> This page is for Itential Gateway, version 4.
> For other versions, use one of these documentation indexes:
> - 5 (default): https://docs-test.itntl.com/itential-gateway/5/llms.txt
> - 4: https://docs-test.itntl.com/itential-gateway/4/llms.txt

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs-test.itntl.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs-test.itntl.com/_mcp/server.

# Gateway 4.3.12

Gateway 4.3.12 is a maintenance release containing enhancements, bug fixes, and security updates.

#### Enhancements (1)

| Feature                                     | Description                                                                                                     |
| ------------------------------------------- | --------------------------------------------------------------------------------------------------------------- |
| **Configurable caching system** (ENG-11821) | Added functionality to enable or disable the caching system with a configurable caching directory when enabled. |

#### Bug fixes (9)

| Issue                                                                 | Description                                                                                                                                                                                  |
| --------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **LDAP username case sensitivity** (ENG-9584)                         | Fixed authorization issue where LDAP usernames containing uppercase characters caused all Gateway modules to appear inaccessible by converting usernames to lowercase.                       |
| **Ansible implicit localhost execution** (ENG-9905)                   | Fixed playbook execution to properly fall back to implicit localhost when no inventory is specified.                                                                                         |
| **Device group cleanup on deletion** (ENG-10212)                      | Enhanced device deletion logic to ensure devices are removed from all associated groups upon deletion, preventing errors when executing roles through those groups.                          |
| **Recursive group relationships and deletion validation** (ENG-14249) | Enhanced group management to prevent recursive group relationships and added validation to block deletion of groups containing child groups or devices.                                      |
| **Large Ansible playbook log handling** (ENG-15049)                   | Improved handling of large Ansible playbook logs by implementing proper response size calculation, correcting max size thresholds, and adding enhanced error handling to prevent UI crashes. |
| **Device and group display performance** (ENG-15984)                  | Improved UI performance by adding pagination to device and group displays with a "Load more" button, and implemented infinite scrolling for dropdown menus in the execute tab.               |
| **IOS-XR device information retrieval** (ENG-17173)                   | Refactored the itential_get_info role to resolve type mismatch issues when running against IOS-XR devices.                                                                                   |
| **LDAP authentication performance** (ENG-17936)                       | Improved LDAP authentication performance by optimizing group name lookup mechanism using a predefined LDAP Manager API, significantly reducing authentication delays from 90 seconds.        |
| **HTTPS client certificate authentication** (ENG-19033)               | Fixed HTTPS client certificate authentication prompt by restoring original behavior and setting verify_mode to None by default when a certificate bundle is configured.                      |

#### Security fixes (5)

| Issue                                                                      | Description                                                                         |
| -------------------------------------------------------------------------- | ----------------------------------------------------------------------------------- |
| **Encrypted LDAP password storage** (ENG-11716)                            | LDAP bind passwords are now stored encrypted in the database instead of clear text. |
| **Uncontrolled recursion vulnerability** (ENG-18673)                       | Resolved uncontrolled recursion vulnerability in dependencies.                      |
| **Prototype pollution vulnerability** (ENG-19184)                          | Addressed prototype pollution vulnerability.                                        |
| **Regular expression denial of service (ReDoS) vulnerability** (ENG-19400) | Fixed regular expression denial of service (ReDoS) vulnerability.                   |
| **Version rollback for stability** (ENG-20497)                             | Reverted Gateway version from 4.4.11 back to 4.3.56 to address stability concerns.  |

#### Component version

| Component          | Version |
| ------------------ | ------- |
| automation_gateway | 4.3.58  |