktop this is not possible. Resolution This has now been fixed and users without read or write permission cannot edit and save External Reference profiles in MZOnline or Desktop.
2.2	32929	XE-6638	GTP'	IP Address Comparison for Uniqueness Not Working Correctly for GTP' Description When using the GTP' collection agent, the IP address uniqueness check is not working correctly. Resolution This problem has now been fixed and the uniqueness check works as intended.
2.2	32685	XE-6623	Aggregation	Unexpected Index Files Error from Aggregation Agent Description If a file aggregation workflow was running on a different execution context, it is possible to find unexpected temporary files. This is due to a bug in the storage synchronization mechanism. Resolution The bug has been fixed and the storage synchronization mechanism handles locks correctly.
2.2		XE-6622	Salesforce	Salesforce Agent Cannot Handle Certain Special Characters in Passwords Description The Salesforce agent cannot handle special characters in the password. It used to abort the workflow at the authentication stage and break the parsing of the error message. Resolution This is fixed now and the Salesforce agent can now authenticate passwords with special characters in them.
2.2		XE-6570	MZOnline	Link to Kubernets Dashboard Broken Description When clicking on the Kubernetes Dashboard in MZOnline, you are redirected back to the login page, even though when entering the URL to the dashboard directly, you are directed to the right location. Resolution This problem has now been fixed, and clicking on Kubernetes Dashboard will take you to the right location.
2.2	33317	XE-6807	Audit	Audit Profile Becomes Invalid after Importing into Other Environments Description DB columns metadata is stored in the cache. In case the metadata has become outdated, this bug may occur while importing Audit Profile. Resolution Fetch the DB columns metadata directly from the DB while importing Audit Profile.
2.2		XE-6770	Aggregation Desktop Framework	Aggregation Profile May Show Incorrect Data Description Sometimes when opening an Aggregation Profile that uses Couchbase storage, the profile may not display correctly. In this case, the Session UDR Type becomes unset and the Storage is shown as not configured at all in the UI. Resolution The issue has been fixed by adjusting the classloader and removing incorrect error handling.
2.2		XE-6752	Postgres	Postgresql Vulnerability Description A vulnerability was detected in the Postgresql version. Resolution The Postgresql version has now bee upgraded and the vulnerability removed.
2.2		XE-6699	Operator	Golang Vulnerability Description A vulnerability was detected in the Golang version. Resolution The Golang version has now bee upgraded and the vulnerability removed.
2.2	31973	XE-6650	APL	Debug Statements in the Deinitalize Block Can Abort the Workflow Description When running with debug enabled, then it is possible for debug statements in the deinitialize block in Analysis or Aggregation agents to cause the workflow to abort. Resolution The issue has been resolved and Debug statements will not abort the workflow.
2.2		XE-6642	Docker	nginx Vulnerability Description A vulnerability was detected in the nginx version. Resolution The nginx version has now bee upgraded and the vulnerability removed.
2.2		XE-6624	MZSH	Logging Level Does Not Work as Expected in ConnectionFactoryHelper Class Description In the class ConnectionFactoryHelper, changing the logging level does not stop you from getting a specific log message even when the logging level is not critical. Resolution Logger in ConnectionFactoryHelper is fixed.
2.2	31000	XE-6562	Kafka	Support for Kafka UDR in Workflow Bridge Description When running workflows on 2 or more ECs with Workflow Bridge, connection is lost when using Kafka UDR. Resolution This is now resolved by updating the Kafka UDR indexing.
2.2	32219 33794	XE-6545	Access control	Auto Unlock User Account Feature Broken Description When using the auto unlock feature for users, a locked user account is still not unlocked after the stated number of minutes. Resolution This problem has been fixed and a locked user account is automatically unlocked after the stated number of minutes.
