Universal Controller 7.4.x Maintenance

Introduction

Stonebranch provides product maintenance in the form of updated product installation packages. This document lists the product installation package maintenance history for Universal Controller 7.4.x.

Note

For Universal Controller 7.4.x, applying maintenance refers to the increase from a currently installed and supported version of the Controller to a later 7.4.x version of the Controller (for example, increase Controller 7.4.0.0 to Controller 7.4.0.1).

Product Packaging

A package maintenance level is incremented when the package changes or the package installation changes.

Stonebranch changes product version, release, or modification identifiers at its discretion when it deems an appropriate number of enhancements or capabilities have been introduced to warrant the change.

Versioning

Package version numbers are comprised of four numeric identifiers: version, release, modification level, and maintenance level.

For example, for Universal Controller 7.4.0.0:

  • 7 = Version 7
  • 4 = Release 4
  • 0 = Modification Level 0
  • 0 = Maintenance Level 0

Packaging Methods

The Universal Controller 7.4.x packages are provided in formats appropriate for the target platforms.

See Installation and Applying Maintenance for information on installing, upgrading, and applying maintenance to the Universal Controller.

Package Maintenance Levels

This section identifies the changes included in Universal Controller 7.4.x.

Release 7.4.3.0 - October 8, 2024

Change IDDescription
E-02008

Security

B-12929: SonarQube: Use another cipher mode or disable padding.

B-17037: Add Content-Security-Policy header.

B-19945: Pentest analysis and mitigation (external).

B-20214: Server-side request forgery analysis, and mitigation.

B-20368: Pentest analysis and mitigation (internal).

D-11146

"Set As Default Layout" doesn't work for WF>Forecast>List view.

D-12697

Trigger does not re-enable when Custom Day changes which effect the Trigger's Next Scheduled Time

D-12834

Trigger with multiple items selected for 'Date/Restriction Noun(s)' or 'Date/Restriction Qualifiers(s)' fails to recalculate for calendar change.

D-12849

Need proper handling for not allowing to save duplicate scopes in OAuth Clients

D-12942

Universal Task Publisher field is empty after refresh

D-12948

Run Criteria does not evaluate properly when using Custom Day & Complex Criteria

Release 7.4.2.0 - September 10, 2024

Change IDDescription

B-20633

Provide one time use property to allow maintenance to be run even with exceptions

D-11457

UUID in the Utility Agent field of File Transfer and UCMD task when create a new task from z/OS agent Tasks list.

D-11741

User with no reporting role should NOT be allowed to open new report form when system property "strict report create constraints = true”

D-12486Custom Day can be removed from Calendar when reference field has multiple items selected.
D-12528Workflow Critical Endpoints: when the property is false, UI is still allowing to add the endpoints
D-12719API Fails To Create User With SysId = ""
D-12731The uac_agent_changed event does not set the transient attribute for transient agents
D-12756Database Connection Allows Null Value For Max Rows Via Web Services
D-12769List importing filter can end up with duplicate filters.
D-12791Task Execution Restriction Dates are shifted when modified from the Execution Restrictions popup
D-12804Task Instance List Advanced API : The default response fields does not match for XML & JSON
D-12809Date List value moves back one day when browser time zone is ahead of server
D-12812Unable to update the Operational Memo on a running timer task
D-12823Time Trigger Not Created Via API When SysId=""
D-12856Add more information to SQLWarning log message such as the actual SQL being executed.

Release 7.4.1.9 - August 13, 2024

Change IDDescription

D-11340

Dates show wrong value on RPC requests when Server Timezone is ahead of client browser Timezone.

D-12758

No indication that UC is running as Agent only when option is set during installation.

D-12789

SonarQube - Review/Resolve Critical and Blocker Bug and Vulnerabilities.

Release 7.4.1.8 - July 09, 2024

Change IDDescription
D-12674
D-12722
Library dependencies updated due to vulnerabilities.

D-11288

Universal Task Publisher dropdown in Universal Monitor task does not work correctly when Event Type=Local.

D-12653

Trigger fires due to Calendar change when there is no change in the Trigger's schedule.

D-12685

Promoting bundles to an invalid release level provides the wrong error message.

D-12686

XSS vulnerability in Launch confirmation dialog.

