Humio Server 1.4.6 Archive (2019-03-04)

Version?Type?Release Date?Availability?End of Support

Security

Updates

Upgrades

From?

Config.

Changes?
1.4.6Archive2019-03-04

Cloud

2020-11-30No1.3.2No

Available for download two days after release.

JAR ChecksumValue
MD58cf206c7d6972c1268f9b01d78b231a7
SHA1b2b550a80c08715ee6a5f073612e05da7e16468d
SHA25638aaad962f12cd6d3bc44d0d2467cd9c8e6d12568f9fbe2cd527fbfa23895968
SHA512f078c07a386aa88ac910f198d81fd6d8d230c5e5e3b205afad6a29741ab1a4e6cb918828d8e2e1fe16e8c3e705705b6eeab5d0cfce17740367ba97b8d0804fe4

Bug Fix Release

Fixed in this release

  • Summary

    • Prevent 'http response splitting' attack in the "export as" function.

    • The personal sandbox was missing in list of visible repos for non-root users when READ_GROUP_PERMISSIONS_FROM_FILE was enabled.

    • ENABLE_PERSONAL_API_TOKENS defaults to true. When set to false the API tokens are no longer valid as auth-tokens.

    • When @timestamp is in the filter part of the search then let that limit the timeinterval as if selected in the Time Selector.