Introduction

Stonebranch provides product maintenance in the form of updated product installation packages. This document lists the product installation package maintenance history for Universal Controller 7.4.x.

Note

For Universal Controller 7.4.x, applying maintenance refers to the increase from a currently installed and supported version of the Controller to a later 7.4.x version of the Controller (for example, increase Controller 7.4.0.0 to Controller 7.4.0.1).

Product Packaging

A package maintenance level is incremented when the package changes or the package installation changes.

Stonebranch changes product version, release, or modification identifiers at its discretion when it deems an appropriate number of enhancements or capabilities have been introduced to warrant the change.

Versioning

Package version numbers are comprised of four numeric identifiers: version, release, modification level, and maintenance level.

For example, for Universal Controller 7.4.0.0:

7 = Version 7
4 = Release 4
0 = Modification Level 0
0 = Maintenance Level 0

Packaging Methods

The Universal Controller 7.4.x packages are provided in formats appropriate for the target platforms.

See Installation and Applying Maintenance for information on installing, upgrading, and applying maintenance to the Universal Controller.

Package Maintenance Levels

This section identifies the changes included in Universal Controller 7.4.x.

Release 7.4.3.5 - March 11, 2025

Change ID	Description
D-13030	Cannot open Commands and Event Templates if Universal Template has no Fields
D-13118	Web Service API - Task Launch - Virtual Resource Priority limited to 1-20
D-13197	Read Cluster Node API doesn't update node timestamp with every heartbeat
D-13205	Audit List API throws SQLException if Audit references a Universal Template.

Release 7.4.3.4 - February 11, 2025

Change ID	Description
D-13121 D-13122	Library dependencies updated due to vulnerabilities.
D-13103	Pentest finding - Self Cross Site scripting
D-13123	SAP InfoPackage Request ID task instance field is misspelled
D-13191	Frequent database deadlock and query/transaction retries after applying maintenance.
D-13193	Task List Adv - Filter by agentName not working for z/OS

Release 7.4.3.3 - January 14, 2025

Change ID	Description
D-13089 D-13100	Library dependencies updated due to vulnerabilities.
D-12995	Task Workflow API: Creating a workflow with Email Actions ignoring the STDOUT & STDERR option values
D-13107	Avoid printing administrator email messages to standard out.

Release 7.4.3.2 - December 10, 2024

Change ID	Description
D-12655	Credential Key Location and Passphrase field Labels, Hints and User Documentation out-of-date.
D-12967	Cannot setup Hidden Broadcast Cluster Variable default for Universal Template.
D-13057	Database Connection Pool leaks connections if query fails on processing results.
D-13060	Listadv Task Instances>Mismatch between xml and json response when passing instanceOutputType in request

Release 7.4.3.1 - November 12, 2024

Change ID	Description
D-13036 D-13037	Library dependencies updated due to vulnerabilities.
D-12628	UAC - Property Changed sets before value attribute incorrectly after web service update
D-12630	Field hint for Promotion Target Name is incorrect.
D-12728	Run Report API with visibility specified could pick up a wrong report when only one report is visible to the execution user.
D-12782	Run Report API: Exception when reports found with same title, but no report found with the specified visibility group.
D-12954	Bundle form should not show Custom Days tab if global Custom Days are not permitted
D-12959	Activity Widget throws warning when adding a composite status multiple times
D-12963	Composite Trigger NOT using Special Restriction Correctly
D-12965	Webhooks>creation of events should be disabled since only system events are allowed
D-12966	Universal Template Field with Show If Field condition can become hidden when toggling between other tabs
D-12975	Task in instance wait with no prior instances in abnormal state.
D-12989	Report table picktree should list All Components (ops_trigger_component) first under Triggers...>Components...
D-13048	Universal Template Choice Field doesn't show updated items

