Revenera Community Knowledge Base

The following are the Release Notes available for FlexNet Code Insight Electronic Update releases: 2023 2022 2021 2020 28-Nov-2023 10-Nov-2023 27-Oct-2023 13-Oct-2023 14-Sep-2023 10-Aug-2023 23-Jun-2023 31-May-2023 04-May-2023 17-Apr-2023 24-Mar-2023 10-Mar-2023 24-Feb-2023 20-Feb-2023 30-Jan-2023 12-Jan-2023 22-Dec-2022 08-Dec-2022 29-Nov-2022 11-Nov-2022 02-Nov-2022 21-Oct-2022 18-Oct-2022 23-Sep-2022 13-Sep-2022 09-Sep-2022 29-Aug-2022 12-Aug-2022 18-Jul-2022 07-Jul-2022 28-Jun-2022 15-Jun-2022 13-May-2022 28-Apr-2022 13-Apr-2022 25-Mar-2022 14-Mar-2022 24-Feb-2022 10-Feb-2022 28-Jan-2022 13-Jan-2022 23-Dec-2021 16-Dec-2021 26-Nov-2021 11-Nov-2021 28-Oct-2021 18-Oct-2021 01-Oct-2021 13-Sep-2021 30-Aug-2021 27-Jul-2021 24-Jun-2021 11-Jun-2021 28-May-2021 14-May-2021 22-Apr-2021 10-Apr-2021 25-Mar-2021 11-Mar-2021 20-Oct-2020 11-Sep-2020 28-Aug-2020 14-Aug-2020 03-Aug-2020 17-Jul-2020 30-Jun-2020 15-Jun-2020 01-Jun-2020 18-May-2020 04-May-2020 17-Apr-2020 03-Apr-2020   Changes in Update Released on 28-November-2023 This update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-48882 Cocoapods forge is an addition to our list of data collection SCA-51152 Addition of component detection capability for the component  NTAP/Quant New Component Detection Rules NTAP/Quant Collector Status Name Date of Last Successful Run npm 8/15/2023 crates 8/25/2022 cpan 11/16/2023 clojars 11/16/2023 rubygems 11/16/2023 maven-google 11/17/2023 cran 11/18/2023 hackage 11/19/2023 packagist 11/19/2023 go 11/17/2023 pypi 11/13/2023 nuget gallery 11/09/2023 maven2-ibiblio 11/23/2023 github 11/24/2023 fedora-koji 11/26/2023 alpine 11/15/2023 gitlab 6/6/2023 debian 11/20/2023 Changes in Update Released on 10-November-2023 This update includes the changes described in the following sections. Updates to Apache Activemq Components Added vulnerability information to the following activemq components: Component ID ComponentName url 58129 apache-activemq http://activemq.apache.org/  173954 apache-activemq https://github.com/apache/activemq  573649 activemq-all https://repo1.maven.org/maven2/org/apache/activemq/activemq-all  581532 apache-activemq https://repo1.maven.org/maven2/org/apache/activemq/apache-activemq  596014 activemq-openwire-legacy https://repo1.maven.org/maven2/org/apache/activemq/activemq-openwire-legacy  30391285 activemq https://tracker.debian.org/pkg/activemq    Related to vulnerability CVEs: CVE-2023-46604 (https://nvd.nist.gov/vuln/detail/CVE-2023-46604) Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-50558 License Evidence - "OpenSSL License" Evidence is missing on scanning "attribution-file.zip" file. SCA-38149 Addition of License evidence mechanism and license detection capabilities to licenses like "Sax Public Domain Notice", "The unlicense" etc SCA-50018 Updated license evidence mechanism and license detection capability for "IBM Public License v1.0" as the License evidence was missing on scanning "autoglyph.c" file Enhanced License Detection Capability for Components License detection capability and license evidence mechanism for the following components was updated/added: Sax Public Domain Notice University of Illinois/NCSA Open Source License The Unlicense Vovida Software License v1.0 W3C Software Notice and License (2002-12-31) X.Net  License XFree86 License 1.1 Zend License v2.0 Zope Public License 1.1 Zope Public License 2.0 Zope Public License 2.1 Collector Status Name Date of Last Successful Run npm 8/15/2023 crates 8/25/2022 cpan 11/02/2023 clojars 11/09/2023 rubygems 11/02/2023 maven-google 11/03/2023 cran 11/04/2023 hackage 11/05/2023 packagist 11/05/2023 go 11/06/2023 pypi 11/06/2023 nuget gallery 11/02/2023 maven2-ibiblio 11/01/2023 github 11/08/2023 fedora-koji 11/03/2023 alpine 11/08/2023 gitlab 6/6/2023 debian 11/06/2023 Changes in Update Released on 27-October-2023 This update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-50609 Resolved False Positive vulnerabilities being detected for Component ckan (Id: 21948217) with version 0.6 (Id: 117793043). SCA-49864 Addition of vulnerability mappings to Chart.js 1.0.2 for CVE-2020-7746 SCA-49752 Enhanced the Debian collector to collect more packages from different folders like non-free, non-free-firmware, contrib SCA-48039 Resolved False Positive vulnerabilities for components like "bootstrap" and "commons-collections" Enhanced License Detection Capability for Components License detection capability and license evidence mechanism for the following components was updated/added: Reciprocal Public License 1.1 Reciprocal Public License 1.5 Red Hat eCos Public License v1.1 SGI Free Software License B v1.0 SGI Free Software License B v1.1 SGI Free Software License B v2.0 SHL-2.0 SHL-2.1 SWI-exception Swift-exception Universal-FOSS-exception-1.0 vsftpd-openssl-exception Autoconf-exception-generic Autoconf-exception-macro Asterisk-exception cryptsetup-OpenSSL-exception LLGPL OCaml-LGPL-linking-exception PS-or-PDF-font-exception-20170817 QPL-1.0-INRIA-2004-exception GNAT-exception x11vnc-openssl-exception Qt-GPL-exception-1.0 Qt-LGPL-exception-1.1 Collector Status Name Date of Last Successful Run npm 8/15/2023 crates 8/25/2022 cpan 10/19/2023 clojars 10/19/2023 rubygems 10/19/2023 maven-google 10/13/2023 cran 10/21/2023 hackage 10/22/2023 packagist 10/22/2023 go 10/23/2023 pypi 10/16/2023 nuget gallery 10/15/2023 maven2-ibiblio 9/27/2023 github 10/23/2023 fedora-koji 10/20/2023 alpine 10/18/2023 gitlab 6/6/2023 debian 10/23/2023 Changes in Mini Update Released on 13-October-2023 This is a Mini PDL update release which is considerably smaller in size, containing data related to a specific component and a CVE. This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-50859 Addition of vulnerabilities "CVE-2023-38545" and "CVE-2023-38546" to curl/libcurl and related components Updates to Curl and Libcurl Components Added vulnerability information to the following Curl/Libcurl components: Component ID ComponentName url 372 curl https://sourceforge.net/projects/curl 63745 libcurl https://directory.fsf.org/wiki?title=Libcurl&oldid=416  5400074 libcurl http://curl.haxx.se/ 5406656 curl http://curl.haxx.se/  7466892 curl http://curl.haxx.se  12395199 curl-curl https://github.com/curl/curl 12960352 curl https://directory.fsf.org/wiki?title=Curl&oldid=17934 27213212 curl https://koji.fedoraproject.org/koji/packageinfo?packageID=curl 29960949 libcurl https://pkgs.alpinelinux.org/package/v3.18/main/x86_64/libcurl  29968624 curl https://pkgs.alpinelinux.org/package/v3.18/main/x86_64/curl 30362751 curl https://tracker.debian.org/pkg/curl 22012687 pycurl https://pypi.org/pypi/pycurl  4595372 pycurl-pycurl https://github.com/pycurl/pycurl  8180 pycurl https://sourceforge.net/projects/pycurl  21868341 pycurl https://directory.fsf.org/wiki?title=PycURL&oldid=2278  3518205 curl https://www.nuget.org/packages/curl 22329315 curl-vc140-static-32_64 https://www.nuget.org/packages/curl-vc140-static-32_64    Related to vulnerability CVEs: CVE - 2023-38545 (https://nvd.nist.gov/vuln/detail/CVE-2023-38545) CVE - 2023-38546 (https://nvd.nist.gov/vuln/detail/CVE-2023-38546) Issue ID Issue Summary SCA-50859 Addition of vulnerabilities "CVE-2023-38545" and "CVE-2023-38546" to curl/libcurl and related components Changes in Update Released on 14-September-2023 This update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-49924 Enhanced the SPDX collector to collect license exceptions from spdx.org and add to our data library. SCA-49081, SCA-49078 Added License detection capability and license evidence mechanism (licenses mentioned below) SCA-48734 Updated version for Npm component content-type (https://www.npmjs.com/package/content-type) and license information for nuget component castle.core (https://www.nuget.org/packages/Castle.Core) Enhanced License Detection Capability for Components License detection capability and license evidence mechanism for the following components was updated/added: i2p-gpl-java-exception u-boot-exception-2.0 Qwt-exception-1.0 Linux-syscall-note LLVM-exception LZMA-exception mif-exception OCCT-exception-1.0 OpenJDK-assembly-exception-1.0 openvpn-openssl-exception WxWindows-exception-3.1 DigiRule-FOSS-exception eCos-exception-2.0 Fawkes-Runtime-exception FLTK-exception< Font-exception-2.0 freertos-exception-2.0 GCC-exception-2.0 GCC-exception-3.1 gnu-javamail-exception Libtool Exception GPL-3.0-interface-exception GPL-3.0-linking-exception GPL-3.0-linking-source-exception GPL-CC-1.0 GStreamer-exception-2005 GStreamer-exception-2008 KiCad-libraries-exception LGPL-3.0-linking-exception libpri-OpenH323-exception SHL-2.0 SHL-2.1 SWI-exception Swift-exception Universal-FOSS-exception-1.0 vsftpd-openssl-exception Autoconf-exception-generic Autoconf-exception-macro Asterisk-exception cryptsetup-OpenSSL-exception Collector Status Name Date of Last Successful Run npm 8/15/2023 crates 8/25/2022 cpan 9/07/2023 clojars 9/07/2023 rubygems 9/07/2023 maven-google 9/08/2023 cran 9/09/2023 hackage 9/10/2023 packagist 9/10/2023 go 9/11/2023 pypi 9/11/2023 nuget gallery 9/07/2023 maven2-ibiblio 8/30/2023 github 8/25/2023 fedora-koji 9/11/2023 alpine 9/13/2023 gitlab 6/6/2023 debian 9/11/2023 Changes in Update Released on 10-August-2023 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-49244 Detection of OpenSC component. SCA-49077, SCA-49076, SCA-49074, SCA-49072 Added License detection capability and license evidence mechanism. SCA-48974 Alpine Zlib Missing Vulnerability Enhanced License Detection Capability for Components License detection capability and license evidence mechanism for the following components was updated/added: AdaCore-doc Bitstream-Charter Brian-Gladman-3-Clause BSD-4.3RENO BSD-4.3TAHOE CFITSIO checkmk CMU-Mach Cornell-Lossless-JPEG DRL-1.0 FSFULLRWD Graphics-Gems HPND-Markus-Kuhn HPND-export-US IEC-Code-Components-EULA IJG-short JPL-image Kazlib Knuth-CTAN libutil-David-Nugent Linux-syscall-note snprintf Symlinks TPDL TTWL w3m xlock Loop Martin-Birgmeier Minpack MIT-Wu mpi-permissive NICTA-1.0 OFFIS 389-exception Autoconf-exception-2.0 Autoconf-exception-3.0 Bison-exception-2.2 Bootloader-exception Classpath-exception-2.0 CLISP-exception-2.0 New Component Detection Rules OpenSC Addition of Missing Vulnerability Mappings Missing vulnerability mappings for the following components were added: Zlib (Alpine) Collector Status Name Date of Last Successful Run npm 8/7/2023 crates 8/25/2022 cpan 8/3/2023 clojars 8/3/2023 rubygems 8/3/2023 maven-google 8/4/2023 cran 8/5/2023 hackage 8/6/2023 packagist 8/6/2023 go 8/7/2023 pypi 7/31/2023 nuget gallery 8/1/2023 maven2-ibiblio 6/14/2023 github 7/14/2023 fedora-koji 8/8/2023 alpine 8/2/2023 gitlab 6/6/2023 debian 8/7/2023 Changes in Update Released on 23-June-2023 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-44211 Enhancements for License text extraction to improve the Third Party Notices text reports SCA-48496 Fixed the false positive vulnerability CVE-2017-15288 for scala-java8-compat_2.12 SCA-48430 Updated vulnerability information for 7-zip component SCA-44156 License cleanup for Bitstream license in our data library Enhanced License Detection Capability for Components License detection capability and license evidence mechanism for the following components was updated/added: Apache-2.0 Apache-1.0 Nethack General Public License Netizen Open Source License Nokia Open Source License Non-Profit Open Software License 3.0 OCLC Research Public License 2.0 Open Data Commons Open Database License v1.0 Open Data Commons Public Domain Dedication & License 1.0 Open Group Test Suite License Open Public License v1.0 OpenSSL License New Component Detection Rules Lua Linux Kernel Collector Status Name Date of Last Successful Run npm 6/19/2023 crates 8/25/2022 cpan 6/22/2023 clojars 6/15/2023 rubygems 6/15/2023 maven-google 6/15/2023 cran 6/17/2023 hackage 6/18/2023 packagist 6/18/2023 go 6/21/2023 pypi 2/13/2023 nuget gallery 6/1/2023 maven2-ibiblio 6/14/2023 github 6/3/2023 fedora-koji 6/21/2023 alpine 6/21/2023 gitlab 6/6/2023 debian 6/19/2023 Changes in Update Released on 31-May-2023 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-41334 Addition of Debian Packages Collection to our list of forge collections SCA-47928 Extracting License Text from .py files SCA-46100 Adding the missing priority to licenses and updating the incorrect ones in data library SCA-47100 Updated vulnerabilities and versiosn for openssh component Enhanced License Detection Capability for Components License detection capability and license evidence mechanism for the following components was updated/added: libpng License Lucent Public License Version 1.0 Lucent Public License v1.02 Microsoft Public License Microsoft Reciprocal License The MirOS Licence Motosoto License Eurosym License Fair License Frameworx Open License 1.0 FreeBSD Documentation License Freetype Project License gSOAP Public License v1.3b Historical Permission Notice and Disclaimer IBM Public License v1.0 iMatix Standard Function Library Agreement Imlib2 License Collector Status Name Date of Last Successful Run npm 1/31/2023 crates 8/25/2022 cpan 5/25/2023 clojars 5/25/2023 rubygems 5/25/2023 maven-google 5/26/2023 cran 5/27/2023 hackage 5/28/2023 packagist 5/28/2023 go 5/29/2023 pypi 2/13/2023 nuget gallery 4/6/2023 maven2-ibiblio 1/18/2023 github 5/29/2023 fedora-koji 5/25/2023 alpine 5/4/2023 gitlab 5/30/2023 debian 5/4/2023 Changes in Update Released on 04-May-2023 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-47510 Enhancement to Nuget Collector to extract Notices Text from .cpp and .h files. SCA-47790 Updated license mappings, license evidence and license detection capabilities for iText Commercial License related to the component itext7. Collector Status Name Date of Last Successful Run npm 1/31/2023 crates 8/25/2022 cpan 4/6/2023 clojars 2/9/2023 rubygems 4/6/2023 maven-google 4/7/2023 cran 4/8/2023 hackage 4/9/2023 packagist 2/13/2023 go 4/10/2023 pypi 2/13/2023 nuget gallery 4/6/2023 maven2-ibiblio 1/18/2023 github 2/14/2023 fedora-koji 2/13/2023 alpine 4/5/2023 gitlab 11/19/2022 Changes in Update Released on 17-April-2023 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-44500 Integration of PURL to collector - Github SCA-46813 Enhancement to Npmjs to extract Notices Text from .mkd file. SCA-47062 Updated vulnerabilities for the component Xstream 1.4.19. SCA-47493 Fixed the false positive license evidences related to Baekmuk License Enhanced License Detection Capability for Components License detection capability and license evidence mechanism for the following components was updated/added: Clarified Artistic License Code Project Open License 1.02 Common Development and Distribution License 1.0 Common Development and Distribution License 1.1 Common Public Attribution License 1.0 Common Public License 1.0 Computer Associates Trusted Open Source License 1.1 Condor Public License v1.1 LaTeX Project Public License v1.0 LaTeX Project Public License v1.1 LaTeX Project Public License v1.2 LaTeX Project Public License v1.3a LaTeX Project Public License v1.3c New/Update Component Requests microsoft-sql-server-2017-reporting-services microsoft-sql-server-2019-reporting-services microsoft-sql-server-2022-reporting-services Windows 10 SDK Collector Status Name Date of Last Successful Run crates 8/25/2022 gitlab 11/19/2022 maven2-ibiblio 01/10/2022 go 04/10/2023 cpan 04/06/2023 fedora-koji 02/13/2023 clojars 02/09/2023 rubygems 04/06/2023 maven-google 04/07/2023 cran 04/08/2023 hackage 04/09/2023 packagist 02/05/2023 npm 1/31/2023 nuget gallery 04/06/2023 alpine 04/05/2023 pypi 02/13/2023 github 02/14/2023 Changes in Update Released on 24-March-2023 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-44498, SCA-44503, SCA-45457 Integration of PURL to Alpine, Rubygems, Go in the data library SCA-46214 Generic Mapper is an addition to our vulnerability mappers . This is an enhancement to the existing NPMJS mapper to include Maven and Packagist and make it a generic one. Enhanced License Detection Capability for Components License detection capability and license evidence mechanism for the following components was updated/added: 3dfx Glide License Academic Free License v1.1 Academic Free License v1.2 Academic Free License v2.0 Academic Free License v2.1 Academic Free License v3.0 Adaptive Public License 1.0 Adobe Systems Incorporated Source Code License Agreement Giftware License Adobe Glyph List License Apple Public Source License 1.0 Apple Public Source License 1.1 Apple Public Source License 1.2 Apple Public Source License 2.0 Artistic License 1.0 Artistic License 2.0 Beerware License eCos license version 2.0 Educational Community License v1.0 Educational Community License v2.0 Educational Community License v2.0 Attribution Assurance License Apache License 1.0 Apache License 1.1 Apache License 2.0 Eiffel Forum License v1.0 Eiffel Forum License v2.0 Amazon Digital Services License ANTLR Software Rights Notice ANTLR Software Rights Notice with license fallback Adobe Postscript AFM License Collector Status Name Date of Last Successful Run npm 1/31/2023 crates 8/25/2022 cpan 3/23/2023 clojars 2/9/2023 rubygems 3/23/2023 maven-google 2/10/2023 cran 3/18/2023 hackage 2/12/2023 packagist 2/5/2023 go 3/24/2023 pypi 2/13/2023 nuget gallery 3/16/2023 maven2-ibiblio 1/18/2023 github 2/14/2023 fedora-koji 2/13/2023 alpine 3/22/2023 gitlab 11/19/2022 Changes in Update Released on 10-March-2023 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-44820 NPM Notices Text: Fixing the Missing release_license_text mappings for Npm components SCA-46203, SCA-44502 Integration of PURL to the collectors Npmjs and Nuget SCA-47061 Addition of cocoapods forge to our data library SCA-46161, SCA-46144, SCA-42593, SCA-46477 Fixed false positive vulnerabilities for components like android-json, prometheus_client 0.15.0, jqueryui, Microsoft Reportviewer and Microsoft vcruntime etc. Enhanced License Detection Capability for Components License detection capability and license evidence mechanism for the following components was updated/added: Sendmail SISSL SISSL-1.2 SMLNJ SMPPL SNIA Spencer-86 Spencer-94 Spencer-99 TCL TCP-wrappers TORQUE-1.1 TOSL u-boot-exception-2.0 Unicode-DFS-2015 Unicode-DFS-2016 Unicode-TOU UPL-1.0 VOSTROM W3C-20150513 W3C-19980720 Wsuipa WTFPL X11 Xerox Xpp XSkat Zed Zimbra-1.4 Zimbra-1.3 zlib-acknowledgement zlib UCL-1.0 SSPL-1.0 SHL-0.5 SHL-0.51 Sendmail-8.23 PSF-2.0 TAPR-OHL-1.0 PolyForm-Small-Business-1.0.0 PolyForm-Noncommercial-1.0.0 Parity-7.0.0 Parity-6.0.0 OGL-UK-1.0 OGL-UK-2.0 OGL-UK-3.0 OGL-Canada-2.0 OGDL-Taiwan-1.0 TU-Berlin-1.0 TU-Berlin-2.0 SSH-OpenSSH SSH-short Collector Status Name Date of Last Successful Run npm 1/31/2023 crates 8/25/2022 cpan 2/9/2023 clojars 2/9/2023 rubygems 2/10/2023 maven-google 2/10/2023 cran 2/11/2023 hackage 2/12/2023 packagist 2/13/2023 go 2/14/2023 pypi 2/15/2023 nuget gallery 2/15/2023 maven2-ibiblio 1/18/2023 github 2/15/2023 fedora-koji 2/15/2023 alpine 2/15/2023 gitlab 11/19/2022 Changes in Update Released on 24-February-2023 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-46545 Update License URL of OpenPBS License v2.3 in the data library SCA-44499 Integration of Purl to Cran collector Collector Status Name Date of Last Successful Run gitlab 11/19/2022 npm 1/31/2023 crates 8/25/2022 cpan 2/9/2023 clojars 2/9/2023 rubygems 2/10/2023 maven-google 2/10/2023 cran 2/11/2023 hackage 2/12/2023 packagist 2/13/2023 go 2/14/2023 alpine 2/15/2023 fedora-koji 2/15/2023 pypi 2/15/2023 github 2/15/2023 nuget gallery 2/15/2023 maven2-ibiblio 1/18/2023 Changes in Update Released on 20-February-2023 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Updates to OpenSSL Component Added vulnerability information to the following openSSL components: openssl(id: 58316) - https://www.openssl.org openssl-openssl (id: 416271) - https://github.com/openssl/openssl openssl (id: 27181269) - https://koji.fedoraproject.org/koji/packageinfo?packageID=openssl Related to Vulnerability CVEs: CVE-2023-0286 (https://nvd.nist.gov/vuln/detail/CVE-2023-0286) CVE-2022-4304 (https://nvd.nist.gov/vuln/detail/CVE-2022-4304) CVE-2023-0215 (https://nvd.nist.gov/vuln/detail/CVE-2023-0215) CVE-2022-4450 (https://nvd.nist.gov/vuln/detail/CVE-2022-4450) CVE-2023-0216 (https://nvd.nist.gov/vuln/detail/CVE-2023-0216) CVE-2023-0217 (https://nvd.nist.gov/vuln/detail/CVE-2023-0217) CVE-2023-0401 (https://nvd.nist.gov/vuln/detail/CVE-2023-0401)   Issue ID Issue Summary SCA-45980 Review and add the license priority for "commercial license" in licenses table Enhanced License Detection Capability for Components License detection capability and license evidence mechanism for the following components was updated/added: PostgreSQL psfrag psutils Qhull QPL-1.0 Rdisc RSA-MD Saxpath SCEA New/Update Component Requests krig-parallax inuitcss-generic.normalize Collector Status Name Date of Last Successful Run gitlab 11/19/2022 maven2-ibiblio 1/18/2023 alpine 2/8/2023 npm 1/31/2023 crates 8/25/2022 cpan 2/9/2023 clojars 2/9/2023 rubygems 2/10/2023 maven-google 2/10/2023 cran 2/11/2023 hackage 2/12/2023 fedora-koji 2/12/2023 packagist 2/13/2023 go 2/14/2023 pypi 2/15/2023 github 2/15/2023 nuget gallery 2/15/2023 Changes in Update Released on 30-January-2023 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-45333 SPDX Collector: Populate license_attribute values for all the licenses Enhanced License Detection Capability for Components License detection capability and license evidence mechanism for the following components was updated/added: NetCDF Newsletr NLOD-1.0 NLOD-2.0 NLPL OLDAP-1.1 OLDAP-1.2 OLDAP-1.3 OLDAP-1.4 OLDAP-2.0 OLDAP-2.0.1 OLDAP-2.1 OLDAP-2.2 OLDAP-2.2.1 OLDAP-2.2.2 OLDAP-2.4 OLDAP-2.5 OLDAP-2.6 OLDAP-2.7 Addition of Missing Vulnerability Mappings Missing vulnerability mappings for the following components were added: Tcexam Collector Status Name Date of Last Successful Run crates 8/25/2022 gitlab 11/19/2022 maven2-ibiblio 1/18/2023 go 1/23/2023 cpan 1/19/2023 fedora-koji 1/23/2023 clojars 1/19/2023 rubygems 1/20/2023 maven-google 1/20/2023 cran 1/21/2023 hackage 1/22/2023 packagist 1/23/2023 npm 1/23/2023 nuget gallery 1/18/2023 alpine 1/18/2023 pypi 1/18/2023 github 1/23/2023 Changes in Update Released on 12-January-2023 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-45214 Fixed missing vulnerability issue for component dom4j SCA-44820 Fixed the missing release_license_text mappings for Npm components Enhanced License Detection Capability for Components License detection capability and license evidence mechanism for the following components was updated/added: MITNFA mpich2 MTLL Mup NBPL-1.0 OSET-PL-2.1 Plexus Artistic-1.0 Artistic-1.0-cl8 Artistic-1.0-Perl Artistic-2.0 Noweb NRL Nunit OCCT-PL OML New/Update Component Requests Microsoft Capicom Microsoft Enterprise Library 5 Microsoft .NET Framework Collector Status Name Date of Last Successful Run crates 8/25/2022 gitlab 11/19/2022 maven2-ibiblio 12/22/2022 go 1/4/2023 cpan 1/5/2023 fedora-koji 1/5/2023 clojars 1/5/2023 rubygems 1/6/2023 maven-google 1/6/2023 cran 1/7/2023 hackage 1/8/2023 packagist 1/9/2023 npm 1/10/2023 nuget gallery 1/10/2023 alpine 1/11/2023 pypi 1/11/2023 github 1/11/2023 Changes in Update Released on 22-December-2022 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-44946 Nuget version level licenses - Support for new licenses SCA-44702 Update the Component versions for nvuillam-npm-groovy-lint Enhanced License Detection Capability for Components License detection capability and license evidence mechanism for the following components was updated/added: Leptonica LGPLLR libtiff LiLiQ-P-1.1 LiLiQ-Rplus-1.1 LiLiQ-R-1.1 MakeIndex Net-SNMP Collector Status Name Date of Last Successful Run crates 8/25/2022 gitlab 11/19/2022 cpan 12/15/2022 clojars 12/15/2022 rubygems 12/16/2022 maven-google 12/16/2022 cran 12/17/2022 hackage 12/18/2022 packagist 12/19/2022 alpine 12/21/2022 fedora-koji 12/21/2022 npm 12/21/2022 pypi 12/21/2022 nuget gallery 12/21/2022 go 12/22/2022 github 12/22/2022 maven2-ibiblio 12/22/2022 Changes in Update Released on 08-December-2022 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-44052 Added Spice Software License and detection rules. SCA-43599 Nuget Collector: Enhancement to collect version level licenses. SCA-44396 Invalid URL's in the description for some of the components. SCA-44439 Alpine Collector Enhancements - Version Level Date Enhancements. SCA-44438 Alpine Collector Enhancements - RepoURL Enhancements. Enhanced License Detection Capability for Components License detection capability and license evidence mechanism for the following components was updated/added: ICU ImageMagick Intel-ACPI Interbase-1.0 JasPer-2.0 LAL-1.2 LAL-1.3 GL2PS Glulxe Gnuplot FSFUL HaskellReport IBM-pibs Latex2e New/Update Component Requests None Collector Status Name Date of Last Successful Run crates 8/25/2022 npm 12/08/2022 pypi 10/18/2022 alpine 11/30/2022 gitlab 11/19/2022 cpan 12/08/2022 rubygems 12/08/2022 clojars 12/08/2022 github 12/07/2022 maven-google 12/02/2022 fedora-koji 12/07/2022 cran 12/03/2022 nuget gallery 12/01/2022 hackage 12/04/2022 packagist 12/04/2022 go 12/07/2022 maven2-ibiblio 11/28/2022 Changes in Update Released on 29-November-2022 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-44021 Addition of Go vulnerability mapper to the list of our automated vulnerability mappers SCA-44283 Added the license Microsoft .Net Compiler Platform Redistributable Packages Preview to the data library SCA-44290 Updated the invalid urls of few Go forge components like Alamofire/AlamofireImage, BoltsFramework/Bolts-Swift and bitstadium/hockeykit. SCA-44376 Updating license information for the components jquery (id: 3526090) SCA-44397, SCA-43635 Fixed false positive vulnerability for the components like system.threading.tasks nuget package and MySQL NPM module. Enhanced License Detection Capability for Components License detection capability and license evidence mechanism for the following components was updated/added: Qt-GPL-exception-1.0.txt SchemeReport.txt SWL.txt Universal-FOSS-exception-1.0.txt X11-distribute-modifications-variant.txt