OpsCenter 6.8.50 release notes#272
Open
zgorzalyj wants to merge 1 commit into
Open
Conversation
annieden
reviewed
May 13, 2026
| 13 May 2026 | ||
|
|
||
| ## Security | ||
| * Upgraded mina-core from version 2.2.5 to 2.2.7 addressing CVE-2026-42779 (CWE-502 Deserialization of Untrusted Data) (OPSC-17893) |
Contributor
There was a problem hiding this comment.
Suggested change
| * Upgraded mina-core from version 2.2.5 to 2.2.7 addressing CVE-2026-42779 (CWE-502 Deserialization of Untrusted Data) (OPSC-17893) | |
| * Upgraded Apache mina-core version 2.2.5 to 2.2.7, addressing CVE-2026-42779 (CWE-502 Deserialization of Untrusted Data).(OPSC-17893) |
annieden
reviewed
May 13, 2026
|
|
||
| ## Security | ||
| * Upgraded mina-core from version 2.2.5 to 2.2.7 addressing CVE-2026-42779 (CWE-502 Deserialization of Untrusted Data) (OPSC-17893) | ||
| * Upgraded BouncyCastle (bcpkix-jdk18on, bcprov-jdk18on) to 1.84 to address CVE-2026-5588, CVE-2025-14813, CVE-2026-5598. (OPSC-17881) |
Contributor
There was a problem hiding this comment.
Suggested change
| * Upgraded BouncyCastle (bcpkix-jdk18on, bcprov-jdk18on) to 1.84 to address CVE-2026-5588, CVE-2025-14813, CVE-2026-5598. (OPSC-17881) | |
| * Upgraded to BouncyCastle (bcpkix-jdk18on, bcprov-jdk18on) version 1.84 to address CVE-2026-5588, CVE-2025-14813, and CVE-2026-5598. (OPSC-17881) |
annieden
reviewed
May 13, 2026
| ## Security | ||
| * Upgraded mina-core from version 2.2.5 to 2.2.7 addressing CVE-2026-42779 (CWE-502 Deserialization of Untrusted Data) (OPSC-17893) | ||
| * Upgraded BouncyCastle (bcpkix-jdk18on, bcprov-jdk18on) to 1.84 to address CVE-2026-5588, CVE-2025-14813, CVE-2026-5598. (OPSC-17881) | ||
| * Upgraded Jackson libraries to 2.21.2 to address CVE-2025-52999, CVE-2020-28491, CVE-2025-49128. (OPSC-17882) |
Contributor
There was a problem hiding this comment.
Suggested change
| * Upgraded Jackson libraries to 2.21.2 to address CVE-2025-52999, CVE-2020-28491, CVE-2025-49128. (OPSC-17882) | |
| * Upgraded Jackson libraries to version 2.21.2 to address CVE-2025-52999, CVE-2020-28491, and CVE-2025-49128. (OPSC-17882) |
annieden
reviewed
May 13, 2026
| * Upgraded mina-core from version 2.2.5 to 2.2.7 addressing CVE-2026-42779 (CWE-502 Deserialization of Untrusted Data) (OPSC-17893) | ||
| * Upgraded BouncyCastle (bcpkix-jdk18on, bcprov-jdk18on) to 1.84 to address CVE-2026-5588, CVE-2025-14813, CVE-2026-5598. (OPSC-17881) | ||
| * Upgraded Jackson libraries to 2.21.2 to address CVE-2025-52999, CVE-2020-28491, CVE-2025-49128. (OPSC-17882) | ||
| * Upgraded Logback to 1.3.16 and SLF4J to 2.0.17 to address CVE-2024-12798, CVE-2025-10226. (OPSC-17885) |
Contributor
There was a problem hiding this comment.
Suggested change
| * Upgraded Logback to 1.3.16 and SLF4J to 2.0.17 to address CVE-2024-12798, CVE-2025-10226. (OPSC-17885) | |
| * Upgraded to Logback version 1.3.16 and to SLF4J version 2.0.17 to address CVE-2024-12798 and CVE-2025-10226. (OPSC-17885) |
annieden
reviewed
May 13, 2026
| * Upgraded BouncyCastle (bcpkix-jdk18on, bcprov-jdk18on) to 1.84 to address CVE-2026-5588, CVE-2025-14813, CVE-2026-5598. (OPSC-17881) | ||
| * Upgraded Jackson libraries to 2.21.2 to address CVE-2025-52999, CVE-2020-28491, CVE-2025-49128. (OPSC-17882) | ||
| * Upgraded Logback to 1.3.16 and SLF4J to 2.0.17 to address CVE-2024-12798, CVE-2025-10226. (OPSC-17885) | ||
| * Upgraded commons-lang3 to 3.20.0 in the common module to address CVE-2025-48924. (OPSC-17883) |
Contributor
There was a problem hiding this comment.