Release 7.4.3.0 - October 8, 2024

Change ID	Description
E-02008	Security B-12929: SonarQube: Use another cipher mode or disable padding. B-17037: Add Content-Security-Policy header. B-19945: Pentest analysis and mitigation (external). B-20214: Server-side request forgery analysis, and mitigation. B-20368: Pentest analysis and mitigation (internal).
D-11146	"Set As Default Layout" doesn't work for WF>Forecast>List view.
D-12697	Trigger does not re-enable when Custom Day changes which effect the Trigger's Next Scheduled Time
D-12834	Trigger with multiple items selected for 'Date/Restriction Noun(s)' or 'Date/Restriction Qualifiers(s)' fails to recalculate for calendar change.
D-12849	Need proper handling for not allowing to save duplicate scopes in OAuth Clients
D-12942	Universal Task Publisher field is empty after refresh
D-12948	Run Criteria does not evaluate properly when using Custom Day & Complex Criteria

Release 7.4.2.0 - September 10, 2024

Change ID	Description
B-20633	Provide one time use property to allow maintenance to be run even with exceptions
D-11457	UUID in the Utility Agent field of File Transfer and UCMD task when create a new task from z/OS agent Tasks list.
D-11741	User with no reporting role should NOT be allowed to open new report form when system property "strict report create constraints = true”
D-12486	Custom Day can be removed from Calendar when reference field has multiple items selected.
D-12528	Workflow Critical Endpoints: when the property is false, UI is still allowing to add the endpoints
D-12719	API Fails To Create User With SysId = ""
D-12731	The uac_agent_changed event does not set the transient attribute for transient agents
D-12756	Database Connection Allows Null Value For Max Rows Via Web Services
D-12769	List importing filter can end up with duplicate filters.
D-12791	Task Execution Restriction Dates are shifted when modified from the Execution Restrictions popup
D-12804	Task Instance List Advanced API : The default response fields does not match for XML & JSON
D-12809	Date List value moves back one day when browser time zone is ahead of server
D-12812	Unable to update the Operational Memo on a running timer task
D-12823	Time Trigger Not Created Via API When SysId=""
D-12856	Add more information to SQLWarning log message such as the actual SQL being executed.

Release 7.4.1.9 - August 13, 2024

Change ID	Description
D-11340	Dates show wrong value on RPC requests when Server Timezone is ahead of client browser Timezone.
D-12758	No indication that UC is running as Agent only when option is set during installation.
D-12789	SonarQube - Review/Resolve Critical and Blocker Bug and Vulnerabilities.

Release 7.4.1.8 - July 09, 2024

Change ID	Description
D-12674 D-12722	Library dependencies updated due to vulnerabilities.
D-11288	Universal Task Publisher dropdown in Universal Monitor task does not work correctly when Event Type=Local.
D-12653	Trigger fires due to Calendar change when there is no change in the Trigger's schedule.
D-12685	Promoting bundles to an invalid release level provides the wrong error message.
D-12686	XSS vulnerability in Launch confirmation dialog.
D-12687	UC: Support Issue - Task API, failed to create task when adding email notifications.
D-12693	Unicode characters in SAP tasks fail when using SQL Server & Oracle database.
D-12729	Credential API> Run time user should be required to create/update credential.

Release 7.4.1.7 - June 11, 2024

Change ID	Description
D-12266	UT Credential Fields Restriction: Should not be restricted when Credentials Variable = true and Credentials (Text) empty.
D-12287	REST API > Returns HTTP Status Code 500 when a reference (i.e. task/listadv agent reference) cannot be identified in the system.
D-12495	Trigger Web Service API not sorting the Date Noun(s)/Qualifier(s) and Restriction Noun(s)/Qualifier(s) field values.
D-12612	Uploading a Task Definition File with no sysId but retainSysIds = true does not create an object, but does not fail.

Release 7.4.1.6 - May 14, 2024

Change ID	Description
D-12544 D-12545 D-12546 D-12547 D-12562	Library dependencies updated due to vulnerabilities.
D-11888	Forecast - The field name Simulation in the Forecast Details is confusing.
D-12228	Application Versions Cannot Be Deleted.
D-12229	Application Versions Don't Store Description Changes.
D-12532	Task Instance Simulate field not displaying as Yes/No.
D-12561	Support for double-digit Version, Release, Modification Level, and Maintenance Level.

