Skip to content

Latest commit

 

History

History
802 lines (591 loc) · 42.3 KB

DSE_5.1_Release_Notes.md

File metadata and controls

802 lines (591 loc) · 42.3 KB
Raw

Release notes for DataStax Enterprise 5.1

DSE 5.1.x is compatible with Apache Cassandra™ 3.11 and adds additional production-certified changes, if any. Components that are indicated with an asterisk (*) (if any) are known to be updated since the prior patch version.

Release notes of versions prior to 5.1.20 can be found here.

Release notes for 5.1.45

8 July 2024

Components versions for DSE 5.1.45

  • Apache Solr™ 6.0.1.0.2961
  • Apache Spark™ 2.0.2.43
  • Apache TinkerPop™ 3.2.11-20230523-74d884e8
  • Apache Tomcat® 8.5.94
  • DSE Java Driver 1.8.3-dse+20201217 (DSE internal-only version)
  • Netty 4.0.54.1.dse
  • Spark JobServer 0.6.2.243

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

5.1.45 DSE Cassandra

  • Added the CASSANDRA-15367 code fix to prevent Memtable memory allocations deadlock. (DSP-24176)

5.1.45 DSE Security

  • Added the option to temporarily lock a role after too many failed authentication requests. This feature is enabled per role through role options by setting unauthorized_access_max_attempts and, optionally, unauthorized_access_lockout_duration_seconds (default is 15 minutes). Added the configuration parameter -Dauthentication_options.role_lockout_expire_seconds to set the maximum retention of expired locks (default is 1 day). Allowed the dsetool command with itsrole_locks option to show and remove extant role locks. (DSP-23953)

5.1.45 DSE Docker

  • Upgraded JDK 8 version in DSE Docker image to 8u402 (DSP-24250)

Release notes for 5.1.44

13 May 2024

Components versions for DSE 5.1.44

  • Apache Solr™ 6.0.1.0.2961
  • Apache Spark™ 2.0.2.43
  • Apache TinkerPop™ 3.2.11-20230523-74d884e8
  • Apache Tomcat® 8.5.94
  • DSE Java Driver 1.8.3-dse+20201217 (DSE internal-only version)
  • Netty 4.0.54.1.dse
  • Spark JobServer 0.6.2.243

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

5.1.44 DSE Cassandra

  • Fixed millisecond precision point-in-time restore. (DSP-23993)

5.1.44 DSE Search

  • Fixed Solr credentials parsing. (DSP-24102)

5.1.44 DSE Security

  • Added the possibility to close or block a connection per role by specifying connection_idle_timeout_seconds and connection_idle_behavior through a role’s custom options. (DSP-23951)

5.1.44 DSE CVE

  • Upgraded to Bouncy Castle v1.78.1, its latest known version. (DSP-24188, CVE-2024-30371)

Release notes for 5.1.43

11 March 2024

Components versions for DSE 5.1.43

  • Apache Solr™ 6.0.1.0.2961
  • Apache Spark™ 2.0.2.43
  • Apache TinkerPop™ 3.2.11-20230523-74d884e8
  • Apache Tomcat® 8.5.94
  • DSE Java Driver 1.8.3-dse+20201217 (DSE internal-only version)
  • Netty 4.0.54.1.dse
  • Spark JobServer 0.6.2.243

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

5.1.43 DSE Cassandra

  • Reverted the regression caused by DSP-23913 which introduced a change in batch size calculation that impacts the behaviour of the batch_size guardrail. Introduced a new guardrail called batch_size_with_pk_warn_threshold_in_kb, batch_size_with_pk_fail_threshold_in_kb instead that honours the updated logic. (DSP-24011)

5.1.43 DSE Core

  • Modified DSE Advanced Authentication to preserve credentials cache in case of an LDAP internal error causing authentication failure. (DSP-12590)
  • Improved LDAP logging by decreasing the frequency of search reference warning messages. (DSP-21177)
  • Changed DSE Advanced Authentication to only record in audit log a login error when authentication fails due to matching credentials (and not for provider internal errors). (DSP-23952)

5.1.43 DSE Docker

  • Upgraded JDK versions in DSE Docker images to 8u392 and 11.0.21. (DSP-23213)

5.1.43 DSE CVE

Release notes for 5.1.42

5 February 2024

Components versions for DSE 5.1.42

  • Apache Solr™ 6.0.1.0.2961
  • Apache Spark™ 2.0.2.43
  • Apache TinkerPop™ 3.2.11-20230523-74d884e8
  • Apache Tomcat® 8.5.94*
  • DSE Java Driver 1.8.3-dse+20201217 (DSE internal-only version)
  • Netty 4.0.54.1.dse
  • Spark JobServer 0.6.2.243

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

5.1.42 DSE Cassandra

  • Fixed mutation size calculation formula by taking into account static column updates. Backporting CASSANDRA-15293 achieved this fix. (DSP-23933)
  • Fixed batch size guardrail to take into account the mutation primary key size. That prevents flooding the cluster with operations for tables that use the primary key without clustering columns. (DSP-23913)