2.2	32232	XE-6396	HTTP/2	HTTP/2 Client Agent aborts when using Resource Owner Password Credentials Description The HTTP Client agent uses wrong parameter names, that is "clientId" and "clientSecret", to send to the Authentication server. These two parameters cannot be recognized, hence an exception is generated. Resolution This issue is fixed by modifying the parameter names to "client_id" and "client_secret", respectively.
2.2	33830	XE-6927	MZOnline	Opening a Workflow in MZOnline May Throw Errors Description When you try to open a workflow in MZOnline you may get an error about properties. Resolution This problem has now been fixed, and errors are not displayed when you open workflows in MZOnline.
2.2	33104	XE-6727	OpenAPI Profile	Open API Profile Invalid After Saved Description ClassCastException occurs after saving the Open API profile when there is schema type instead of object schema under array schema. Resolution Removed the validation for object schema only from the array schema type.
2.2	30187	XE-6395	APL	The APL Shift Operators Handles Constants in an Inconsistent Manner Description The APL shift operators handles numeric constants differently than other operators in APL. It is possible to get surprising results due to overflow and it the result can be inconsistent when using constants as compared to variable expressions. Resolution The semantics has been clarified to avoid numeric overflow surprises and the error handling has been improved.
2.2	25262	XE-5399	Data Veracity	Data Veracity Forwarding Agent Do Full Table Scan for Table Validation Description Dataveracity forwarding agent running a full table scan to validate table exist. Resolution Extract the database metadata to validate table existed.
2.2		XE-2171	APL	jsonDecodeUdr APL Function Does Not Match the Signature as Mentioned in the Documentation Description The function signature in APL does not match the signature mentioned in the documentation. Resolution The function signature in APL is now updated according to the documentation.
2.2		XE-6558	Core	Database Connection Pool Size Has No Strict Maximum Limit Description When configuring the pool size of a database used in a workflow, the execution context creates additional temporary connections even if a maximum limit is specified. Resolution A new system property connectionpool.strict.pool.size has been added which will turn the database connection pool into a Blocking Queue implementation with a strict maximum limit.
2.2	32586	XE-6533	Access Control	Workflow User Permission Is Not Working on MZ Online Description User without execute permission in Workflow still able to view and execute the workflow on MZOnline. Resolution Permissions have now been added in MZOnline for configuring that a user without execution permission in Workflow would not able to access workflow.
2.2	30832	XE-6477	HTTP/2	Http2 Server Agent Incorrectly Returns RequestCycleUDR with Errors for DELETE operation Description When the http2 server agent is used without OpenAPI profile enabled, the RequestCycleUDR returned will contain schema not found error message and the isError flag set to true for DELETE operation. Resolution Fix the backend logic for the server to accept DELETE requests without body.
2.2		XE-6447	Diameter	Diameter Stack Fails to Bind Using DNS Resolution when More than One Interface Is Present Description When using the "Use DNS Hostname" option in Diameter Stack agent and there are more than one network interface present, a workflow using that agent aborts during startup. Resolution A best effort approach is now used to select what interface to bind on when there are more than one present.
2.2	32133	XE-6284	Core	Vulnerabitlities in Spring 3pp Description The Spring 3pp have the following CVEs reported CVE-2022-22968, CVE-2022-22965, CVE-2020-5421. Resolution The Spring 3pp have now been updated to a later version were the CVS’s have been fixed.
2.2		XE-5829	Dynamic Workflow	Adding Dynamic Workflows to the Dynamic Workflow Template Returns Incorrect Error Description Adding dynamic workflows gives an "not found in JSON" error. Resolution Dynamic workflows can now be added without error.
2.2	25130	XE-4582	Prometheus	Documentation Updates for Prometheus and Grafana Setup in Classic Deployment Description The documentation for setting up Prometheus and Grafana in the classic deployment is missing some information and examples. Resolution The documentation has been updated with the necessary information, adequate examples and steps for verification.