XSkat.txt CECILL-1.0 CECILL-1.1 CECILL-2.0 CECILL-2.1 CECILL-B CECILL-C MPL-1.0 MPL-1.1 MPL-2.0 MPL-2.0-no-copyleft-exception NPL-1.0 NPL-1.1 MIT License MIT-open-group X11 X11-distribute-modifications-variant XSkat SWL SchemeReport New/Update Component Requests XIPH Flac XORG XServer Collector Status Name Date of Last Successful Run crates 8/25/2022 npm 10/11/2022 pypi 10/18/2022 alpine 11/8/2022 gitlab 11/19/2022 cpan 11/24/2022 rubygems 11/24/2022 clojars 11/24/2022 github 11/24/2022 maven-google 11/25/2022 fedora-koji 11/26/2022 cran 11/26/2022 nuget gallery 11/26/2022 hackage 11/27/2022 packagist 11/28/2022 go 11/28/2022 maven2-ibiblio 11/28/2022 Changes in Update Released on 11-November-2022 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-44237 Addition of missing vulnerabilities for junit(componentId: 437385) SCA-44183 Addition of missing vulnerabilities for xercesimpl and spring-data-mongodb SCA-44075 Update license text for the license Microsoft .NET Library License SCA-44065 Fixing license evidences for net-tools component SCA-41333 Addition of Alpine forge to list of our forge data collection Enhanced License Detection Capability for Components License detection capability and license evidence mechanism for the following components was updated/added: mplus.txt MulanPSL-1.0.txt MulanPSL-2.0.txt NAIST-2003.txt NCGL-UK-2.0.txt NIST-PD-fallback.txt NIST-PD.txt NTP-0.txt O-UDA-1.0.txt ODC-By-1.0.txt OpenJDK-assembly-exception-1.0.txt OPUBL-1.0.txt MIT-0 MIT-CMU MIT-enna MIT-feh MIT-Modern-Variant.txt MIT-open-group.txt New/Update Component Requests Google Play Services Android android-support-library-v13 TrafficWatcher ata-project Telerik UI for ASP.NET MVC Components Microsoft.Data.SqlClient.SNI.runtime microsoft.aspnet.webapi.tracing Microsoft SQL Server Compact 3.5 Service Pack 2 Collector Status Name Date of Last Successful Run alpine 11/8/2022 crates 8/25/2022 npm 10/11/2022 pypi 10/18/2022 cran 10/22/2022 maven2-ibiblio 10/27/2022 clojars 11/3/2022 rubygems 11/3/2022 maven-google 11/4/2022 cpan 11/4/2022 nuget gallery 11/5/2022 hackage 11/6/2022 packagist 11/7/2022 go 11/9/2022 github 11/9/2022 gitlab 11/9/2022 fedora-koji 11/10/2022 Changes in Mini Update Released on 02-November-2022 This is a Mini PDL update release which is considerably smaller in size, containing data related to a specific component and a CVE. This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Updates to OpenSSL Component Added vulnerability information to the following openSSL components: openssl(id: 58316) - https://www.openssl.org openssl-openssl (id: 416271) - https://github.com/openssl/openssl openssl (id: 27181269) - https://koji.fedoraproject.org/koji/packageinfo?packageID=openssl Related to vulnerability CVEs: CVE - 2022-3786 (https://nvd.nist.gov/vuln/detail/CVE-2022-3786 ) CVE - 2022-3602 (https://nvd.nist.gov/vuln/detail/CVE-2022-3602 )   Issue ID Issue Summary SCA-44311 Addition of new vulnerabilities related to OpenSSL component Changes in Mini Update Released on 21-October-2022 This is a Mini PDL update release which is considerably smaller in size, containing data related to a specific component and a CVE. This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Updates to Apache Commons Text Component Added vulnerability information to the apache-commons-text component (https://github.com/apache/commons-text ) related to vulnerability cve CVE-2022-42889 (https://nvd.nist.gov/vuln/detail/CVE-2022-42889 ) Issue ID Issue Summary SCA-44223 Mapping new vulnerability CVE-2022-42889 to the component apache-commons-text Changes in Update Released on 18-October-2022 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-43662 Addition of latest versions for the component Akka SCA-43253 Fixing the version information for the component https://github.com/Sequel-Ace/Sequel-Ace. SCA-42544 Fixing false positive vulnerabilities for the component jquery UI Enhanced License Detection Capability for Components License detection capability and license evidence mechanism for the following components was updated/added: CERN-OHL-1.1.txt CERN-OHL-1.2.txt CERN-OHL-P-2.0.txt CERN-OHL-S-2.0.txt CERN-OHL-W-2.0.txt CC-BY-3.0-AT.txt CC-BY-3.0-DE.txt CC-BY-3.0-NL.txt CC-BY-NC-3.0-DE.txt CC-BY-NC-ND-3.0-DE.txt CC-BY-NC-SA-2.0-FR.txt CC-BY-NC-SA-3.0-DE.txt CC-BY-ND-3.0-DE.txt CC-BY-SA-2.1-JP.txt CC-BY-SA-3.0-AT.txt CC-BY-SA-3.0-DE.txt CDLA-Permissive-2.0.txt COIL-1.0.txt DL-DE-BY-2.0.txt FDK-AAC.txt Jam.txt Linux-man-pages-copyleft.txt KiCad-libraries-exception.txt New/Update Component Requests zyantific/zycore-c New Component Detection Rules aide/aide Collector Status Name Date of Last Successful Run gitlab 8/5/2022 crates 8/25/2022 hackage 10/9/2022 maven2-ibiblio 10/10/2022 npm 10/11/2022 pypi 10/12/2022 clojars 10/13/2022 cpan 10/13/2022 rubygems 10/13/2022 maven-google 10/14/2022 fedora-koji 10/14/2022 cran 10/15/2022 go 10/17/2022 github 10/17/2022 nuget gallery 10/17/2022 packagist 10/17/2022 Changes in Update Released on 23-September-2022 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-43521 Fixed false positives in license detection and license evidence mechanism for licenses like 0BSD, ISC and MIT. SCA-42852 Updated version information for NPMJS components like @aws-sdk/client-dynamodb and @aws-sdk/client-dynamodb-streams Addition of Missing Vulnerability Mappings Missing vulnerability mappings for the following components were added: atomic crypto-utils fedmsg fedora-arm-installer python-fedora sectool coolkey sssd anaconda newsx rpmdevtools cronie Collector Status Name Date of Last Successful Run gitlab 8/5/2022 crates 8/25/2022 clojars 9/15/2022 maven2-ibiblio 9/15/2022 cpan 9/15/2022 rubygems 9/15/2022 maven-google 9/16/2022 cran 9/17/2022 nuget gallery 9/18/2022 hackage 9/18/2022 packagist 9/18/2022 npm 9/20/2022 go 9/21/2022 pypi 9/21/2022 github 9/21/2022 fedora-koji 9/21/2022 Changes in Mini Update Released on 13-September-2022 This is a Mini PDL update release which is considerably smaller in size, containing data related to a specific component and a CVE. This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Updates to commons_configuration2 Component Added vulnerability information to the commons_configuration2 maven component (https://mvnrepository.com/artifact/org.apache.commons/commons-configuration2 ) related to vulnerability cves, CVE-2022-33980 (https://nvd.nist.gov/vuln/detail/CVE-2022-33980 ) CVE-2020-1953 (https://nvd.nist.gov/vuln/detail/CVE-2020-1953) Issue ID Issue Summary SCA-43592 Missing vulnerability CVE-2022-33980 for the component commons_configuration2 SCA-43114 Updating component information for components like entityframework, mailbee.net and microsoft.sqlserver.sqlmanagementobjects. Changes in Update Released on 09-September-2022 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-43115 Addition of new licenses to reflib like AfterLogic Software License Agreement , Entity Framework 5.0 For Microsoft Windows Operating System and Microsoft SQL SERVER 2017 Shared Management Objects. Enhanced License Detection Capability for Components License detection capability and license evidence mechanism for the following components was updated/added: EPICS.txt etalab-2.0.txt copyleft-next-0.3.0.txt copyleft-next-0.3.1.txt GD.txt GLWTPL.txt Hippocratic-2.1.txt HPND-sell-variant.txt HTMLTIDY.txt JPNIC.txt libpng-2.0.txt libselinux-1.0.txt Linux-OpenIB.txt Collector Status < Name Date of Last Successful Run gitlab 8/5/2022 maven2-ibiblio 8/22/2022 clojars 9/1/2022 crates 8/25/2022 cpan 9/1/2022 rubygems 9/1/2022 maven-google 9/2/2022 hackage 9/4/2022 nuget gallery 9/5/2022 packagist 9/5/2022 go 9/6/2022 pypi 9/6/2022 cran 9/7/2022 github 9/7/2022 fedora-koji 9/7/2022 npm 9/7/2022 Changes in Update Released on 29-August-2022 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-42217 BSD 3-Clause license text not detected SCA-43300 Fixed license detection and license evidence mechanism for dvipdfm license to avoid false positives Enhanced License Detection Capability for Components License detection capability and license evidence mechanism for the following components was updated/added: 0BSD BSD-1-Clause BSD-3-Clause-Modification BSD-3-Clause-No-Military-License BSD-3-Clause-Open-MPI.txt New/Update Component Requests jridgewell/gen-mapping jridgewell/set-array jridgewell/sourcemap-codec CPUID CPU-Z get-image-file-type-programmatically-in-swift swift-5-4-hex-to-nscolor SNMP++ API supports-preserve-symlinks-flag Addition of Missing Vulnerability Mappings Missing vulnerability mappings for the following components were added: bwm-ng mattermost_server snipe-it cgal caldera-forms Collector Status < Name Date of Last Successful Run fedora-koji 8/2/2022 gitlab 8/5/2022 cpan 8/18/2022 rubygems 8/18/2022 maven-google 8/19/2022 cran 8/20/2022 nuget gallery 8/21/2022 hackage 8/21/2022 maven2-ibiblio 8/22/2022 packagist 8/22/2022 go 8/23/2022 github 8/24/2022 crates 8/24/2022 npm 8/24/2022 clojars 8/25/2022 pypi 8/26/2022 Changes in Update Released on 12-August-2022 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-42725 Fixed False positive vulnerabilities related to SQL Lite SCA-31133 Addition of Nuget vulnerability mapper to the list of vulnerability mappers SCA-42767 Updated license information for the components datatables-fixedcolumns and datatables-tabletools in our data library SCA-43007 GNU Library General Public License v2 or later (LGPL-2.0-or-later) License Evidence is not being detected for gettext.c file Enhanced License Detection Capability for Components License detection capability and license evidence mechanism for the following components was updated/added: LGPL-2.0-or-later SPDX licenses with additional clauses App-s2p Baekmuk blessing BlueOak-1.0.0 C-UDA-1.0 New/Update Component Requests FixedColumns Autofill Tabletools New Component Detection Rules Tabletools.js and Tabletools.min.js FixedColumns.js and FixedColumns.min.js Collector Status Name Date of Last Successful Run maven2-ibiblio 7/28/2022 fedora-koji 8/2/2022 clojars 8/4/2022 cpan 8/4/2022 rubygems 8/4/2022 maven-google 8/5/2022 gitlab 8/5/2022 cran 8/6/2022 nuget gallery 8/6/2022 hackage 8/7/2022 packagist 8/8/2022 go 8/9/2022 pypi 8/10/2022 github 8/10/2022 crates 8/10/2022 npm 8/10/2022 Changes in Update Released on 18-July-2022 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: GPL-AGPL-LGPL License Cleanup There are three issues we are addressing as part of this GPL-AGPL-LGPL License data cleanup project: Example: jquery 6.2.0 (GPL-1.0) Here GPL-1.0 is the license with the short name associated with the component jquery. 1. Short Name Change When a particular license short name is changed and released as part of an electronic update, the short name is not automatically propagated to the inventory items with that selected license. For example, when we change the short name of license id 343 from "GPL-1.0” to “GPL-1.0-only” in an electronic update, the existing inventory items names with that selected license will not be updated. 2. Component to License Mapping Change When the component to license mapping is changed, let’s say jquery is mapped with "Apache-2.0" in the electronic update, then this new mapping wouldn’t be propagated to existing inventory items. This results in inconsistency between the license mapping, existing inventory items, and future inventory items using the new license mapping. 3. Duplicate entry cleanup After running the cleanup scripts, there are possibility of having duplicate entries for the licenses which had mappings in component table and versions table. In our case, we have mappings for 3 licenses, i.e LGPL-2.1-or-later(License_id=704), AGPL-1.0-only(License_id=1654) and AGPL-3.0-only(License_id=229). Note: Around 16 GPL-AGPL-LGPL related licenses are updated and workaround has been provided for necessary scenarios. Please refer the article on GPL-LGPL-AGPL License Cleanup for detailed information and workarounds: https://community.flexera.com/t5/Code-Insight-Knowledge-Base/Code-Insight-GPL-LGPL-AGPL-License-Data-Cleanup-Project/ta-p/240679 Issue ID Issue Summary SCA-40135 Updating the GPL related licenses in the data library according to SPDX SCA-40180, SCA-41672 Preparation of scripts related to changes made to GPL, LGPL and AGPL licenses. SCA-42149 Updated version information for the component minimist. Enhanced License Detection Capability for Components License detection capability and license evidence mechanism for GPL-LGPL-AGPL related licenses (part of GPL-AGPL-LGPL license cleanup activity) was updated/added for the following components: AGPL-1.0-only AGPL-1.0-or-later AGPL-3.0-only AGPL-3.0-or-later GPL-1.0-only GPL-1.0-or-later GPL-2.0-only GPL-2.0-or-later GPL-3.0-only GPL-3.0-or-later LGPL-2.0-only LGPL-2.0-or-later LGPL-2.1-only LGPL-2.1-or-later LGPL-3.0-only LGPL-3.0-or-later Collector Status Name Date of Last Successful Run gitlab 5/13/2022 maven2-ibiblio 6/30/2022 nuget gallery 7/4/2022 clojars 7/7/2022 cpan 7/7/2022 rubygems 7/7/2022 cran 7/9/2022 maven-google 7/9/2022 hackage 7/10/2022 packagist 7/11/2022 go 7/12/2022 pypi 7/13/2022 github 7/13/2022 crates 7/13/2022 fedora-koji 7/13/2022 npm 1/30/2022 Changes in Update Released on 07-July-2022 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-42146 Addition of the license EDL 1.0 to PDL. Collector Status Name Date of Last Successful Run gitlab 5/13/2022 npm 1/30/2022 pypi 6/29/2022 crates 6/29/2022 clojars 6/30/2022 maven2-ibiblio 6/30/2022 cpan 6/30/2022 rubygems 6/30/2022 maven-google 7/1/2022 go 7/1/2022 cran 7/2/2022 fedora-koji 7/2/2022 hackage 7/3/2022 github 7/4/2022 nuget gallery 7/4/2022 packagist 7/4/2022 Changes in Mini Update Released on 28-June-2022 This is a Mini PDL update release which is considerably smaller in size, containing data related to a specific component and a CVE. This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Updates to jenkins Component Added the latest vulnerability information for jenkins component (Component id: 191327) related to vulnerability CVE-2022-34175 (https://nvd.nist.gov/vuln/detail/CVE-2022-34175) Issue ID Issue Summary SCA-39993 Miniature PDL package creation and processing in product Changes in Update Released on 15-June-2022 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-40437 Addition of Go Collector to the list of collectors Collected Batch 1- 50000 packages. SCA-42001 Fixed license information for the component 'setuptools'. SCA-42030 Fixed license information for the component 'react-leaflet'. SCA-42040 Fixed license information for the component 'pillow'. SCA-42108 Updated component-version information for the component 'url-parse'. Collector Status Name Date of Last Successful Run gitlab 5/13/2022 crates 5/28/2022 npm 1/30/2022 pypi 6/8/2022 clojars 6/9/2022 cpan 6/9/2022 rubygems 6/10/2022 cran 6/11/2022 maven2-ibiblio 6/11/2022 maven-google 6/11/2022 hackage 6/12/2022 nuget gallery 6/12/2022 packagist 6/13/2022 github 6/14/2022 fedora-koji 6/14/2022 go 6/14/2022 Changes in Update Released on 13-May-2022 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-41730 Addition of vulnerability mappings to zlib component (CVE-2018-25032). Collector Status Name Date of Last Successful Run hackage 5/8/2022 npm 1/30/2022 crates 4/26/2022 clojars 5/5/2022 cpan 5/5/2022 rubygems 5/6/2022 maven-google 5/6/2022 cran 5/7/2022 nuget gallery 5/8/2022 maven2-ibiblio 5/9/2022 packagist 5/10/2022 github 5/11/2022 gitlab 5/11/2022 pypi 5/11/2022 fedora-koji 5/11/2022 Changes in Update Released on 28-Apr-2022 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-41430 Addition and Updating components and license information for components like JakartaFtpWrapper, nsftools.com Standard Disclaimer etc. SCA-41268 Fixed the incorrect license mapping for hibernate-core component. Addition of License Detection Capability and License Evidence Mechanism License detection capability and license evidence mechanism was added for the following licenses: FreeImage freertos-exception-2.0 FSFAP FSFULLR Collector Status Name Date of Last Successful Run hackage 4/24/2022 npm 1/30/2022 maven2-ibiblio 4/12/2022 cpan 4/14/2022 fedora-koji 4/19/2022 rubygems 4/21/2022 cran 4/22/2022 maven-google 4/22/2022 nuget gallery 4/23/2022 crates 4/26/2022 clojars 4/27/2022 github 4/27/2022 packagist 4/27/2022 gitlab 4/27/2022 pypi 4/27/2022 Changes in Update Released on 13-Apr-2022 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Updates to spring-framework Component Added vulnerability information for spring-framework component ( CVE-2022-22950 and CVE-2022-22965). Issue ID Issue Summary SCA-41311 Fix incorrect vulnerability mapping to the component POI. SCA-41305 Addition of vulnerabilities to xmlbeans 2.6.0 component. SCA-41141 Enhancement to collect missing licenses for Pypi components. SCA-40144 Addition of Components from https://gitlab.xiph.org/xiph Changes in Update Released on 25-Mar-2022 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-40941 Update license information for npm component- pixrem. SCA-40777 Map Fair license to "Assert" component. SCA-40872 License information for jquery 1.12.4 - MIT or GPL-2.0 license? Addition of Missing Vulnerability Mappings Missing vulnerability mappings for the following components were added: jhuisi-charm pear-archive_tar zopefoundation-accesscontrol nextcloud-richdocuments pear-archive_tar 3xxx-engineercms isomorphic-git-isomorphic-git justarchinet-archisteamfarm matanui159-replaysorcery xmldom-xmldom util-linux-util-linux Addition of License Detection Capability and License Evidence Mechanism License detection capability and license evidence mechanism was added for the following licenses: dvipdfm mif-exception eCos-exception-2.0 eGenix EPL-2.0 EUPL-1.2 FLTK-exception Collector Status < Name Date of Last Successful Run packagist 2/27/2022 maven2-ibiblio 3/7/2022 npm 1/30/2022 gitlab 3/8/2022 clojars 3/16/2022 rubygems 3/17/2022 cpan 3/17/2022 cran 3/18/2022 maven-google 3/18/2022 nuget gallery 3/19/2022 hackage 3/20/2022 github 3/22/2022 crates 3/23/2022 pypi 3/23/2022 fedora-koji 3/23/2022 Changes in Update Released on 14-Mar-2022 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-32308 Pypi forge vulnerability Mapper is an addition to our list of automated vulnerability mappers mechanism. SCA-40984 Fix false positive vulnerabilities for Mono.Cecil Addition of Missing Vulnerability Mappings Missing vulnerability mappings for the following components were added: glances video.js nukeviet lavalite-cms evolution-cms-evolution flatpress yzmcms elfinder.aspnet Collector Status Name Date of Last Successful Run packagist 2/27/2022 cran 3/4/2022 maven-google 3/5/2022 hackage 3/6/2022 maven2-ibiblio 3/7/2022 nuget gallery 3/7/2022 crates 3/8/2022 npm 1/30/2022 gitlab 3/8/2022 clojars 3/9/2022 pypi 3/9/2022 rubygems 3/10/2022 github 3/10/2022 cpan 3/10/2022 fedora-koji 3/10/2022 Changes in Update Released on 24-Feb-2022 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-40339 Fixed license mappings for hangfire.core nuget component . SCA-40332 Fixed license mappings for microsoft.net.workload.emscripten.manifest nuget component SCA-40215 Fixed false positive CVE for system.threading.tasks.extensions 4.5.4 component Addition of Missing Vulnerability Mappings Missing vulnerability mappings for the following components were added: stuk-jszip firefly-iii pjsip-pjproject oisf-suricata gitlogplus velociraptor contour stmicroelectronics-stm32cubeh7 mod_auth_openidc New/Update Component Requests Microsoft Infographic Designer Microsoft Advance Card Collector Status Name Date of Last Successful Run npm 12/3/2021 gitlab 1/13/2022 maven2-ibiblio 2/15/2022 rubygems 2/17/2022 cran 2/18/2022 maven-google 2/18/2022 nuget gallery 2/19/2022 hackage 2/20/2022 packagist 2/20/2022 crates 2/22/2022 clojars 2/23/2022 github 2/23/2022 pypi 2/23/2022 fedora-koji 2/23/2022 cpan 2/24/2022 Changes in Update Released on 10-Feb-2022 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-40131 Fixing false positive component_cpe mappings SCA-40004 Fix for "Unable to load or add component version libssh 0.7.3" SCA-39146 GPL 3.0 or later and GPL 3.0 Only - both licenses are reported when the source clearly has only one SPDX ID SCA-38096 Fixing redirecting urls for clojars collector Addition of Missing Vulnerability Mappings Missing vulnerability mappings for the following components were added: mosquitto lwip folly matio libheif manageiq redis Addition of License Detection Capability and License Evidence Mechanism License detection capability and license evidence mechanism was added for the following licenses: D-FSL-1.0 diffmark DigiRule-FOSS-exception Dotseqn DSDP New/Update Component Requests windowsazure.servicebus microsoft.azure.servicebus.eventprocessorhost mesa sharpmimetools Changes in Update Released on 28-Jan-2022 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: MIT License Cleanup There are two licenses in Code Insight for MIT – MIT License and MIT-Style License. While most licenses declared by open-source developers fall into the MIT License, the MIT-Style License is more of a template license consisting of various ways of how MIT license can be declared. We noticed that the license mapping to majority of components are mapped incorrectly to the MIT-Style License. This is being resolved via an electronic update where the mappings are corrected and for existing projects that need mappings change a script will be provided. Note: Please refer the article on MIT License Cleanup for detailed information and workarounds: https://community.flexera.com/t5/Code-Insight-Knowledge-Base/Code-Insight-MIT-License-Data-Cleanup-Project/ta-p/214451/jump-to/first-unread-message Known issue: A script "MIT-CleanupQueries.sql" is provided which has to be run after the PDL update. This script updates the license names and the incorrect license mappings in the existing system-generated inventories with the updated data changes as mentioned above. There is a known issue for a particular set of inventories which have comma separated license names. This is observed in the inventories generated by AutoWriteup. Ex: jQuery (MIT, MIT License) In this case, the script provided to update the existing inventory names would not work. This causes a duplicate inventory on rescan. The detailed issue description and workaround are provided in the jira: https://jira.flexera.com/browse/SCA-40194 Issue ID Issue Summary SCA-39812 Map vulnerabilities for gnu components SCA-39748 Update version information for pilotmoon-scroll-reverser SCA-38553 License detection XML detects both MIT and MIT-Style as evidence for MIT License SCA-28851 MIT License cleanup: Enhancement to collector level license mappings mechanism to update invalid mappings for MIT and MIT-Style licenses. SCA-28766 Perform entire sequence of MIT License Cleanup-License short_name changes and license remapping at component and version level. Addition of Missing Vulnerability Mappings Missing vulnerability mappings for the following components were added: Itop Mupdf Anchrome Addition of License Detection Capability and License Evidence Mechanism License detection capability and license evidence mechanism was added for the following licenses: CNRI-Jython CNRI-Python CNRI-Python-GPL-Compatible Crossword CrystalStacker PSF-2.0 Python-2.0 Changes in Update Released on 13-Jan-2022 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Updates to log4j Component Added component detection capabilities to identify log4j components in "ivy.xml". Issue ID Issue Summary SCA-39360 Fixed the license evidence mechanism to eliminate false positive findings. SCA-39579 Addition of gnu vulnerable components to the data library SCA-38160 GNU vulnerability Mapper is an addition to our list of automated vulnerability mappers mechanism. SCA-38159 Jenkins vulnerability Mapper is an addition to our list of automated vulnerability mappers mechanism. < Addition of Missing Vulnerability Mappings Missing vulnerability mappings for the following components were added: xml_database graphhopper Openvswitch-ovs osgeo-gdal unicorn-engine-unicorn open62541-open62541 racket-racket mozilla-geckodriver gnuaspell-aspell libsndfile-libsndfile libarchive matio Addition of License Detection Capability and License Evidence Mechanism License detection capability and license evidence mechanism was added for the following licenses: CC-BY-NC-ND-1.0 CC-BY-NC-ND-4.0 CC-BY-NC-SA-4.0 CC-BY-NC-4.0 CC-BY-ND-4.0 CC-BY-SA-4.0 CC-BY-4.0 Cube curl CDLA-Permissive-1.0 CDLA-Sharing-1.0 CECILL-2.1 CLISP-exception-2.0 New Component Requests Windows SDK for Windows Server 2008 and .NET Framework 3.5 Strictly Software htmlencode Changes in Update Released on 23-Dec-2021 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Updates to Apache log4j2 Component Updated vulnerability information for log4j2 component (CVE-2021-44228,CVE-2021-45046,CVE-2021-4104). Updated versions for the log4j2 components. Issue ID Issue Summary SCA-38791 Updated missing vulnerabilities for nuget top 100 component SCA-35846 Enhancements to Nuget Collector for Version-Level License Collection Addition of Missing Vulnerability Mappings Missing vulnerability mappings for the following components were added: consul uri.js chatwoot bat cgm-remote-monitor connect muwire containerd discourse micronaut gatsby-source-wordpress venus_os Updated Components List world-clock-and-the-timezoneinformation-class Changes in Update Released on 16-Dec-2021 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Updates to Apache log4j2 Component Updated versions for the log4j2 components from different forges like github, maven and fedora. Updated vulnerabilities for log4j2 component (CVE-2021-44228). Issue ID Issue Summary SCA-38864 Analysis & update license for jaxen component. SCA-38669 AutoWriteup Rules: Map licenses to AutoWriteup Rules with no licenses. SCA-38521 Increasing Component CPE mappings in Data Library. SCA-38479 Updated version information for 27208706. SCA-38791 Update missing license for top 100 Nuget components. Addition of Missing Vulnerability Mappings Missing vulnerability mappings for the following components were added: falco