5.1.42 DSE DSEFS

  • Fixed DSEFS file path handling that could fail when using filenames containing colons. (DSP-23947)

5.1.42 DSE CVE

  • Upgraded Apache Tomcat to version 8.5.94. (DSP-23779, CVE-2023-45648)

Release notes for 5.1.41

7 November 2023

Components versions for DSE 5.1.41

  • Apache Solr™ 6.0.1.0.2961
  • Apache Spark™ 2.0.2.43
  • Apache TinkerPop™ 3.2.11-20230523-74d884e8
  • Apache Tomcat® 8.5.93
  • DSE Java Driver 1.8.3-dse+20201217 (DSE internal-only version)
  • Netty 4.0.54.1.dse
  • Spark JobServer 0.6.2.243

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

5.1.41 DSE Cassandra

  • Backported the CASSANDRA-14415 code fix to improve the performance of SELECT DISTINCT queries. (DSP-23615)

Release notes for 5.1.40

11 September 2023

Components versions for DSE 5.1.40

  • Apache Solr™ 6.0.1.0.2961
  • Apache Spark™ 2.0.2.43
  • Apache TinkerPop™ 3.2.11-20230523-74d884e8
  • Apache Tomcat® 8.5.93*
  • DSE Java Driver 1.8.3-dse+20201217 (DSE internal-only version)
  • Netty 4.0.54.1.dse
  • Spark JobServer 0.6.2.243

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

5.1.40 DSE Core

  • Changed logging level from error to warn for a log message that is issued when folders are removed during a snapshot that calculates folder size. (DSP-23432)
  • Added a check to prevent running cleanup operations concurrently with operations that lead to token ownership changes, such as node addition or node decommission. Prior to this fix, running such concurrent operations could unintentionally delete valid data replicas. (DSP-23507)

5.1.40 DSE Insights

  • Changed to use collectd v0.1.6 bundle based on Ubuntu:18.04. (DSP-23519)

5.1.40 DSE Node/DseTool

  • Fixed the nodetool repair --trace command to prevent it from hanging when it is run on an empty keyspace or on a keyspace with nodesync-enabled tables. (DSP-23408)

5.1.40 DSE CVE

  • Upgraded Apache Tomcat to version 8.5.93. (DSP-23522, CVE-2023-41080)
  • Enforced net.sf.ehcache library to use version 2.10.9.2 instead of 2.10.4. Removed indirect dependency on jackson-databind version 2.3.3. (DSP-23528)

Release notes for 5.1.39

10 July 2023

5.1.39 DSE Platform

  • Added support for Red Hat Enterprise Linux 9. (DSP-23444)
  • Added support for Oracle Linux 9. (DSP-22612)

Components versions for DSE 5.1.39

  • Apache Solr™ 6.0.1.0.2961
  • Apache Spark™ 2.0.2.43
  • Apache TinkerPop™ 3.2.11-20230523-74d884e8
  • Apache Tomcat® 8.5.89
  • DSE Java Driver 1.8.3-dse+20201217 (DSE internal-only version)
  • Netty 4.0.54.1.dse
  • Spark JobServer 0.6.2.243

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

5.1.39 DSE Core

  • Allowed to encrypt kmip_host passwords in the dse.yaml file. New optional parameter password_encryption_key_name was added to the kmip_hosts items. DSP-23326 enabled password encryption before placing them in dse.yaml. (DSP-23313)

5.1.39 DSE Docker

  • Updated official DSE Docker image, basing it on a more current Ubuntu 20.04 (Focal Fossa) that is FIPS certified and handles multiple known CVEs. (DSP-23397)

5.1.39 DSE CVE

  • Upgraded Apache mina-core library to version 2.0.24. (DSP-23378, CVE-2021-41973)
  • Upgraded Apache Commons libraries to recently available versions: commons-io to 2.11.0, commons-lang3 to 3.12.0, commons-math3 to 3.6.1, and commons-collection4 to 4.4. (DSP-23384, CVE-2021-29425)
  • Upgraded xerial/snappy-java library to version 1.1.10.1. (DSP-23391, DSP-23433, CVE-2023-34453, CVE-2023-34454, CVE-2023-34455)

Release notes for 5.1.38

12 June 2023

Components versions for DSE 5.1.38

  • Apache Solr™ 6.0.1.0.2961
  • Apache Spark™ 2.0.2.43
  • Apache TinkerPop™ 3.2.11-20230523-74d884e8*
  • Apache Tomcat® 8.5.89*
  • DSE Java Driver 1.8.3-dse+20201217 (DSE internal-only version)
  • Netty 4.0.54.1.dse
  • Spark JobServer 0.6.2.243

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

5.1.38 DSE Cassandra

  • Improved logging around index summary building. Introduced rounding that effectively uses the min_index_interval option set to a multiple of 128 in the index summary building process. (DSP-23317)