Release 7.4.1.5 - April 9, 2024

Change ID	Description
D-12415	Library dependencies updated due to vulnerabilities.
D-11112	Reran File monitor in a cluster gets cancelled once the offline agent becomes Active.
D-12278	Add new objects for "follow references" of a task during promotion.
D-12391	Cannot Import Extension through UI, however it is possible from uip-cli.
D-12417	Dynamic Choice (Choice Field 1) with Dynamic Choice field (Choice Field 2) as a dependent field gets cleared out for task instance but not for task instance command.
D-12484	XSS Vulnerabilities
D-12531	PeopleSoft tasks are slow to change status after agent sends response.

Release 7.4.1.4 - March 12, 2024

Change ID	Description
D-12299	Advanced Filters not matching for Universal Monitors.
D-11418	Universal Template Array Field - Default Value column is not displayed consistently.
D-11456	SAP and PeopleSoft task should not be in the z/OS Agent Tasks list.
D-11858	Universal Monitor - Change Universal Monitor Criteria section title to Event Attribute Criteria to be consistent with updated Webhook section title.
D-11670	Email Notification opened from a report list does not display attachment fields correctly.

Release 7.4.1.3 - February 13, 2024

Change ID	Description
D-12275	Library dependencies updated due to vulnerabilities.
D-12280	'Relative Repeating Date' in Custom Days is not working properly.

Release 7.4.1.2 - December 12, 2023

Change ID	Description
D-11902 D-11925	Library dependencies updated due to vulnerabilities.
D-11300	Time Trigger using "List of Dates" type Custom Day lists wrong qualifying times.
D-11662	View Bundles uses wrong DataSource label for the Bundle count.
D-11666	List Qualifying Times for Time Trigger not listing any times when using Custom Day with no dates for the current month.
D-11669	Run Command on Filtered > Promote... and Promotion Target issue for PAT authentication method.
D-11678	Web Service Task: UI - Credentials field is required if Credentials Variable is checked, even when the Credentials field is hidden.
D-11732	Custom Day with Less adjustment that resolves to previous month not working correctly with Triggers and Task Run Criteria.
D-11750	Time Interval field should be marked required on Time trigger form when Time Style is "Time Interval"
D-11847	Inherited Set Variable actions for Global variables using a variable in the name can result in non-deterministic name resolution.
D-11850	List Grid Filter: Duplicate "-- No Filter --" options after sorting by Filter Name.
D-11881	Universal Task - Fail to detect any form changes when modifying the Array field in the Universal task form or pop-up window.
D-11885	Insert: Universal Template Field (and Universal Template Field Choice) insert operation will not create unique sequence.
D-11887	Insert: z/OS Task Step Condition, z/OS Task Restart Criteria and Workflow Step Condition insert operation will not create unique Evaluation Order.
D-11898	UIP: Choice Field - Dynamic - Backspace not working.
D-11908	OAuth Clients - View Bundles shows incorrect number of Bundles.