2.1.x

Bug Fixes for 2.1.x Releases

2.1.2

Version	Case ID	Internal ID	Components	Summary
2.1.2	33326	XE-6812	ECD helm kubernetes	Operator Tries to Configure WFG even though ECD is Disabled Description When an ECD is disabled, it results in extensive error logging showing that the operator is trying to configure the workflow group. Resolution This issue has now been fixed and the operator will not try to configure the workflow group if the ECD is disabled.
2.1.2	33328	XE-6811	Aggregation	Timeout Handling in Couchbase Aggregation Service Broken Description The timeout handler for the Couchbase aggregation service does not set the package context for workflow packages at creation, resulting in serialization error when running. Resolution This issue has now been fixed by ensuring that the package context is set in the timeout threads when they are created.
2.1.2	33327	XE-6849	helm	Performance Issue Causing Long Restart Time for Pods Description When deploying the latest version, a performance issue was detected causing very long restart times for the pods. Resolution This issue has now been fixed and the restart time has been reduced to a reasonable size.
2.1.2	33489	XE-6853	helm Web Desktop	Web Desktop Xmx and Xms Values not Configurable in Helm Chart Description The xmx and xms values in the webdesktop-configmap.yaml file cannot be edited without changing the template. Resolution The possibility to configure xmx and xms values has now been added to the Helm chart.
2.1.2	33327	XE-6857	Installation	Very Long Workflow Names Cause Errors due to Failing Database Operations Description There are a number of tables where we store workflow name in VARCHAR(128) columns. If we have very long workflow names, it is possible to exceed the limit of 128 characters. This can cause problems for ECS, Workflow Statistics, and System Log. Resolution The database schema has been updated and max workflow name size has been increased.
2.1.2	33129	XE-6881	Workflow Packages	References from Workflows in Workflow Packages to External Configurations May Cause Issues Description When a workflow in a workflow package references a configuration that is not included in the package, it may cause several issues such as duplicate class exceptions, import problems, etc, depending on various conditions. Resolution This problem has now been solved by redesigning the reference handling between configurations.
2.1.2	33327	XE-6885	User Management	There Are Too Many Database Operations During User Authentication Description When authenticating the user during a REST API call, there are too many database operations. This can cause performance problems when there are many operations per second. Resolution The code has now been optimized so that the number of database operations has been greatly reduced.
2.1.2	33327	XE-6917	ECD Operator	ECD Rolling Upgrade Incorrectly Triggered Description If the platform pod goes down, a rolling upgrade of the ECD is triggered. Resolution This problem has now been fixed and the ECD pod will keep running without any triggered rolling update if the platform pod goes down.

2.1.1

Version	Case ID	Internal ID	Components	Summary
2.1.1	32586	XE-6533	Access Control	Workflow User Permission Is Not Working on MZ Online Description User without execute permission in Workflow still able to view and execute the workflow on MZOnline. Resolution Permissions have now been added in MZOnline for configuring that a user without execution permission in Workflow would not able to access workflow.
2.1.1		XE-6558	Core	Database Connection Pool Size Has No Strict Maximum Limit Description When configuring the pool size of a database used in a workflow, the execution context creates additional temporary connections even if a maximum limit is specified. Resolution A new system property connectionpool.strict.pool.size has been added which will turn the database connection pool into a Blocking Queue implementation with a strict maximum limit.
2.1.1		XE-6771	Ultra	Problems with udrDecode and udrEncode APL Functions Description The {{udrDecode}} and {{udrEncode}} commands have a number of problems introduced in Usage Engine PE 2.1.0 due to thread model changes. {{udrDecode}} can cause memory leaks when used in the {{initialize}} block and {{udrEncode}} can somtimes cause workflow aborts when used in standalone workflows. Resolution The implementation of the udrDecode and {{udrEncode}} commands has now been revised and the detected problems fixed.
2.1.1	32356	XE-6624	MZSH	Logging Level Does Not Work as Expected in ConnectionFactoryHelper Class Description In the class ConnectionFactoryHelper, changing the logging level does not stop you from getting a specific log message even when the logging level is not critical. Resolution Logger in ConnectionFactoryHelper is fixed.
2.1.1		XE-6642	Docker	nginx Vulnerability Description A vulnerability was detected in the nginx version. Resolution The nginx version has now bee upgraded and the vulnerability removed.
2.1.1		XE-6699	Operator	Golang Vulnerability Description A vulnerability was detected in the Golang version. Resolution The Golang version has now bee upgraded and the vulnerability removed.
2.1.1	33128	XE-6732	Aggregation Inspector	Aggregation Sessions for Aggregation Profile Using External References Not Displayed in Inspector Description If an aggregation profile has storage path configured with external reference, then session inspector is not showing contents of that aggregation storage. Resolution Function reading aggregation profile configuration for session inspector was changed to the one handling external references properly.
2.1.1		XE-6570	MZOnline	Link to Kubernets Dashboard Broken Description When clicking on the Kubernetes Dashboard in MZOnline, you are redirected back to the login page, even though when entering the URL to the dashboard directly, you are directed to the right location. Resolution This problem has now been fixed, and clicking on Kubernetes Dashboard will take you to the right location.
2.1.1	32923	XE-6697	Aggregation Inspector	Changing EC Execution of the Workflow Results in Incorrect Session Count Description If the Platform and ECs do not share the storage, then the session count will be incorrect after changing the ec for the profile. Resolution Property {{mz.aggregation.storage.file.shared}} for every EC needs to be set to false . Also aggregation session lock mechanism is fixed for profile with separate storage per workflow settings.
2.1.1	32942	XE-6661	External References	Users Without Read/Write Permissions Can Edit and Save External Reference Profiles Description When working in MZOnline, users that are in groups without read or write permission are still able to edit and save External Reference profiles, while in Desktop this is not possible. Resolution This has now been fixed and users without read or write permission cannot edit and save External Reference profiles in MZOnline or Desktop.
2.1.1	32219	XE-6545	Access Control	Auto Unlock User Account Feature Broken Description When using the auto unlock feature for users, a locked user account is still not unlocked after the stated number of minutes. Resolution This problem has not been fixed and a locked user account is automatically unlocked after the stated number of minutes.