D-12687

UC: Support Issue - Task API, failed to create task when adding email notifications.

D-12693

Unicode characters in SAP tasks fail when using SQL Server & Oracle database.

D-12729

Credential API> Run time user should be required to create/update credential.

Release 7.4.1.7 - June 11, 2024

Change IDDescription

D-12266

UT Credential Fields Restriction: Should not be restricted when Credentials Variable = true and Credentials (Text) empty.

D-12287

REST API > Returns HTTP Status Code 500 when a reference (i.e. task/listadv agent reference) cannot be identified in the system.

D-12495

Trigger Web Service API not sorting the Date Noun(s)/Qualifier(s) and Restriction Noun(s)/Qualifier(s) field values.

D-12612

Uploading a Task Definition File with no sysId but retainSysIds = true does not create an object, but does not fail.

Release 7.4.1.6 - May 14, 2024

Change IDDescription
D-12544
D-12545
D-12546
D-12547
D-12562
Library dependencies updated due to vulnerabilities.

D-11888

Forecast - The field name Simulation in the Forecast Details is confusing.

D-12228

Application Versions Cannot Be Deleted.

D-12229

Application Versions Don't Store Description Changes.

D-12532

Task Instance Simulate field not displaying as Yes/No.

D-12561

Support for double-digit Version, Release, Modification Level, and Maintenance Level.

Release 7.4.1.5 - April 9, 2024

Change IDDescription
D-12415Library dependencies updated due to vulnerabilities.

D-11112

Reran File monitor in a cluster gets cancelled once the offline agent becomes Active.

D-12278

Add new objects for "follow references" of a task during promotion.

D-12391

Cannot Import Extension through UI, however it is possible from uip-cli.

D-12417

Dynamic Choice (Choice Field 1) with Dynamic Choice field (Choice Field 2) as a dependent field gets cleared out for task instance but not for task instance command.

D-12484

XSS Vulnerabilities

D-12531

PeopleSoft tasks are slow to change status after agent sends response.

Release 7.4.1.4 - March 12, 2024

Change IDDescription

D-12299

Advanced Filters not matching for Universal Monitors.

D-11418

Universal Template Array Field - Default Value column is not displayed consistently.

D-11456

SAP and PeopleSoft task should not be in the z/OS Agent Tasks list.

D-11858

Universal Monitor - Change Universal Monitor Criteria section title to Event Attribute Criteria to be consistent with updated Webhook section title.

D-11670

Email Notification opened from a report list does not display attachment fields correctly.

Release 7.4.1.3 - February 13, 2024

Change IDDescription
D-12275Library dependencies updated due to vulnerabilities.
D-12280'Relative Repeating Date' in Custom Days is not working properly.

Release 7.4.1.2 - December 12, 2023

Change IDDescription

D-11902
D-11925

Library dependencies updated due to vulnerabilities.

D-11300

Time Trigger using "List of Dates" type Custom Day lists wrong qualifying times.

D-11662

View Bundles uses wrong DataSource label for the Bundle count.

D-11666

List Qualifying Times for Time Trigger not listing any times when using Custom Day with no dates for the current month.

D-11669

Run Command on Filtered > Promote... and Promotion Target issue for PAT authentication method.

D-11678

Web Service Task: UI - Credentials field is required if Credentials Variable is checked, even when the Credentials field is hidden.

D-11732

Custom Day with Less adjustment that resolves to previous month not working correctly with Triggers and Task Run Criteria.

D-11750

Time Interval field should be marked required on Time trigger form when Time Style is "Time Interval"

D-11847

Inherited Set Variable actions for Global variables using a variable in the name can result in non-deterministic name resolution.

D-11850

List Grid Filter: Duplicate "-- No Filter --" options after sorting by Filter Name.

D-11881

Universal Task - Fail to detect any form changes when modifying the Array field in the Universal task form or pop-up window.

D-11885

Insert: Universal Template Field (and Universal Template Field Choice) insert operation will not create unique sequence.

D-11887

Insert: z/OS Task Step Condition, z/OS Task Restart Criteria and Workflow Step Condition insert operation will not create unique Evaluation Order.

D-11898

UIP: Choice Field - Dynamic - Backspace not working.

D-11908

OAuth Clients - View Bundles shows incorrect number of Bundles.