5.1.38 DSE Search

  • Fixed the bug in the Solr UI permissions when accessing segments information. It was not working with authorization enabled by implementing a segments view when granting the SELECT permission on the Solr-indexed table. (DSP-22295)

5.1.38 DSE Node/DseTool

  • Added --key option to dsetool encryptconfigvalue command to allow using different key than the default one. (DSP-23326)

5.1.38 DSE Other

  • Improved CQLSH to support Python 3.11 and changed the preferred interpreter from python2 to python3. Introduced CQLSH_PYTHON environment variable to allow users to specify the Python interpreter used by CQLSH. (DSP-23257)

5.1.38 DSE CVE

  • Upgraded commons-net library used in Hadoop and Tinkerpop. Removed old Hadoop 1.0.3 dependency and replaced it with version universally used in DSE (2.7.1.x for 5.1 and 2.10.2.x for 6.8). (DSP-23327, CVE-2021-37533, CVE-2012-4449)
  • Upgraded Apache Tomcat to version 8.5.89. (DSP-23329, CVE-2023-28709)

Release notes for 5.1.37

11 April 2023

Components versions for DSE 5.1.37

  • Apache Solr™ 6.0.1.0.2961*
  • Apache Spark™ 2.0.2.43
  • Apache TinkerPop™ 3.2.11-20210716-faea8d16
  • Apache Tomcat® 8.5.87*
  • DSE Java Driver 1.8.3-dse+20201217 (DSE internal-only version)
  • Netty 4.0.54.1.dse
  • Spark JobServer 0.6.2.243*

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

5.1.37 DSE Core

  • Set default systemd dse.service startup timeout to 7 minutes. (DSP-23225)

5.1.37 DSE Build

  • Updated OS versions used to create DSE packages (Ubuntu 12.04 for .deb packages, and CentOS 7.9 for .rpm packages). (DSP-22750)

5.1.37 DSE Insights

  • Upgraded insights-collectd to version 0.1.5 that removed libmodbus.so. (DSP-22809, CVE-2022-0367)

5.1.37 DSE Platform

  • Added support for Rocky Linux 8. (DSP-23209)
  • Added support for Rocky Linux 9. (DSP-23227)

5.1.37 DSE Miscellaneous

  • Fixed RPM package install for platforms requiring systemd services. (DSP-23218)

5.1.37 DSE CVE

  • Upgraded groovy-sandbox to 1.20.1.DSE, which is a DataStax version based on OSS v1.20 that contains additional fixes. (DSP-21677, CVE-2018-1000865)
  • Upgraded org.json:json to 20230227 to resolve a Denial of Service (DoS) vulnerability. In addition, upgraded esri-geometry-api to 2.2.4. (DSP-23187, CWE-400)
  • Upgraded commons-fileupload to 1.5. Added a solrconfig.xml setting that limits the number of files allowed in multipart update requests. (DSP-23188, CVE-2023-24998)
  • Removed Postgresql driver from spark-jobserver. (DSP-22894, CVE-2002-21724, CVE-2020-13692, CVE-2018-10936)
  • Upgraded Apache Tomcat to version 8.5.87. (DSP-23205, CVE-2023-24998)

Release notes for 5.1.36

7 February 2023

Components versions for DSE 5.1.36

  • Apache Solr™ 6.0.1.0.2942*
  • Apache Spark™ 2.0.2.43
  • Apache TinkerPop™ 3.2.11-20210716-faea8d16
  • Apache Tomcat® 8.5.84*
  • DSE Java Driver 1.8.3-dse+20201217 (DSE internal-only version)
  • Netty 4.0.54.1.dse
  • Spark JobServer 0.6.2.242*

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

5.1.36 DSE Search

  • Allow the use of date with time in Solr range queries on SimpleDateField fields (time will be truncated). (DSP-23085)

5.1.36 DSE Node/DseTool

  • Fixed the CLI usage of namespace filtering in the dsetool utility. (DSP-23064)
  • Fixed the dsetool utility ‘managekmip revoke’ command to correctly set the ‘compromiseOccurrenceDate’ field. (DSP-23110)

5.1.36 DSE CVE

Release notes for 5.1.35

12 December 2022

Components versions for DSE 5.1.35

  • Apache Solr™ 6.0.1.0.2939
  • Apache Spark™ 2.0.2.43
  • Apache TinkerPop™ 3.2.11-20210716-faea8d16
  • Apache Tomcat® 8.5.79
  • DSE Java Driver 1.8.3-dse+20201217 (DSE internal-only version)
  • Netty 4.0.54.1.dse
  • Spark JobServer 0.6.2.241

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

5.1.35 DSE Installer: Debian

  • Fixed Debian package dependencies on Python so that it can be installed on Ubuntu 22.04. (DSP-22993)

