Skip to content

Latest commit

 

History

History
306 lines (217 loc) · 18.5 KB

DSE_6.0_Release_Notes.md

File metadata and controls

306 lines (217 loc) · 18.5 KB
Raw

Release notes for DataStax Enterprise 6.0

DSE 6.0.x is compatible with Apache Cassandra™ 3.11 and adds additional production-certified changes, if any. Components that are indicated with an asterisk (*) (if any) are known to be updated since the prior patch version.

⚠️ NOTE: DSE 6.0.x line has EOSL date of November 30, 2022. Please consider upgrading to DSE 6.8 for our latest features and patches.

Release notes for 6.0.18

31 May 2022

Components versions for DSE 6.0.18

  • Apache Solr™ 6.0.1.1.2883
  • Apache Spark™ 2.2.3.18
  • Apache TinkerPop™ 3.3.11-20210727-ba40007e
  • Apache Tomcat® 8.5.75*
  • DSE Java Driver 1.8.3-dse+20201217 (DSE internal-only version)
  • Netty 4.1.25.7.dse
  • Spark JobServer 0.8.0.45.3

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

6.0.18 DSE Core

  • Improved reading logic to ensure that sstables are not unnecessarily read for columns that are not selected. See CASSANDRA-16737. (Previously DB-4974). (DSP-22478)
  • Fixed the URISyntaxException: Malformed IPv6 address when using nodetool or dsetool with Java 8u331 or 11.0.15. This is due to the recent changes of JDK-8278972, in which parsing of URL Strings in Built-in JNDI Providers is more strict. (DSP-22474)

6.0.18 DSE Cassandra

  • Fixed swapped greater than ('>') and less than ('<') operators in the slow query log for a table with DESC clustering keys (port CASSANDRA-15503). (DSP-22369)
  • Fixed a rare race condition where attempting to read from a sstable would fail with an assertion error. (DSP-22431)

6.0.18 DSE Security

  • Upgraded Bouncy Castle to the latest 1.70 version. (DSP-22352)

6.0.18 DSE CVE

  • Upgraded apache-commons compress library to 1.21 version. This version upgrade fixed several vulnerabilities that could be used to mount a denial of service attack against specially-crafted services that use a compress or decompress sevenz, tar, or zip package. (DSP-22383, CVE-2021-35515, CVE-2021-35516, CVE-2021-35517, CVE-2021-36090)
  • Upgraded snakeyaml version to 1.30. (DSP-22386, CVE-2017-18640)
  • Upgraded logback version to 1.2.11. This fixes a vulnerability affecting logback-classic and logback-core. (DSP-22237, CVE-2021-42550)
  • Upgraded version of Apache Tomcat from 8.5.72 to 8.5.75. (DSP-22360, CVE-2022-23181)
  • Upgraded version of Bouncy Castle to 1.67. (DSP-22301, CVE-2018-1000613, CVE-2018-1000180, CVE-2020-28052)

Release notes for 6.0.17

18 February 2022

Components versions for DSE 6.0.17

  • Apache Solr™ 6.0.1.1.2883*
  • Apache Spark™ 2.2.3.18
  • Apache TinkerPop™ 3.3.11-20210727-ba40007e*
  • Apache Tomcat® 8.5.72*
  • DSE Java Driver 1.8.3-dse+20201217 (DSE internal-only version)
  • Netty 4.1.25.7.dse
  • Spark JobServer 0.8.0.45.3

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

6.0.17 DSE Core

  • Adds a new flag -t <number of days> for sstablescrub to update deletion times which are in the future. It accepts a command-line argument: -t <number of days>. All deletion times further in the future than the given number of days will be reset to the current time. Also fixed a potential issue that users may have the deletion time in the future updated to the current time if they run nodetool scrub. (DB-4964)
  • Added check against the negative value in local stream throughput (stream_throughput_outbound_megabits_per_sec) and inter dc stream throughput (inter_dc_stream_throughput_outbound_megabits_per_sec). (DB-5010)
  • Fixed an issue in preloading prepared statements that queries static columns. (DB-5012)
  • Port and adjust CASSANDRA-16686 for DSE. (DB-5022)
  • Fixed a bug in the authenticator that would use the default management mode instead of the defined mode by authentication when authenticating. (DSP-22067)
  • Fixes stack overflow with secondary indexes on collections. (DSP-22070)

