Skip to content

Eclipse Kura 4.1.3

Compare
Choose a tag to compare
@MMaiero MMaiero released this 04 Dec 11:16
· 1604 commits to develop since this release
3428f0d

Eclipse Kura - 4.1.3 - December 2021


Description:

Eclipse Kura 4.1.3 is a service release to address various CVEs in framework dependencies.
In particular, the release addressed CVE-2021-44228, CVE-2021-45046 and CVE-2021-45105
by updating Log4J to version 2.17.0. Further platform updates are for Google Protobuf to 3.8.0
and Jetty to version 9.4.41.

Changes:

  • Target Platform Updates
    • log4j.version=2.17.0
    • slf4j.api.version=1.7.32
    • com.google.protobuf.version=3.8.0
    • org.eclipse.jetty.continuation.version=9.4.41.v20210516
    • org.eclipse.jetty.http.version=9.4.41.v20210516
    • org.eclipse.jetty.io.version=9.4.41.v20210516
    • org.eclipse.jetty.security.version=9.4.41.v20210516
    • org.eclipse.jetty.server.version=9.4.41.v20210516
    • org.eclipse.jetty.servlet.version=9.4.41.v20210516
    • org.eclipse.jetty.util.version=9.4.41.v20210516
    • org.eclipse.jetty.util.ajax.version=9.4.41.v20210516

Compatibility:

  • Eclipse Kura v4.1.3 does not introduce API breakage with previous releases.

Target Environments:

  • Kura is released as pre-compiled binary installers for the following platforms:
    • Raspberry Pi 2/3 based on Raspberry Pi OS Buster (32 bits)
    • Intel Up Squared board running Ubuntu 18
    • Intel Up Squared board running Centos 7 (Experimental)
    • Rock960 ARM_64 running Ubuntu 16 (NN version only)
  • Kura is also available as a pre-built Docker container

Bug Fixes :

  • Changelog:
    • 58c12f2 - Updated log4j to 2.17.0 (Maiero)
    • ecc4630 - Merge pull request #3721 from eclipse/backport-jetty-version-hide (nicolatimeus)
    • 59f5b17 - Added missing bundle to 4.1.3 dev-env emulator (#3720) (nicolatimeus)
    • 34aa5a4 - Backport of #3459 to align with Kura 5.0.0 changes (Maiero)
    • f701f92 - Updated version from 4.1.3-SNAPSHOT to 4.1.3 (Maiero)
    • a354b2f - Updated log4j2 to 2.16.0 (#3713) (#3714) (github-actions[bot])
    • a7ddd39 - Updated Jetty to 9.4.41 (Maiero)
    • 8806e08 - Fixed versions (Maiero)
    • 41e46e3 - Updated Jetty to v.9.4.35. (Maiero)
    • e6dda7e - Updated protobuf to version 3.8.0. (Maiero)
    • f739884 - Updating log4j version to 2.15.0. (Maiero)
    • 5c83dbe - Upticked versions to 4.1.3-SNAPSHOT (#3127) (Matteo Maiero)

Know Issues :

  • The implementation of the CryptoService performs encryption using a
    password that is hardcoded and published.
  • Modem: Ublox Lisa U201 may not be able to establish PPP connection when CHAP/PAP authentication is required.
  • BLE also tested on the Raspberry Pi B with a Broadcom BCM20702 USB dongle and the TI SensorTag. The kernel version was
    "Linux raspberrypi 3.18.11-v7+ #781 SMP PREEMPT Tue Apr 21 18:07:59 BST 2015 armv7l GNU/Linux".
    Note that on the kernel "Linux version 4.1.7-v7+ (dc4@dc4-XPS13-9333) (gcc version 4.8.3 20140303 (prerelease)
    (crosstool-NG linaro-1.13.1+bzr2650 - Linaro GCC 2014.03) ) #817 SMP PREEMPT Sat Sep 19 15:32:00 BST 2015" has a bug on
    gatttool and the BLE connection will encounter a failure.
  • WiFi on Raspberry Pi 2 has only been tested with WiPi WiFi Dongle (Realink RT5370 chipset) and official Pi USB WiFi Dongle (Broadcom BCM43143 chipset).
    AccessPoint WiFi mode not working for Broadcom chipset.
  • Hardware watchdog: not implemented on all platforms
  • Only one WAN interface is currently supported. A warning in displayed
    in the WEB UI if the user attempts to enable more than one WAN interface
  • #2414: Rock 960: cannot get client id
  • #2038: [Kura 3.2.0 QA] Package uninstallation log
  • #2013: Unsaved changes dialog triggers incorrectly
  • #1993: Search Domains Are Not Supported
  • #1932: SystemAdminService.getUptime() returns SystemAdminService#UNKNOWN on MacOS when locale is not English
  • #1663: Authentication Issue with Deploy V2
  • #1572: serial modbus has errors on some hardware
  • #1533: MqttDataTransport client-id illegal character
  • #1529: OSGI console is not redirected to Eclipse IDE with Kura 3.0
  • #1201: Wifi password incorrectly read from snapshot in Access Point mode
  • #1195: [Net] Firewall IP Forwarding rules entered in the Web UI lost on reboot
  • #1161: Incorrectly configuring a component can be irreversable.
  • #1128: [Kura 3.0.0 M1 QA] Unable to delete manually added CamelFactory services
  • #1016: ConfigurationServiceImpl creates duplicate instances
  • #797: Design of ServiceUtil is broken
  • #771: Web UI fails with INTERNAL_ERROR when WireHelperService is not registered
  • #654: Clean up static initialization around "modem" functionality
  • #645: Clean up internal dependencies in Kura
  • #522: [Net] Modem monitor should monitor interfaces, not modems
  • #486: Build environment broken on Windows
  • #406: Replace System.get* with calls to SystemService.getProperties
  • #348: WpaSupplicantConfigReader.getWifiClientConfig() should support cases where key_mgmt scheme is not set
  • #329: [DEPLOY-V2] Review/refactoring needed
  • #297: [Status led] What connection instance controls the status led?
  • #253: Check if bundle contexes correctly unget services after invoking getService
  • #222: CloudConnectionStatusServiceImpl does not cancel workers on component deactivation