Release v2.7.3

[2.7.3] - 2024-10

Fixed

• Update base python image to mitigate CVE-2024-45490, CVE-2024-45491, CVE-2024-45492, CVE-2023-7104

Release v2.7.2

[2.7.2] - 2024-09

Fixed

• Some user sesssions not appearing in session table due to batchWrite API limit being reached

v2.7.1

[2.7.1] - 2024-08

Added

• Security.md file

Fixed

• Workspace analysis failing when pervious data is recorded in database but empty.
• Workspace analysis failing when timestamps from user connected data doesn't exist in other metric data.
• Workspace only reporting 24 hour period
• Workspace not reporting tags
• Updated micromatch to mitigate CVE-2024-4067.

v2.7.0

[2.7.0] - 2024-07

Added

• Workspace performance metrics
• DynamoDB tables for workspace data and for individual user sessions
• Auto-updating container image for most recent patches up to next minor release
• Private subnets for Fargate container
• Powertools logging
• Operational insights CloudWatch dashboard
• Support for G4DN workspaces

Fixed

• sts token expired after one hour

v2.6.6

[2.6.6] - 2024-07

Fixed

• Updated the base python image in the Dockerfile used to mitigate CVE-2023-50387, CVE-2023-5678, CVE-2024-0727, CVE-2023-6129 and several low severity vulnerabilities
• Updated braces to mitigate CVE-2024-4068.
• Updated IDNA to mitigate CVE-2024-3651.
• Updated urllib3 to mitigate CVE-2024-37891.
• Updated setuptools to mitigate CVE-2024-6345.
• Updated requests to mitigate CVE-2024-35195.
• Updated Certifi to mitigate CVE-2024-39689.
• Updated boto3, botocore, s3transfer to resolve conflicting dependencies.

v2.6.5

[2.6.5] - 2024-02

Fixed

• Updated the base python image in the Dockerfile used to mitigate CVE-2023-47038.
• Update pip to mitigate CVE-2023-5752.
• Add dependency to route to mitigate race condition between internet gateway and the route to the internet gateway.

v2.6.4

Fixed

• Updated @babel/traverse to mitigate CVE-2023-45133
• Updated urllib3 to mitigate CVE-2023-45803
• Updated the base python image in the Dockerfile used to fix the following CVEs: CVE-2023-29491, CVE-2023-4911, CVE-2023-36054, CVE-2023-3446, CVE-2023-3817.

v2.6.3

[2.6.3] - 2023-09

Fixed

• Added the bugfix to skip the processing of the workspaces in error state.
• Updated all the package versions to resolve security vulnerabilities.
• Updated the docker base image to the python 3.11.
• Updated all the lambda runtimes to python 3.11.

v2.6.2

[2.6.2] - 2023-04

Fixed

• Changed the Object Ownership for logging bucket from 'Object writer' to 'Bucket owner enforced' to mitigate the impact caused by new S3 default settings.
• Updated S3 bucket policy to support access logging.

v2.6.1

[2.6.1] - 2023-04

Added

• Added support to block customer misconfiguration for 'Terminate Unused Workspaces' feature. The feature will terminate workspaces only on the last day of the month to avoid accidental termination due to misconfiguration.