You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 35 Next »




 

v2.6 builds

These will be marked as stable once they are out for a while without issue and/or as people start using these in production.  This is a judgment call by the Grouper team.  If you are using a new release please inform us so we can provide better advice.

Date

Container tag (version)

Status

Enhancements and bugs fixed in this version, known issues with this version

Upgrade instructions
and notes

Versions
2022/02/18i2incommon/grouper:2.6.7CANDIDATE
1 from v2.6.6
2022/02/16i2incommon/grouper:2.6.6
sha256:834a03d8baa2b5e2a
a09c137ca378a795fde9dc12
cc11d70fbdb641e76500331
NOT STABLE64 Jiras
Postgres driver security issue
Log4j 1x replaced with secure Log4j 2x
Add STEM VIEW privilege and default to people seeing stems they should with high performance
Add google provisioner
Add Duo "admin role" provisioner
ABAC / JEXL scripted groups first pass
Add subject_identifer0, subject_identifier1, and subject_email0 to members table
Grouper failsafes on loader and provisioning
GSH templates are available on group action menu (previously only folders)
Action menus re-organized
"Copy folder" improvements
Subject API attributes can be secured by group
Opt-in / opt-out improvements
Add OSGI to Grouper


4 from v2.6.5Shib: 3.2.3
Apache: 2.4.6
Tomee: 7.0.9 (8.5.57)
Openjdk: 1.8.0_322
2021/12/20i2incommon/grouper:2.6.5.3
sha256:5a22fdf5223054a7ee
da0a5a51e2c28e39a7107b82
548131f0958e6696f34f69
LATEST STABLE

Log4j security problem fixed (again, again)!
Note: the Grouper java version is 2.6.5, the version reported in the UI is 2.6.5.
To verify you have the right version you can see the env var or log4j libs

[root@0c8d8738e95a bin]# echo $GROUPER_CONTAINER_VERSION
2.6.5.3
[root@0c8d8738e95a bin]# ls /opt/tomee/bin/log4j*
/opt/tomee/bin/log4j-api-2.17.0.jar  /opt/tomee/bin/log4j-core-2.17.0.jar  /opt/tomee/bin/log4j-jul-2.17.0.jar
NoneShib: 3.2.3
Apache: 2.4.6
Tomee: 7.0.9 (8.5.57)
Openjdk: 1.8.0_312
2021/12/16i2incommon/grouper:2.6.5.2
sha256:7cfc81bc63361e018d
4df6f90bbdba646cb46ab3b
8ad1961907e2955b9c0657d
STABLE
Log4j security problem
(log4j v2.16.0)

Log4j security problem fixed (NOT)!
Note: the Grouper java version is 2.6.5, the version reported in the UI is 2.6.5.
To verify you have the right version you can see the env var or log4j libs

[root@0c8d8738e95a bin]# echo $GROUPER_CONTAINER_VERSION
2.6.5.2
[root@0c8d8738e95a bin]# ls /opt/tomee/bin/log4j*
/opt/tomee/bin/log4j-api-2.16.0.jar  /opt/tomee/bin/log4j-core-2.16.0.jar  /opt/tomee/bin/log4j-jul-2.16.0.jar
NoneShib: 3.2.3
Apache: 2.4.6
Tomee: 7.0.9 (8.5.57)
Openjdk: 1.8.0_312
2021/12/10i2incommon/grouper:2.6.5.1
sha256:b682761bba2257cf5
0fb0f86dbf7f7e1e6e271ffeb
b312097e9017ef2ffd2190
STABLE
Log4j security problem
(log4j v2.15.0)

Log4j security problem fixed (NOT)!
Note: the Grouper java version is 2.6.5, the version reported in the UI is 2.6.5.
To verify you have the right version you can see the env var or log4j libs

[root@0c8d8738e95a bin]# echo $GROUPER_CONTAINER_VERSION
2.6.5.1
[root@0c8d8738e95a bin]# ls /opt/tomee/bin/log4j*
/opt/tomee/bin/log4j-api-2.15.0.jar  /opt/tomee/bin/log4j-core-2.15.0.jar  /opt/tomee/bin/log4j-jul-2.15.0.jar
NoneShib: 3.2.3
Apache: 2.4.6
Tomee: 7.0.9 (8.5.57)
Openjdk: 1.8.0_312
2021/12/09

i2incommon/grouper:2.6.5
sha256:561fe324d848e79c6
ab4d5f82a70555d5fe995b98
3938088b82bfebd242eb1e8

STABLE
Log4j security problem
32 Jiras
SQL provisioning
Provisioning diagnostics improvements
"Replace members" improvements
Remove hsqldb from Grouper
GrouperSystem password can be an environment variable
Improved and standardized HTTP and SFTP proxy support
Provisioning logging is fixed
1 from v2.6.4Shib: 3.2.3
Apache: 2.4.6
Tomee: 7.0.9 (8.5.57)
Openjdk: 1.8.0_312
2021/10/20i2incommon/grouper:2.6.4
sha256:de464e131a0abde51
f91bca23a0200e6fd876dc4d
6586ff86b8b73636ae15308
STABLE
Log4j security problem

Provisioning logging is broken
21 Jiras
JWT self service web service authentication
Copy group validation error with invalid (dot) character fix
Object type UI fix
RabbitMQ configuration fix
Improved provisioning logging
Improved performance of main Grouper Report
Provisioning LDAP configuration improvements
Zoom user loader for deprovisioning
3 from v2.6.0Shib: 3.2.3
Apache: 2.4.6
Tomee: 7.0.9 (8.5.57)
Openjdk: 1.8.0_312
2021/09/17i2incommon/grouper:2.6.0
sha256:c4aa7a88ae9f2da40
3de30bf27b7e218aa64f9207
fb57dbb6e426be0413ac640
STABLE
Log4j security problem
17 Jiras
Provisioning framework fixes
Chrome 93 header fix
Trusted JWT WS authentication
OIDC WS authentication
Can import config with textarea

1 from v2.5.57+

Shib: 3.2.3
Apache: 2.4.6
Tomee: 7.0.9 (8.5.57)
Openjdk: 1.8.0_302

For more information about upcoming plans, see the Grouper Product Roadmap .


See Also

Grouper Downloads

  • No labels