manageengine_admanager_plus esp32_firmware libvips-libvips junos rancher sheetjs etherpad stealth Addition of License Detection Capability and License Evidence Mechanism License detection capability and license evidence mechanism was added for the following licenses: bzip2-1.0 bzip2-1.0.5 Caldera BSD-3-Clause-Attribution BSD-3-Clause-Clear BSD-3-Clause-LBNL BSD-3-Clause-No-Nuclear-License-2014 BSD-3-Clause-No-Nuclear-License BSD-3-Clause-No-Nuclear-Warranty BSD-4-Clause-UC BSD-Protection BSD-1-Clause BSD-Source-Code BSD-2-Clause-Patent BSD-2-Clause-NetBSD BSD-2-Clause-FreeBSD Update Release on 26-Nov-2021 has been postponed This update has been postponed to 9 Dec 2021 due to some technical issues. Changes in Update Released on 11-Nov-2021 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-38476 Add component GenericDataExchangeFrameworkwithAJAX and ASP.NET Outlook-like Time Field to PDL library SCA-38352 Enhancement to license mapping mechanism for Nuget Collector based on License Expression provided by Nuget Rest API SCA-38223 Add missing vulnerability mappings to components like umeditor, thinkcmf, xuperchain, ok-file-formats, radare2-extras, polipo, gthumb. Changes in Update Released on 28-Oct-2021 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: < Issue ID Issue Summary SCA-38246 Add missing versions for openssl, net-snmp and system.data.sqlite components. SCA-38221 Add missing vulnerability mappings to components like varnish_cache, elfinder.net. core, ectouch, is-email, booking_core, wolfssl. SCA-37996 Invalid license for highcharts - npmjs component. SCA-37673 Added license evidence and detection capability for licenses like Bahyph, Barr, Borceux, BSD-1-Clause, BSD-2-Clause-FreeBSD, BSD-2-Clause-NetBSD, BSD-2-Clause-Patent, BSD-Source-Code etc. SCA-37671 Added license evidence and detection capability for licenses like 0BSD, 389-exception, Abstyles, Adobe-Glyph, Afmparse, AGPL-1.0, Aladdin, AMDPLPA, AML, AMPAS etc. SCA-37461 Add missing vulnerability mappings to components like delta, xo-server, putil-merge, harmonyos, ant etc. SCA-37459 Add missing vulnerability mappings to components like yop-poll, restsharp, event_streams, sshd, talk, nextcloud_mail, nextcloud, icinga etc. SCA-37348 Github Vulnerabilities mapped to Java components. Changes in Update Released on 18-Oct-2021 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-38185 Fixing invalid versions of lm_sensors. SCA-38030 Update reference to component_mapping.csv to new github.com from git.palamida.com in update service. SCA-37884 Missing vulnerabilities for Valeo. SCA-37758 Adding spdx-license-identifier to the license-detection.xml and license-finder.json. SCA-37658 Update license-names in the license evidence mechanism. SCA-37447 Add missing vulnerabilty mappings to components like retty, everything, brave, node.js, total.js, total4, prismatic. SCA-37442 Add missing vulnerabilty mappings to components like halo, pfsense, exiv2, caldera, jsish, moddable, mujs. SCA-38254 Add license evidence capability for licenses like LLVM-exception,APAFML,Artistic-1.0-cl8,Artistic-1.0-Perl. Changes in Update Released on 01-Oct-2021 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-37896 Validate and update Maven forge details in PDL library. SCA-37837 Add new component ms-intune-app-sdk-android and Microsoft Intune App Software Development Kit For iOS license. SCA-37651 Add Microsoft Windows Driver Kit For Windows 8.1 License and Updated versions for Microsoft windows driver kit. SCA-37604 Update manually maintained component versions. Please refer list below SCA-37376 Add the missing vulnerability mappings for components like cszcms, switch, fortimail, putty, emissary-ingress-emissary. SCA-29724 Enhance License detection for Nuget forge components. SCA-37544 Update versions and vulnerability mappings for oracle-jre component SCA-37449 Add CWEs to PDL library. SCA-38018 Update versions for Google Maven repository components. Updated Components List glibmm24 libsm wpa_supplicant cairo dmidecode chrony libxrandr libice networkmanager gobject-introspection glib-networking dnsmasq mesa elfutils dbus sudo libsoup libtalloc rpm-package-manager PowerTop libldb libxft openssl pygobject3 gnutls libx11 libnl3 tzdata alsa-lib atk libxcb binutils ethtool libfontenc Changes in Update Released on 13-Sep-2021 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-37290 Validate and update invalid versions for kong-insomnia component. SCA-36444 License Finder rules for OGC-1.0,OFL-1.1-RFN. SCA-35816 Addition of Gitlab forge to the list of forge collection. SCA-33593 Enhance license mapping capability for Nuget collector. SCA-31981 Add new non-spdx licenses like Parity Public Licence 3.0,Server Side Public License,Yoctopuce-License,Prosperity Public License,MS-ASP.NET-Web-Pages-2 License,MS-ASP.NET-WOF License to the library . SCA-37371 Mapping the missing vulnerabilty-CVE's for various components like Tinydtls, Misp, Libxml2, Vapor, Grpc_swift, Linuxptp. New Component Detection Rules liblouis Changes in Update Released on 30-Aug-2021 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-35866 Grafana License changed from Apache License 2.0 to AGPL 3.0 from version 8.0. SCA-35970 Data - Vulnerability Dates update. "Publication Date" and 'Modified Date". SCA-36442 License-Finder.json rules for PSF-2.0,Parity-7.0.0,OGL-UK-3.0 etc. SCA-36894 License Mappings for "pylouis" component. SCA-36946 Data: Forge detail is incorrect for log4php component. SCA-37030 False Positive Vulnerabilities for "file - npmjs" component. SCA-37147 Handle URL discrepancies & case sensitive titles for FSF forge. SCA-36815 Mapping of missing CVE's for components like thinksaas, routeros, alpinelinux-aports, gu, sansanyun-mipcms, hnaoyun-pbootcms. SCA-37171 Mapping of missing CVE's for components like wp-plugins-wp-downloadmanager, benmonro-android, johnhaldeman-guarddetap, wp-plugins-cm-download-manager, just-safe-set, members, tizen, webclient, prusa3d-prusaslicer, webclient, webkitgtk. SCA-37176 Mapping of missing CVE's for components like sanos, hyper, server, storage-manager, password-manager, ninjarmm, xevo. SCA-37200 Update right URLs and title for code.google forge components. SCA-37206 Mapping Vulnerability for json-smart-v1 and json-smart-v2. SCA-35877 Updated components having URL discrepancies. Changes in Update Released on 27-Jul-2021 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-35948​ NPMJS: Project Discovery is not Up to date with respect to NPMJS Forge​ SCA-35924 License mapping for the Pypi component "louis" SCA-27819 Fixing nongnu.org 404 URL's SCA-36610 Minio version license mapping SCA-36607​ Grafana version license mapping SCA-36110 Update matplotlib license text SCA-36128 Manual Collector: Kernel: lvm2 versions are wrongly added SCA-35933 False Positive vulnerabilities in mariadb-java-client SCA-35908 Invalid versions for microsoft-azuredatastudio component Changes in Update Released on 24-Jun-2021 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-34531 Update Matplotlib license text to version 3.4.1. SCA-35177 New requests. SCA-34953 Add components & license to reflib. SCA-33894 CVE-2020-11971 associated with wrong components. SCA-29232 Request to add component: logrotate. SCA-30698 License Finder Rules for Matplotlib License. SCA-35286 Unicode Terms of Use license not found in file. SCA-35680 False positive GPL license detected for LGPL license text SCA-25368 Request for identifying SPDX IDs. Changes in Update Released on 11-Jun-2021 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-35178 Add OTN license and map missing license for oracle.manageddataaccess - NuGet Gallery component. SCA-35087 Deprecating invalid versions of Apache projects on github. SCA-35022 SPDX license collection. (Around 87 new licenses). SCA-33894 License Name and SPDX License Name should be the same. SCA-33805 Elastic Kibana: Add License Finder Rules for Elastic License 2.0 SCA-30698 License Finder Rules for Matplotlib License Changes in Update Released on 28-May-2021 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-34581 Add component Microsoft JDBC Driver for SQL Server and licenses. SCA-34431 Deprecating invalid version vulnerability Mapping which are protected SCA-33541 Vulnerabilities for Netmask and PHP git server SCA-33251 Vulnerability Dates: Addition/correction of columns for publication date and last modified date. SCA-30785 SPDX license collection to staging db. (Not yet released). Changes in Update Released on 14-May-2021 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-34508 PYPI URL's format are not consistent throughout in PDL_Component . SCA-34395 False positive vulnerabilities for tomcat components - False PDL Mappings in PDL_COMP_VER_VULNERABILITY SCA-34213 Deprecating the version for Apache project invalid versions-Set2 SCA-33485 The "Visual C++ Redistributable for Visual Studio" component name contains spaces making keyword search difficult SCA-32592 Deprecating the version for Apache project invalid versions. SCA-30879 Linux Kernel versions release which was obsolete by an year and a half. SCA-34289 Libstdcpp component SCA-34183 Add new licenses to license seed and schema. Changes in Update Released on 22-Apr-2021 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-32074 License mismatch for popular components. SCA-31667 License Acronym Data Changes for auto writeup rules. SCA-29799 Inventory created with auto-writeup rules don't create with SPDX license ID SCA-26931 Missing vulnerabilities (CPES with *) and wrong mappings for CPEs with *. New Component Requests lsof(Component ID: 27350567) ntp(Component ID: 207771) libtiff(Component ID:27350365) gtk(Component ID: 27350362) gnome-shell-extensions(Component ID: 27350363) libgpg-error(Component ID: 27350364) dracut(Component ID: 123809) openssl-fips(Component ID: 27350368) lvm2(Component ID: 27350367) kbd(Component ID: 27350366) lzo(Component ID: 63041) treeview-with-columns(Component ID: 27350359) replace-a-windows-internal-scrollbar-with-a-customdraw-scrollbar-control(Component ID: 27350360) step-by-step-calling-c-dlls-from-vc-and-vb-part-1(Component ID: 27350361) strawberry-perl - 27344198) run-postinsts - 27344199) packagegroup-core-boot - 27344200) sha-1-in-C-by-steve-reID: - 27344201) zlib - 27344202) watchdog(Component ID: 5403203) perfmon2(Component ID: 53555) ust(Component ID: 186075) newmat(Component ID: 129995) netbase(Component ID: 207639) xml-pull-parser3(Component ID: 226748) shadow-utils(Component ID: 5403445) lipro-libftdi(Component ID: 7872851) csha1(Component ID: 27341784) timezonemap(Component ID: 27344433) Changes in Update Released on 10-Apr-2021 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-33801 License detection.xml changes for PDL-2021-04-R1 SCA-31855 AutoWriteUp rules having outdated URLs SCA-33557 Adding License - Purdue BSD-Style License SCA-32649 Wrong (and hence fix) DOC Software License name and url SCA-32983 Missing Elastic License for Elastic Kibana New Component Requests File-file (component ID: 3102572) Cquicklist (component ID: 27337962) Nfs-utils (component ID: 27336321) Eglibc (component ID: 27337963) Lcms (component ID: 7597) Ti-rtos-mcu (component ID: 27336320) High-speed-charting-control (component ID: 27330960) Progress-control-with-text (component ID: 27330961) Oscilloscope-stripchart-control (component ID: 27330962) Skinx (component ID: 27330963) Keymaps (component ID: 27333199) Getprimarymacaddress (component ID: 27333200) Sampleds (component ID: 27333201) Microsoft Windows SDK for Windows 7 and .NET Framework 4 (component ID: 27334733) Csha1-a-c-class-implementation-of-the-sha-1-hash-a (component ID: 27334779) Trafficwatcher (component ID: 27334780) Using-colors-in-cedit-and-cstatic (component ID: 27335822) Gnu-which (component ID: 705519) Eclipse-aspectj (component ID: 55748) Changes in Update Released on 25-Mar-2021 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-32971 URL fix for DOC License SCA-32253 Map MICROSOFT SQL SERVER DATA-TIER APPLICATION FRAMEWORK to SQLpackage.commandline SCA-31926 Update the missing license mappings for components-Phase1. SCA-31800 Exception looking up rules' in FNCI Logs New Component Requests mph-2b-damase simpleping twain-developer-toolkit texas-instruments-msp-430-lib-files CppSQLite CStdioFile CTrayIcon CXml CXPGroupBox A class to combine Slider Control and Progress Bar A very simple solution for partial bitmap encryption Adobe InDesign CC SDK libcomposite pango Microsoft Windows Driver Kit - WDK Changes in Update Released between 20-Oct-2020 to 11-Mar-2021 This Update includes the changes described in the following sections. Issues/Bugs Addressed The following issues were addressed in the Update: Issue ID Issue Summary SCA-27739 False Positives when scanned Oracle OpenJDK SCA-28603 Unable to find a component that is identified as first level dependency SCA-26834 Sun (Restricted) and Sun-IP Licenses not detected SCA-29523 License discrepancy for CURL component SCA-27024 Gnutls component missing vulnerabilities, versions and wrong url SCA-30866 Hdf5 license (ID: 1224) is not correct SCA-30797 Incorrect Licensing Detection for Microsoft .Net SCA-30525 Component gpg-gnupg missing encryption flag SCA-27722 Incorrect vulnerabilities matched with component versions for Rust SCA-32271 PDL_VULNERABILITY table is empty in the latest PDL update SCA-33031 BOM: Discrepancies due to search term rule basics-vector New Component Detection Rules Setup.js MD% algorithm class library PhantomJs Cefsharp Virtual-dom v2.1.1 Named-js-regexp MarkupSafe OCHamcrest OCMockito Libsrtp Ans_up HockeySDK Aimage Ua-parser-js v0.7.10. Autofac.Wcf Vector.js Untildify v3.0.2 Post-robot v7.0.15. Axios JSONTestSuite Rpc-server.js New Features incorporated. Issue ID Issue Summary SCA-26848 CVSS 3.1 - Data Collection SCA-26808 Add Vulnerability dates to PDL tables SCA-26181 Component CPE Mapping New Component Requests released. Isc bind Canvas-toblob.js Newrelic.opentracing.amazonlambda.tracer Libepoxy Tags Json.net Jquery-menu-aim-fw Microsoft.appcenter for macos Microsoft.appcenter.analytics for macos Apache-apr Cyan4973-lz4 Gnu-screen Jamesflorentino-nanoscrollerjs Mtd-utils Npth Pam Eeepc-acpi-scripts Sharpziplib Mahapps.metro.simplechildwindow - nuget gallery Wpfnotification - nuget gallery Microsoft-windowsapicodepack-shellextensions - nuget gallery Controlzex/controlzex - github Mahapps.metro.iconpacks - nuget gallery Mvvmlight - nuget gallery Ini-parser - nuget gallery Mahapps/mahapps.metro - github Angular/angular-cli - github System.data.sqlite.core - nuget gallery System.data.sqlite.ef6.migrations - nuget gallery Microsoft asp.net mvc 4 (***deprecated***) Wxwindows library license Wxwidgets Karma-runner karma Openssh - in c Base-passwd Init-ifupdown Procps Binutils 7-zip Kmod Matplotlib Scons - a software construction tool - scons Tagish library Qos-ch-slf4j Flex - lexical scanner generator Application insights persisted http channel Cairo-pixman Flat_hash_map Fontconfig Free type Gnutls library Tianmajs/libm - github Libsoup Microsoft.applicationinsights - nuget gallery Slodge/mvvmcross - github Pdfsharp - nuget gallery Sharppdf Twain data source manager Twain sample data source and application - twain 2.0 sample data source Windows driver kit (wdk) 8.0 samples for visual studio 2012 Microsoft/windows-universal-samples - github Html agility pack Microsoft.extensions.caching.abstractions Microsoft.extensions.caching.memory Microsoft.extensions.dependencyinjection.abstractions Microsoft.extensions.options Microsoft.extensions.primitives Microsoft.netcore.platforms System.componentmodel.annotations System.runtime.compilerservices.unsafe System.security.cryptography.xml Microsoft.owin Microsoft.owin.host.systemweb Microsoft.owin.security Mimemapping Nconfiguration Nlog Nuget.commandline Nunit Restsharp Closedxml Apache cxf buildtools Apache neethi Weblinc-matchmedia Twain/twain-dsm Twain-twain-samples Windows driver kit (wdk) 8.0 samples for visual studio 2012 Changes in Update Released on 20-Oct-2020 This Update includes the changes described in the following sections. Issues Addressed in the 20-Oct-2020 Release The following issues were addressed in the Update: Issue ID Issue Summary SCA-28504 Components information SCA-28691 NVD Feed: Upgrading NVD CVE-Feeds APIs (1.0) to NVD CVE-Feeds APIs (1.1) SCA-27621 Difference in vulnerability information for 'expat' and 'libexpat-libexpat' component SCA-28970 NVD-Feed Fix and client release to Codeaware SCA-17974 Duplicate Inventory found for "gettext" and for the duplicate inventory as found license text is wrong SCA-28740 With fresh scan, name of inventory item zlib is changed to madler-zlib in codeinsight 2020R4. SCA-27773 Search terms need to be improved for few components SCA-28288 False Positives for zlib and libjpeg SCA-28508 Components information SCA-22072 Stunnel support in DL SCA-27119 Missing versions SCA-29156 Pycryptodomex missing encryption flag New Component Detection Rules in the 20-Oct-2020 Release This Update introduces new Automated Analysis rules for the following components: Retry.js Jquery-mobile for react Expat (version released 2.2.6) Novell.Directory.ldap Spawn.js Jquery-vsdoc.js CodeMirror NUnit.Framework.dll Rsvp.js Twbs-bootstrap and Mathiasbynens-jquery-placeholder Libwebsockets Globalize 1.1.1 CPU Topology JSON v3.3.0 Pyomo v5.0.1 CPU Topology 1.2.8 Class library Text-markdown Json v2.1.1 V8 Libuv Changes in Update Released on 11-Sep-2020 This Update includes the changes described in the following sections. Issues Addressed in the 11-Sep-2020 Release The following issues were addressed in the Update: Issue ID Issue Summary SCA-27585 Add component " History-event"(JQuery.history.js) SCA-27738 URL not working for freetype (Id: 1149) component New Component Detection Rules in the 11-Sep-2020 Release This Update introduces new Automated Analysis rules for the following components: 7za.exe Jazzy D3.js JSQR Doube-conversion HistoryEvent Bind Punycode.js Gaearon-Redux Changes in Update Released on 28-Aug-2020 This Update includes the changes described in the following sections. Issues Addressed in the 28-Aug-2020 Release The following issues were addressed in the Update: Issue ID Issue Summary SCA-27456 Missing OSS component-udev SCA-27203 Missing components – bind and jsqr New Component Detection Rules in the 28-Aug-2020 Release This Update introduces new Automated Analysis rules for the following components: Whiskas.py ProtectedData Dmidecode Libsmbios Changes in Update Released on 14-Aug-2020 This Update includes the changes described in the following sections. Issues Addressed in the 14-Aug-2020 Release The following issues were addressed in the Update: Issue ID Issue Summary SCA-27191 Add tungsten fabric components to Data Library SCA-27024 Gnutls component missing vulnerabilities, versions and wrong url. SCA-27084 Libtiff license url needs to be updated New Component Detection Rules in the 14-Aug-2020 Release This Update introduces new Automated Analysis rules for the following components: SWIG v3.0.2 VC Redistributable Apple Installer Plugin Appcenter-sdk-apple-3.0.0.tar.gz Code Project - WSE 3 Deployment: MSI and ClickOnce Wdksetup.exe MobileNumericUpDown Apple/cups Mhook GridAnimationDemo Changes in Update Released on 03-Aug-2020 This Update includes the changes described in the following sections. Issues Addressed in the 03-Aug-2020 Release The following issues were addressed in the Update: Issue ID Issue Summary SCA-26931 Missing vulnerabilities. SCA-26666 Missing Vulnerabilities for Apache Thrift 0.7.0 New Component Detection Rules in the 03-Aug-2020 Release This Update introduces new Automated Analysis rules for the following components: JQuery Mobile JortSort CLR Security Class library BrockAllenCookieBasedTempdata.dll StackExchange.Redis Readline.js Changes in Update Released on 17-Jul-2020 This Update includes the changes described in the following sections. Issues Addressed in the 17-Jul-2020 Release The following issues were addressed in the Update: Issue ID Issue Summary SCA-25108 Detection of xmlbeans 2.6.0 occurs twice SCA-25905 Component system.diagnostics.diagnosticsource has had its license changed for version 4.4 and later SCA-25907 New components added SCA-26134 The component "app.min.js" is incorrectly mapped to the component "App( 62839)" New Component Detection Rules in the 17-Jul-2020 Release This Update introduces new Automated Analysis rules for the following components: Console.js LowPriorityWarning.js Nameddefine.js Prettier.js SQLite DLL Pacman Unicode D3 DES algorithm 5.09 Class library JCanvas Libxslt Node-tmp Libxml2 Changes in Update Released on 30-Jun-2020 This Update includes the changes described in the following sections. Issues Addressed in the 30-Jun-2020 Release The following issues were addressed in the Update: Issue ID Issue Summary SCA-25608 component "jodaorg-joda-time" has invalid license in list SCA-25587 Review licenses for timescale DB GitHub components SCA-23003 Collectors for bouncycastle,curl,gnu,haproxy,jquery,kernel,libarchive,libssh, openbsd,openflow,openssl. New Component Detection Rules in the 30-Jun-2020 Release This Update introduces new Automated Analysis rules for the following components: Node-Semver Speex Node-Static node-tree-kill node-winreg node-xml2js Changes in Update Released on 15-Jun-2020 This Update includes the changes described in the following sections. Issues Addressed in the 15-Jun-2020 Release The following issues were addressed in the Update: Issue ID Issue Summary SCA-24724 Haproxy component missing 2.0.x versions SCA-25348 Add missing vulnerabilities to u-boot component SCA-25416 Errors in Oracle db during PDL Update SCA-24986 UltrVNC - Missing latest versions and some versions are invalid SCA-20156 Update component 302760 to important = true SCA-22232 Missing component versions SCA-24984 Component versions out of date New Component Detection Rules in the 15-Jun-2020 Release This Update introduces new Automated Analysis rules for the following components: Cross-BrowserSplit. Chromium-Breakpad. Request.js Sauce.js IsEventSupported.js Pubsuffix.js Node-ssl-root-cas(test-tunnel.js) Changes in Update Released on 01-Jun-2020 This Update includes the changes described in the following sections. Issues Addressed in the 01-Jun-2020 Release The following issues were addressed in the Update: Issue ID Issue Summary SCA-24867 [Juniper Networks, Inc.] gnu-gcc component is showing invalid versions SCA-25010 AMD: CodeAware Improper Identification of License for JQUERY Component. New Component Detection Rules in the 01-Jun-2020 Release This Update introduces new Automated Analysis rules for the following components: Connect-nocache. typescript.js aphrodite.js Newtonsoft.Json.dll tipsy v1.0.0a(jquery.tipsy.js,tipsy.css). prism.js systemjs Microsoft Ajax Minifier Changes in Update Released on 18-May-2020 This Update includes the changes described in the following sections. Issues Addressed in the 18-May-2020 Release The following issues were addressed in the Update: Issue ID Issue Summary SCA-23316 OGIS: License detection is different in CodeAware and Auto-Analysis SCA-22382 OGIS: Request to Add New Components and Versions SCA-24622 Harmonic: stuk-jszip has MIT/GPL Dual License but "Possible Licenses" only show GPL SCA-24711 Citrix: False positives CVEs New Component Detection Rules in the 18-May-2020 Release This Update introduces new Automated Analysis rules for the following components: bootstrap-select.js bootstrap-toggle.min.js React-pull-to-referesh rx.all.js narwhal.js bootstrap-checkbox v1.4.0 IKVM.NET(IKVM.Reflection.dll). Changes in Update Released on 04-May-2020 This Update includes the changes described in the following sections. Issues Addressed in the 04-May-2020 Release The following issues were addressed in the Update: Issue ID Issue Summary SCA-22381 Component 'ring' from crates.io forge missing license and encryption flag SCA-22542 Encryption flag not set for 'rust-openssl' component SCA-24708 Incorrect discovery of 'Primefaces-PrimeNG' component New Component Detection Rules in the 04-May-2020 Release This Update introduces new Automated Analysis rules for the following components: jquery.scrollTo-min.js, MatrixMath.js, jQuery.tmpl.js, lws-common.js React Router jsDump Reflect-Metadata NDesk.Options(.dll) MSBuild Community Tasks(.dll) Changes in Update Released on 17-Apr-2020 This Update includes the changes described in the following sections. Issues Addressed in the 17-Apr-2020 Release The following issues were addressed in the Update: Issue ID Issue Summary SCA-23823 Few vulnerabilities not reported SCA-24365 Invalid URL for 'lyceum' component SCA-20305 Component 'apache-cordova-plugin-inappbrowser' has incorrect versions SCA-18198 Incorrect vulnerability mapping for 'Docker' component SCA-23837 Added rdklib (pypi) to the library New Component Detection Rules in the 17-Apr-2020 Release This Update introduces new Automated Analysis rules for the following components: webperftest jquery.color.js knockout Irrlicht(.dll file) jQuery(build_markdown.js) React Developer Tools(getReactData.js) moment.js,regex.js, moment-with-locales.js Changes in Update Released on 3-Apr-2020 This Update includes the changes described in the following sections. Issues Addressed in the 3-Apr-2020 Release The following issues were addressed in the Update: Issue ID Issue Summary SCA-22116 Invalid version specified for 'tpm2-tss-engine' SCA-23712 Added 'SunPro' license to the library SCA-22982 Incorrect URLs for few Ibiblio Maven2 components SCA-20314 Licenses are not mapped for latest versions of 'pygresql' component (22014048) SCA-21928 Component 'pycountry-convert' needs to be updated with latest details SCA-19891 Invalid versions associated to the component 'c-ares' SCA-15411 Incorrect details for component 'systemd-systemd' New Component Detection Rules in the 13-Mar-2020 Release This Update introduces new Automated Analysis rules for the following components: vector.js webcomponent.js globalize.js OCMock Bezier-Easing Punycode(.js File) Sphinx StructureMap cors jQuery validation plug-in v1.6 jQuery Easing v1.3

