|
| 1 | +--- |
| 2 | +title: v4.12.4 |
| 3 | +type: patch |
| 4 | +--- |
| 5 | + |
| 6 | +**Fixes:** |
| 7 | + |
| 8 | +* Fix possible NPEs during tag binding - [apiserver/#4595] |
| 9 | +* Fix false negatives in CPE matching for ANY and NA versions - [apiserver/#4612] |
| 10 | +* Refactor `VulnerabilityAnalysisTask` to be more efficient - [apiserver/#4625] |
| 11 | +* Refactor `VulnerabilityManagementUploadTask` to be more efficient - [apiserver/#4626] |
| 12 | +* Bump Temurin base image to `21.0.6_7` - [apiserver/#4628] |
| 13 | +* Fix erroneous URL-encoding of the Maven groupId - [apiserver/#4629] |
| 14 | +* Handle invalid CVSS vectors and processing failures for OSV - [apiserver/#4638] |
| 15 | +* Fix broken ordering by SWID Tag ID in component search view - [frontend/#1155] |
| 16 | + |
| 17 | +For a complete list of changes, refer to the respective GitHub milestones: |
| 18 | + |
| 19 | +* [API server milestone 4.12.4](https://github.com/DependencyTrack/dependency-track/milestone/48?closed=1) |
| 20 | +* [Frontend milestone 4.12.4](https://github.com/DependencyTrack/frontend/milestone/33?closed=1) |
| 21 | + |
| 22 | +We thank all organizations and individuals who contributed to this release, from logging issues to taking part in discussions on GitHub & Slack to testing of fixes. |
| 23 | + |
| 24 | +###### dependency-track-apiserver.jar |
| 25 | + |
| 26 | +| Algorithm | Checksum | |
| 27 | +|:----------|:---------| |
| 28 | +| SHA-1 | 6467242cb3ce65fb128ded6e4d40bd45bf3c74f3 | |
| 29 | +| SHA-256 | 9abd2ec5091645779d1eecbcad0ed78c4175565fe93eddce8b600113fe66f476 | |
| 30 | + |
| 31 | +###### dependency-track-bundled.jar |
| 32 | + |
| 33 | +| Algorithm | Checksum | |
| 34 | +|:----------|:---------| |
| 35 | +| SHA-1 | a27297edf0da4d208c3b89d31fcd441958767e48 | |
| 36 | +| SHA-256 | fe490211de5988fb651a8e869e36d46c33caca030b26a61172e9fc49b0d94404 | |
| 37 | + |
| 38 | +###### frontend-dist.zip |
| 39 | + |
| 40 | +| Algorithm | Checksum | |
| 41 | +|:----------|:-----------------------------------------------------------------| |
| 42 | +| SHA-1 | 182da8ebc1cde3a5ca89db6649afdd19be4f63a4 | |
| 43 | +| SHA-256 | bf2cb6079d36b113645f4c9dd31441bbcdd188b7a003f05947569007ff9d4713 | |
| 44 | + |
| 45 | +###### Software Bill of Materials (SBOM) |
| 46 | + |
| 47 | +* API Server: [bom.json](https://github.com/DependencyTrack/dependency-track/releases/download/4.12.4/bom.json) |
| 48 | +* Frontend: [bom.json](https://github.com/DependencyTrack/frontend/releases/download/4.12.4/bom.json) |
| 49 | + |
| 50 | +[apiserver/#4595]: https://github.com/DependencyTrack/dependency-track/pull/4595 |
| 51 | +[apiserver/#4612]: https://github.com/DependencyTrack/dependency-track/pull/4612 |
| 52 | +[apiserver/#4625]: https://github.com/DependencyTrack/dependency-track/pull/4625 |
| 53 | +[apiserver/#4626]: https://github.com/DependencyTrack/dependency-track/pull/4626 |
| 54 | +[apiserver/#4628]: https://github.com/DependencyTrack/dependency-track/pull/4628 |
| 55 | +[apiserver/#4629]: https://github.com/DependencyTrack/dependency-track/pull/4629 |
| 56 | +[apiserver/#4638]: https://github.com/DependencyTrack/dependency-track/pull/4638 |
| 57 | + |
| 58 | +[frontend/#1155]: https://github.com/DependencyTrack/frontend/pull/1155 |
0 commit comments