2.11

Mon, 01 Jan 0001 00:00:00 +0000

Info

CAST highly recommends updating to the new release of Console to take advantage of new features and bug fixes. See Upgrade process for more information about this.

Compatibility matrix

Component	Minimum required release	Notes
Installer for embedded dashboards (when using standalone or Windows JAR installers)	2.11.7-funcrel	You must use the installer provided with the current release of Console, otherwise there is no guarantee of compatibility.
CAST Imaging	≥ 2.5.2-funcrel	-

2.11.17-funcrel

Resolved Issues

Customer Ticket Id	Details
58372	Fixes critical and high security vulnerabilities caused by outdated Apache Log4j dependencies (CVE-2026-34477). Log4j versions have been updated across multiple components to address SSL hostname verification concerns.
58280	Fixes Docker image startup failures for aip-gateway and aip-service-registry caused by missing GCC runtime libraries following Alpine Linux and JVM version upgrades.
57814	Fixes an issue affecting PL/I source file analysis where incorrect component deletion occurred during the Prepare Analysis phase.
57932	Fixes a thread-safety issue in the package preparation step that caused “ConcurrentModificationException” errors and failed deep analysis jobs.
57181	Fixes an issue where duplicate Analysis Units were created for PL/I applications after an application was renamed.
57665	Fixes an issue where extensions that had been deleted were automatically reinstalled during subsequent version updates or analysis runs.

Known Issues

Internal Id	Details
WEBI-16804	For PL1-based applications: renaming an application and then running a scan and analysis triggers a “Missing Package: pl1MergedPck not found” error. The underlying cause is incorrect package cleanup when the application folder path changes. This issue will be fixed in 2.11.18-funcrel.

Other Updates

Internal Id	Details
WEBI-16798	Fixed an issue where the “.NET Project and Resources Discoverers” extension was not automatically installed even though the Code Scanner had detected the required plugins (e.g. dmtdevcsharpdiscoverer), causing analysis to fail at the “Prepare Analysis Config” step with an “ArrayIndexOutOfBoundsException”.
WEBI-16797	Resolved a reporting defect where the Analysis Report (XLSX) listed Python, JavaScript, and TypeScript files as “Not Analyzed / Unanalyzed” despite those files being successfully parsed and visible as analyzed objects in the Imaging Viewer.
WEBI-16795	Fixed a discovery issue where PL/1 sources with mixed .PLI/.PLC file extensions caused 8 separate analysis unit jobs to be created instead of the expected single job, impacting link accuracy in large mainframe applications (e.g. COBOL, PL/1, Assembler, Db2).
WEBI-16794	Addressed the inability to define a priority order for KB Tools execution in Imaging Console. Previously, dependent KB Tools did not run in a predictable sequence, requiring manual re-runs and recomputation of function points - functionality that was available in CAST Management Studio.

2.11.16-funcrel

Other Updates

Internal Id	Details
WEBI-16733	The “Development Environment” option available when configuring a C/C++ analysis has been removed from the UI. This option allowed end users to choose a specific IDE that was used to develop the source code they wanted to analyze. Now, the development environment is auto detected and appropriate analysis configuration settings are applied as a result. See also C/C++ analysis configuration.

Resolved Issues

Customer Ticket Id	Details
49529	Fixes an issue where the filters on DLM target type shows only the range displayed in the page and not all available values. Now all available values are listed in all filters.
53299	Fixes an issue where the Fast scan was failing (fixed by profiler version 1.8.38).
54010	Fixes an issue preventing a successful installation as AIP Registry service fails with the error “Caused by: liquibase.exception.DatabaseException: ERROR: out of memory”.
54816	Fixes an issue where full graph objects are missing from Transaction graph view in CAST Imaging, when the “generate views” action is executed separately from a “generate snapshot” action (fixed if the com.castsoftware.aip version is >= 8.3.61).
54277	Fixes an issue where debug logs are not visible in CAST Console “VIEW LOGS” panel during an ongoing analysis (specifically when a log pattern is found in a debug log message).
55717	Fixes a performance issue for the snapshot indicator “Transaction with High number of objects”.
54152	Fixes an issue where XML metadata files from a SAP extraction are incorrectly marked as unanalyzed in the analysis report.

Bug Fixes

Internal Id	Details
WEBI-16750	Fixes an issue when the conversion to UTF-8 is not enabled and the onboarded application contains at least 1 non UTF-8 file: the alert was showing an incorrect number of non UTF-8 files, whereas now the alert shows the right number of non UTF-8 files.
WEBI-16753	Improved encoding handling for IBM i applications: excluded .LF/.PF files and files detected as x-IBM930 from automatic UTF‑8 conversion to prevent loss of DDS views and analysis objects.