Release 7.4.1.1 - October 31, 2023

Change ID
Description
D-11382
D-11657
D-11659
D-11861
D-11865
D-11866
Library dependencies updated due to vulnerabilities.
D-11265Web Service: UDM should be not allowed as a valid Server Type for Remote File Monitor task.
D-11350Incorrect sizing and styling of Activity "Go To Page" window.
D-11499Set Execution Restrictions... command does not add new dates to the existing date list.
D-11501Custom Day missing from Calendar Preview
D-11581Secrets Provider (CyberArk Central Credential Provider) : HTTP 403 error not reported clearly.
D-11582UIP: Universal Template/Task - Text Field JSON validation ignoring trailing tokens.
D-11583SAP Task: Delete SAP Job on Completion option is not working.
D-11604Task UUID with a special character fails to be deleted.
D-11605SAP - SAP InfoPackage Request Id is not shown in the Task Instance form.
D-11608Skip command does not delete timers for Wait To Start/Delay On Start conditions.
D-11630document.domain issue causing Chrome to freeze/crash is occurring from login.jsp script.
D-11635MS SQL Server - java.util.ConcurrentModificationException: null Error when applying maintenance.
D-11644"login.jsp" and "login_change_pwd.jsp" error messages not clear on resubmit.
D-11674Agent Monitor continues to do the paused wait check even after the 1st time it does the check.
D-11736Exception in console after deleting Agent from popup window opened from drill-down List from Agent Status widget.
D-11739Single-line text field types have a longer delay showing hover hint.
D-11852Close action menu: fail to detect form changes.

Release 7.4.1.0 - July 31, 2023

Change IDDescription
B-17590
UIP: Universal Extension - Choice Field Variable Resolution.
B-16960Default Expiration Limit Property for Personal Access Token.
B-17649Interact With Desktop to be optionally available on Universal Task/Template.
B-17754UC - z/OS Agent File Monitor Trigger new Change Monitor option for Trigger on Create.
D-11391No validation for workflow property in create/update simulation Web Service API.
D-11407Universal Template Fields list - Default Value: not resolved for Sap Connection or Database Connection field type.
D-11398Promotion History Item - Open In Tab throws exception for new universal task item.
D-11415
Promotion History Items - Open/Open In Tab should be disabled for Dashboard item.
D-11396Parameters for List Webhooks API has task instead of taskname.
D-11377Web Service - User Token - List Personal Access Tokens - expiration property is not formatted correctly.

Release 7.4.0.1 - June 1, 2023

Change IDDescription

D-11351
D-11355
D-11357
D-11358
D-11359
D-11372
D-11373
D-11374
D-11375
D-11380
D-11381
D-11384

Library dependencies updated due to vulnerabilities.
D-11114
Exporting a chart logs warning about skin_styles.css file not found.
D-11173UIP : Choice Defaults in UT not filled when New Task Selected from Workflow Editor
D-11281UC- Universal Event Template Details view issue in a bundle
D-11297Filter - Date/Datetime field does not default to "Today"
D-11316Bundle Web Service API: Modify a Bundle with Universal Event Template does not work correctly.
D-11321Time trigger with Day style as 'Every' is not working properly.
D-11322Bundle Web Service API: Bundle Read XML Response for Universal Event Template entity name is spelled incorrect
D-11336
Client-side validation error is not logged to the console for hidden fields (universal task form)
D-11367Simulation: Missing + icon on Simulation list.
D-11385Promotion: Failure when promoting Script type Universal Template to UC 7.4.0.0.
D-11386Global List - Name field should not be read-only when Open In Tab.
D-11395Workflow Editor - Missing confirm dialog when Launch Workflow with unsaved changes in the editor.