Release notes for 5.1.34

14 November 2022

Components versions for DSE 5.1.34

  • Apache Solr™ 6.0.1.0.2939
  • Apache Spark™ 2.0.2.43
  • Apache TinkerPop™ 3.2.11-20210716-faea8d16
  • Apache Tomcat® 8.5.79*
  • DSE Java Driver 1.8.3-dse+20201217 (DSE internal-only version)
  • Netty 4.0.54.1.dse
  • Spark JobServer 0.6.2.241

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

5.1.34 DSE Search

  • Fixed dsetool core_indexing_status to return consistent indexing status for calls issued with and without the --all parameter. (DSP-21594)

5.1.34 DSE Spark

  • Fixed an issue in DSE Spark which was unable to read S3 objects with $ and = characters in the path. (DSP-22737)
  • Dropped support of s3n, which is no longer undergoing active maintenance from the OSS Hadoop, and updated aws-java-sdk to 1.11.892 and hadoop to 2.7.1.5. (DSP-22737)

5.1.34 DSE Graph

  • Fixed permissions that allowed to drop graph tables when setting {{CREATE}} and {{ALTER}}. (DSP-22024)
  • Fixed GraphOLAP spark connection problem in multi-network cloud environments when GossipingPropertyFileSnitch (GPFS) is not used. (DSP-22707)

5.1.34 DSE Security

Fixed an issue during DSE Spark cluster upgrade where InClusterAuthenticator would fail to compose and decode a token if it receives an old version token. (DSP-22723)

5.1.34 DSE CVE

Release notes for 5.1.33

12 September 2022

Components versions for DSE 5.1.33

  • Apache Solr™ 6.0.1.0.2939
  • Apache Spark™ 2.0.2.43
  • Apache TinkerPop™ 3.2.11-20210716-faea8d16
  • Apache Tomcat® 8.5.75
  • DSE Java Driver 1.8.3-dse+20201217 (DSE internal-only version)
  • Netty 4.0.54.1.dse
  • Spark JobServer 0.6.2.241

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

5.1.33 DSE Miscellaneous

  • Made ‘nodetool status’ report the state of unreachable nodes in order to allow knowing why they are unreachable. (DSP-22648)

Release notes for 5.1.32

18 July 2022

Components versions for DSE 5.1.32

  • Apache Solr™ 6.0.1.0.2939*
  • Apache Spark™ 2.0.2.43*
  • Apache TinkerPop™ 3.2.11-20210716-faea8d16
  • Apache Tomcat® 8.5.75
  • DSE Java Driver 1.8.3-dse+20201217 (DSE internal-only version)
  • Netty 4.0.54.1.dse
  • Spark JobServer 0.6.2.241*

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

5.1.32 DSE Core

  • Implemented ability to replace the THREE consistency level with an ALL_BUT_ONE consistency level. (DSP-22366)
  • Replaced 1.9.13 version of jackson-core-asl and jackson-mapper-asl to be 1.9.13.1.dse which contains the security fix. (DSP-22389, CVE-2019-10172)
  • Removed dependency to Xerces2 Java XML Parser library. (DSP-22391, CVE-2012-0881, CVE-2013-4002)
  • Removed the PMD plugin from gradle config. (DSP-22575, CVE-2019-7722)
  • Fixed the cqlsh tool to restore the ability to use the EXECUTE AS command. (DSP-22417)
  • Fixed bug with overriding customer limits.d file if there are new values in the package upgrade. Complementary to DSP-21928. (DSP-22594)

5.1.32 DSE Cassandra

  • Updated outdated nofile parameter value to 1048576 in /etc/security/limits.d/cassandra.conf. (DSP-21947)
  • Ported CASSANDRA-16987 and fixed python version check bug in cqlsh. (DSP-22517)

5.1.32 DSE Search

  • Upgraded Solr libraries metadata-extractor to 2.18.0 and XmpCore to 6.1.11. (DSP-22406, CVE-2019-14262)
  • Fixed parsing range queries on DSE Search indexed columns of CQL types Date and Time. (DSP-22548)
  • Changed Tomcat {{showServerInfo}} configuration parameter to {{false}} for not exposing Tomcat version in error pages. (DSP-22561)

5.1.32 DSE Spark

  • Upgraded spark library version containing change to sanitize passwords when printing spark commands to stderr. (DSP-22481)

5.1.32 DSE CVE

  • Upgraded apache-shiro used by spark-jobserver to version 1.8.0. (DSP-22579, CVE-2021-41303)

Release notes for 5.1.31

11 May 2022

Components versions for DSE 5.1.31

  • Apache Solr™ 6.0.1.0.2882
  • Apache Spark™ 2.0.2.42
  • Apache TinkerPop™ 3.2.11-20210716-faea8d16
  • Apache Tomcat® 8.5.75*
  • DSE Java Driver 1.8.3-dse+20201217 (DSE internal-only version)
  • Netty 4.0.54.1.dse
  • Spark JobServer 0.6.2.240