Summary Revenera proactively communicates scheduled maintenance and important system related notices on the Revenera Status Dashboard. To know if your FlexNet Operations Cloud instance is impacted by an event announced on the status page, you must first understand the difference between the various FlexNet Operations Cloud editions and deployment environments and on which environment your instance is hosted. This article provides a brief description of the FlexNet Operations Cloud editions to better help you identify what updates are important to you. FlexNet Operations Cloud ALM vs LLM First, be aware that there are two editions of FlexNet Operations Cloud. FlexNet Operations Cloud ALM FlexNet Operations Cloud ALM (Advanced License Management) is Revenera’s entitlement management solution with a broader range of software monetization capabilities and deployment models. If you are accessing the FlexNet Operations Cloud producer portal using a URL similar to the following, then you are using FlexNet Operations ALM: https://<siteid>-fno.flexnetoperations.com/flexnet/operations For more details about the site ID and other FlexNet Operations Cloud ALM URLs, please refer to the FlexNet Operations Orientation Guide. FlexNet Operations Cloud LLM FlexNet Operations Cloud LLM (License Lifecycle Management) is Revenera’s original cloud-based entitlement management and software delivery solution. If you are accessing the FlexNet Operations Cloud Producer Portal using a URL similar to the following, then you are using FlexNet Operations LLM: https://manager.flexnetoperations.com/ For more details about FlexNet Operations Cloud LLM URLs, please refer to the in-app product documentation. FlexNet Operations Cloud Deployment Environments Below is a description of the deployment environments supported by Revenera. You will see references to these environments in the status dashboard notices. Location of the Deployment The following are the locations of the FlexNet Operations Cloud deployment environments: Data Center: Revenera-hosted and managed data center where FlexNet Operations LLM runs. Legacy AWS: Amazon cloud environment in both Europe (EU) and North America (NAM) that hosts FlexNet Operations ALM instances originally deployed in AWS.  AWS: Amazon cloud environment in both Europe (EU) and North America (NAM) that hosts new FlexNet Operations ALM instances and FlexNet Operations ALM instances migrated from the Data Center. Purpose of the Deployment The following describes the purpose of each of the FlexNet Operations Cloud deployment environments: UAT: User acceptance test environment used by testing pre-released builds of FlexNet Operations Cloud. In AWS NAM, FlexNet Operations ALM UAT is divided into three groups: UAT NAM1, UAT NAM2, and UAT NAM3. FlexNet Operations instances running in AWS NAM are assigned to one of these UAT groups. Production: Production environment of FlexNet Operations Cloud. In AWS NAM, FlexNet Operations ALM Production is divided into six groups: Production NAM1, Production NAM2, and Production NAM3, Production NAM4, Production NAM5, and Production NAM6. FlexNet Operations instances running in AWS NAM are assigned to one of these Production groups. PCS: Production Copy Service environment contains a copy of the production environment and is used for testing purposes. NOTE: PCS is a separate paid environment. Deployment environment support varies by FlexNet Operations Cloud variant. FlexNet Operations Cloud ALM Deployment Environments FlexNet Operations Cloud ALM is deployed on the following environments: Deployment Environments Data Residency Production Copy Service (PCS) User Acceptance Test (UAT) Production (PROD) Disaster Recovery (DR) AWS NAM US-West-2 (Oregon) X X X   AWS EU EU-West-1 (Ireland)   X X   Legacy AWS NAM US-West-2 (Oregon)   X X    Legacy AWS EU EU-West-1 (Ireland)   X X   FlexNet Operations Cloud LLM Deployment Environments FlexNet Operations Cloud LLM is deployed on the following environments: Deployment Environments Data Residency Production Copy Service (PCS) User Acceptance Test (UAT) Production (PROD) Disaster Recovery (DR) Data center California, US X X X   Illinois, US       X Considerations Your organization's FlexNet Operations ALM instance in AWS NAM is assigned to a particular group. You must subscribe to the group where your instance is hosted to receive status notifications. If you do not know the group your FlexNet Operations ALM instance has been assigned, contact Revenera Technical Support or your trusted Revenera contact for assistance. While FlexNet Operations LLM is hosted in the Revenera Data Center, it shares components with FlexNet Operations ALM that are hosted in AWS NAM. Specifically, these components are Device Activation Service and Cloud Licensing Service. If your FlexNet Operations LLM instance uses these components, to see the complete status of your FlexNet Operations LLM, you will need to subscribe to these components under your organization's assigned group. If you do not know the group your FlexNet Operations LLM components have been assigned, contact Revenera Technical Support or your trusted Revenera contact for assistance.