Release 7.4.0.0 - April 4, 2023

Change IDDescription
B-11390    Forecast: Evaluation of variable run/skip criteria.
B-16961     
Forecast: Workflow Forecast... command through Web Service API.
B-17022     
Forecast: Allow specifying override variables for workflow Forecast... command through Web Service API.
B-16855    
Gantt: Timeline feature analysis.
B-06436    
Gantt: View of Workflow Instance (base functionality).
B-16930     
Gantt: Make necessary statistics available directly from instance data.
B-16938     
Gantt: Server-side filtering (operation dialog options).
B-16939     
Gantt: Refresh (server-fetch) operation.
B-16940     
Gantt: Display critical tasks with indicator.
B-16013     
Web Service API : User Impersonation
B-16872     
Workload Simulation
B-17075   
Workload Simulation: List Import/Export
B-17076     
Workload Simulation: Download, Download Filtered..., and Upload...
B-17077    
Workload Simulation: Web Service API.
B-13118     
UIP: Universal Template - Database Connection field type.
B-16006     
UIP: Universal Template - Dynamic Choice Field - Clear choices on dependent field value change.
B-16766     
UIP: Universal Template - Add 5 Additional Boolean Fields
B-15855     
UIP: Universal Extension - Extension Progress Indicator
B-15949    
UIP: Universal Extension - Automatic inclusion of resolvable credentials for Credential Functions embedded within Script fields (Script Functions, SAP Connection Functions, and Database Connection Functions are also resolved).
B-17130     
UIP: Universal Extension - "zip_safe" Metadata.
B-15968     
UIP: Universal Events - Global - Agent Event.
B-15946     
Credential, Script, SAP Connection, Database Connection, Output Path, and Variable Path functions supported in Environment Variables field (Windows, Linux/Unix, and Universal Tasks).
B-16088     Outbound Webhook registration for built-in system Universal Events.
B-16916     New String and Output functions for processing delimited (or CSV/TSV) variable values and output with Recurring instances, etc.
B-17019     Add ${ops_recurrence_count_minus_1} built-in variable for Recurring instances.
B-06674    
Report Promotion.
B-08454     Dashboard Promotion
B-09387     
Widget Promotion
B-17131     System Property: Calendar Preview Past Period In Months (Calendar Preview to Show Calendar Days of Previous Months)
B-16744     System Property/User Preference: Automatically Expanded Lists
B-16918     System Property/User Preference: Navigation Auto Collapse
B-04714     System Property: Promotion Follow References Permitted (Ability to disable promoting with follow references)
B-15904     System Property: Audit Owner Read Permitted (Allow users to access their own audit history)
B-16775     System Property: Script Resolve Variables Default (User Interface Default for Scripts "Resolve UAC Variables")
B-09235     System Property: Show Last Login (Display "last logged on Date / Time" after Controller logon)
B-03168     Task Monitor support for Late / Early Tasks
B-05459     View/Edit Actions associated with an instance directly from an Actions tab on the task instance form.
B-06973     Allow variables in the Database Connection Definition.
B-08438     Allow for Automatic Output Retrieval for Remote File Monitors.
B-08571     Display exit code in workflow monitor when hovering on task.
B-15805     Agent Level Credentials Required Option.
B-15907     Preferred Controller always Active
B-16029     Order Run Criteria Task Selection by Name
B-16089     Allow re-enablement of Interact with Desktop via property.
B-16099     Controller tracking of OMS maximum message size configuration.
B-16767     Web Service API: Composite Trigger List Component Events
B-16884    Add timestamp to message at beginning of rolled log file.
B-17034     Update Copyright
B-16845     Use Java 11 compiler and drop Java 8 support.
B-16110     Add Java 17 support.
B-16994     Drop support for Oracle 12c, Oracle 18c, and MS SQL Server 2012.
B-17029     Update MySQL JDBC Driver (mysql-connector-java-8.0.32.jar)
B-16859     Update Microsoft SQL Server JDBC Driver (mssql-jdbc-9.4.1.jre11.jar).
B-16844     Update Oracle JDBC Driver (21.9.0.0, ojdbc11.jar, orai18n.jar, xdb.jar, & xmlparserv2_sans_jaxp_services.jar)
B-16992     Update Jersey library dependency to 2.38.
B-16993     Update Jayway JsonPath library dependency to 2.7.0.
B-17016     Update log4j2 library dependency to 2.19.0.
B-17233     Update CyberArk JavaPasswordSDK.jar dependency to 12.6.
B-16967     Update Universal Network Library (sb_universal.jar) to support TLS 1.3.
B-16885     Exclude client java package when building uc.jar.
B-15662     Upgrade JUnit library dependency from JUnit 4 to JUnit 5.