Release 7.4.1.1 - October 31, 2023

Change ID	Description
D-11382 D-11657 D-11659 D-11861 D-11865 D-11866	Library dependencies updated due to vulnerabilities.
D-11265	Web Service: UDM should be not allowed as a valid Server Type for Remote File Monitor task.
D-11350	Incorrect sizing and styling of Activity "Go To Page" window.
D-11499	Set Execution Restrictions... command does not add new dates to the existing date list.
D-11501	Custom Day missing from Calendar Preview
D-11581	Secrets Provider (CyberArk Central Credential Provider) : HTTP 403 error not reported clearly.
D-11582	UIP: Universal Template/Task - Text Field JSON validation ignoring trailing tokens.
D-11583	SAP Task: Delete SAP Job on Completion option is not working.
D-11604	Task UUID with a special character fails to be deleted.
D-11605	SAP - SAP InfoPackage Request Id is not shown in the Task Instance form.
D-11608	Skip command does not delete timers for Wait To Start/Delay On Start conditions.
D-11630	document.domain issue causing Chrome to freeze/crash is occurring from login.jsp script.
D-11635	MS SQL Server - java.util.ConcurrentModificationException: null Error when applying maintenance.
D-11644	"login.jsp" and "login_change_pwd.jsp" error messages not clear on resubmit.
D-11674	Agent Monitor continues to do the paused wait check even after the 1st time it does the check.
D-11736	Exception in console after deleting Agent from popup window opened from drill-down List from Agent Status widget.
D-11739	Single-line text field types have a longer delay showing hover hint.
D-11852	Close action menu: fail to detect form changes.

Release 7.4.1.0 - July 31, 2023

Change ID	Description
B-17590	UIP: Universal Extension - Choice Field Variable Resolution.
B-16960	Default Expiration Limit Property for Personal Access Token.
B-17649	Interact With Desktop to be optionally available on Universal Task/Template.
B-17754	UC - z/OS Agent File Monitor Trigger new Change Monitor option for Trigger on Create.
D-11391	No validation for workflow property in create/update simulation Web Service API.
D-11407	Universal Template Fields list - Default Value: not resolved for Sap Connection or Database Connection field type.
D-11398	Promotion History Item - Open In Tab throws exception for new universal task item.
D-11415	Promotion History Items - Open/Open In Tab should be disabled for Dashboard item.
D-11396	Parameters for List Webhooks API has task instead of taskname.
D-11377	Web Service - User Token - List Personal Access Tokens - expiration property is not formatted correctly.

Release 7.4.0.1 - June 1, 2023

Change ID	Description
D-11351 D-11355 D-11357 D-11358 D-11359 D-11372 D-11373 D-11374 D-11375 D-11380 D-11381 D-11384	Library dependencies updated due to vulnerabilities.
D-11114	Exporting a chart logs warning about skin_styles.css file not found.
D-11173	UIP : Choice Defaults in UT not filled when New Task Selected from Workflow Editor
D-11281	UC- Universal Event Template Details view issue in a bundle
D-11297	Filter - Date/Datetime field does not default to "Today"
D-11316	Bundle Web Service API: Modify a Bundle with Universal Event Template does not work correctly.
D-11321	Time trigger with Day style as 'Every' is not working properly.
D-11322	Bundle Web Service API: Bundle Read XML Response for Universal Event Template entity name is spelled incorrect
D-11336	Client-side validation error is not logged to the console for hidden fields (universal task form)
D-11367	Simulation: Missing + icon on Simulation list.
D-11385	Promotion: Failure when promoting Script type Universal Template to UC 7.4.0.0.
D-11386	Global List - Name field should not be read-only when Open In Tab.
D-11395	Workflow Editor - Missing confirm dialog when Launch Workflow with unsaved changes in the editor.