Introduction When distributing both 32 and 64-bit files in a single installer, specific files based on the OS should be installed on the machine. When you run the installer on a 32-bit machine, 32-bit files should get installed. When you run the same installer on a 64-bit machine,  64-bit files should be installed. Instructions Open InstallShield and create a Basic MSI Project. Go to the Setup Design view and add a feature and add two components. Name one component 32-bit component and the other 64-bit component. Add a 32-bit file to the 32-bit component and add a 64-bit file to the 64-bit component. Now set a condition for each component.   Select the 32-bit component and apply the condition NOT VersionNT64. Select the 64-bit component and add condition the condition VersionNT64. Now save and build the project. Now run the installer in a 32-bit machine. The 32-bit component files will be installed. Then run the same installer on a 64-bit machine. The 64-bit component files will be installed. Reference See Configuring Component Conditions in the InstallShield User Guide.

Introduction : To support GUI installers on Linux need to make sure the system has required libraries and X11 display. Missing Libraries : Missing the libXtst/libXrender RedHat Package Manager (RPM) which is required for a GUI install. In the Linux host, there is only the x64 (64 bits) version of libXtst/libXrender library installed.You have to install the i686 (32 bits) version of the library Both version must be installed (32 and 64 bits),Install the libXtst/libXrender RPM and its dependencies. Ex: # rpm -qa libXtst libXtxt-1.2.3-1.el7.x68_64 $ rpm -qa libXtst libXtst-1.2.3-1.el7.x86_64 (64 bits) libXtst-1.2.3-1.el7.i686 (32 bits) Enable X11 Forwarding : X11 forwarding allows a user to start up remote applications, and then forward the application display to their local Windows machine. It enables you to run GUIs from a local server. 1.Open the SSH daemon configuration file. $ sudo vi /etc/ssh/sshd_config. 2.Locate and uncomment or change line X11Forwarding to be X11Forwarding yes. 3.Restart SSH daemon. Want to use sudo: Sometimes launching the Installer as root, not as local user, will get this unsupported GUI error message.when you have a requirement that the installer be run as root, Issue this command before launching the installer, xhost +si:localuser:root xhost adds users to your Access Control List of your currently logged on GUI session. xhost + allows anyone, both remote and local, to access your current GUI session. The ACL is only modified for your current logged on session and gets cleared when you log out or reboot.

Introduction : The following steps will helps to change owner for installation directory to dynamic user(currently logged in user) Instructions: Linux and MAC: 1. Write a script file in advance, please add “sudo” before the chown command cd $USER_INSTALL_DIR$ usr=$(logname) echo $usr>>/tmp/name.txt sudo chown -v -R $usr ./* chmod -R 755./* kill -9 $(ps -p $(ps -p $PPID -o ppid=) -o ppid=) 2. Create a New Project 3. Add Execute the Target file action in post install sequence after install complete and choose the script file which was created in step1 4. Build and run the project 5. During installation, there will be a prompt for sudo password. After input the sudo password, the chown command can be executed.

This article documents the FlexNet Embedded release highlights introduced each year, starting from 2020 R3 (2020.07) to present: Release Description 2023.11: CLS + LLS Cloud Licensing Service + Local License Server Output for the /hostid endpoint for the local license server now includes attribute information such as Physical, Builtin, and Removable, which can help license administrators identify and select the appropriate hostid for scenarios where they want to manually specify a hostid. Dongle libraries required for flexid9 and flexid10 hostids are no longer statically linked in the local license server. Resolved error with failover server. 2023.10: CLS + LLS Cloud Licensing Service + Local License Server Resolved issue that occurred when the preview response included the requestAll option Linux install script now creates flexnetsas directory under /var/tmp LLS no longer creates lock files in /tmp directory (Linux only) License Server Producer Guide now correctly lists flxBinary.jar (required to run the command-line tool backofficeofflinesynctool) as redistributable 2023.09: CLS + LLS + Client Kits Cloud Licensing Service + Local License Server New Help button in FlexNet License Server Manager to open documentation from within the application Resolved synchronization issue with failover server Client Kits Dongle libraries for flexid9 hostids no longer statically linked 2023.09 .NET Core client kit is now .NET Standard 2.0 compliant  FlexNet Embedded Client kits now offer support for the following platforms: Windows Server 2022 macOS 12 and 13 Nutanix AHV EverRun Resolved .Net Core 2.0 assembly issue Linking against virtualization detection add-on or VM UUI contrib no longer fails Incorrect system time no longer causing internal error  2023.08: CLS + LLS Cloud Licensing Service + Local License Server The new user role ROLE_OFFLINE enables producers to grant rights for handling offline endpoint activities to users who should not have full administrative privileges. Resolved pagination issue in License Server REST API for /users endpoint Offline request file no longer corrupted when empty JSON body is sent Resolved an issue with flexnetlsadmin.sh 2023.07: CLS + LLS Cloud Licensing Service + Local License Server Changes to feature overrides for a product can now be reflected on the relevant instance of the FlexNet Cloud Licensing Service. On Windows, producers can now customize the display name and description of the FlexNet Embedded local license server service.  An issue was resolved where a paginated REST query for usage records caused an exception if more than one page was available. 2023.06: CLS + LLS Cloud Licensing Service + Local License Server The new FlexNet License Server Manager enables license administrators to manage the FlexNet Embedded local license server and its license distribution using a browser-based interface. This new administration tool replaces the previous License Server Manager, which was deprecated in the 2022.11 release. 2023.05: CLS + LLS Cloud Licensing Service + Local License Server Introduced user-based licensing for producers who want to license software applications or services based on the number of users that can access or use them. Producers who use FlexNet Embedded in combination with FlexNet Operations as their back office can now limit or prohibit binding-break repairs on the local license server. Resolved issue around badly formatted hostids. 2023.03.01: LLS Local License Server Resolved issue with service shutdown mechanism 2023.03: CLS + LLS Cloud Licensing Service + Local License Server License server administrators can now use regular expressions when creating rules of access for license pools (previously referred to as “partitions”). Resolved time zone conversion issue for /features endpoint Posting model definition using flexnetlsadmin no longer fails Local License Server The performance of the local license server has been increased, which results in faster processing of capability requests. 2023.02: CLS + LLS Licensing Server The open source component Spring Boot has been updated to version 2.7.7.  The LatencyUtils package has been removed from the Micrometer component. Sending a capability request after mapping add-ons or features no longer results in a 503 error. 2023.01: CLS + LLS Licensing Server The response to the /access_request and /signed_access_request endpoints of the Cloud Monetization API (CMAPI) now includes the value of the Notice field.  In the license server REST API, a new query parameter includeUsageExpiry can return the date and time when a feature expires on the client.  The naming pattern for the access log file has changed. Using the max keyword in a partition which contains features of the same name but of different versions no longer results in unpredictable behavior. 2022.12: CLS + LLS Licensing Server If several features are available for checkout that only differ in their expiry date, the license server now serves the feature with the shortest expiry which also satisfies the borrow period. The install-systemd.sh install script can now be used to install a server certificate. The License Server Producer Guide includes a new appendix “Workflow Example for Producer-Defined Binding”, with step-by-step instructions to help producers set up binding on a local license server. Updated open-source components: commons-text Jackson databind logback Spring Boot Updated Swagger documentation 2022.11: CLS + LLS Licensing Server New keyword for feature partitions: Producers and license administrators can use the max keyword to limit the number of feature counts that a single user or device can consume. The API documentation for the local license server is now generated using SpringDoc (OpenAPI 3). 2022.10: CLS + LLS Licensing Server Calling the /partitions endpoint using GET now also returns partitions that contain no feature counts. A new property server.hostType.order enables producers to specify the order in which the local license server picks the hostid type. Client information returned by the flexnetlsadmin command -licenses -verbose is no longer truncated. 2022.09: CLS + LLS + Client Kits Licensing Server Preview requests no longer include orphans Resolved an issue where unsynced usages were deleted during synchronization LLS Linux install now honors an externally-specified JAVA_HOME or JRE_HOME variable Self-contained server is no longer supported and will no longer be shipped with the license server Client Kits Resolved an issue affecting secure anchoring on certain platforms Resolved an issue with calls to retrieve last server update time 2022.08: CLS + LLS Licensing Server The Cloud Monetization API (CMAPI) responses for the /access_request and /signed_access_request endpoints can now include the renewInterval field. Updated open-source component Spring Boot A new -restore-service-database command restores trusted storage at the service mode installation location (Linux). Resolved an issue with incorrect feature counts which could occur after a license server update. 2022.07: CLS + LLS Licensing Server Model definitions can now include partitions that have a feature count of 0. This enables producers to upload a model definition that functions as a template, which can be updated with feature counts at a later date. A new -restore-service-database command restores trusted storage at the service mode installation location (Windows only). 2022.06: CLS + LLS Cloud Licensing Service Cloud Monetization API enhancement: Capability requests sent to the /access_request or /signed_access_request endpoint support passing multiple values per key. This enables producers who use feature partitions to allocate licenses to users who belong to multiple groups. Updated open-source components Spring Boot and Liquibase Resolved issue with flexnetlsadmin’s -licenses command Resolved issue with /clients REST endpoint, which now correctly returns all current clients after synchronizing licensing information with the back office Local License Server Updated open-source components Liquibase and jackson-databind 2022.05: LLS Licensing Server Cloud Monetization API enhancement: Capability requests sent to the /access_request or /signed_access_request endpoint support passing multiple values per key. This enables producers who use feature partitions to allocate licenses to users who belong to multiple groups. Updated open-source component Spring Boot Resolved issue with flexnetlsadmin’s -licenses command Resolved issue with /clients REST endpoint, which now correctly returns all current clients after synchronizing licensing information with the back office 2022.04: CLS + LLS Licensing Server Support for Windows 11 2022.03: CLS + LLS Licensing Server Resolved an issue with preview requests using the RequestAll flag. The issue occurred when the license server was provisioned with multiple line items that had different expiry dates, where one of the line items had expired. Minimized blackout time during synchronization with back office Improved error message wording when --service-shutdown option is used for a license server running in a console window 2022.02: CLS + LLS + Client Kits Licensing Server Logging in the license server is now done with Logback, not log4j Added a new configuration property for cipher choice mechanism Resolved flexnetlsadmin communication issue with local license server when a .local URL is used Counts are now updated correctly when a client sends parallel requests to a Cloud Licensing Service instance Client Kits FlexNet Embedded Client kits now offer support for Microsoft Windows 11 platform Java XT TRA: Log4j 1 no longer bundled with tra-run.jar and tra-gen.jar .Net XT SDKs: Optimized GetFeatureCollection call to enable more efficient handling of capability responses containing large quantities of features C XT SDK: Optimized virtualization detection (Linux only) Identity update utility now includes container_id in types list Updated third-party components (OpenSSL, LibCurl) 2022.01: CLS + LLS Licensing Server FlexNet License Server Manager now available in the Product and License Center as a separate package Enhanced logic of distributing used feature counts in feature partitions Customers can now pass vendor dictionary values using the /preview_request API Resolved issue where used counts were not updated correctly if a client tried to renew licenses when the corresponding feature is part of a reactivated line item “rate-limit” setting no longer causes flexnetlsadmin command -licenses -verbose to fail Resolved issue where local license server could crash on installation 2021.12: CLS + LLS Licensing Server Allowed size of model definition for partitions has been increased to 900KB Increased performance of POST requests on /rules endpoint New /features/summaries endpoint returns a summary of available features, grouped by feature name Remodeled logic for returning used license counts to resolve issue of incorrectly calculated counts Resolved issue where preview requests and capability requests for features with overdraft counts were not working as expected Resolved issue with flexnetlsadmin’s -licenses option for uncapped metered features Resolved issue affecting the sorting of checkout filter features 2021.11: CLS + LLS Licensing Server A new directive “vendor string matches” enables license administrators to allocate feature counts to partitions based on variables specified in the vendor string. After use, feature counts are returned to their original partition. The /clients API no longer returns inconsistent results when queried with and without the hostid parameter 2021.10: CLS + LLS Licensing Server User-based reservations are now working as expected 2021.09: LLS + Client Kits Licensing Server New support for Ubuntu 20.04 LTS Reservations are no longer automatically converted to partitions, resolving a compatibility issue where the conversion of reservations into rules could lead to incorrect license counts in the resulting partitions References to Jackson-databind 2.2.3 have been removed from OfflineSync tools Resolved issue where licenses could be available for checkout from a cloned local license server Capability response utility capresponseutil now supports the optional parameter enterpriseId Client Kits References to Jackson-databind 2.2.3 have been removed from OfflineSync tools Resolved false-positive tamper detection issue 2021.07: CLS + LLS Licensing Server Producers can now disable the creation of access logs by setting server.accessLogPattern=none in producer-settings.xml. The wording of log entries for rejected capability requests has been improved. Entries now indicate when a request has been denied due to a feature partitions rule rejection. The response to a call of the /health endpoint now includes a new trustStatus property, which indicates whether a trust break has occurred. Resolved an issue where license counts in partitions were not correctly re-allocated after an updated model definition was uploaded to the license server. 2021.06: CLS + LLS Licensing Server New licensing.defaultTimeZone setting to configure the timezone the server uses to determine feature expiry date, start date, and issue dates Resolved license count handling when the reservation group or partition is deleted while the count is in use Resolved license count handling when reservation groups are deleted and recreated with different feature counts Fixed license leakage issue when feature counts change while features are checked out 2021.05: CLS + LLS + Client Kits Licensing Server Fixed OptimisticLockRefreshException error when adding a new reservation entry Failover synchronization issues have been resolved Increase in failover database size issue is fixed Third-party software modules have been upgraded Client Kits New support for macOS ARM Resolved calendar issues for Java XT kits C-XT kit no longer crashes if year exceeds 3001 on Windows platform Vulnerability CWE-327 addressed 2021.04: CLS + LLS Licensing Server Conditional operator support added to Feature Partitioning rules Resolved issue preventing reserved counts from being automatically renewed Fixed license count issue caused by reservations groups repeatedly being deleted/created Changed mechanism for local license server-FlexNet Operations HTTPS communciation 2021.03: CLS + LLS Licensing Server New streaming interface /clients and /features endpoints to query large client tables, hence improving the performance Resolved VMUUID detection issue on Google Compute Cloud (Windows only) for LLS The REST API /clients endpoint now returns the served clients when the borrow interval was set to 0s on both CLS and LLS Resolved time zone conversion issue for feature expiry on both CLS and LLS The issue with borrow granularity unit is now fixed 2021.02: CLS + LLS Licensing Server Support for JSON-format Logging on the Local License Server (LLS) Integration of LLS Logging with External Systems like Graylog, Elastic Stack Fixed the synchronization issue in failover scenario Improved performance for querying /clients endpoint for both LLS and CLS Fixed the trailing slash in JAVA_HOME system environment variable in LLS Correct version of OpenSSL reported in the LLS A number of third-party software modules used in the FlexNet License Server Manager have been upgraded. 2021.01: CLS + LLS Licensing Server New activeOnly query parameter has been introduced for /features endpoint for both CLS and LLS Return of counts for multiple activation IDs with identical expiry date issue has been fixed on CLS Resolved client expiry issues on CLS Support for PKCS #12 keystores in LLS Resolved VM_UUID detection issue on Google Compute Cloud for LLS Resolved MAC address issue related to hostid case sensitivity. 2020 R3 SP3 (2020.12): CLS + LLS + Client Kits Licensing Server License activation using REST API and .NET on both LLS and CLS Usage reports could show duplicate rows with a feature count value of zero for every checked in feature is fixed on CLS Enhanced the model definition upload using the /rules API for long list of hostids—containing 10,000 hostids on both LLS and CLS Used feature counts correctly returned to license pool after effective borrow interval expired Updated open source third party components and dependencies have been removed Resolved flexnetlsadmin to CLS communication issue Fixed the issue that caused error while running local license server(LLS) in console mode Client Kits Improved Cloud Platform detection which fixes the that occasionally detect and return an incorrect hostid value for VM_UUID Resolved VM_UUID detection issue on Google Compute Cloud Releasing of system resource 2020 R3 SP2 (2020.10): CLS + LLS + Client Kits Licensing Server Springfox-Swagger has been upgraded to version 2.9.2 in both LLS and CLS. This upgrade addresses potential security issues. Spring Boot has been upgraded to version 2.1.2 in both LLS and CLS to address potential security issues. Enhanced Logging Functionality on the Local License Server. A new logging style configuration parameter has been introduced for the LLS, to configure timestamp behaviour. Resolved below FlexNet License Server Administrator Issues “-reset” command resets the security.enabled policy back to its original default value set by the producer. “-licenses” command now returns correct feature count “-licenses -verbose” command now returns correct value for available counts A number of third-party software modules used in the FlexNet License Server Manager have been upgraded Client Kits Fix for potential memory leak (Linux XT only) 2020 R3 SP1 Hotfix (2020.07.1): CLS only Licensing Server Feature counts are now consumed from correct activation id. For metered features, counts could be consumed from an incorrect activation ID. This issue was due to a change in the sequence of returning used counts. Resolved Client Expiry Timer issue Fixed incorrect expiry date 2020 R3 (2020.07): CLS + LLS + Client Kits Licensing Server Feature Partitions The maxCount field now indicates how many counts of a feature are available, regardless of how many counts have been requested. The active hostid set using FlexNet License Server Manager or using the REST APIs now persists in the database. It is no longer necessary to reset it after a server reboot Improved FlexNet License Server Administrator Output Resolved REST API pagination issue CLS performance improvement Resolved server borrow interval issue Updated open source component Jackson Databind in FlexNet License Server Manager In the FlexNet License Server Manager user interface added new Start Date column and New Device Alias column Client Kits Identical Correlation ID generation issue has been addressed (C XT SDKs only) Resolved issue related to connecting to server via proxy (C XT SDKs on macOS only). Resolved issues with redirected URLs (.NET XT SDKs only). Amazon AWS EC2 detection no longer causes XT client crashes (XT SDKs only)