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

5.1.31 DSE Core

  • Improved reading logic to ensure that sstables are not unnecessarily read for columns that are not selected. See CASSANDRA-16737. (Previously DB-4974). (DSP-22478)
  • Fixed the URISyntaxException: Malformed IPv6 address when using nodetool or dsetool with Java 8u331 or 11.0.15. This is due to the recent changes of JDK-8278972, in which parsing of URL Strings in Built-in JNDI Providers is more strict. (DSP-22474)

5.1.31 DSE Cassandra

  • Greater than '>' and less than '<' operators are swapped in the slow query log for a table with DESC clustering keys (port CASSANDRA-15503). (DSP-22369)
  • Fixed a rare race condition where attempting to read from a sstable would fail with an assertion error. (DSP-22431)

5.1.31 DSE Security

  • Upgraded Bouncy Castle to the latest 1.70 version. (DSP-22352)

5.1.31 DSE CVE

  • Upgraded apache-commons compress library to 1.21 version. This version upgrade fixed several vulnerabilities that could be used to mount a denial of service attack against specially-crafted services that use a compress or decompress sevenz, tar, or zip package. (DSP-22383, CVE-2021-35515, CVE-2021-35516, CVE-2021-35517, CVE-2021-36090)
  • Upgraded snakeyaml version to 1.30. (DSP-22386, CVE-2017-18640)
  • Upgraded logback version to 1.2.11. This fixes a vulnerability affecting logback-classic and logback-core. (DSP-22237, CVE-2021-42550)
  • Upgraded version of Apache Tomcat from 8.5.72 to 8.5.75. (DSP-22360, CVE-2022-23181)

Release notes for 5.1.30

7 March 2022

Components versions for DSE 5.1.30

  • Apache Solr™ 6.0.1.0.2882
  • Apache Spark™ 2.0.2.42
  • Apache TinkerPop™ 3.2.11-20210716-faea8d16
  • Apache Tomcat® 8.5.72
  • DSE Java Driver 1.8.3-dse+20201217 (DSE internal-only version)
  • Netty 4.0.54.1.dse
  • Spark JobServer 0.6.2.240

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

5.1.30 DSE Core

  • Introduces system property "cassandra.commitlog.skip_file_advice" that allows to skip the native call to "fadvise" with "FADV_DONTNEED" argument after the commit log is flushed. The native call is not skipped by default and therefore has no effect. (DSP-22315)
  • MemoryOnlyStrategy tables will always use mmap disk access mode, the cassandra.yaml setting will be ignored for those tables. (DSP-22246)

5.1.30 DSE Cassandra

  • With disk_access_mode ‘auto’ (default value) DSE will map only index files on 64-bit JVM unless there is no limit for -Djdk.nio.maxCachedBufferSize or -XX:+DisableExcplicitGC is set for the DSE JVM. (DSP-22079)
  • Lower commitlog replay sstable origin warning to info. (DSP-22270)

5.1.30 DSE CVE

Release notes for 5.1.29

17 February 2022

Components versions for DSE 5.1.29

  • Apache Solr™ 6.0.1.0.2882
  • Apache Spark™ 2.0.2.42
  • Apache TinkerPop™ 3.2.11-20210716-faea8d16
  • Apache Tomcat® 8.5.72
  • DSE Java Driver 1.8.3-dse+20201217 (DSE internal-only version)
  • Netty 4.0.54.1.dse
  • Spark JobServer 0.6.2.240

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

5.1.29 DSE Cassandra

  • Ported fix from CASSANDRA-17352: Remote code execution for scripted UDFs (DSP-22321, CVE-2021-44521)

Release notes for 5.1.28

18 January 2022

Components versions for DSE 5.1.28

  • Apache Solr™ 6.0.1.0.2882
  • Apache Spark™ 2.0.2.42
  • Apache TinkerPop™ 3.2.11-20210716-faea8d16
  • Apache Tomcat® 8.5.72*
  • DSE Java Driver 1.8.3-dse+20201217 (DSE internal-only version)
  • Netty 4.0.54.1.dse
  • Spark JobServer 0.6.2.240

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

5.1.28 DSE Cassandra

  • Await timeout for shutting down non periodic tasks is now configurable with the new jvm option cassandra.non_periodic_tasks_shutdown_timeout_in_minutes. When timeout is reached, force shutdown those tasks. (DSP-22241)

5.1.28 DSE Upgrade

  • Retain changes to /etc/security/limits.d/cassandra.conf on yum upgrade. (DSP-21928)

5.1.28 DSE CVE

  • Upgraded version of Apache Tomcat from 8.5.70 to 8.5.72 to fix CVE-2021-42340. (DSP-22098, CVE-2021-42340)

DataStax Enterprise 5.1.27

26 November 2021

Components versions for DSE 5.1.27

  • Apache Solr™ 6.0.1.0.2882
  • Apache Spark™ 2.0.2.42
  • Apache TinkerPop™ 3.2.11-20210716-faea8d16
  • Apache Tomcat® 8.5.70
  • DSE Java Driver 1.8.3-dse+20201217 (DSE internal-only version)
  • Netty 4.0.54.1.dse
  • Spark JobServer 0.6.2.240