6.0.17 DSE Cassandra

  • Enables periodic logging of system status (default every 5 minutes, configurable). (DSP-22039)
  • Await timeout for shutting down non periodic tasks is now configurable with the new jvm option cassandra.non_periodic_tasks_shutdown_timeout_in_minutes. When timeout is reached, force shutdown those tasks. (DSP-22241)
  • Lower commitlog replay sstable origin warning to info. (DSP-22270)
  • Fix a possible issue that shell tool could break with -h/--help in package install. (DSP-20375)
  • Added warning message in case of cases where dse was started with duplicated -Xmx options when used in jvm-server.options. (DSP-21795)

6.0.17 DSE Search

  • Fixed a bug where in rare cases search query routing might start to spin endlessly for a particular query. (DSP-21838)

6.0.17 DSE Spark

  • Fixes broken partition filtering in hive metastore leading to missing data in the spark-sql queries results for queries involving numeric partition keys or complex conditions. (DSP-21651)
  • Fixed and updated javax.mail dependency to com.sun.mail. (DSP-22085)

6.0.17 DSE Auth

  • Removed a possible false-positives error message in the log that would cause confusion when multiple authentication schemes are defined. (DB-5015)

6.0.17 DSE CQL

  • Prints TLS protocol information when running cqlsh with --debug parameter. (DB-4981)

6.0.17 DSE Local Write-Read Paths

  • Resolves a TPC weakness with large rows and collections, where DSE 6 would repeatedly attempt to read the same row and create a lot of on-heap garbage. (DB-3962)

6.0.17 DSE SSTables

  • When the Bloom filter is recreated due to FP chance change, sstable metadata is loaded and re-written in order to update validation metadata with the new fp chance. However, the loaded metadata lacked compaction metadata, so when rewritten, compaction metadata got truncated. (DB-5005)

6.0.17 DSE Upgrade

  • Retain changes to /etc/security/limits.d/cassandra.conf on yum upgrade. (DSP-21928)

6.0.17 DSE Security

  • This fixes an issue in the LDAP group_search_filter default value that meant that group hierarchies were not being loaded if the group_search_filter was not explicitly set in the dse.yaml. (DSP-21874)

6.0.17 DSE CVE

DataStax Enterprise 6.0.16

11 May 2021

NOTE: DSE 6.0.16 is the final release of the 6.0.x line. Please consider upgrading to DSE 6.8 for our latest features and patches.

Components versions for DSE 6.0.16

  • Apache Solr™ 6.0.1.1.2838*
  • Apache Spark™ 2.2.3.18*
  • Apache TinkerPop™ 3.3.7-20190521-f71ce0d7
  • Apache Tomcat® 8.5.65*
  • DSE Java Driver 1.8.3-dse+20201217 (DSE internal-only version)
  • Netty 4.1.25.7.dse
  • Spark JobServer 0.8.0.45.3*

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

DSE 6.0.16 Auth

  • Fixes an issue where a login attempt with missing credentials logged a misleading warning message with stack trace instead of an error message about the missing username or password. (DB-4806)

DSE 6.0.16 CQL

  • Fix an error in cqlsh encoding unicode in multi-line statements (DB-4855)
  • Make cqlsh prefer newer TLS versions. (DB-4966)

DSE 6.0.16 Distributed Read/Write

  • Applied fix for CVE-2020-17516 (DB-4897)
  • Single node crash will no longer result in downtime with write in multi-DC setup when "dse.write.forwarding.disabled.consistency.levels" property is set for relevant Consistency Levels. (DB-2410)

DSE 6.0.16 Legacy Repair

  • Fixed a bug when in rare cases a terminated repair session would leak on-heap memory (DB-4833)

DSE 6.0.16 SSTables

  • Fixes a problem with nulls in tuples in the byte-comparable translation (i.e. sstables in bti format) as well as the comparator (i.e. sstables in big format, see CASSANDRA-19538). (DB-4813)

