@@ -77,6 +77,128 @@ HTML header: <title>dCache 11.2 Release Notes</title>
7777
7878We want to thank Shawn McKee for his contributions.
7979
80+ ## Release 11.2.4
81+
82+ ### alarm
83+
84+ It has been reported that alarm server is vulnerable to RCE attack due to unprotected object deserialization.
85+ This is fixed now.
86+
87+ ### bulk
88+
89+ dCache now replies w/ 413 Entity Too Large code when various bulk request limits are exceeded.
90+
91+ ### chimera
92+
93+
94+ File creation with non basic attributes is now an atomic operation, as the namespace provided can implement it as `create+set attr`.
95+ If the initial file attributes doesn't allow set attribute operation, then such create request will fail.
96+
97+ thei is now fixed and he initial, non basic attributes can be applied on create.
98+
99+ If tag is only created without any content then ResultSet#getBinaryStream return null as a stream which will trigger NPE.
100+
101+ This is now fixed.
102+
103+ ### gplazma
104+
105+
106+
107+ READ_METADATA operations are authorized for requestors without read access if the requestor provides a token with the storage.poll claim.
108+
109+ ### pool
110+
111+ It is desirable to have a single admin command to display the values of both hot-file migration parameters (replicas and threshold).
112+
113+ It is also desirable to see quickly whether the hot file migration facility is enabled on a given pool.
114+
115+ Now there are have been added two ne commands:
116+
117+ The addition of a pool command `hotfile show` (replicas=3 threshold=5) to MigrationModule.
118+ The hot file replication enablement status has been added to the pool section of `info -a`.
119+
120+
121+
122+
123+ Firefly `onStart` marker for `MoverProtocol-based` transfers has been added.
124+
125+ While only tests, these files use an obsolete property name `pool.hotfile.monitoring.enable`,
126+ and could cause/perpetuate confusion and errors in user configuration.
127+
128+ `pool.hotfile.monitoring.enable` changed to `pool.hotfile.replication.enable` in all cases.
129+
130+ ### rpm
131+
132+ dCache can run with java 17 as well as java 21. However, if a side decided to run dcache with java21, the RPM will pull java17 as dependency anyway.
133+
134+ If java is not installed, rpm will pull java17. If java21 is already installed, then no extra java packages will be pulled.
135+
136+ ### tape
137+
138+ While testing storage.poll scope it was observed that querying file locality imposes requirement of `DOWNLOAD` activity to be available
139+ in the list of allowed activities in OIDC scope claim. This is unnecessary and complicates handling of `storage.poll`.
140+
141+ `DOWNLOAD` activity is no longer required to query file locality. This allows implementation of `storage.poll` as `READ_METADATA` activity
142+
143+
144+ ### Changelog 11.2.3..11.2.4
145+
146+ <!-- git log 11.2.3..11.2.4 -no-merges -format='[%h](https://github.com/dcache/dcache/commit/%H)%n: %s%n' -->
147+
148+ [72eeeae7c7](https://github.com/dcache/dcache/commit/72eeeae7c77a39b8b78b53161a8a7c07bc8df0a2)
149+ : [maven-release-plugin] prepare release 11.2.4
150+
151+ [d14e394698](https://github.com/dcache/dcache/commit/d14e394698d044d0de5950c27d7c61565e569924)
152+ : chimera: applying attributes to newly created file should skip permission check
153+
154+ [1c7b7adf5a](https://github.com/dcache/dcache/commit/1c7b7adf5a4cc7bafa862ff2aa1c6b546394f09b)
155+ : ci: use custom k8s deployment for minio
156+
157+ [451c5a3815](https://github.com/dcache/dcache/commit/451c5a3815483c71189558bd3374b454be93cf58)
158+ : ci: skip git clone it sources are not needed
159+
160+ [9b4b56f48a](https://github.com/dcache/dcache/commit/9b4b56f48a2003d69ed3dbbb259d4ff73f81fce2)
161+ : chimera: fix reading of empty tags
162+
163+ [cdc2a07854](https://github.com/dcache/dcache/commit/cdc2a078546e37f77ddf8cfa4182438ed79e2f42)
164+ : bulk: report 413 Entity Too Large is limits on bulk requests are exceeded
165+
166+ [0b6b21c5f8](https://github.com/dcache/dcache/commit/0b6b21c5f8bfe21392738c6cd16312b547c204e8)
167+ : gplazma2-oidc: Add and test support for `storage.poll` WLCG claim
168+
169+ [3474d2e7a7](https://github.com/dcache/dcache/commit/3474d2e7a7a5186076ff1effd22cf816df46e75f)
170+ : tape rest API: remove AccessMask.READ_DATA requirement when querying for file attributes for file locality
171+
172+ [423e79a774](https://github.com/dcache/dcache/commit/423e79a774476116de512ba1ee687ce3c6cdc51c)
173+ : alarms: use HardenedLoggingEventInputStream to address possible RCE when deseriaizing log messages
174+
175+ [5877bb383c](https://github.com/dcache/dcache/commit/5877bb383c3e2852c99d600eb177dd3c720dd53a)
176+ : scripts: fix double rw definition in FIO benchmark script
177+
178+ [db2a697322](https://github.com/dcache/dcache/commit/db2a697322c8d0ef5358a2063037b057ee15ff32)
179+ : pool: New `hotfile show` command, and show enablement status with `info -a` (#8067)
180+
181+ [f7563db3c5](https://github.com/dcache/dcache/commit/f7563db3c5f063cef0c1401721c44d4d299dd9e8)
182+ : pool: emit firefly onStart marker from RemoteHttpDataTransferProtocol
183+
184+ [07a898d8c1](https://github.com/dcache/dcache/commit/07a898d8c1a8f2f7a939736a4c080c6511805f6b)
185+ : libs: update apache-curator to 5.9.0
186+
187+ [faec79f06a](https://github.com/dcache/dcache/commit/faec79f06ab25a4d1ba08cb259f82348ddbd0652)
188+ : pool: Improve logging for hot file replication
189+
190+ [4c74631875](https://github.com/dcache/dcache/commit/4c74631875db300ab250d16585273515cb1f03bb)
191+ : pool: Fix properties tests to use the correct property
192+
193+ [cec1e72438](https://github.com/dcache/dcache/commit/cec1e724384076eb4a6385144add35ca431184ef)
194+ : build(deps): bump io.netty:netty-codec-http
195+
196+ [593be28945](https://github.com/dcache/dcache/commit/593be289457f64fc4facc4c0969908a7745c383d)
197+ : rpm: make package require java17 or java21
198+
199+ [6f18dc1158](https://github.com/dcache/dcache/commit/6f18dc115824330f5c1e81ffd879fa460c5c40c3)
200+ : [maven-release-plugin] prepare for next development iteration
201+
80202## Release 11.2.3
81203
82204### firefly
0 commit comments