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

5.1.27 DSE Cassandra

  • Enables periodic logging of system status (default every 5 minutes, configurable). (DSP-22039)
  • Fix a possible issue that shell tool could break with -h/--help in package install. (DSP-20375)

5.1.27 DSE core

  • Port CASSANDRA-16671: Cassandra can return no row when the row columns have been deleted. Issue not reproduced on 5.1 but brings code to parity with OSS version. (DB-5008)
  • Port CASSANDRA-16712: DROP COMPACT STORAGE does not invalidate prepared statements as it should. (DB-5044)

5.1.27 DSE CQL

  • Prints TLS protocol information when running cqlsh with --debug parameter. (DB-4981)

5.1.27 DSE Spark

  • Storing and revoking permissions for the application owner is removed. The application owner is explicitly assumed to have these permissions (backported DSP-19393). (DSP-21740)
  • Fixed and updated javax.mail dependency to com.sun.mail. (DSP-22085)

5.1.27 DSE Security

  • Storing and revoking permissions for the application owner is removed. The application owner is explicitly assumed to have these permissions (backported DSP-19393). (DSP-21740)

DataStax Enterprise 5.1.26

21 September 2021

Components versions for DSE 5.1.26

  • Apache Solr™ 6.0.1.0.2882*
  • Apache Spark™ 2.0.2.42
  • Apache TinkerPop™ 3.2.11-20210716-faea8d16*
  • Apache Tomcat® 8.5.70*
  • DSE Java Driver 1.8.3-dse+20201217 (DSE internal-only version)
  • Netty 4.0.54.1.dse
  • Spark JobServer 0.6.2.240

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

5.1.26 DSE core

  • Added check against the negative value in local stream throughput (stream_throughput_outbound_megabits_per_sec) and inter dc stream throughput (inter_dc_stream_throughput_outbound_megabits_per_sec) (DB-5010)

5.1.26 DSE SSTables

  • Backported fixes from CASSANDRA-15595 that prevent IllegalBound exceptions in tables with huge data and CASSANDRA-15869 that fixes MemoryOutputStream overflow on large bloom filters. (DB-5035)

5.1.26 DSE CVE

  • Upgraded Tomcat version from 8.5.65 to 8.5.70 to fix CVE-2021-33037. (DSP-21996)
  • Upgraded Bootstrap version from 3.1.1 to 3.4.1 and Flask from 0.10.1 to 1.1.4 to fix CVE-2019-8331, CVE-2016-10735, CVE-2018-1000656, and CVE-2019-1010083. (DSP-21682)
  • Ported fix from SOLR-12514 to dse lucene-Solr to fix CVE-2018-11802. (DSP-21685)
  • Upgraded version of PDFBox and FontBox to 2.0.24, and version of JempBox to 1.8.16 to fix CVE-2018-8036 and CVE-2018-11797. (DSP-21688)
  • Upgraded version of directory-ldap-api from DSE 1.0.0.2.dse to OSS 1.0.3 to fix CVE-2018-1337. (DSP-21758)
  • Upgraded version of groovy to 2.4.21 (DSE 5.1/6.0/67) and to 2.5.14 (DSE 6.8) to fix CVE-2020-17521. (DSP-21767)

DataStax Enterprise 5.1.25

16 July 2021

5.1.25 DSE Platform

  • Provide DSE support for Ubuntu 20.04 (Focal) (DSP-21330). Please note that certification was done using Python 2.7 and Python 2.7 needs to be available on the target system.

Components versions for DSE 5.1.25

  • Apache Solr™ 6.0.1.0.2841
  • Apache Spark™ 2.0.2.42
  • Apache TinkerPop™ 3.2.11-20210601-6b27fbde
  • Apache Tomcat® 8.5.65
  • DSE Java Driver 1.8.3-dse+20201217 (DSE internal-only version)
  • Netty 4.0.54.1.dse
  • Spark JobServer 0.6.2.240

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

5.1.25 DSE Auth

  • Removed a possible false-positive error message in the log that would cause confusion when multiple authentication schemes are defined. (DB-5015)

5.1.25 DSE CQL

  • Added unit test cases for logic cqlsh TLS version. (DB-4979)

5.1.25 DSE Cassandra

  • Added warning message in case of cases where dse was started with duplicated -Xmx options when used in jvm-server.options (DSP-21795)

5.1.25 DSE CVE

  • Upgraded jetty version from 9.4.34.v20201102 to 9.4.41.v20210516 (DSP-21684, DSP-21687)

5.1.25 DSE Search

  • Fixed a bug where in rare cases search query routing might start to spin endlessly for a particular query (DSP-21838)

5.1.25 DSE Security

  • Fixed an issue in the LDAP group_search_filter default value that meant that group hierarchies were not being loaded if the group_search_filter was not explicitly set in the dse.yaml. (DSP-21874)

