Gateway 4.3.12
Gateway 4.3.12 is a maintenance release containing enhancements, bug fixes, and security updates.
Enhancements (1)
| Feature | Description |
|---|---|
| Configurable caching system (ENG-11821) | Added functionality to enable or disable the caching system with a configurable caching directory when enabled. |
Bug fixes (9)
| Issue | Description |
|---|---|
| LDAP username case sensitivity (ENG-9584) | Fixed authorization issue where LDAP usernames containing uppercase characters caused all Gateway modules to appear inaccessible by converting usernames to lowercase. |
| Ansible implicit localhost execution (ENG-9905) | Fixed playbook execution to properly fall back to implicit localhost when no inventory is specified. |
| Device group cleanup on deletion (ENG-10212) | Enhanced device deletion logic to ensure devices are removed from all associated groups upon deletion, preventing errors when executing roles through those groups. |
| Recursive group relationships and deletion validation (ENG-14249) | Enhanced group management to prevent recursive group relationships and added validation to block deletion of groups containing child groups or devices. |
| Large Ansible playbook log handling (ENG-15049) | Improved handling of large Ansible playbook logs by implementing proper response size calculation, correcting max size thresholds, and adding enhanced error handling to prevent UI crashes. |
| Device and group display performance (ENG-15984) | Improved UI performance by adding pagination to device and group displays with a “Load more” button, and implemented infinite scrolling for dropdown menus in the execute tab. |
| IOS-XR device information retrieval (ENG-17173) | Refactored the itential_get_info role to resolve type mismatch issues when running against IOS-XR devices. |
| LDAP authentication performance (ENG-17936) | Improved LDAP authentication performance by optimizing group name lookup mechanism using a predefined LDAP Manager API, significantly reducing authentication delays from 90 seconds. |
| HTTPS client certificate authentication (ENG-19033) | Fixed HTTPS client certificate authentication prompt by restoring original behavior and setting verify_mode to None by default when a certificate bundle is configured. |
Security fixes (5)
| Issue | Description |
|---|---|
| Encrypted LDAP password storage (ENG-11716) | LDAP bind passwords are now stored encrypted in the database instead of clear text. |
| Uncontrolled recursion vulnerability (ENG-18673) | Resolved uncontrolled recursion vulnerability in dependencies. |
| Prototype pollution vulnerability (ENG-19184) | Addressed prototype pollution vulnerability. |
| Regular expression denial of service (ReDoS) vulnerability (ENG-19400) | Fixed regular expression denial of service (ReDoS) vulnerability. |
| Version rollback for stability (ENG-20497) | Reverted Gateway version from 4.4.11 back to 4.3.56 to address stability concerns. |
Component version
| Component | Version |
|---|---|
| automation_gateway | 4.3.58 |