Introduction Code Insight 2023 R4 upgraded from Tomcat version 8.5.x to version 9.0.80 to address the Code Insight Jira issue SCA-48120: Upgrade Tomcat from 8.x to 9.x or above. The upgrade was necessary because Apache had announced that support for Tomcat 8.5.x  would end by March 31, 2024. (To read the complete announcement, refer to Apache Tomcat® - End of life for Apache Tomcat 8.5.x.) However, the pre-release testing of 2023 R4 revealed that, after the Tomcat upgrade, the generation of custom reports was failing, as reported in the Code Insight Jira issue SCA-50793: Reports - Generation of custom reports is failing. This issue was resolved before the actual release of Code Insight 2023 R4. However, the issue's solution requires that customers migrating from a pre-2023 R4 release of Code Insight to 2023 R4 or later perform an extra procedure to ensure that their custom reports successfully generate. The following sections provide more information about the issue, its solution, and the additional procedure needed to migrate custom reports.    Issue with Custom Reports After the Tomcat Upgrade  Custom reports are scripted in the Python language. After the Tomcat upgrade, the generation of custom reports was failing because the Content-Type normally passed to the uploadReports API (called in the custom report scripts) was no longer compatible with the upgrade.  Furthermore, research indicated that the Content-Type should not be passed explicitly in the header for a multi-part form, as stated in the following quote from the maintainer of the Requests Library in Python: “You should NEVER set that header yourself. We set the header properly with the boundary. If you set that header, we won't and your server won't know what boundary to expect (since it is added to the header).” (Refer to multipart data POST using python requests: no multipart boundary was found - Stack Overflow.) Solution Based on this information, the solution for this issue was simply to remove the Content-Type from the header in each custom-report script so that its value was no longer passed to the uploadReports API in the script. Impact of the Solution on Code Insight Versions  As a result of the solution, users who have migrated from a pre-2023 R4 version of Code Insight to 2023 R4 or later must perform an additional procedure to update their  previously downloaded custom-report scripts to the latest version. (See the next section, Required Procedure for Updating Custom Report Scripts, for details.) If this procedure is not performed, attempts to generate custom reports will fail.  You do not have to perform this additional procedure under these circumstances: If you are using Code Insight 2023 R3 or earlier. (Even if you perform the additional procedure, the custom reports will still generate successfully.) If you are using Code Insight 2023 R4 or later and are installing the custom-report scripts for the first time If you are migrating from a pre-2023 R4 version of Code Insight to 2023 R4  but did not copy the custom-report scripts from the previous release.   Procedure to Update Custom-Report Scripts Based on the Solution Perform the following procedure to update your existing custom-report scripts after you have migrated from a pre-2023 R4 version of Code Insight to version 2023 R4 or later. If you do not perform this procedure, attempts to generate custom reports will fail. Purpose of the Procedure The procedure, which is performed from the Linux or Windows instance in which Code Insight is installed, pulls the latest code from Git that incorporates the solution described above. Updating the Custom-Report Scripts Use the following procedure to update the custom-report scripts migrated from a pre-2023 R4 version. To update custom-report scripts:  In a command-line window, navigate to the following location where your custom-report scripts are installed in Code Insight: <codeInsight_installation_folder>/custom_report_scripts Within a report folder, run the following command to pull the latest code from Git: git pull --recurse-submodules Alternatively, run these two commands: git pull git submodule update --recursive Repeat the previous step for each report folder. After you perform this procedure, custom reports will generate successfully.  NOTE: You do not need to restart Tomcat to enable the updated scripts. More Information For more information about custom reports in Code Insight, refer to the Code Insight Reports and  Custom Reports Framework in Code Insight articles or to the Generating Reports for a Project section in the Code Insight User Guide.  

Introduction FlexNet Operations Cloud supports sending emails on behalf of your email server. For FlexNet Operations Cloud ALM hosted on AWS environments, Producers must first verify the email address/domain with AWS Simple Email Service (SES) to successfully send emails using the custom email address/domain. This article provides common troubleshooting steps in case an error is observed despite the verification process completing successfully. Troubleshooting Steps If using a custom email address/domain, please confirm that the DKIM information was added to your organization's DNS records by your IT team immediately after submitting the domain request. If after 48 hours, it is does not show validated, please contact Revenera Technical Support to request a review. Ensure the DKIM information remains in the DNS records throughout the life of the email address/domain. AWS SES may take 48-72 hours to detect the verified email address/domain.  If the email address/domain is verified in the Email/Domain Verification Tool, however it is not verified in the email template, try changing the email address in the template and then reverting it back. This will refresh the email template. Outcome If you continue to observe issues with sending emails using the custom email address/domain, please contact Revenera Technical Support for further assistance. Resolved Issue Note: The issue was resolved in FlexNet Operations ALM 2023.10 (deployed to Production on October 12, 2023 and UAT on October 15, 2023) There was a known issue with the domain verification process affecting migrated AWS UAT environments. When an custom domain is submitted for verification in the Email/Domain Verification tool of the FlexNet Operations Producer Portal, the generated DKIM records are incorrectly hard-coded with the flexerasoftware.com domain (see image below). Note: This issue does not affect custom email address verification. Workaround Note: The workaround is obsolete and users should discontinue its use. Please use the instructions in the Resolution section. When sharing the DKIM records with your IT team to add to your DNS records, you will need to replace the flexerasoftware.com domain with the custom domain. In the image above, you would replace flexerasoftware.com with revenera.com. Resolution The issue is no longer observed in FlexNet Operations ALM as of the 2023.10 release. Users should follow the instructions in the Verifying Email Addresses and Domains (AWS Only) of the FlexNet Operations User Guide -> Administrator Reference document and ensure the DKIM information is added to and maintained in your organization's DNS records. If you have any questions, contact Revenera Technical Support for assistance. More Information Refer to the Verifying Email Addresses and Domains (AWS Only) of the FlexNet Operations User Guide -> Administrator Reference document.

Introduction This article will discuss how to create a  shortcut based on user input using a property value and Create a shortcut using installscript and delete the shortcut on uninstall Instructions      This article explains how to  create a shortcut based on user request. This information applies to the following InstallShield project types: Basic MSI Installscript MSI Steps to create a Project: Create Basic MSI Project Add a Feature and add component and files inside component Add exe files to component for which we want to create a shortcut. Go to installscript view and Right and add Setup.rul Copy paste the code at the bottom of this article into setup.rul (Replace shortcut name as per your exe added in components Example: Notepad.exe) Make sure CreateShortCut and DeleteShortCut functions are added Go to CustomAction view and add 2 Installscript Custom Actions and rename it.(CreateShortcut,DeleteShortcut) For Create Shortcut CA select the function CreateShortcut  and for Delete Shortcut CA select the function name as DeleteShortcut from drop down Set the Condition for both Customaction (for EX: Create shortcut add condition NOT installed, and for Delete Shortcut add REMOVE~="ALL") And select Install Exec sequence as required. Go to Dialogs and Add a new Interior Dialog dialog  Go to property manager and add 2 property DESKTOP_SHORTCUT and START_MENU_SHORTCUT Make sure the value column is empty, so that the checkbox is unchecked by default Rename the new dialog (Example: ShortcutDialog) And add 2 checkbox like shown below And set above created 2 property to this 2 checkbox filed Now Sequence the new dialog (ShortcutDialog) BACK and NEXT button as needed under behavior.  EX: BACK --> Customer information , NEXT button to Setup Type Similarly in Customer information Dialog the NEXT Button should be change to ShortcutDialog Save and build the project Install the setup.exe and click NEXT and go to Shortcut checkbox dialog Click NEXT and Complete Installation Check shortcut created under desktop and under Appdata folder (EX: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CompanyName)         #include "ifx.h" export prototype CreateShortCut(HWND); export prototype DeleteShortCut(HWND); function CreateShortCut(hMSI) STRING szShortcutFolder, szName, szCommandLine, szWorkingDir ; STRING szIconPath, szShortCutKey,szValue,szValue1; STRING szProgram, szParam, szFolderDir,szCmd; NUMBER nIcon, nFlag, nResult, nvBufferSize; begin //Get Supportdir for icon szIconPath = WINDIR ^ "regedit.exe"; //szIconPath = sMySUPPORTDIR +"\\" + "icon32.ico"; szShortcutFolder = FOLDER_DESKTOP; szName = "DesktopShortcut"; szCommandLine = INSTALLDIR ^ "Notepad2.exe"; LongPathToQuote (szCommandLine, TRUE); szWorkingDir = ""; nIcon = 1; szShortCutKey = ""; nFlag = CS_OPTION_FLAG_REPLACE_EXISTING|CS_OPTION_FLAG_RUN_MINIMIZED; MsiGetProperty(hMSI,"DESKTOP_SHORTCUT",szValue,nIcon); if ( szValue == "1") then Delay (2); // Create the folder shortcut, and show the folder it points to. if ( CreateShortcut(szShortcutFolder, szName, szCommandLine,szWorkingDir, szIconPath, nIcon, szShortCutKey,nFlag) < 0) then Delay (1); MessageBox ("DESKTOP Shortcut Not Created.", SEVERE); endif; endif; //Creating StartMenu Shortcut szIconPath = INSTALLDIR ^ "Explorer.exe"; szShortcutFolder = FOLDER_STARTMENU ^ "Programs\\CompanyName"; szName = "StartmenuShortcut"; szCommandLine = INSTALLDIR ^ "Uno.exe"; LongPathToQuote (szCommandLine, TRUE); szWorkingDir = ""; nIcon = 1; szShortCutKey = ""; nFlag = CS_OPTION_FLAG_REPLACE_EXISTING|CS_OPTION_FLAG_RUN_MINIMIZED; MsiGetProperty(hMSI,"START_MENU_SHORTCUT",szValue1,nIcon); if ( szValue1 == "1") then Delay (2); // Create the folder shortcut, and show the folder it points to. if ( CreateShortcut(szShortcutFolder, szName, szCommandLine,szWorkingDir, szIconPath, nIcon, szShortCutKey,nFlag) < 0) then Delay (1); MessageBox ("STARTMENU Shortcut Not Created.", SEVERE); endif; endif; end; //Script to delete shortcut on uninstallation. function DeleteShortCut(hMSI) #define shortcutName "DesktopShortcut" #define shortcutName1 "StartmenuShortcut" STRING szCompany,szStartMenuPath,startMenuShortcut,szDesktop,szDesktopShortcut; STRING nvSMProp,nvDesktopProp; NUMBER nBuffer; begin nBuffer = MAX_PATH + 1; szDesktop = FOLDER_DESKTOP; szDesktopShortcut = INSTALLDIR ^ "Notepad2.exe"; if (Is(FILE_EXISTS, szDesktopShortcut) = FALSE) then Delay (1); DeleteShortcut(szDesktop, shortcutName); else MessageBox("No shortcut to delete", INFORMATION); endif; szCompany = FOLDER_COMMON_APPDATA + "Microsoft\\Windows\\Start Menu\\Programs\\CompanyName\\"; if (Is(FILE_EXISTS, szDesktopShortcut) = FALSE) then Delay (1); DeleteShortcut(szCompany, shortcutName1); else MessageBox("No shortcut to delete", INFORMATION); endif; end;       More Information Click here for installscript help documentation on create shortcut Click here for installscript help documentation on delete shortcut

Intoduction     This article will discuss how to create a  shortcut based on user input using a property value create a shortcut instead of creating by default. Instructions       This article explains how to  create a shortcut based on user request. This information applies to the following InstallShield project types: Basic MSI   Create Basic MSI Project Add a Feature and a Component which contains a shortcut Select the newly added component and add a Condition CUSTOMCHECKBOX=1  If you have multiple shortcuts, create a new component and add condition like shown  above. Go to property Manager and create a property CUSTOMCHECKBOX and CUSTOMCHECKBOX1. Dont add a value yet. If we add value(1) the checkbox will be checked by default at runtime Now go to Dialog view and create a dialog and name it (Example: Checkbox) Add a  checkbox control  as per your shortcut added and add CUSTOMCHECKBOX and CUSTOMCHECKBOX1 in property field for each checkbox  Since we created a new dialog, we need to sequence it properly in order to see the dialog at runtime Select the newly created dialog[checkbox] and select behaviour node and select Back button and change the value to "Customer Information" Select NEXT button and change the Event DialogName to SetupType Select License Agreement dialog and change the NEXT button to "Customer Information" Select SetupType Dialog --> BACK Button change the dialog to Checkbox Save the ism and build the project  Run the installer, At runtime on checkbox dialog select the checkbox Based on select checkbox, specific shortcut will be created on desktop   More Information  Click here for installshield help document for create shortcut.  

