From 9dc2d32a9c09201c50e0dfe827b8ccf6891aeda5 Mon Sep 17 00:00:00 2001 From: Orion Moore Date: Tue, 22 Sep 2026 23:36:34 -0600 Subject: [PATCH 1/2] OPSC-18048 OpsCenter 6.8.54 release notes --- OpsCenter_6.8_Release_Notes.md | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/OpsCenter_6.8_Release_Notes.md b/OpsCenter_6.8_Release_Notes.md index e9ea183..80b77e3 100644 --- a/OpsCenter_6.8_Release_Notes.md +++ b/OpsCenter_6.8_Release_Notes.md @@ -8,6 +8,25 @@ valid updates since 6.8.46 that are not related to the driver upgrade will remai Significant QA process improvements are in process to avoid similar future issues. +# Release Notes for OpsCenter 6.8.54 +24 Sept 2026 + +## Security +* Added OAuth2/OIDC support to pluggable authentication methods. (OPSC-16791) +* Fixed an issue where the truststore was not correctly used for certificate validation on the STOMP connection. (OPSC-18018) +* Replaced the Jetty HTTP server (EOL, unfixable CVEs on Java 8) with Aleph/Netty in the agent and LCM components. Addresses CVE-2023-40167, CVE-2025-11143, CVE-2024-6763, CVE-2019-10247, CVE-2021-28165, CVE-2023-36478, CVE-2024-8184, CVE-2024-13009, CVE-2020-27223, CVE-2023-26048, CVE-2026-2332, CVE-2020-27218. (OPSC-17880) +* Upgraded `org.bouncycastle` from `1.84` to `1.85` to address CVE-2026-8763. (OPSC-18021) +* Upgraded `reactor-core` to version `3.8.7` to address CVE-2026-47857. (OPSC-18027) +* Upgraded `jackson-databind` to version `2.21.6` to address CVE-2026-68497. (OPSC-18035) +* Upgraded `jsch` to version `2.28.6` to address CVE-2026-86231. (OPSC-18036) +* Upgraded `Netty` to version `4.1.138.Final` to address CVE-2026-89044. (OPSC-18037) + +## Core +* Fixed two issues that could contribute to opscenterd having too many open files. (OPSC-18023) + +## Provisioning +* When installing the DataStax Agent via LCM, meld will now retry up to 3 times (waiting 5 minutes between attempts) if the dpkg/apt package lock is held by another process, improving reliability on systems where background package management activity may be running concurrently. (OPSC-18031) + # Release Notes for OpsCenter 6.8.53 13 Aug 2026 From 968f06b3186e29446e1a299e1d44ffd102b02fa5 Mon Sep 17 00:00:00 2001 From: Timothy Orion Moore Date: Fri, 25 Sep 2026 11:22:08 -0600 Subject: [PATCH 2/2] Apply suggestion from @aimurphy Co-authored-by: April I. Murphy <36110273+aimurphy@users.noreply.github.com> --- OpsCenter_6.8_Release_Notes.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/OpsCenter_6.8_Release_Notes.md b/OpsCenter_6.8_Release_Notes.md index 80b77e3..8e12436 100644 --- a/OpsCenter_6.8_Release_Notes.md +++ b/OpsCenter_6.8_Release_Notes.md @@ -25,7 +25,7 @@ Significant QA process improvements are in process to avoid similar future issue * Fixed two issues that could contribute to opscenterd having too many open files. (OPSC-18023) ## Provisioning -* When installing the DataStax Agent via LCM, meld will now retry up to 3 times (waiting 5 minutes between attempts) if the dpkg/apt package lock is held by another process, improving reliability on systems where background package management activity may be running concurrently. (OPSC-18031) +* When installing the DataStax Agent with LCM, meld will now retry up to 3 times (waiting 5 minutes between attempts) if the dpkg/apt package lock is held by another process. This enhancement improves reliability on systems where background package management activity might run concurrently. (OPSC-18031) # Release Notes for OpsCenter 6.8.53 13 Aug 2026