ScalarDB 3.12 Release Notes
This page includes a list of release notes for ScalarDB 3.12.
v3.12.4
Release date: October 13, 2024
Summary
This release includes several bug fixes, and vulnerability fixes.
Community edition
Enhancements
- Added support for MariaDB 11.4 and Oracle 19. (#2061)
Bug fixes
- Fixed a bug where
NullPointerException
when a table specified in a Get/Scan object is not found in Consensus Commit. (#2083) - Upgraded the mysql driver to fix security issues. CVE-2023-22102 (#2238)
- Upgraded the gRPC library, the Protocol Buffers library, grpc_health_probe, and scalar-admin to fix security issues. CVE-2024-7254, CVE-2024-25638, and CVE-2024-34156 (#2277)
Enterprise edition
Bug fixes
ScalarDB Cluster
- Fixed a bug where incorrect results are returned when executing SELECT queries with the same column names.
- Fix a bug where
NullPointerException
occurs when catching an exception without message. - Upgraded
grpc_health_probe
to fix a security issue. CVE-2024-34156 - Upgraded
scalar-admin
to fix a security issue. CVE-2024-25638 - Upgraded the Protobuf Java library to fix a security issue. CVE-2024-7254
ScalarDB GraphQL
- Upgraded the GraphQL Java library to fix security issues. CVE-2024-40094
v3.12.3
Release date: July 3, 2024
Summary
This release includes several improvements, bug fixes, and vulnerability fixes.
Community edition
Improvements
- Refactored scan with filtering. (#1715)
- Changed the hard-coded password for the Oracle user to a more secure one in the JDBC adapter. (#1765)
- Update base image of container image. This update fixes an OOM issue on a Kubernetes with cgroup v2 environment. In the previous versions, if you use a Kubernetes cluster with cgroup v2, you might face an OOM-killed issue. (#1826)
Bug fixes
- Fixed a bug where
NullPointerException
occurs during theEXTRA_READ
validation when scanning records in a transaction, but some of them are deleted by other transactions. (#1624) - Fixed a bug where lazy recovery was not executed for the implicit pre-read of put and delete operations. (#1681)
- Fixed a bug where users could see inconsistent results when scanning records by an index key after putting the related records in Consensus Commit transactions. (#1727)
- Upgraded
grpc_health_probe
to fix security issues. CVE-2024-24790, CVE-2023-45283, and CVE-2023-45288 (#1980) - Fixed snapshot management issues. (#1976)
- Fix a bug of the import-table feature that it could access tables in other namespace that have the same table name when using MySQL storage. For example, in the following situation, the metadata of the columns
pk_unexpected
andcol_unexpected
ofns2.tbl1
are handled and the import-table feature fails due to unsupported data types. (#2001)
Enterprise edition
Improvements
ScalarDB Cluster
- Update base image of container image. This update fixes an OOM issue on a Kubernetes with cgroup v2 environment. In the previous versions, if you use a Kubernetes cluster with cgroup v2, you might face an OOM-killed issue.
ScalarDB GraphQL
- Update base image of container image. This update fixes an OOM issue on a Kubernetes with cgroup v2 environment. In the previous versions, if you use a Kubernetes cluster with cgroup v2, you might face an OOM-killed issue.
ScalarDB SQL
- Changed the packages for
ConditionSetBuilder
andAndConditionSet
. - Update base image of container image. This update fixes an OOM issue on a Kubernetes with cgroup v2 environment. In the previous versions, if you use a Kubernetes cluster with cgroup v2, you might face an OOM-killed issue.
Bug fixes
ScalarDB Cluster
- Upgraded
grpc_health_probe
to fix security issues. CVE-2024-24790, CVE-2023-45283, and CVE-2023-45288
ScalarDB SQL
- Fixed a bug where incorrect results are returned when executing SELECT queries with the same column names.
- Upgraded
grpc_health_probe
to fix security issues. CVE-2024-24790, CVE-2023-45283, and CVE-2023-45288
v3.12.2
Release date: April 1, 2024
Summary
This release includes several improvements, including error message improvements and a vulnerability fix.
Community edition
Improvements
- Added error codes to the error messages of Schema Loader. (#1564)
Enterprise edition
Improvements
ScalarDB Cluster
- Added error codes to the error messages of the authentication and authorization module.
- Added error codes to the error messages.
- Added TLS support for the Prometheus exporter. With this change, when enabling TLS (setting
scalar.db.cluster.tls.enabled
totrue
) in ScalarDB cluster nodes, the Prometheus exporter also starts with TLS (HTTPS).
ScalarDB GraphQL
- Added error codes to the error messages.
ScalarDB SQL
- Added error codes to the error messages.
Bug fixes
ScalarDB Cluster
- Upgraded the Kubernetes Client Java lib to fix security issues: CVE-2024-25710 and CVE-2024-26308.
v3.12.1
Release date: February 26, 2024
Summary
This release has a small improvement and several bug and vulnerability fixes.
Community edition
Improvements
- Removed the hard-coded collation for MySQL and SQL Server in the JDBC adapter. As a result, the collation configured in the underlying database will be used when creating tables. (#1518)
Bug fixes
- Upgraded the base image to fix security issues. CVE-2023-47038 (#1522 #1521)
- Upgraded the PostgresSQL lib to fix security issues. CVE-2024-1597 (#1547)
Enterprise edition
Bug fixes
ScalarDB Cluster
- Upgraded the base image to fix security issues. CVE-2023-47038
ScalarDB GraphQL
- Upgraded the base image to fix security issues. CVE-2023-47038
ScalarDB SQL
- Upgraded the base image to fix security issues. CVE-2023-47038
v3.12.0
Release date: February 17, 2024
Summary
This release has several enhancements, improvements, and bug fixes.
Community edition
Enhancements
- Made Cosmos DB consistency level configurable in the Cosmos DB adapter. Users can change the consistency level used for Cosmos DB operations by specifying the property
scalar.db.cosmos.consistency_level
.STRONG
orBOUNDED_STALENESS
can be specified. (#1470)
Improvements
- Added error codes to the error messages. (#1493)
Bug fixes
- Improved some error handling to avoid potential NPE in JDBC storages. (#1442)
- Fixed a bug where lazy recovery is not performed when uncommitted records are read while executing implicit pre-read. (#1476)
Enterprise edition
Enhancements
ScalarDB Cluster
- Added support for wire encryption using TLS. When you enable authentication and authorization, you should enable wire encryption in production environments to protect the user credentials.
- Added an expiration time for the authentication and authorization token to the response of the
AuthLogin.Login
endpoint.
Improvements
ScalarDB GraphQL
- Updated several libraries.
ScalarDB SQL
- Updated several libraries.
Bug fixes
ScalarDB Cluster
- Fixed a bug where the table or namespace privilege is not handled correctly.