2.1.0

Version	Case ID	Internal ID	Components	Summary
2.1.0	32133	XE-6351	Desktop Launcher	Detected Vulnerabilities Description A number of vulnerabilities were detected. Resolution The following fixes have now been made: * X-Frame-Options header included in the HTTP response to prevent ClickJacking attacks * Anti-MIME-Sniffing header X-Content-Type-Options set to 'nosniff' to prevent older versions of Explorer and Chrome to sniff MIME sniffing on the response body * Signing of Desktop Launcher * Upgrading of 3pps
2.1.0	31446	XE-6222	Data Veracity	Export/import of Dataveracity Masked Fields not Possible Description When using data masking with data veracity it is not possible to export the configured masked fields when performing a configuration export. Resolution This has now been fixed, and it is possible to export and import the Dataveracity masked fields.
2.1.0	31110	XE-5970	Security	OS Vulnerability in Docker Images Description A vulnerability was detected in the OS in the Docker images. Resolution This issue has now been fixed and the vulnerability removed.
2.1.0	30875	XE-5920	Logging	Log Forwarding Does not Forward Group Message Description When using log forwarding, group messages are not forwarded. Resolution This problem has now been fixed and group messages are forwarded.
2.1.0	30262 26077	XE-5645	UDR File Editor	UDR File Editor Open Dialog Shows Incorrect Button Text Description When you click Open to select UDR file, the button shows as Save instead of Open. Resolution This issue is fixed, and the button shows the text Open.
2.1.0	29494	XE-5631	5G Profile	Encoded Null Nested Values In 5G Profile Description 5G profiles containing null nested values, encoded and sent in HTTP2 requests will result in bad requests being returned as response. Resolution Null nested values in the 5G profile are no longer included in the encoded value that is sent in HTTP2 requests.
2.1.0	29505	XE-5558	IBM MQ	Host and Port Fields not Set Correctly in IBM MQ UDR Description Setting the fields host and port in the MQQueueManagerInfo UDR does not work as expected. Resolution This has now been fixed, and configuration of the host and port fields will work as intended.
2.1.0	30425	XE-5713	Installation Documentation	Recommendations when Bootstrapping System Certificates and Secrets for Private Cloud Description During the TLS certificate provision, when the keystore is stored in a Kubernetes Secret, it is a common misconception that the platform.tls.key and platform.tls.key.alias in the values.yaml are to be removed/commented considering they might be used for the disk based keystore. Resolution Do not remove/comment the platform.tls.key and platform.tls.key.alias fields in the values.yaml file. This issue is fixed by providing a note on InfoZone to inform the user about the same.
2.1.0	32222	XE-6394	Data Veracity	Data Veracity View UDR Nested UDR Value is not Masked Description When there is a nested UDR, the masking fields will not work and will display the nested UDR value. Resolution To properly mask the nested UDR, a refactor will be required on the backend code. As of now a workaround is provided where you will have to declare the nested UDR fields in the parent UDR itself when choosing the fields to data mask.
2.1.0		XE-5936	Workflow Packages	Workflow Packages do not Work for Batch Workflows Description Workflow package sometimes aborts trying to find decoder outside the package. Resolution This has now been fixed, so workflow packaged supports both batch and realtime workflows.
2.1.0		XE-5802	APL	udrEncode and udrDecode Functions are Single Threaded Description The two APL functions udrDecode and udrEncode are single threaded which can cause performance issues. Resolution The implementation has been updated to use thread local decoders and encoders to avoid this problem.Note This fix takes effect when the workflow is saved or configuration implementations are regenerated by using the "regenerateconfigs" mzsh command.
2.1.0		XE-4400	mzcli	Group Information from mzcli Description The two APL functions udrDecode and udrEncode are single threaded which can cause performance issues. Resolution The Group information from mzcli has changed its format so the output says Enabled/Disabled instead. You can also see a list with all the members of a group.
2.1.0		XE-6001	Postgres	Postgres Vulnerability Description A vulnerability was detected in the Postgres version used. Resolution Postgres has now been updated and the vulnerability removed.
2.1.0		XE-5980	Kubernetes	Platform not Shutdown Gracefully Description The entrypoint for the platform pod has no sigterm handling which means the platform will not gracefully terminate when the pod is deleted. This could lead to resources not being released properly, files not being synced and other non-deterministic effects. Resolution This problem has now been fixed, and a sigterm handler has been added in the entrypoint.sh.
2.1.0		XE-4988	Aggregation MZOnline	Aggregation Session Records Are Not Deleted From The Web Interface Description A prompt with a warning that the Aggregation Profile is locked will occur when you try to delete a single aggregation session or when using the Delete All function. Resolution The issue is due to an incorrect handling on the backend code for the aggregation session storage. With a better handling now in place, you can delete the aggregation session once more.
2.1.0	30719	XE-5895	HTTP/2	HTTP/2 Server Agent Produces Incorrect Decoding Issues Description When the HTTP/2 Server agent is included in a workflow that also contains the HTTP/2 Client agent, the HTTP/2 Server agent produces incorrect decoding issues which do not appear if the same payload is run in the workflow after the HTTP/2 Client agent has been removed. Resolution This problem has now been fixed and the HTTP/2 Server agent decoding provides the same result regardless of the presence of the HTTP/2 Client agent.

