Release v2.7.4

[2.7.4] - 2024-11-27

Fixed

• Upgrade cross-spawn to mitigate CVE-2024-21538
• Migrated from pip to poetry

Release v2.7.3

[2.7.3] - 2024-10

Fixed

• Update base python image to mitigate CVE-2024-45490, CVE-2024-45491, CVE-2024-45492, CVE-2023-7104

Release v2.7.2

[2.7.2] - 2024-09

Fixed

• Some user sesssions not appearing in session table due to batchWrite API limit being reached

v2.7.1

[2.7.1] - 2024-08

Added

• Security.md file

Fixed

• Workspace analysis failing when pervious data is recorded in database but empty.
• Workspace analysis failing when timestamps from user connected data doesn't exist in other metric data.
• Workspace only reporting 24 hour period
• Workspace not reporting tags
• Updated micromatch to mitigate CVE-2024-4067.

v2.7.0

[2.7.0] - 2024-07

Added

• Workspace performance metrics
• DynamoDB tables for workspace data and for individual user sessions
• Auto-updating container image for most recent patches up to next minor release
• Private subnets for Fargate container
• Powertools logging
• Operational insights CloudWatch dashboard
• Support for G4DN workspaces

Fixed

• sts token expired after one hour

v2.6.6

[2.6.6] - 2024-07

Fixed

• Updated the base python image in the Dockerfile used to mitigate CVE-2023-50387, CVE-2023-5678, CVE-2024-0727, CVE-2023-6129 and several low severity vulnerabilities
• Updated braces to mitigate CVE-2024-4068.
• Updated IDNA to mitigate CVE-2024-3651.
• Updated urllib3 to mitigate CVE-2024-37891.
• Updated setuptools to mitigate CVE-2024-6345.
• Updated requests to mitigate CVE-2024-35195.
• Updated Certifi to mitigate CVE-2024-39689.
• Updated boto3, botocore, s3transfer to resolve conflicting dependencies.

v2.6.5

[2.6.5] - 2024-02

Fixed

• Updated the base python image in the Dockerfile used to mitigate CVE-2023-47038.
• Update pip to mitigate CVE-2023-5752.
• Add dependency to route to mitigate race condition between internet gateway and the route to the internet gateway.

v2.6.4

Fixed

• Updated @babel/traverse to mitigate CVE-2023-45133
• Updated urllib3 to mitigate CVE-2023-45803
• Updated the base python image in the Dockerfile used to fix the following CVEs: CVE-2023-29491, CVE-2023-4911, CVE-2023-36054, CVE-2023-3446, CVE-2023-3817.

v2.6.3

[2.6.3] - 2023-09

Fixed

• Added the bugfix to skip the processing of the workspaces in error state.
• Updated all the package versions to resolve security vulnerabilities.
• Updated the docker base image to the python 3.11.
• Updated all the lambda runtimes to python 3.11.

v2.6.2

[2.6.2] - 2023-04

Fixed

• Changed the Object Ownership for logging bucket from 'Object writer' to 'Bucket owner enforced' to mitigate the impact caused by new S3 default settings.
• Updated S3 bucket policy to support access logging.