DSE 6.0.16 AOSS

  • AOSS returns additional parameter in ‘status' endpoint: “connection_hostname“. The new parameter is a FQDN of the node hosting AOSS, it may be used for connections (instead of connection_address) if needed. (DSP-21811)

DSE 6.0.16 Cassandra

  • Data export from cqlsh is now less noisy in the logs (DSP-21494)
  • Fixed intermittent "ERROR: java.util.ConcurrentModificationException at org.apache.cassandra.transport.CBUtil.writeStringList" (DSP-21336)
  • Fix for DESCRIBE TYPES in CQLSH (DSP-21667)

DSE 6.0.16 Core

  • Fixes SRCCLR-SID-22742: Insecure Input Validation Vulnerability in the Apache Commons Codec library (DSP-21747)
  • Fixed an issue with DSE daemon unable to stop after the default timeout expired. The issue only happened in the systems that use package install and init.d, such as centos. (DSP-21804)
  • Print a timestamp when nodetool exits due to an error (DB-4826)

DSE 6.0.16 Security

  • Add asynchronous update to KMIP key cache to fix blocking of commit log (DSP-20582)

DSE 6.0.16 Hadoop

  • Fixed CVE-2020-1945 affecting Apache Ant (DSP-21716)

DSE 6.0.16 CVE

  • Update tomcat version 8.0.53 to 8.5.61 (DSP-21394)
  • upgrade apache commons-compress to address CVE-2019-12402 (DSP-21679)
  • fixed CVE-2018-17197 affecting Apache Tika (DSP-21680)
  • Addresses CVE-2018-11796, CVE-2018-11761, CVE-2019-10094, CVE-2019-10088 in the Apache Tika library. (DSP-21689)
  • Update tomcat version 8.5.61 to 8.5.65 (DSP-21798)

DSE 6.0.16 Search

  • Fixed a bug where FilterCache warmup triggered by node health change can block GossipStage-1 thread for several seconds (DSP-21674)
  • Fixed a bug where under heavy load solr query worker threads would use 100% CPU due to contention on thread local map (DSP-21746)
  • A new jvm option is added: “dse.search.fc.warmup”: AUTO, ALWAYS & NEVER. (DSP-21813)

DSE 6.0.16 Spark

  • Fixed CVE-2014-0114, CVE-2014-0114 (DSP-21668)

DataStax Enterprise 6.0.15

12 February 2021

Components versions for DSE 6.0.15

  • Apache Solr™ 6.0.1.1.2811*
  • Apache Spark™ 2.2.3.17*
  • Apache TinkerPop™ 3.3.7-20190521-f71ce0d7
  • Apache Tomcat® 8.0.53
  • DSE Java Driver 1.8.3-dse+20201217* (DSE internal-only version)
  • Netty 4.1.25.7.dse
  • Spark JobServer 0.8.0.45.2

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

DSE 6.0.15 Auth

  • Works around a bug (JDK-8148854) in JDK 1.8u282. (DB-4884)

DSE 6.0.15 CommitLog

  • Addressed a bug where a CommitLogReplayException is caused by a bad header but correct CRC after restart (DB-3996)

DSE 6.0.15 CommitLog

  • Fixed a bug where some part of the commit log might not be replayed after injecting a foreign SSTable to a node or, on 6.8, after zero-copy streaming of an SSTable (DB-4629)

DSE 6.0.15 Local Write-Read Paths

  • Dropped messages metrics calculation doesn't cause assertion errors when dropped messages contain remote batch mutation. (DB-3905)

DSE 6.0.15 Tools

  • SSTablePartitions tool will no longer fail with "histogram overflowed" when its working for the server code (DB-2952)
  • SStableloader now uses native_transport_port_ssl over native_transport_port when passed a config file with the property set (DB-4632)

DSE 6.0.15 TPC

  • Fixes a problem in the scheduling and counting of active materialized view updates that could cause too many to be executed concurrently, overwhelming the node. (DB-4782)

DSE 6.0.15 Build

  • The version of DSBulk bundled with DSE has been updated to 1.7.0. (DSP-21535)

DSE 6.0.15 Cassandra

  • Fixed a bug where the slow query log would fill with queries that do not meet the slow query threshold (DSP-21417)