2.0.x

Bug Fixes for 2.0.x Releases

2.0.3

Version	Case ID	Internal ID	Components	Summary
2.0.3		XE-6278	Web Desktop	Java Version for Web Desktop Needs to be Upgraded Description The Web Desktop is still running on Java 11 while other images use Java 17. Resolution OpenJDK has now been upgraded to support Java 17 in Web Desktop.
2.0.3	31983	XE-6277	Docker	OpenJDK Vulnerability Description A vulnerability was detected in the OpenJDK version. Resolution The OpenJDK version has now bee upgraded and the vulnerability removed.
2.0.3		XE-6325	Core	esapi Vulnerability Description A vulnerability was detected in the esapi version. Resolution The esapi version has now bee upgraded and the vulnerability removed.
2.0.3	31960	XE-6268	System Log	Syslog Collection Agent does not Handle non-ASCII Messages Correctly Description The Syslog Collection Agent does not handle character encodings as described in RFC5424 correctly. Resolution The agent now decodes UTF-8 encoded messages correctly.

2.0.2

Version	Case ID	Internal ID	Components	Summary
2.0.2		XE-6217	Aggregation Couchbase	Old Couchbase Profile Fails Description New couchbase properties cause Aggregation agent to fail if using an older Couchbase profile. Resolution This problem has now been fixed, a warning is written in the execution context log, and default values will be used during execution.
2.0.2	31761	XE-6214	Web Desktop	Go Vulnerability Description A vulnerability was detected in the Go version. Resolution The Go version has now bee upgraded and the vulnerability removed.
2.0.2		XE-5999	Liquibase	Liquibase Vulnerability Description A vulnerability was detected in the Liquibase version. Resolution The Liquibase version has now bee upgraded and the vulnerability removed.
2.0.2		XE-6218	Couchbase	Issues When Using Parametrization in Couchbase Profile Description When using parametrized in a Couchbase profile, passwords need to be written in clear text, and it is not possible to use External References and parametrization at the same time in a Couchbase profile. Resolution These issues have now been solved, and passwords need to be encrypted, and it is possible to use external references and parametrization in combination in a Couchbase profile.