Introduction This article will discuss one possible method of Launching a batch file using a custom action. Instructions To Launch a batch file using Custom Action we should follow below steps   Method:1 Launching from INSTALLDIR   Create a Project and Add your batch file in Files and Folder[INSTALLDIR] Create a New EXE Custom Action [ Type: New EXE , Path referencing a directory] Set the Working Directory: SystemFolder File Name and Command Line: cmd.exe /c  "[INSTALLDIR]test.bat" Return Processing: Synchronous (Check Exit code) In-Script Execution: Immediate Execution Set the Install Exec Sequence "After InstallFinalize" Add a condition if  you want to run this action only on installation EX: Not Installed Method:2 Launching from SUPPORTDIR Create a Project and Add your batch file to Behavior And Logic Supportfiles --> Language Independent  Create a New EXE Custom Action [ Type: New EXE , Path referencing a directory] Set the Working Directory: SystemFolder File Name and Command Line: "[SystemFolder]cmd.exe" /c "[SUPPORTDIR]\test.bat" Return Processing: Synchronous (Check Exit code) In-Script Execution: Deferred Execution in System Context Set the Install Exec Sequence "After InstallFinalize" or "After InstallFiles" Add a condition if  you want to run this action only on installation EX: Not Installed   More Information Click here  for details on how to launch batch file using installscript . Additional Information: "[SystemFolder]cmd.exe /c  "[INSTALLDIR]test.bat" This command calls cmd.exe (the executable for the Windows command prompt) from the location stored in the SystemFolder MSI property and passes cmd.exe the path to the batch file. Cmd.exe accepts various parameters. For example, to have the command prompt window close after launching the batch file, use the /c parameter, as in the example above. To have the command prompt window remain open after launching the batch file, use the /k parameter instead. For more information regarding the parameters accepted by cmd.exe, click here cmd exe  

This article lists the current year's past releases for FlexNet Operations Cloud. For upcoming releases, please see the Software Monetization Release Schedule. (NOTE: This requires you to log into the community as a Revenera customer. ) 2023 Releases -  FlexNet Operations Cloud ALM Release ALM Deployment Environment Production Copy Service (PCS) Data Refresh Date PCS / UAT Date Production Date Production Outage? 2023.09 Data Center Legacy AWS NAM AWS EU   Wednesday, Aug 30, 2023 Tuesday, Sep 12, 2023     AWS Migrated (CLS & UAS)   Thursday, Aug 31, 2023 Wednesday, Sep 13, 2023   2023.08 Data Center Legacy AWS NAM AWS EU   Wednesday, Jul 26, 2023 Wednesday, Aug 9, 2023     AWS Migrated (CLS & UAS)   Thursday, Jul 27, 2023 Thursday, Aug 10, 2023   2023.07 Data Center Legacy AWS NAM AWS EU Monday, Jun 12, 2023 Tuesday, Jun 27, 2023 Tuesday, Jul 11, 2023     AWS Migrated (CLS & UAS)   Wednesday, Jun 28, 2023 Wednesday, Jul 12, 2023   2023.06     Thursday, May 25, 2023 Thursday, Jun 8, 2023   2023.06 (CLS)     Friday, Jun 2, 2023 Friday, Jun 9, 2023   2023.05     Saturday, Apr 29, 2023 Tuesday, May 9, 2023   2023.04     Thursday, Mar 16, 2023 Monday, Apr 3, 2023   2023.03     Wednesday, Feb 22, 2023 Wednesday, Mar 8, 2023   2023.03 (CLS)     Thursday, Feb 23, 2023 Data Center | AWS EMEA | AWS NAM: Wednesday, Mar 8, 2023 AWS Migrated: Thursday, Mar 9, 2023   2023.02     Monday, Jan 30, 2023 Monday, Feb 13, 2023   2023.02 (CLS)     Tuesday, Jan 31, 2023 Monday, Feb 13, 2023   2023.01   Tuesday, Jan 17, 2023 Data Center: Wednesday, Jan 4, 2023 AWS EMEA/NAM: Thursday, Jan 5, 2023 Data Center: Wednesday, Jan 18, 2023 AWS EMEA/NAM: Thursday, Jan 19, 2023   2023.01 (CLS)     Thursday, Jan 5, 2023 Data Center: Thursday, Jan 19, 2023 AWS EMEA/NAM: Friday, Jan 20, 2023     FlexNet Operations Cloud LLM Release Production Copy Service (PCS) Data Refresh Date PCS / UAT Date Production Date Production Outage? 2023.09   Wednesday, Aug 30, 2023 Tuesday, Sep 12, 2023   2023.09 (CLS & UAS)   Thursday, Aug 21, 2023 Wednesday, Sep 13, 2023   2023.08   Wednesday, Jul 26, 2023 Wednesday, Aug 9, 2023   2023.08 (CLS & UAS)   Thursday, Jul 27, 2023 Thursday, Aug 10, 2023   2023.07   Tuesday, Jun 27, 2023 Tuesday, Jul 11, 2023   2023.07 (CLS & UAS)   Wednesday, Jun 28, 2023 Wednesday, Jul 12, 2023   2023.06 Wednesday, May 24, 2023 Thursday, May 25, 2023 Thursday, Jun 8, 2023   2023.06 (CLS)   Friday, Jun 2, 2023   Friday, Jun 9, 2023   2023.05   Tuesday, Apr 25, 2023 Tuesday, May 9, 2023   2023.04   Thursday, Mar 16, 2023 Monday, Apr 3, 2023   2023.03   Wednesday, Feb 22, 2023 Wednesday, Mar 8, 2023   2023.03 (CLS)   Thursday, Feb 23, 2023 Data Center | AWS EMEA | AWS NAM: Wednesday, Mar 8, 2023 AWS Migrated: Thursday, Mar 9, 2023   2023.02   Monday, Jan 30, 2023 Monday, Feb 13, 2023   2023.02 (CLS)   Tuesday, Jan 31, 2023 Monday, Feb 13, 2023   2023.01 Tuesday, Jan 17, 2023 Wednesday, Jan 4, 2023 Wednesday, Jan 18, 2023   2023.01 (CLS)   Thursday, Jan 5 2023 Thursday, Jan 19, 2023    *May include system changes only and no release changes. Please see FlexNet Operations News for confirmation.   2022 Releases -  FlexNet Operations Cloud ALM Release Production Copy Service (PCS) Data Refresh Date PCS / UAT Date Production Date Production Outage? 2022.12 Wednesday, Nov 30, 2022 Thursday, Dec 1, 2022 Thursday, Dec 15, 2022   2022.12 (CLS)   Friday, Dec 2, 2022 Thursday, Dec 15, 2022   2022.11   Wednesday, Nov 2, 2022 Thursday, Nov 17, 2022   2022.10 Monday, Nov 7, 2022 Thursday, Sep 29, 2022 Thursday, Oct 13, 2022   2022.09   Tuesday, Aug 30, 2022 Tuesday, Sep 13, 2022   2022.08   Thursday, Jul 28, 2022 Thursday, Aug 11, 2022   2022.07   Tuesday, Jun 28, 2022 Tuesday, Jul 12, 2022   2022.07 (CLS only)   Tuesday, Jun 28, 2022 Monday, Jul 4, 2022   2022.06   Thursday, May 26, 2022 Thursday, Jun 9, 2022   2022.05 Monday, May 2, 2022 Wednesday, May 4, 2022 No production release   2022.04   Thursday, Mar 31, 2022 Thursday, Apr 14, 2022   2022.03 (CLS)   Friday, Feb 18, 2022 Thursday, Feb 24, 2022 No 2022.03   Wednesday, Mar 2, 2022 Tuesday, Mar 15, 2022 No 2022.02 Tuesday, Jan 25, 2022 Thursday, Jan 27, 2022 Saturday, Feb 12, 2022 Yes 2022.01   Tuesday, Dec 21, 2021 Tuesday, Jan 11, 2022 No   FlexNet Operations Cloud LLM Release Production Copy Service (PCS) Data Refresh Date PCS / UAT Date Production Date Production Outage? 2022.12 Wednesday, Nov 30, 2022 Thursday, Dec 1, 2022 Thursday, Dec 15, 2022   2022.12 (CLS)   Friday, Dec 2, 2022 Thursday, Dec 15, 2022   2022.11   Wednesday, Nov 2, 2022 Thursday, Nov 17, 2022   2022.10 Monday, Nov 7, 2022 Thursday, Sep 29, 2022 Thursday, Oct 13, 2022   2022.09   Tuesday, Aug 30, 2022 Tuesday, Sep 13, 2022   2022.08   Thursday, Jul 28, 2022 Thursday, Aug 11, 2022   2022.07   Tuesday, Jun 28, 2022 Tuesday, Jul 12, 2022   2022.06   Thursday, May 26, 2022 Thursday, Jun 9, 2022   2022.05 Monday, May 2, 2022 Wednesday, May 4, 2022 No production release   2022.04   Thursday, Mar 31, 2022 Thursday, Apr 14, 2022   2022.03 (CLS)   Friday, Feb 18, 2022 Thursday, Feb 24, 2022 No 2022.03   Wednesday, Mar 2, 2022 Tuesday, Mar 15, 2022 No 2022.02 Tuesday, Jan 25, 2022 Thursday, Jan 27, 2022 Saturday, Feb 12, 2022 Yes 2022.01   Tuesday, Dec 21, 2021 Tuesday, Jan 11, 2022 No *May include system changes only and no release changes. Please see FlexNet Operations News for confirmation.   2021 Releases -  FlexNet Operations Cloud ALM Release Production Copy Service (PCS) Data Refresh Date PCS / UAT Date Production Date Production Outage? 2021.12   Friday, Dec 3, 2021 Thursday, Dec 16, 2021 No 2021.12 (CLS)   Friday, Dec 3, 2021 Thursday, Dec 9, 2021 No 2021.11 Monday, Nov 1, 2021 Tuesday, Nov 2, 2021 Tuesday, Nov 16, 2021 No 2021.11 (CLS)   Thursday, Nov 4, 2021 Tuesday, Nov 16, 2021 No 2021.10   Thursday, Sep 30, 2021 Wednesday, Oct 13, 2021 No 2021.10 (CLS)   Thursday, Oct 7, 2021 Saturday, Oct 23, 2021 Yes 2021.09 Monday, Aug 30, 2021 Tuesday, Aug 31, 2021 Tuesday, Sep 14, 2021 No 2021.08   Thursday, Jul 29, 2021 Thursday, Aug 12, 2021 No 2021.07   Tuesday, Jun 29, 2021 Thursday, Jul 15, 2021 No 2021.06   Thursday, Jun 3, 2021 Thursday, Jun 17, 2021 No 2021.06 (CLS)   Friday, Jun 11, 2021 Tuesday, Jun 22, 2021 No 2021.05 Tuesday, Apr 20, 2021 - Wednesday, Apr 21, 2021 Thursday, Apr 22, 2021 Saturday, May 15, 2021 Yes 2021.05 (CLS)   Thursday, Apr 22, 2021 Tuesday, May 11, 2021 No 2021.04   Wednesday, Apr 7, 2021 Tuesday, Apr 13, 2021 No 2021.03   Tuesday, Mar 2, 2021 Tuesday, Mar 16, 2021 No 2021.02 Wednesday, Jan 27, 2021 Thursday, Jan 28, 2021 Thursday, Feb 11, 2021 No 2021.01   Thursday, Dec 17, 2020 Tuesday, Jan 12, 2021 No 2021.01 (CLS)   Thursday, Dec 17, 2020 Saturday, Jan 16, 2021 Yes   FlexNet Operations Cloud LLM Release Production Copy Service (PCS) Data Refresh Date PCS / UAT Date Production Date Production Outage? 2021.12   Friday, Dec 3, 2021 Thursday, Dec 16, 2021 No 2021.12 (CLS)   Friday, Dec 3, 2021 Thursday, Dec 9, 2021 No 2021.11 Monday, Nov 1, 2021 Tuesday, Nov 2, 2021 Tuesday, Nov 16, 2021 No 2021.11 (CLS)   Thursday, Nov 4, 2021 Tuesday, Nov 16, 2021 No 2021.10   Thursday, Sep 30, 2021 Wednesday, Oct 13, 2021 No 2021.10 (CLS)   Thursday, Oct 7, 2021 Saturday, Oct 23, 2021 Yes 2021.09* Monday, Aug 30, 2021 Tuesday, Aug 31, 2021 Tuesday, Sep 14, 2021 No 2021.08   Thursday, Jul 29, 2021 Thursday, Aug 12, 2021 No 2021.07 (CLS only)   Tuesday, Jun 29, 2021 Thursday, Jul 15, 2021 No 2021.06   Thursday, Jun 3, 2021 Thursday, Jun 17, 2021 No 2021.06 (CLS)   Friday, Jun 11, 2021 Tuesday, Jun 22, 2021 No 2021.05 Tuesday, Apr 20, 2021 - Wednesday, Apr 21, 2021 Thursday, Apr 22, 2021 Saturday, May 15, 2021 Yes 2021.05 (CLS)   Thursday, Apr 22, 2021 Tuesday, May 11, 2021 No 2021.04   Wednesday, Apr 7, 2021 Tuesday, Apr 13, 2021 No 2021.03   Tuesday, Mar 2, 2021 Tuesday, Mar 16, 2021 No 2021.02 Wednesday, Jan 27, 2021 Thursday, Jan 28, 2021 Thursday, Feb 11, 2021 No 2021.01   Thursday, Dec 17, 2020 Tuesday, Jan 12, 2021 No 2021.01 (CLS)   Thursday, Dec 17, 2020 Saturday, Jan 16, 2021 Yes *May include system changes only and no release changes. Please see FlexNet Operations News for confirmation. 2020 Releases -  FlexNet Operations Cloud ALM Release Production Copy Service (PCS) Data Refresh Date PCS / UAT Date Production Date Production Outage? 2020 R1 Wednesday, Jan 8, 2020 Thursday, Jan 9, 2020 Thursday, Feb 6, 2020 No 2020 R1 SP1   Monday, Feb 24, 2020 Monday, Mar 09, 2020 No 2020 R1 SP2   Thursday, Mar 26, 2020 Thursday, Apr 09, 2020 No 2020 R2 Wednesday, Apr 13, 2020 Tuesday, Apr 14, 2020 Wednesday, May 20, 2020 No 2020 R2 SP1   Thursday, Jun 4, 2020 Thursday, Jul 2, 2020 No 2020 R3 Friday, Jul 10, 2020 PCS: Wednesday, Jul 15, 2020 UAT: Monday, Jul 27, 2020 Thursday, Aug 13, 2020 No 2020 R3 (CLS)     Saturday, Aug 15, 2020 Yes 2020 R3 SP1   Thursday, Sep 3, 2020 Tuesday, Sep 22, 2020 No 2020 R3 SP1 Hotfix (CLS)   Thursday, Sep 17, 2020 Thursday, Oct 1, 2020 No 2020 R3 SP2   Wednesday, Sep 30, 2020 Wednesday, Oct 14, 2020 No 2020 R3 SP2 (CLS)   Wednesday, Sep 30, 2020 Wednesday, Nov 4, 2020 No 2020 R3 SP3 Friday, Oct 30, 2020 - Monday, Nov 2, 2020 Tuesday, Nov 3, 2020 Thursday, Dec 3, 2020 No 2020 R3 SP3 (CLS only)   Monday, Nov 23, 2020 Thursday, Dec 3, 2020 No   FlexNet Operations Cloud LLM Release Production Copy Service (PCS) Data Refresh Date PCS / UAT Date Production Date Production Outage? 2020 R1 Wednesday, Jan 8, 2020 Thursday, Jan 9, 2020 Thursday, Feb 6, 2020 No 2020 R1 SP1   Monday, Feb 24, 2020 Monday, Mar 09, 2020 No 2020 R1 SP2   Thursday, Mar 26, 2020 Thursday, Apr 09, 2020 No 2020 R2 Wednesday, Apr 13, 2020 Tuesday, Apr 14, 2020 Wednesday, May 20, 2020 No 2020 R2 SP1   Thursday, Jun 4, 2020 Thursday, Jun 18, 2020 No 2020 R3 Friday, Jul 10, 2020 PCS: Wednesday, Jul 15, 2020 UAT: Monday, Jul 27, 2020 Thursday, Aug 13, 2020 No 2020 R3 (CLS)     Saturday, Aug 15, 2020 Yes 2020 R3 SP1   Thursday, Sep 3, 2020 Tuesday, Sep 22, 2020 No 2020 R3 SP1 Hotfix (CLS)   Thursday, Sep 17, 2020 Thursday, Oct 1, 2020 No 2020 R3 SP2   Wednesday, Sep 30, 2020 Wednesday, Oct 14, 2020 No 2020 R3 SP2 (CLS)   Wednesday, Sep 30, 2020 Wednesday, Nov 4, 2020 No 2020 R3 SP3 Friday, Oct 30, 2020 - Monday, Nov 2, 2020 Tuesday, Nov 3, 2020 Thursday, Dec 3, 2020 No 2020 R3 SP3 (CLS only)   Monday, Nov 23, 2020 Thursday, Dec 3, 2020 No  

Introduction Revenera Status Dashboard displays real-time status and schedule maintenance information of Revenera cloud products. Users may subscribe to the dashboard to receive notifications about upcoming maintenance events and site outages.  This article provides instructions for subscribing to the Revenera Status Dashboard.  Instructions 1. On the Revenera Status Dashboard (https://status.revenera.com/), click the Subscribe to Updates button 2. Enter the email address where status notifications will be sent and click Subscribe Via Email 3. Optionally, you may subscribe to be notified by text message by clicking the phone icon and providing your phone number  4. Complete the captcha verification 5. Select the components you'd like to receive status notifications  6. Click Save at the bottom of the page More Information For information about the FlexNet Operations Cloud environments, please refer to the Understanding the FlexNet Operations Cloud Editions and Deployment Environments article.