B-17066     Integration of the OWASP Dependency-Check into our Jenkins pipeline.
D-10620     Multi-update cell editor for time/duration fields is not closed when tabbing to the next cell.
D-10747     
Universal Template dropdown in Universal Monitor task does not work correctly when Event Type=Local
D-10805     
Filter does not work on Script content if content is not visible.
D-10812     
Client-side validation error is not logged to the console for hidden fields.
D-10817     
Dark Theme - Universal Template Field - No Restriction radio button is not highlighted/colored.
D-10853     
Warning message in smartgwt.log when adding Agent Clusters to the Agent using slush bucket (see also D-10996)
D-10879     
Webservice: Create SAP Task discrepancy for Command Group = Wait, Dependency on "wait" value
D-10891     
Universal Monitor Criteria with \n cause Controller JavaScript exception(panel freeze)
D-10923     
No validation for numberOfLines accepting 0 value for function ${_varLines('variableName', startLine, numberOfLines)}
D-10979     
Recently Visited/Available Services - Filter missing + icon when hovering over.
D-10982     
Custom Day item in Recently Visited list is not removed if Custom Day Global Permitted property changed to false.
D-10987     
info/(i) icon doesn't disappear in universal template after uploading a big file until UAC is refreshed
D-10991     
After Time and Before Time should be cleared out with After Date and Before Date respectively.
D-10996     
getValues() warning message in the smartgwt log when adding multiple items through a picker (see also D-10853)
D-11001     
Filter - Trigger List: System Monitor shows up in the Type field dropdown.
D-11051     
Time Trigger Initial Time Offset - Next Schedule Delayed by Days
D-11066     
User password history encrypted data showing in audit record.
D-11085     
NullPointerException collecting non-connected OMS Server metric.
D-11090     
Promotion: Report meta data mapping validation should use the User Id (username), not the Name.
D-11096     
Universal Template - java.lang.StackOverflowError: null when Boolean/Choice field Mapping and Show If Field are the same
D-11097     
Bundle Exclude On Existence type: Inconsistent value for OAuth Client.
D-11100     
Custom days changes to different dates after the update
D-11110     
Field name is inconsistent when a LISTADV API for task instances is run with no response fields
D-11111     
OAuth Clients - Revert Promotion command fails with "Could not find previous version" error.
D-11134    
Controller not logging embedded cause of "Could not create connection to database server" exception.
D-11135     
UIP: uuid in the SAP Connection Default Value when promote Universal Template with SAP Connection Default Value
D-11153     
Cross Site-site scripting vulnerability
D-11161     
Virtual resource not freed after task successful completion.
D-11180    
'Start Line' and 'Number of Lines' are not initialized to the default values when using  Remote File Monitor payload created from 7.3.0.0
D-11181    
Cluster Node with email notification on passive mode causes Cluster Node to shutdown when starting up paused
D-11193     
CVE-2023-24998: Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads.
D-11194     
CVE-2022-31692: Spring Security, versions 5.7 prior to 5.7.5 could be susceptible to authorization rules bypass via forward or include dispatcher types.
D-11197     
Calendar Preview does not show Custom Days on the 1st of the Month if it is a Sunday
D-11208     
Controller does not pause for trial license
D-11227     
Dashboard home tab orders not being cleaned up after dashboard deleted.
D-11231     
User Web Services - Unable to Create User with "Universal Event Create Permission" (Case#: 87943)
D-11235    
Increment the PasswordChangeInProcess retry attempt counter.
D-11242     
Null pointer exception when empty opswiseGroups values are sent in request for create/update APIs.
D-11248     
Recurring: Lazy load graph as it was not loaded during fetch.
D-11254     
Recurring Task with more than 2100 target tasks monitoring for All Recurrences -> Success gets SQL Exception on SQL Server.
D-11259     
Exported Universal Template with Event Templates should have a minReleaseLevel of 7.2.0.0.
D-11289     
Web Service Personal Access Token Auth Headers cannot be reset to blank.
D-11290    Field Restrictions: Template restriction not applied for all fields associated with Exit Code Processing Fields category.

D-11305     

Check dependent field constraints for dynamic command and choice execution.

Prior Maintenance

See Universal Controller 7.3.x Maintenance for changes previously included in 7.3.x maintenance releases that also are included in the 7.4.x releases.