2.0.1

Version	Case ID	Internal ID	Components	Summary
2.0.1	30875	XE-5920	Logging	Log Forwarding Does not Forward Group Messages Description When using log forwarding, group messages are not forwarded. Resolution This problem has now been fixed and group messages are forwarded.
2.0.1		XE-5776	Logging	Couchbase Profile Does not Support Parametrization Description When using the Couchbase profile it was not possible to set parameters for values in the Connectivity and Management tabs. Resolution This has been fixed and parametrization can be used in the Couchbase profile.
2.0.1	29576	XE-5760	Helm	Resources Cannot be Configured for Init Containers Description It is not possible to configure limits and requests for CPU and Memory resources in the values. yaml file for the initial container. Resolution This has now been fixed and Kubernetes resources can be configured for the platform and mzonline init containers. Please refer to the platform.init.resources and mzonline.initMyservice.resources values in the Usage Engine Private Edition helm chart for details.This has been fixed and parametrization can be used in the Couchbase profile.
2.0.1		XE-5060	ECDeployments MZOnline	Adding Custom Metrics Breaks ECDeployment Description The ECD wizard breaks when adding custom metrics. Resolution This issue has now been fixed and custom metrics can be added without breaking the UI.
2.0.1		XE-3820	Web Desktop	WebDesktop Allows HTTP Traffic When TLS is Enabled Description When using the Web Desktop, HTTP is still allowed after TLS has been enabled. Resolution This problem has now been fixed, and when TLS is enabled only HTTPS traffic is allowed when using the Web Desktop.
2.0.1	30832	XE-5844	HTTP/2	Http2 Server Agent Incorrectly Returns a RequestCycleUDR with Errors Description When the http2 server agent is used without OpenAPI profile enabled, the RequestCycleUDR returned will contain schema not found error message and the isError flag set to true. Resolution Fix the backend logic for the server to handle requests properly when OpenAPI profile is disabled. Also fixed the error messages wording to be more clear.
2.0.1		XE-5937	Azure	Jackson Vulnerability Description A vulnerability was detected in the Jackson version. Resolution The Jackson version has now bee upgraded and the vulnerability removed.
2.0.1		XE-6001	Postgres	Postgres Vulnerability Description A vulnerability was detected in the Postgres version used. Resolution Postgres has now been updated and the vulnerability removed.
2.0.1	31425	XE-6075	Helm	Helm Chart Enhancements for AWS Description Some configurations were not possible to make in the helm charts. Resolution The following enhancements have been made to the helm chart: * It is now possible to configure the region that the Kubernetes cluster belongs to. Meaning that the url:s used by the Usage Engine specific Kubernetes resources will automatically contain the correct region. This is done via the global.region value. * It is now possible to configure the annotations applied to the ingress-alb Ingress and and the platform Service resources. This is done via the aws.ingress.metadata.annotations and the aws.platform.service.metadata.annotations values respectively. If there is a need to exclude a default annotation for one reason or another, this can be done via the aws.excludeDefaultAnnotations value. See the values file for further details.
2.0.1		XE-6096	System Log	Log Forwarding Does not Forward Full Information to Syslog Description When using log forwarding to the Syslog collection agent, the full information visible in the System Log is not included. Resolution This problem has now been fixed, and the information sent to the Syslog agent is the same as in the System Log.
2.0.1		XE-5970	Security	OS Vulnerability in Docker Images Description A vulnerability was detected in the OS in the Docker images. Resolution This issue has now been fixed and the vulnerability removed.
2.0.1		XE-5532	Operator	Unnecessary ECD Restarts Description When updating a WFG in an ECD, the ECD is unnecessarily restarted. Resolution This problem has now been fixed and the ECD will only be restarted when attributes that affect the ECD have been changed.
2.0.1		XE-5777	Couchbase	Support for Encrypted Port in Couchbase Profile Description It was not been possible to set the encryption port in the Couchbase profile. Resolution There is now support to set port numbers and to enable security in the Couchbase profile.