Release 7.4.0.0 - April 4, 2023

Change ID	Description
B-11390	Forecast: Evaluation of variable run/skip criteria.
B-16961	Forecast: Workflow Forecast... command through Web Service API.
B-17022	Forecast: Allow specifying override variables for workflow Forecast... command through Web Service API.
B-16855	Gantt: Timeline feature analysis.
B-06436	Gantt: View of Workflow Instance (base functionality).
B-16930	Gantt: Make necessary statistics available directly from instance data.
B-16938	Gantt: Server-side filtering (operation dialog options).
B-16939	Gantt: Refresh (server-fetch) operation.
B-16940	Gantt: Display critical tasks with indicator.
B-16013	Web Service API : User Impersonation
B-16872	Workload Simulation
B-17075	Workload Simulation: List Import/Export
B-17076	Workload Simulation: Download, Download Filtered..., and Upload...
B-17077	Workload Simulation: Web Service API.
B-13118	UIP: Universal Template - Database Connection field type.
B-16006	UIP: Universal Template - Dynamic Choice Field - Clear choices on dependent field value change.
B-16766	UIP: Universal Template - Add 5 Additional Boolean Fields
B-15855	UIP: Universal Extension - Extension Progress Indicator
B-15949	UIP: Universal Extension - Automatic inclusion of resolvable credentials for Credential Functions embedded within Script fields (Script Functions, SAP Connection Functions, and Database Connection Functions are also resolved).
B-17130	UIP: Universal Extension - "zip_safe" Metadata.
B-15968	UIP: Universal Events - Global - Agent Event.
B-15946	Credential, Script, SAP Connection, Database Connection, Output Path, and Variable Path functions supported in Environment Variables field (Windows, Linux/Unix, and Universal Tasks).
B-16088	Outbound Webhook registration for built-in system Universal Events.
B-16916	New String and Output functions for processing delimited (or CSV/TSV) variable values and output with Recurring instances, etc.
B-17019	Add ${ops_recurrence_count_minus_1} built-in variable for Recurring instances.
B-06674	Report Promotion.
B-08454	Dashboard Promotion
B-09387	Widget Promotion
B-17131	System Property: Calendar Preview Past Period In Months (Calendar Preview to Show Calendar Days of Previous Months)
B-16744	System Property/User Preference: Automatically Expanded Lists
B-16918	System Property/User Preference: Navigation Auto Collapse
B-04714	System Property: Promotion Follow References Permitted (Ability to disable promoting with follow references)
B-15904	System Property: Audit Owner Read Permitted (Allow users to access their own audit history)
B-16775	System Property: Script Resolve Variables Default (User Interface Default for Scripts "Resolve UAC Variables")
B-09235	System Property: Show Last Login (Display "last logged on Date / Time" after Controller logon)
B-03168	Task Monitor support for Late / Early Tasks
B-05459	View/Edit Actions associated with an instance directly from an Actions tab on the task instance form.
B-06973	Allow variables in the Database Connection Definition.
B-08438	Allow for Automatic Output Retrieval for Remote File Monitors.
B-08571	Display exit code in workflow monitor when hovering on task.
B-15805	Agent Level Credentials Required Option.
B-15907	Preferred Controller always Active
B-16029	Order Run Criteria Task Selection by Name
B-16089	Allow re-enablement of Interact with Desktop via property.
B-16099	Controller tracking of OMS maximum message size configuration.
B-16767	Web Service API: Composite Trigger List Component Events
B-16884	Add timestamp to message at beginning of rolled log file.
B-17034	Update Copyright
B-16845	Use Java 11 compiler and drop Java 8 support.
B-16110	Add Java 17 support.
B-16994	Drop support for Oracle 12c, Oracle 18c, and MS SQL Server 2012.
B-17029	Update MySQL JDBC Driver (mysql-connector-java-8.0.32.jar)
B-16859	Update Microsoft SQL Server JDBC Driver (mssql-jdbc-9.4.1.jre11.jar).
B-16844	Update Oracle JDBC Driver (21.9.0.0, ojdbc11.jar, orai18n.jar, xdb.jar, & xmlparserv2_sans_jaxp_services.jar)
B-16992	Update Jersey library dependency to 2.38.
B-16993	Update Jayway JsonPath library dependency to 2.7.0.
B-17016	Update log4j2 library dependency to 2.19.0.
B-17233	Update CyberArk JavaPasswordSDK.jar dependency to 12.6.
B-16967	Update Universal Network Library (sb_universal.jar) to support TLS 1.3.
B-16885	Exclude client java package when building uc.jar.
B-15662	Upgrade JUnit library dependency from JUnit 4 to JUnit 5.
B-17066	Integration of the OWASP Dependency-Check into our Jenkins pipeline.