Suggested change
| * Upgraded commons-lang3 to 3.20.0 in the common module to address CVE-2025-48924. (OPSC-17883) | |
| * Upgraded to commons-lang3 version 3.20.0 in the common module to address CVE-2025-48924. (OPSC-17883) |
annieden
reviewed
May 13, 2026
|
|
||
|
|
||
| ## Backup Service | ||
| * Fixed an issue that prevented post backup scripts from executing. (OPSC-17889) |
Contributor
There was a problem hiding this comment.
Suggested change
| * Fixed an issue that prevented post backup scripts from executing. (OPSC-17889) | |
| * Fixed an issue that prevented post backup scripts from running. (OPSC-17889) |
annieden
reviewed
May 13, 2026
| * Fixed an issue that prevented post backup scripts from executing. (OPSC-17889) | ||
|
|
||
| ## Core | ||
| * Use `--dereference` when creating tarballs to archive symlink targets instead of the symlinks themselves. (OPSC-17802) |
Contributor
There was a problem hiding this comment.
Suggested change
| * Use `--dereference` when creating tarballs to archive symlink targets instead of the symlinks themselves. (OPSC-17802) | |
| * Used the `--dereference` option when creating tarballs to archive symlink targets instead of the actual symlinks. (OPSC-17802) |
annieden
reviewed
May 13, 2026
|
|
||
| ## Core | ||
| * Use `--dereference` when creating tarballs to archive symlink targets instead of the symlinks themselves. (OPSC-17802) | ||
| * DSE 6.9 installations via LCM no longer fail with jvm8-server.options not found. DSE 6.9 requires Java 11 and does not ship this file, LCM now correctly skips it during config deployment. (OPSC-17867) |
Contributor
There was a problem hiding this comment.
Suggested change
| * DSE 6.9 installations via LCM no longer fail with jvm8-server.options not found. DSE 6.9 requires Java 11 and does not ship this file, LCM now correctly skips it during config deployment. (OPSC-17867) | |
| * Fixed installations failing with jvm8-server.options not found when using LCM to install DSE version 6.9. Because DSE 6.9 requires but does not ship Java 11, LCM now correctly skips it during a configuration deployment. (OPSC-17867) |
annieden
reviewed
May 13, 2026
| * DSE 6.9 installations via LCM no longer fail with jvm8-server.options not found. DSE 6.9 requires Java 11 and does not ship this file, LCM now correctly skips it during config deployment. (OPSC-17867) | ||
|
|
||
| ## Dashboard | ||
| * Fixed a regression introduced in the Java Driver 4.x migration where new-metrics requests took several minutes on large clusters. WrappedDriver.prepare() no longer issued a real PREPARE to Cassandra, so every metrics query ran unprepared and paid full parse + plan cost. Prepared-statement execution has been restored, and a related CqlSession leak during coordinator reconnect has been closed. (OPSC-17887) |
Contributor
There was a problem hiding this comment.
Suggested change
| * Fixed a regression introduced in the Java Driver 4.x migration where new-metrics requests took several minutes on large clusters. WrappedDriver.prepare() no longer issued a real PREPARE to Cassandra, so every metrics query ran unprepared and paid full parse + plan cost. Prepared-statement execution has been restored, and a related CqlSession leak during coordinator reconnect has been closed. (OPSC-17887) | |
| * Fixed a regression introduced in the Java Driver 4.x migration where new-metrics requests took several minutes on large clusters. WrappedDriver.prepare() no longer issued a `PREPARE` command to Cassandra, resulting in every metrics query running unprepared and paying full parse + plan cost. Restored proper running of the prepared-statement, and closed a related CqlSession leak during coordinator reconnect. (OPSC-17887) |
annieden
approved these changes
May 13, 2026
Contributor
annieden
left a comment
There was a problem hiding this comment.
Left edit comments or you to incorporate, and approving in advance to save cycles.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Release Notes Automation
If you name your pull-request as "Product x.y.z Release ...", after merging the
PR, a GitHub Action will automatically create a product version tag "product-x.y.z".
Supported product names are:
Version supports 3 sets or 4 sets of digits.