2.0.0

Version	Case ID	Internal ID	Components	Summary
2.0.0	30156	XE-5628	IBM MQ Documentation	Update Classpath Documentation for MQ Server and MQ Client Description For IBM MQ Server and IBM MQ Client, you need only one jar file and that must be installed from the mvn repository. Resolution The documentation now includes the updated jar file and the link from where the jar file can be downloaded from. It is recommended to use the jar version relevant to the MQ service that is being used.
2.0.0		XE-5531	Operator	Old and New Workflow Members Cannot be Mixed Description When mixing new and and existing workflow members in a workflow group in an ECD, the operator goes into an error loop. Resolution This problem has now been fixed.
2.0.0		XE-5504	HTTP/2	Monitoring Functionality Missing in HTTP/2 Client Description The HTTP/2 Client is missing the ability to monitor connection status. Resolution Monitoring connection status is now possible, and two new MIM parameters called Available Servers and Unreachable Servers have been added.
2.0.0		XE-5414	SFTP	SFTP key value not working in MZ10 workflow instance table Description When a user pastes the SFTP private key directly into the workflow table, the value is not readable by the system and the private key is shown as plain text. Resolution This problem has now been fixed. The private key can be entered by clicking on the button with the three dots in the Private Key field in the workflow table and pasting the key into the text area.
2.0.0		XE-5156	HTTP/2 Security Profile	Error While Importing Exports Including HTTP/2 Agents and Security Profile Description Some classes related to Security Profile, HTTP/2 Client, and Server have the wrong version ID. Because of that, importing exported workflows and configurations prepared in the MediationZone 8-track can lead to a faulty import. Resolution Version IDs are now correct and the import logic is improved to handle MediationZone 8 imports properly.
2.0.0		XE-4606	HTTP/2	APL httpRequest - PATCH Request Body not Supported Description While using the APL function httpRequest, the body of PATCH request is not supported. Resolution Support for PATCH request with body is now added.
2.0.0		XE-4905	mzcli User Management	mzcli Can Disable/Enable System Users Description When using mzcli it is possible to disable/enable the system admin users mzadmin and mzk8soperator. Resolution This problem has now been fixed.
2.0.0		XE-5386	Desktop Framework External References	Adding Keys for Empty Properties File in External References Generates Exception Description When configuring External References with a blank Properties File, and adding keys, you get an infinite exception. Resolution This problem has now been fixed, and you will not get an infinite exception.
2.0.0		XE-4420	Diameter Documentation	Information About Diameter in Kubernetes is Missing Description Instructions for how to handle Diameter in Kubernetes clusters is missing from the user documentation. Resolution This problem has now been fixed and this has been described.
2.0.0		XE-4923	PosgreSQL	Postgres Vulnerability Description A vulnerability was discovered in the PostgreSQL JDBC Driver. Resolution The driver has now been upgraded and the vulnerbility removed.
2.0.0		XE-4925	CXF	CXF Vulnerability Description A vulnerability was detected in the CXF version. Resolution CXF has now been upgraded and the vulnerability removed.
2.0.0		XE-5007	3pp	xmlsec Vulernability Description A vulnerability was detected in the xmlsec version. Resolution xmlsec has now been upgraded and the vulnerability removed.
2.0.0		XE-5413	ECS	Oracle Insert ECS_BATCH Has Incorrect Parameter Type Description The recently added insert_time parameter order messes with the errorudr parameter. Resolution The order has been corrected.
2.0.0		XE-5412	SAP CC	SAP CC Client Does Not Handle Failover Of Cluster Nodes Description When using SAPCC cluster if the first node in the profile gets a connection error then the rest of the clusters nodes fail to connect. This was due to an error a connection being cached and then checked if we had a connection. This lead to the application beveling it had a connection when it did not. Resolution Rebuild the connection logic to handle this case.
2.0.0		XE-5329	Access Control	User Group Logging Missing from System Log Description Details logging is missing for user groups add/remove. Resolution It is now have the details logging add/remove user group.
2.0.0		XE-5217	HTTP/2	HTTP/2 Server Unable to Retrieve Header Username of a Request Description The username in the header of a request to the HTTP/2 server could not be retrieved by the server. Resolution This problem is now fixed.
2.0.0		XE-5416	Workflow Bridge	Workflow Bridge in Batch Workflows can not Terminate Due to Deadlock Description Workflow bridge in batch workflows can not terminate due to deadlock, since disconnect is invoked twice. Resolution The extra disconnect is now removed.
2.0.0		XE-4702	ECDeployments	Incorrect ECD Patch Service Behavior Description When apply a service patch, the patch node port overrides the existing entries node port result in wrong behavior. Resolution This issue is fixed, the patch should only apply to the corresponding entry based on port number.