Summary: This article discusses installers getting aborted without any proper message when using Java 17.0.8 or Java 11.0.20. Symptoms : When an Installer uses java 17.0.8 or 11.0.20 to execute itself the installer abruptly crashes with below stack trace and message “This Application has Unexpectedly Quit: Invocation of this Java Application has caused an ExceptionInInitializerError. This application will now exit. (LAX)”. Cause : A new JRE enhancement patch in Java 11 and Java 17 causes installers to crash due to new restrictions on ZipFS. As part of the fix for JDK-8251329, restrictions were added to the ZipFS provider to throw an exception if opening a ZIP file that contained entries with "." or ".." in its name elements. This behavior change may be problematic in older environments where modification of such ZIP files may be difficult. Workaround : A new system property java.util.zip.ZipFile has been updated to provide additional validation of ZIP64 extra fields when opening a ZIP file. This validation may be disabled by setting the system property jdk.util.zip.disableZip64ExtraFieldValidation to true.. InstallAnywhere already provides a feature called additional arguments which can be used to modify the value of jdk.util.zip.disableZip64ExtraFieldValidation=true system property. In Windows: 1. Navigate to Project->JVM Settings->Installer Settings 2. Add argument -Djdk.util.zip.disableZip64ExtraFieldValidation=true in Additional arguments TextField In Linux, set JAVA_TOOL_OPTIONS= -Djdk.util.zip.disableZip64ExtraFieldValidation=true environment variable in /etc/environment file or vi ~/.bashrc

Summary This article describes the steps to generate a verbose log file of the InstallShield Installation Developer Environment (IDE) itself or the InstallShield SAB itself. Synopsis This article describes the steps to generate a verbose log file of the InstallShield Installation Developer Environment (IDE) itself or the InstallShield SAB itself. This log can be useful to assist in troubleshooting InstallShield IDE initialization problems, etc. Discussion To generate the log file, perform the following: For InstallShield 2009 and earlier: Open a Command Prompt Window. Change to the InstallShield installation directory System subdirectory. For InstallShield 2009, the default path is: C:\Program Files\InstallShield\2009\System Enter the following command: isdev.exe -verbose The log will be located in the InstallShield installation directory System subdirectory ( i.e., C:\Program Files (x86)\InstallShield\2014\System). The name of the log file depends on the version of InstallShield: For InstallShield 12 and older, the log file name is: iside.verbose For InstallShield 2008 and newer, the log file name is: InstallShield.log   For InstallShield 2010 and later:   A registry entry is used to control logging. The registry entry is: [HKEY_CURRENT_USER\Software\InstallShield\<InstallShield Version>\Professional] "DoVerboseLogging"=dword:00000001 Where the InstallShield Version is: 16.0 for InstallShield 2010 17.0 for InstallShield 2011 18.0 for InstallShield 2012 19.0 for InstallShield 2012 Spring 20.0 for InstallShield 2013 21.0 for InstallShield 2014 22.0 for InstallShield 2015 23.0 for InstallShield 2016 24.0 for InstallShield 2018 25.0 for InstallShield 2019 26.0 for InstallShield 2020 27.0 for InstallShield 2021 28.0 for InstallShield 2022 29.0 for InstallShield 2023     For your convenience, we have attached .reg files that will update the Windows Registry to enable and disable logging. To use these .reg files, perform the following steps: Make a backup of the Windows Registry. Download the attached isdev_logging.zip file, and uncompress the *Logging.reg files to a folder on the same machine the InstallShield product is installed on. Based on the version of InstallShield, execute the appropriate Enable Logging.reg file to enable verbose logging of the InstallShield IDE startup, etc. (By default, this type of logging is disabled.) For example, to enable logging for InstallShield 2013, from Windows Explorer, double click on the file labeled Enable_IS2013_Logging.reg. When the InstallShield IDE is executed, a log file named InstallShield.log will be generated in the InstallShield product System folder ( For example, the file path for the log generated for InstallShield 2013 will be, "C:\Program Files\InstallShield\2013\System\InstallShield.log"). To disable verbose logging of the InstallShield IDE, based on the version of InstallShield, execute the appropriate Disable Logging.reg file. (For example, to disable logging for InstallShield 2013, execute the file labeled Disable_IS2013_Logging.reg) Related KB Articles Q104807 Q105237 Q110697 Q106849 Additional Information If only the splash screen appears while opening the InstallShield IDE, try manually registering the file "scrrun.dll" in the Windows\System folder. Specific steps on registering a file manually can be found in article titled 'How Do I Manually Register a File?' at the InstallShield Consumer Central site. For information on creating other types of log files, please reference the articles in the Related KB Articles section.

Introduction Abort installation if there is a symbolic link Instructions Step 1 : Create New Project with Either IA2021/IA2022/IA2023 in Linux Step 2 : Pre-Install sequence > Add Execute Script/Batch file action > find "installation folder name which you want find whether it has symbolic link or not" -type l     Step 3 : Add Execute custom code action > Add Abort Installation action jar with proper class name > rules > $EXECUTE_STDOUT$ does not equals $EMPTY_STRING$ Step 4 : Build and run the Project.  

In our ongoing effort to maintain security posture, Revenera enabled enhanced domains for the Revenera Community on October 6, 2023. Support for enhanced domains required changing the domain name for several community pages, including but not limited to the Product and License Center and Case Portal. We advise community users to add the domain (https://flexerasoftware.my.site.com) to their organization's allow list to ensure continued access to community resources: If you have any questions, please reach out to Revenera Technical Support.

Debugging an Installscript Installation on Any Computer Summary In order to find bugs that are occurring only with certain hardware or software configurations, you may need to debug your installation on a system other than your development machine. In that case, it is not necessary to install InstallShield on that computer. Resolution 1 - On testing machine, install C++ 2012 redistributable x86 2 - Create folder on desktop to have a place to store files 3 - Copy ISDbg.exe and SciLexer.dll (ISdbg.chm is optional)from the InstallShield\System folder to the new folder on the test machine (Be sure to use the same version of the files that the project used, ie a 2021 project will use the files from the 2021 version of InstallShield) 4 - Using an administrative command prompt, register ISDbg.exe using the command below: ISDbg.exe /REGSERVER 5 - Copy the entire project folder from the development machine to the new folder on the test machine 6 - On the command prompt, change directories to the setup.exe and run the command below: setup.exe /d"<Path to Setup.dbg>" (setup.dbg will be found in the "scripts" subfolder of your project) 7 - Walk through your installer until the debugger is triggered. For Basic MSI: Debugging Basic MSI project with InstallScript CustomAction setup.exe /v"ISSCRIPTDEBUG=1 ISSCRIPTDEBUGPATH=\"C:\Debugger\My Project Name-14\Script Files\"" NOTE: From Installshield 2023 onwards to run the IS2023 debugger ISdbg.exe in different machine, we need to install VC2022redist.exe (Please install attached VC2022redist package then try debugging) Reference: Debugging Installscript help  Setup.exe commandline Parameters 

Question Where can users find Amazon Web Services (AWS) security documents? Answer Amazon's security documentation, including their SOC (System and Organization Controls) 2 Type II report, is available via the AWS Artifact service. AWS account administrators can download the report using this self-service tool. If you do not have an AWS account, you will need to register for an account to access the report.  The reports from AWS Artifact are watermarked with the account they are downloaded from and sharing the document outside the of the registered account is not permitted. More Information For more information about AWS SOC Compliance reports and how to registered an account on AWS Artifact Service, please refer to the following resources: https://aws.amazon.com/compliance/soc-faqs/ https://aws.amazon.com/artifact/getting-started/

NOTE: The instructions in this article explain how to use Usage Intelligence Reporting API v2.1.0 to create custom reports and to perform data export. Information for using the Reporting API v3.0 to perform these tasks will be provided in a separate article. The Usage Intelligence Interactive Dashboard is a mine of information which provides runtime intelligence related to product usage, environment statistics, event tracking, licensing information as well as user engagement and churn reports. However, we understand that some customers might have custom reporting requirements as well as needs to export Business Intelligence data from Usage Intelligence to integrate with third-party products or platforms. For this reason, Revenera has developed a fully-fledged Reporting Web API that is available to all premium customers. The Reporting Web API gives you the flexibility to create your own custom reports according to your requirements and retrieve the data either in raw JSON format or as a readily formatted HTML chart or table. Such data can then be parsed and/or integrated directly into your own reporting platform, CRM, ERP solution, etc. In this blog post, we will introduce you to the Usage Intelligence Reporting Web API, explain the basics of building reports, and provide some example requests using JavaScript. By the end of the post you will learn how to: Authenticate with the Server Build Custom Reports Get Formatted Data Get Raw JSON Data The Basics The Reporting API handles data requests as JSON objects and can reply either with raw data as a JSON object or with a formatted chart or table wrapped in an HTML page. There are two request methods which you can use to get data from the server: HTTP POST – This is the preferred method since it is more suited for long data requests and should be used if you’re building a custom application that handles raw data. When using this method the JSON request object is sent as POST data. HTTP GET – This method is ideal when requesting formatted data to be included in an HTML page. When using this method the JSON request object is appended to the URL as a parameter. The complete URL can be used as the source of an iframe or can be manually entered in the address bar of the browser. When submitting a GET request, the following URL parameters are accepted: query – The JSON request object should be specified in this parameter. This value needs to be URL encoded. resultFormat – Specify the type of response required. The accepted values are “raw”, “highcharts”, and “table”. If not specified it will default to "raw". hcType – Only required if resultFormat is set to “highcharts” and is used to specify the type of chart. The accepted values are “pie”, "bar", "column", and "line". uiHcTitle – Optional parameter when resultFormat is set to "highcharts" or "table" to specify a title for the chart / table. All requests made to the Reporting API can be done both via a POST or GET request, with the exception of logging in which can only be done via a POST request. More information on POST vs GET requests can be found in the Usage Intelligence Reporting API v2.1.0 Guide. Authenticating With the Server The first step to being able to generate reports is to authenticate with the server. The Web API supports two methods of authentication, either via a POST request to https://api.revulytics.com/auth/login, which returns a session ID as part of the JSON response, or else via cookies if getting formatted data. Logging In - Using a Session ID This method is preferred if the API is accessed from a script or application which needs to authenticate without using a web browser. The user and session ID are managed by the application and they will need to be sent with every request to the API as part of the JSON data. To log in using this method the request JSON object must specify the user and password, which are the email address and password you use to log in to your Usage Intelligence account, and useCookies set to false: { "user": "user@mycompany.com", "password": "mypassword", "useCookies": true } The JSON response will include the status which reflects whether the authentication was successful or not, and if successful it will include the sessionId to be used in all further requests: { "status": "OK", "sessionId": "VSB8E2BzSC2eZSJm4QmTpA" } Logging In - JavaScript Example In the following JavaScript example, we are making a POST request to log in and chose to manage the session ID within the script. The sessionId is retrieved from the JSON response and set as the value of a hidden field with ID "hSessionID". function login() { var request = new XMLHttpRequest(); var url = "https://api.revulytics.com/auth/login"; request.open("POST", url, true); request.setRequestHeader("Content-type", "application/json"); reques.setRequestHeader("Accept", "application/json"); request.onreadystatechange = function() { if (request.readyState == 4 && request.status == 200) { //Parse the response to a JSON object var json = JSON.parse(request.responseText); //Set value of hidden input field to the session ID for future use document.getElementById("hSessionID").value = json.sessionId; } } var data = JSON.stringify( { "user":"user@mycompany.com", "password":"mypassword", "useCookies":false }); request.send(data); } Logging In - Using Cookies If the API is accessed via a web browser and the data is requested as a formatted chart or table, this method is the most convenient way to manage the authentication session. When using cookies, the login is done by the user when viewing the page in their web browser. The first time data is requested, the API will return the Usage Intelligence login page and the requested chart or table will be displayed once you log in successfully. Once a cookie for api.revulytics.com which contains a valid session ID is created, subsequent requests for data will return the chart or table straight away. Logging Out Logging out is done via a GET or POST request to https://api.revulytics.com/auth/logout, and this invalidates the session that was created when you logged in. If cookies were used to log in, then no JSON data should be sent and the request will simply delete the cookie and invalidate the session from the server. Otherwise, if the session was being managed by a script or application, JSON data should be sent with the request which includes the user and sessionId: { "user": "user@mycompany.com", "sessionId": "VSB8E2BzSC2eZSJm4QmTpA" } By default a GET request to log out returns a user friendly HTML message. However if a POST request was done the response will be a JSON object which includes the status, and if the request fails it will also include a reason. { "status": "OK" } Logging Out - JavaScript Example In the following example, we are making a POST request to log out and specifying the user and sessionId, which we saved as the value of the hidden field with ID "hSessionID" when we logged in. function logout() { var request = new XMLHttpRequest(); var url = "https://api.revulytics.com/auth/logout"; request.open("POST", url, true); request.setRequestHeader("Content-type", "application/json"); request.setRequestHeader("Accept", "application/json"); var data = JSON.stringify( { "user":"user@mycompany.com", "sessionId":document.getElementById("hSessionID").value }); request.send(data); } More information about Authentication is available in the the Usage Intelligence Reporting API v2.1.0 Guide. Building Custom Reports Once you have generated a session ID you can start requesting report data. The Reporting API currently supports six types of requests for data: Generic Reports - Get reporting data related to session runtimes, user profile info, user distribution, and activity for each product version, edition, and language, geolocation, operating system, and platform info, etc. This data can be retrieved for new, active, and lost users with various filtering and segmentation options. These reports can be generated for a past date range where you specify the start/end date or else on the latest known data of tracked users based on the date last seen. Event Tracking Management - Used to get a list of event names and categories that have been reported by your application and which of these are currently enabled for collection. Event Tracking Reports - Get report data on event usage, including event usage counts in the form of a data table or timeline, and advanced event tracking reports with filtering and segmentation options. Churn-Related Reports - Get user profile info related to lost users, including event usage and runtime statistics for the time they were still engaged with your product before they were declared lost. License Key Registry Management - Used to query the license key registry, retrieve license key usage details, get a list of abused keys, add new keys to the registry, or update license key properties for existing keys such as to sync data with your CRM or licensing server. Metadata Queries - Used to get a list of available filtering and segmentation properties or a list of possible property values that have been reported by your application. If you’re providing filtering and segmentation in your application, you can use this to populate the list of filtering and segmentation options that the user can choose from. In the next sections, we will go through some examples to get formatted and raw data by doing a request for Generic Reports. Getting Formatted Data If you would like to display data from Usage Intelligence in an HTML page, then getting formatted data will make this easy for you to show such data in the form of a chart or table. Let’s take an example where we need to get a chart of our product version distribution for current data, formatted as a bar chart like the following: We can get this data by making a request for a Generic Report and in order to get a ready formatted chart, we must make a GET request. Building the Request JSON An explanation of each property that needs to be included in the request JSON can be found in the Usage Intelligence Reporting API v2.1.0 Guide. The following is an example of the JSON object to get the Version Distribution report we need: { "productId": 2376158762, "startDate": "2015-12-18", "clientStatus": ["active", "new", "lost"], "levels": { "level1": { "sort": "active", "segments": [{ "limit": 10, "type": "regex", "split": true, "value": ".*" }], "property": "prodVersion", "sortDirection": "desc" } }, "daysUntilDeclaredLost": 30, "dateReportedLost": "dateDeclaredLost", "globalFilters": {} } Building the URL The request will need to be made to https://api.revulytics.com/reporting/generic and the following parameters must be included in the URL: query - Specify the request JSON object in this parameter resultFormat - Use "highcharts" as the result format hcType - In order to get a bar chart this value needs to be set to "bar" uiHcTitle - Specify the title of the chart, in our example, this is set to "Version Distribution" Getting Formatted Data - JavaScript Example In the following example, we are building the URL to get the formatted chart, and then set the source of an iframe with ID "chart" to that URL. function getFormattedData() { var json = { "productId": 2376158762, "startDate": "2015-12-18", "clientStatus": ["active", "new", "lost"], "levels": { "level1": { "sort": "active", "segments": [{ "limit": 10, "type": "regex", "split": true, "value": ".*" }], "property": "prodVersion", "sortDirection": "desc" } }, "daysUntilDeclaredLost": 30, "dateReportedLost": "dateDeclaredLost", "globalFilters": {} }; //Encode the JSON object var encodedJson = encodeURIComponent(JSON.stringify(json)); //Build the URL var url = "https://api.revulytics.com/reporting/generic/current"; url += "?query=" + encodedJson + "&amp;resultFormat=\"highcharts\""; url += "&amp;hcType=\"bar\"&amp;uiHcTitle=Version Distribution"; //Set the iframe source as the URL document.getElementById("chart").src=url; } Getting Raw Data If you are building a custom application then getting raw data as a JSON object will allow you to parse, format, and present the data in any way you need. In this example we want to give the users of our application the ability to enter a license key and retrieve the user profile data related to that key, similar to the following: We can get each of these data by making a request for a Generic Report and specifying the property we need. There are two different types of properties available, those which are string-based such as the license type and status, and those which are numeric such as the RAM and display resolution. Depending on the type of property you are requesting, you will need to specify the segmentation accordingly. More information on segmentation and levels can be found in the Usage Intelligence Reporting API v2.1.0 Guide. String Properties In the following JSON request, we are segmenting the report by operating system version using the os.version property, and filtering the results by the specified license key using the licenseKey filter. { "user": "user@mycompany.com", "sessionId": "9AEH8SOY6EGD9U27SMV7Q61QYDTBCPH0", "productId": 2376158762, "startDate": "2015-12-14", "clientStatus": ["lost","active","new"], "levels": { "level1": { "sort": "active", "segments": [{ "limit": 10, "type": "regex", "split": true, "value": ".*" }], "property": "os.version", "sortDirection": "desc" } }, "daysUntilDeclaredLost": 30, "dateReportedLost": "dateDeclaredLost", "globalFilters": { "licenseKey": { "type": "string", "value": "1Yh5-JKQ2-73FD-BK55" } } } The following is an example of the expected JSON response. In this case, the license key specified has only been used on a Microsoft Windows 7 operating system, however, if the license key was used on multiple machines with a different operating system, these would have been included in the JSON response as well. { "status": "OK", "levelLabels": { "level1": "os.version" }, "results": { "level1": { "Microsoft Windows 7": { "totals": { "lost": 0, "active": 1, "new": 0 } } } } } Numeric Properties In the following JSON request, we are segmenting the report by RAM using the ram property, and filtering the results by the specified license key using the licenseKey filter. { "user": "user@mycompany.com", "sessionId": "9AEH8SOY6EGD9U27SMV7Q61QYDTBCPH0", "productId": 2376158762, "startDate": "2015-12-14", "clientStatus": ["lost","active","new"], "levels": { "level1": { "sort": "active", "segments": [{ "segmentLabel": "0 - 512 MB", "type": "numberRange", "max": 511 }, { "segmentLabel": "512 MB - 1GB", "type": "numberRange", "min": 512, "max": 1023 }, { "segmentLabel": "1GB - 2GB", "type": "numberRange", "min": 1024, "max": 2047 }, { "segmentLabel": "2GB - 4GB", "type": "numberRange", "min": 2048, "max": 4095 }, { "segmentLabel": "4GB - 8GB", "type": "numberRange", "min": 4096, "max": 8191 }, { "segmentLabel": "8GB - 16GB", "type": "numberRange", "min": 8192, "max": 16383 }, { "segmentLabel": "16GB+", "type": "numberRange", "min": 16384 }], "property": "ram", "sortDirection": "desc" } }, "daysUntilDeclaredLost": 30, "dateReportedLost": "dateDeclaredLost", "globalFilters": { "licenseKey": { "type": "string", "value": "1Yh5-JKQ2-73FD-BK55" } } } The following is an example of the expected JSON response. In this case, the license key specified has only been used on a device with 4GB – 8GB RAM, however, if the license key was used on multiple machines with different RAM, these would have been included in the JSON response as well. { "status": "OK", "levelLabels": { "level1": "ram" }, "results": { "level1": { "4GB - 8GB": { "totals": { "lost": 0, "active": 1, "new": 0 } } } } } Getting Raw Data - JavaScript Example In the following example, we are sending the JSON request to get the operating system versions filtered by the license key. Once we get the result, we are looping through the level1 properties to get all the operating systems that the key was used on and displaying these in a span with ID "sOS". function getRawData() { var licenseKey = "1Yh5-JKQ2-73FD-BK55"; var request = new XMLHttpRequest(); var url = "https://api.revulytics.com/reporting/generic/current"; request.open("POST", url, true); request.setRequestHeader("Content-type", "application/json"); request.setRequestHeader("Accept", "application/json"); request.onreadystatechange = function() { if (request.readyState == 4 && request.status == 200) { //Parse the response to JSON var json = JSON.parse(request.responseText); var strDisplay = ""; //Loop through the leve11 properties and add each key to a string var result = json.results.level1; for (var key in result) { strDisplay += key + " "; } //Set the text of span with ID sOS to the string document.getElementById("sOS").innerHTML = strDisplay; } } var data = JSON.stringify({ "user": "user@mycompany.com", "sessionId": "9AEH8SOY6EGD9U27SMV7Q61QYDTBCPH0", "productId": 2376158762, "startDate": "2015-12-14", "clientStatus": ["lost","active","new"], "levels": { "level1": { "sort": "active", "segments": [{ "limit": 10, "type": "regex", "split": true, "value": ".*" }], "property": "os.version", "sortDirection": "desc" } }, "daysUntilDeclaredLost": 30, "dateReportedLost": "dateDeclaredLost", "globalFilters": { "licenseKey": { "type": "string", "value": "1Yh5-JKQ2-73FD-BK55" } } }); request.send(data); } The full JavaScript example can be downloaded from the attached files.