This is a single tenant only release.
- The commons-configuration library is updated to address CVE-2024-29133 and CVE-2024-29131.
- The commons-compress library is updated to address CVE-2024-25710.
- The protobuf library is updated to address CVE-2024-7254.
- The Spring framework core and security libraries are updated to address CVE-2024-38821.
- The bundled Redshift jdbc driver is updated to resolve CVE-2024-32888.
- The bundled Snowflake jdbc driver is updated to resolve CVE-2024-43382.
- Terraform AWS key creation now enables key rotation on all generated keys.
- Terraform AWS bucket creation now enables object locking.
- AWS infrastructure creation now allows the installer to specify a non-standard port number instead of the default port.
Corrected issues
| Issue Summary | Issue Number |
|---|---|
| Terraform AWS bucket creation has been modified to require SSL for all requests. | ISX-22636 |
| Terraform variables for passwords have been tagged as sensitive to avoid terraform outputting their values during plan preparation and execution. | ISX-22632 |
| Terraform role creation for Redshift has been revised to refer to only the resources needed for KMS actions. | ISX-22631 |
| Terraform policy role creation for EMR services has been reorganized for better maintenance. It has been modified to specify more specific resources for KMS and S3 actions. Customers may need to add additional resources to access additional non-product resources. | ISX-22630 |
| Terraform policy creation for the Elastic Beanstalk EC2 role has been reorganized and modified to specify more specific resources for EMR, Athena, Glue, KMS, and S3 actions. Customers might need to add additional policies or resources for access to non-product resources. | ISX-22629 |
| Passwords and AWS secretKey values are now encrypted in properties files created by AWS infrastructure creation scripts. | ISX-22628 |
| The setup and password scripts for AWS infrastructure and properties creation no longer print passwords or sensitive values to the console when the variable value already exists in the tfvars or properties file. | ISX-22627 |