DataStax Enterprise 5.1.24

6 May 2021

Components versions for DSE 5.1.24

  • Apache Solr™ 6.0.1.0.2841
  • Apache Spark™ 2.0.2.42
  • Apache TinkerPop™ 3.2.11-20200603-0524f70f
  • Apache Tomcat® 8.5.65
  • DSE Java Driver 1.8.3-dse+20201217 (DSE internal-only version)
  • Netty 4.0.54.1.dse
  • Spark JobServer 0.6.2.240

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

DSE 5.1.24 Core

  • Fixed a potential issue that users may have tombstone deletion time in the future updated to the current time if they run nodetool scrub. (DB-4982)
  • Fixed an issue with DSE daemon unable to stop after the default timeout expired. The issue only happened in the systems that use package install and init.d, such as centos. (DSP-21804)

DataStax Enterprise 5.1.23

3 May 2021

⚠️ NOTE: Due to a bug which affects DSE 5.1.23, this release has been retracted. We recommend against upgrading to this version at this time. This bug is already addressed in DSE 5.1.24. All features and fixes for 5.1.23 are present in 5.1.24.

Components versions for DSE 5.1.23

  • Apache Solr™ 6.0.1.0.2841*
  • Apache Spark™ 2.0.2.42*
  • Apache TinkerPop™ 3.2.11-20200603-0524f70f
  • Apache Tomcat® 8.5.65*
  • DSE Java Driver 1.8.3-dse+20201217 (DSE internal-only version)
  • Netty 4.0.54.1.dse
  • Spark JobServer 0.6.2.240

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

DSE 5.1.23 Core

  • Adds a new flag -t for sstablescrub to update deletion times which are in the future. It accepts a command-line argument: -t . All deletion times further in the future than the given number of days will be reset to the current time. (DB-4912)
  • Add asynchronous update to KMIP key cache to fix blocking of commit log (DSP-20582)

DSE 5.1.23 CQL

  • Fix an error in cqlsh encoding unicode in multi-line statements (DB-4855)
  • Make cqlsh prefer newer TLS versions. (DB-4966)

DSE 5.1.23 Schema

  • CDC property per table is now propagated regardless CDC is enabled in yaml or not. CDC property is not propagated when there are nodes running C* 3.0 or DSE 5.0 in the cluster (upgrade state). During the upgrade we also prohibit toggling CDC property on per-table basis. (DB-4926

DSE 5.1.23 SSTables

  • Fixes a problem with nulls in tuples in the byte-comparable translation (i.e. sstables in bti format) as well as the comparator (i.e. sstables in big format, see CASSANDRA-19538). (DB-4813)

DSE 5.1.23 Streaming

  • Print a timestamp when nodetool exits due to an error (DB-4826)

DSE 5.1.23 Cassandra

  • Data export from cqlsh is now less noisy in the logs (DSP-21494)

DSE 5.1.23 Security

  • Add asynchronous update to KMIP key cache to fix blocking of commit log (DSP-20582)
  • Fixes an issue where a user-defined function can be defined without arguments and then cannot be read when listing UDFs. (DSP-21791)

DSE 5.1.23 CVE

  • Upgrade apache commons-compress to address CVE-2019-12402 (DSP-21679)
  • Addresses CVE-2018-11796, CVE-2018-11761, CVE-2019-10094, CVE-2019-10088 in the Apache Tika library. (DSP-21689)
  • Update tomcat version 8.5.61 to 8.5.65 (DSP-21798)
  • Applied fix for CVE-2020-17516 (DB-4897)
  • Fixed CVE-2020-1945 affecting Apache Ant (DSP-21716)
  • Fixes SRCCLR-SID-22742: Insecure Input Validation Vulnerability in the Apache Commons Codec library (DSP-21747)

DSE 5.1.23 Search

  • Fixed a bug where FilterCache warmup triggered by node health change can block GossipStage-1 thread for several seconds (DSP-21674)
  • Fixed a bug where under heavy load solr query worker threads would use 100% CPU due to contention on thread local map (DSP-21746)
  • A new jvm option is added: “dse.search.fc.warmup”: AUTO, ALWAYS & NEVER. Warmup will be disabled for cases when it’s either set to NEVER or set to AUTO with Non-Static type for cover finder & Vnodes are enabled. For all other scenarios, it will be enabled. (DSP-21813)

DataStax Enterprise 5.1.22

12 February 2021

Components versions for DSE 5.1.22

  • Apache Solr™ 6.0.1.0.2810
  • Apache Spark™ 2.0.2.38
  • Apache TinkerPop™ 3.2.11-20200603-0524f70f
  • Apache Tomcat® 8.0.53
  • DSE Java Driver 1.8.3-dse+20201217 (DSE internal-only version)
  • Netty 4.0.54.1.dse
  • Spark JobServer 0.6.2.240

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

DSE 5.1.22 Spark

  • Fix: Spark Master fails to start if keystore (used by web UI) contains more than one certificate (DSP-21703)

DataStax Enterprise 5.1.21

5 February 2021

⚠️ NOTE: This release was retracted due to a bug involving DSE Spark.