D-10620	Multi-update cell editor for time/duration fields is not closed when tabbing to the next cell.
D-10747	Universal Template dropdown in Universal Monitor task does not work correctly when Event Type=Local
D-10805	Filter does not work on Script content if content is not visible.
D-10812	Client-side validation error is not logged to the console for hidden fields.
D-10817	Dark Theme - Universal Template Field - No Restriction radio button is not highlighted/colored.
D-10853	Warning message in smartgwt.log when adding Agent Clusters to the Agent using slush bucket (see also D-10996)
D-10879	Webservice: Create SAP Task discrepancy for Command Group = Wait, Dependency on "wait" value
D-10891	Universal Monitor Criteria with \n cause Controller JavaScript exception(panel freeze)
D-10923	No validation for numberOfLines accepting 0 value for function ${_varLines('variableName', startLine, numberOfLines)}
D-10979	Recently Visited/Available Services - Filter missing + icon when hovering over.
D-10982	Custom Day item in Recently Visited list is not removed if Custom Day Global Permitted property changed to false.
D-10987	info/(i) icon doesn't disappear in universal template after uploading a big file until UAC is refreshed
D-10991	After Time and Before Time should be cleared out with After Date and Before Date respectively.
D-10996	getValues() warning message in the smartgwt log when adding multiple items through a picker (see also D-10853)
D-11001	Filter - Trigger List: System Monitor shows up in the Type field dropdown.
D-11051	Time Trigger Initial Time Offset - Next Schedule Delayed by Days
D-11066	User password history encrypted data showing in audit record.
D-11085	NullPointerException collecting non-connected OMS Server metric.
D-11090	Promotion: Report meta data mapping validation should use the User Id (username), not the Name.
D-11096	Universal Template - java.lang.StackOverflowError: null when Boolean/Choice field Mapping and Show If Field are the same
D-11097	Bundle Exclude On Existence type: Inconsistent value for OAuth Client.
D-11100	Custom days changes to different dates after the update
D-11110	Field name is inconsistent when a LISTADV API for task instances is run with no response fields
D-11111	OAuth Clients - Revert Promotion command fails with "Could not find previous version" error.
D-11134	Controller not logging embedded cause of "Could not create connection to database server" exception.
D-11135	UIP: uuid in the SAP Connection Default Value when promote Universal Template with SAP Connection Default Value
D-11153	Cross Site-site scripting vulnerability
D-11161	Virtual resource not freed after task successful completion.
D-11180	'Start Line' and 'Number of Lines' are not initialized to the default values when using Remote File Monitor payload created from 7.3.0.0
D-11181	Cluster Node with email notification on passive mode causes Cluster Node to shutdown when starting up paused
D-11193	CVE-2023-24998: Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads.
D-11194	CVE-2022-31692: Spring Security, versions 5.7 prior to 5.7.5 could be susceptible to authorization rules bypass via forward or include dispatcher types.
D-11197	Calendar Preview does not show Custom Days on the 1st of the Month if it is a Sunday
D-11208	Controller does not pause for trial license
D-11227	Dashboard home tab orders not being cleaned up after dashboard deleted.
D-11231	User Web Services - Unable to Create User with "Universal Event Create Permission" (Case#: 87943)
D-11235	Increment the PasswordChangeInProcess retry attempt counter.
D-11242	Null pointer exception when empty opswiseGroups values are sent in request for create/update APIs.
D-11248	Recurring: Lazy load graph as it was not loaded during fetch.
D-11254	Recurring Task with more than 2100 target tasks monitoring for All Recurrences -> Success gets SQL Exception on SQL Server.
D-11259	Exported Universal Template with Event Templates should have a minReleaseLevel of 7.2.0.0.
D-11289	Web Service Personal Access Token Auth Headers cannot be reset to blank.
D-11290	Field Restrictions: Template restriction not applied for all fields associated with Exit Code Processing Fields category.
D-11305	Check dependent field constraints for dynamic command and choice execution.

Prior Maintenance

See Universal Controller 7.3.x Maintenance for changes previously included in 7.3.x maintenance releases that also are included in the 7.4.x releases.

Browser not supported