2.11.15-funcrel

Other Updates

Internal Id	Details
WEBI-16525	Onboarding without Fast Scan (legacy onboarding mode) is now deprecated. CAST recommends using onboarding with Fast Scan wherever possible (this is enabled by default for all new applications).

Resolved Issues

Customer Ticket Id	Details
53163	Fixes two vulnerabilities (orca-11894765 Spring4Shell and orca-13873215 Apache Tomcat) found in “spring-beans-5.3.13.jar” and “tomcat-embed-core-9.0.83.jar” shipped with the AIP Node component.
53223	Fixes an issue causing the error “AIP version of the application 8.3.X1 is lower than the one in the analysis node 8.3.X2” when attempting to restore an application using the UI.
41457	Fixes an issue where no Mainframe Analysis Unit was created for an application with only .CPY files. This was preventing the user from accessing the Mainframe Cobol configuration section.
52408	Fixes an issue where no Mainframe Analysis Unit was created for an application with only .CPY files. This was preventing the user from accessing the Mainframe Cobol configuration section.
52408	Fixes an issue where an application named “Tests” and its files are automatically excluded from analysis due to the default file filter exclusion expression ’tests/'.
52514	Fixes an out of memory issue when computing the snapshot indicator ‘Overlapping objects count’.
53052	Fixes an issue where the Security Dataflow feature was automatically and erroneously set to “disabled” during an analysis after being manually enabled. The feature will now remain enabled unless manually disabled.
53338	Fixes an issue which was preventing the analysis from running with missing source code.
53230	Fixes an issue which was preventing the removal of an application from the Management/Health dashboard and the measure schema when the application was deleted from the Console UI.
54248	Fixes an issue which was preventing the removal of an application from the Management/Health dashboard and the measure schema when the application was deleted from the Console UI.
53986	Fixes an issue in the KB Update Assistant that was causing the results to be incorrectly updated during the save and run actions.
54072	Fixes an issue where a change in the PostgreSQL “operator” password caused the creation of application schemas to fail. Updated documentation has been provided, see the documentation: /export-v2/storage/maintenance-and-configuration-for-cast-storage-service-and-postgresql/action-items-after-changing-the-operator-user-password-when-using-cast-console/.

2.11.14-funcrel

Notes

This extension has been withdrawn.

1.29

Mon, 01 Jan 0001 00:00:00 +0000

Note

CAST Console 1.x is now deprecated (as of 06 October 2023). This means that no further development will be provided for this component, however fixes for customers issues will be provided up until 31 March 2024. If you are still actively using the CAST Console 1.x, you should plan a move to CAST Console 2.x as soon as possible.

Info

Note that CAST highly recommends updating to the new release of Console to take advantage of new features and bug fixes. See Upgrade AIP Console for more information about this.

Current constraints and limitations

Mon, 01 Jan 0001 00:00:00 +0000

All releases

Console is designed to support one customer only

It is not possible to manage multiple customers in the same console for now. If you need to deploy multiple Consoles, you will need to adapt the strategy of your infrastructure. Console supports multiple Console Front Ends on the same machine. Console supports multiple analysis nodes (the analysis node is an “image” that runs the Node (Back End server) and contains the AIP Core installation and its running environment (runtimes, program/log/temp folders….etc). There is no feature to monitor the performance of multiple Consoles (parallel analysis, jobs…) on the same machine. This task will need to be supported by the customer.

1.x - H2 database CVE mitigation

Mon, 01 Jan 0001 00:00:00 +0000

Introduction

A critical vulnerability has been discovered in the third-party tool h2 database (all releases prior to 2.0.206) used by both the Console front-end package and the Node back-end package:

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42392

The h2 database is used by all 1.x releases of Console/Node (2.x releases do not use the h2 database) and therefore all 1.x releases are impacted by this CVE. See also https://jfrog.com/blog/the-jndi-strikes-back-unauthenticated-rce-in-h2-database-console/.

Updates to Console/Node packages

CAST does NOT intend to provide a new release of Console 1.x that includes a new release of h2 database that includes the fix for this CVE. This is because the releases of h2 database that include the CVE fix are not compatible with the release of h2 database that CAST uses, and therefore a full database migration would be necessary with all the risk associated with it.

Release Notes on Documentation - V2

2.11

Compatibility matrix

2.11.17-funcrel

Resolved Issues

Known Issues

Other Updates

2.11.16-funcrel

Other Updates

Resolved Issues

Bug Fixes

2.11.15-funcrel

Other Updates

Resolved Issues

2.11.14-funcrel

Notes

1.29

Current constraints and limitations

All releases

Console is designed to support one customer only

1.x - H2 database CVE mitigation

Introduction

Updates to Console/Node packages