Components versions for DSE 5.1.21

  • Apache Solr™ 6.0.1.0.2810
  • Apache Spark™ 2.0.2.38*
  • Apache TinkerPop™ 3.2.11-20200603-0524f70f
  • Apache Tomcat® 8.0.53
  • DSE Java Driver 1.8.3-dse+20201217* (DSE internal-only version)
  • Netty 4.0.54.1.dse
  • Spark JobServer 0.6.2.240

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

DSE 5.1.21 Auth

  • Works around a bug (JDK-8148854) in JDK 1.8u282. (DB-4884)

5.1.21 DSE Cassandra

  • Fix for DESCRIBE TYPES in cqlsh (DSP-21667)

5.1.21 DSE Core

  • Add support for multiple authentication sources (LDAP + DSE Internal) (DSP-14233)
  • Addressed several Jackson databind vulnerabilities by upgrading jackson-databind to version 2.9.10.8 in DSE 5.1.21, 6.0.15 and 6.7.13 and version 2.10.5.1 in DSE 6.8.10. (DSP-21503)

5.1.21 DSE Spark

  • Update Jetty to 9.4.34.v20201102 and update Spark Version to 2.0.2.38 (DSP-21506)

5.1.21 DSE DSEFS

  • Backport fsck throttling and LocationService to 5.1.21 (DSP-21258)

5.1.21 DSE Search

  • A system property dse.solr.fuzzy.max.expansion was added. The property allows to workaround https://issues.apache.org/jira/browse/SOLR-4824 / DSP-19459 by defining a custom number of fuzzy query expansions. The maximal possible value is 1024. When unset, the default number of max expansions is 50. (DSP-21605)

5.1.21 DSE Security

  • When optimized group retrieval was used in memberof_search mode (ldap_options.all_parent_groups_search_type parameter in dse.yaml), DSE confused attributes specified by ldap_options.user_memberof_attribute and ldap_options.all_parent_groups_memberof_attribute making the optimized search work only in case both attributes were set to the same value. (DSP-21537)

5.1.21 DSE SparkConnector

  • DSE Spark supports connections to Astra clusters (DSP-21510)

5.1.21 DSE CommitLog

  • Fixed a bug where some part of the commit log might not be replayed after injecting a foreign sstable to a node or, on 6.8, after zero-copy streaming of an sstable (DB-4629)

5.1.21 DSE Repair

  • Fixed a bug when in rare cases a terminated repair session would leak on-heap memory (DB-4833)

5.1.21 DSE Tools

  • SSTablePartitions tool will no longer fail with "histogram overflowed" when its working for the server code (DB-2952)
  • SStableloader now uses native_transport_port_ssl over native_transport_port when passed a config file with the property set (DB-4632)

DataStax Enterprise 5.1.20

8 October 2020

Components versions for DSE 5.1.20

  • Apache Solr™ 6.0.1.0.2789
  • Apache Spark™ 2.0.2.37
  • Apache TinkerPop™ 3.2.11-20200603-0524f70f
  • Apache Tomcat® 8.0.53
  • DSE Java Driver 1.2.8 (DSE internal-only version)
  • Netty 4.0.54.1.dse
  • Spark JobServer 0.6.2.240

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

5.1.20 DSE Security

  • Fixes LDAP user permissions problem following LDAP server restart. (DSP-21284)
  • DNS Service Discovery is now a part of the DSE/LDAP integration. (DSP-11450)

5.1.20 DSE Core

  • Adds TTL and TimeWindowCompactionStrategy (TWCS) to system_distributed.repair_history and system_distributed.parent_repair_history tables. (DB-2009)

5.1.20 DSE DSEFS

  • DSEFS waits for a schema agreement before starting and issuing the first CQL query. (DSP-20743)

5.1.20 DSE Spark

  • Fix Spark Application contacting nodes in a Non Local DC (DSP-19961)

5.1.20 DSE Backup and Restore

  • Snapshot schema.cql files will now contain IF NOT EXISTS clause for CREATE TYPE statements (DB-4685)

5.1.20 DSE Compaction

  • Fixes a problem where races in notifying compaction strategies of added and removed SSTables can cause compaction to try to use non-existing SSTables and repeatedly fail to make progress. (DB-4711)

5.1.20 DSE Schema

  • Remove a race condition that may lead to reopening a keyspace during keyspace drop. (DB-4564)

TinkerPop changes for DSE 5.1.20

DataStax Enterprise (DSE) DSE 5.1.20 includes all changes from previous DSE versions. See TinkerPop upgrade documentation for all changes.

Release notes for previous versions

Release notes for previous DSE patch releases can be found here: https://docs.datastax.com/en/dse/5.1/dse-admin/datastax_enterprise/releaseNotes/RNdse.html#RNdse