What's up ?β
The 2025.2.0 is a new minor version, bringing new features, enhancements and bug fixes.
This version guarantees retrocompatibility for the catalog.
Details below...
π Authentication & Team Managementβ
β¨ New Featuresβ
- Manage Team: New UI to view and manage team members.
- Team Creation: Add new members directly from the interface.
π§ Improvementsβ
- Role Hierarchy: Introduced a 3-level hierarchy:
- Superadmin: Can manage admins and users
- Admin: Can manage users only
- User: Cannot manage other members
- Log Access Restriction: Only admins and superadmins can now download worker and broker logs.
- Profile Info: Team member roles are now visible on their profile leaflets.
π Bug Fixesβ
- Fixed issue where logging in sometimes required double-clicking the button.
- Resolved a Linux-specific bug where refreshing the page would log the user out.
- Fixed expired worker tokens blocking broker access.
π Notificationsβ
π Bug Fixesβ
- Warning messages now correctly display when leaving a mandatory field empty.
π Securityβ
π§ Improvementsβ
- Workers are now authenticated when calling broker endpoints.
- Patched potential XXE vulnerability that could allow file access or remote code execution.
βοΈ Start-up & Configurationβ
π§ Improvementsβ
- New setting:
broker.stop.campaign.max.attempsto customize retry timing when stopping a campaign.
π Bug Fixesβ
- Console shutdown on some locales no longer shows unreadable characters.
πΊοΈ Edit Placeβ
π§ Map Constructionβ
π Bug Fixesβ
- Config panel no longer stays open after creating a new map.
- Warning messages are no longer duplicated when reopening an empty JSTransform config.
- Prevents unintentional map versioning when no campaign was launched.
π Catalogβ
β¨ New Featuresβ
- M-Files Connector: Added support for 2.x-LTS.
- FileInspector Tool: New task to detect and optionally extract embedded documents in Word files.
π§ Improvementsβ
- Alfresco Connector: Can now extract folder-level permissions (from 2.x-LTS).
- AWSInjector: Stores S3 key in the punnet dataset for AWS targets.
π Bug Fixesβ
- DeleteContent Task: Now deletes annotations and linked content (from 2.x-LTS).
- CSVSource: Now compatible with Java 8.
π Run Placeβ
(No new features or improvements listed)
π§ Explorer Placeβ
π Bug Fixesβ
- Filtering on datetime columns now works correctly.
π Maps Overview & Campaign Managementβ
πΊοΈ Maps Overviewβ
- No notable changes.
π Campaign Managementβ
π Bug Fixesβ
- Deleting a running campaign no longer falsely triggers a success message when it fails.
π₯οΈ Server Placeβ
π¦ Librariesβ
β¨ New Featuresβ
- Libraries Tab: View all JARs in the
worker-libsfolder. - Upload JAR: Add new JARs via interface.
- Search: Locate specific JARs in the list.
π§± Shared Objects Placeβ
- No notable changes.
π Scheduler Placeβ
- No notable changes.
π§ Known Issuesβ
- Authentication: Linux doesnβt auto-logout on Fast2 kill (fix planned).
- Trigger Campaign Task: API call blocked unless security is disabled (fix planned).
- Undo/Redo: Undo may leave ghost tasks or fail to revert config until place is reloaded.
- Punnet Tracker: "Copy to clipboard" currently non-functional.
- SleepTask: Sleeps block threads. Use dedicated queues and ensure thread availability.
- Recent Patches: Some Pro Services patches may not be included β check with your contact. This version is compatible with 2.12 worker libs. (Concerns: ComparePunnets, FileNetInjector, LocalSource)
- Security Gap: Maps can access local files via JSTransform or ReadContent tasks β restrict UI access or enable authentication.