DSE 6.0.15 Core

  • Add support for multiple authentication sources (LDAP + DSE Internal) (DSP-14233)
  • fix a bug in cassandra.repair.mutation_repair_rows_per_batch setting that caused sending all repair mutations at once (DSP-21429)
  • Addressed several Jackson databind vulnerabilities by upgrading jackson-databind to version 2.9.10.8 in DSE 5.1.21, 6.0.15 and 6.7.13 and version 2.10.5.1 in DSP 6.8.10. (DSP-21503) (DSP-21503)

DSE 6.0.15 Docke

  • Update Jetty to 9.4.34.v20201102 and update Spark Version (DSP-21506)

DSE 6.0.15 Spark

  • SCC by default enables direct join optimization only when size_estimates for both tables are available. (DSP-21628)
  • Fix: Spark Master fails to start if keystore (used by web UI) contains more than one certificate (DSP-21703)

DSE 6.0.15 Search

  • A system property dse.solr.fuzzy.max.expansion was added. The property allows to workaround https://issues.apache.org/jira/browse/SOLR-4824 by defining a custom number of fuzzy query expansions. The maximal possible value is 1024. When unset, the default number of max expansions is 50. (DSP-21605)
  • Search queries will no longer fail when querying clustering columns of certain types on which the order is reversed (DSP-21363)

DSE 6.0.15 Security

  • When optimized group retrieval was used in {memberof_search mode (ldap_options.all_parent_groups_search_type parameter in dse.yaml), DSE confused attributes specified by ldap_options.user_memberof_attribute and ldap_options.all_parent_groups_memberof_attribute making the optimized search work only in case both attributes were set to the same value. (DSP-21537)

DSE 6.0.15 SparkConnector

  • Fixed direct join optimization for Spark SQL. (DSP-21498)
  • DSE Spark now supports connections to Astra clusters. (DSP-21510)

DataStax Enterprise 6.0.14

26 October 2020

Components versions for DSE 6.0.14

  • Apache Solr™ 6.0.1.1.2793
  • Apache Spark™ 2.2.3.15
  • Apache TinkerPop™ 3.3.7-20190521-f71ce0d7
  • Apache Tomcat® 8.0.53
  • DSE Java Driver 1.6.10 (DSE internal-only version)
  • Netty 4.1.25.7.dse
  • Spark JobServer 0.8.0.45.2

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

DSE 6.0.14 Backup and Restore

  • Snapshot schema.cql files now contain IF NOT EXISTS clause for CREATE TYPE statements (DB-4685)

DSE 6.0.14 Compaction

  • Fixed a problem where races in notifying compaction strategies of added and removed SSTables can cause compaction to try to use non-existing SSTables and repeatedly fail to make progress. (DB-4711)

DSE 6.0.14 core

  • Fixed extreme local pauses on all nodes in the cluster on a node restart. (DB-4657)
  • Added TTL and TimeWindowCompactionStrategy (TWCS) to system_distributed.repair_history and system_distributed.parent_repair_history tables. (DB-2009)
  • Fixed node restart issue after dropping a PointType column. (DSP-21326)
  • Added new system property to cap the maximum amount of memory used by bloom filters: -Dcassandra.max_bf_memory_mb. By default, this is unlimited. (DSP-21344)

DSE 6.0.14 Local Write-Read Paths

  • Improved performance of estimation of partition counts for subranges. (DB-3679)

DSE 6.0.14 Schema

  • Removed a race condition that may lead to reopening a keyspace during keyspace drop. (DB-4564)

DSE 6.0.14 Security

  • Fixed LDAP user permissions problem following LDAP server restart. (DSP-21284)

DSE 6.0.14 DSEFS

  • DSEFS waits for a schema agreement before starting and issuing the first CQL query. (DSP-20743)

DSE 6.0.14 Spark

  • SPARK-18838 backported to DSE Spark 2.2.3. (DSP-21300)
  • Fixed Spark Applications contacting Nodes in non-local DC. (DSP-19961)

Release notes for previous versions

Release notes for previous DSE patch releases can be found here: https://docs.datastax.com/en/dse/6.0/dse-admin/datastax_enterprise/releaseNotes/RNdse.html#RNdse