Fixed Issues

Review the issues fixed in this release of Cloudera AI Workbench 2.0.55-h1000-b5, Cloudera AI Registry 1.13.0-h1000-b5, and Cloudera AI Inference service 1.10.0-h1000-b9.

Cloudera AI Workbench
  • CVE fixes - This release includes numerous security fixes for critical and high Common Vulnerability and Exposures (CVE).
  • Fixed an issue where deploying models from the Cloudera AI Registry to Cloudera AI Workbench would fail during the build step due to an RBAC permission error. (DSE-54619)
  • Fixed an issue where resetting a team's SSH key from the Site Administration page failed to rotate the key due to a JavaScript error. (DSE-54840)
  • Fixed the GET /api/v2/workloads/executions API to ensure workload_crn and workload_execution_crn are consistently populated for all jobs, including those that are failed, skipped, or deleted. This ensures reliable telemetry export to Cloudera Observability regardless of pod creation status. (DSE-52158)
  • Fixed an issue where the Users quota table in the Workbench UI incorrectly displayed zero values for custom quotas. (DSE-50999)
  • Fixed an issue where changes to job retry settings (script failure, system failure, timed out runs, and skipped runs) were saved but not displayed correctly in the Job Settings page. You can now view and modify the saved retry conditions as expected. (DSE-51041)
  • Fixed an issue where a warning exception appeared in the browser console immediately after landing on the home page. This warning did not impact the ability to use the Quick Find feature and has now been fixed. (DSE-49110)
  • Fixed a security issue in Cloudera AIWorkbench by restricting the ports exposed by the Istio-based load balancer. (DSE-54413)
Cloudera AI Inference service
  • Fixed a security issue in Cloudera AI Inference service where the Istio ingress for model serving exposed unnecessary ports. The ingress is now strictly restricted to port 443 for secure HTTPS traffic. (DSE-54459)
Cloudera AI Registry
  • Fixed a security issue in Cloudera AI Registry by restricting the ports exposed by the Istio mesh to only those required for core functionality. (DSE-54431)