Skip to content

6.5.1 Yellowbrick Release Notes

Date: August 16, 2023

Yellowbrick Version 6.5.1 Release Notes

Yellowbrick Data Warehouse Version 6.5.1 is supported for AWS and Microsoft Azure cloud deployments. This version of Yellowbrick Data Warehouse is installed on Cloud Data Warehouse Manager (CDWM) Version 3.65. We recommend that minimum 6.5 version to use is 6.5.1.

Cloud ProviderCDWM VersionYellowbrick Data Warehouse VersionKubernetes Version
AWS3.65.12-527.06079e026.5.1-4828.f23a29cdEKS 1.23
Azure3.65.12-527.06079e026.5.1-4828.f23a29cdAKS 1.25

Upgrade Requirements

Read the following information before beginning an upgrade to Version 6.5.1.

  1. Contact Customer Support to review the process and schedule the upgrade.
  2. Only upgrades from Version 6.4.x to 6.5.1 are supported. These upgrades apply to both CDWM and data warehouse instances.
  3. Instances must be running and not suspended before being upgraded.
  4. Version 6.5.1 requires EKS 1.23. Please use the EKS migration tool to upgrade to version 1.23 before upgrading to Version 6.5.1.
  5. Azure customer must move to Yellowbrick Version 6.6 by December 2023 due to AKS constraints.

AWS Upgrades from Version 6.4.x

For each Yellowbrick upgrade:

  1. Version 6.5.1 requires EKS 1.23. Please use the EKS migration tool to upgrade to version 1.23 before upgrading to Version 6.5.1.Upgrade CDWM in Yellowbrick Manager.
  2. Upgrade your data warehouse instances in Yellowbrick Manager. Before upgrading data warehouse instances, make sure they are running. You cannot upgrade suspended instances.
  3. Once the upgrade process completes, check that the CDWM is reporting the correct version of 3.65.12-527.06079e02 and YBD is version 6.5.1-4828.f23a29cd

Azure Upgrades from Version 6.4.x

You have to upgrade from 6.4.x to 6.5.1, upgrade from prior versions are not allowed.

You can upgrade directly from 6.4.x to Version 6.5.1. Note that Version 6.5.1 requires AKS version 1.25, but this version is supplied as part of the Yellowbrick upgrade.

From az cli; run the following commands or script to push the Azure deployment scripts to target environment. Note the name of the templateSpec used in the script.

These settings must be changed for your environment including the url to the files.

  1. Shut down the instance before beginning the upgrade.
  2. Push the installer files using below script (this is needed only if the customer needs the additional CVE fixes.)
!/bin/bash
templateSpec=yb-az-install
cdwmVersion=3-65-12-527-06079e02
resourceGroup=<resource_group>
subscription=<az_subscription>
region=<region>

curl https://<container_registry_path>/3-65-12-527-06079e02/installer-scripts/formDefinition.json -o formDefinition.json;
curl https://<container_registry_path>/3-65-12-527-06079e02/installer-scripts/yb-cdw.json -o yb-cdw.json;

az ts create --name "${templateSpec}" --version "${cdwmVersion}" --resource-group "${resourceGroup}" --subscription "${subscription}" --location "${region}" --temp
  1. From Azure portal, select the template spec used; click Deploy button and select the subscription and resource group for your environment. Enter in the exact name of the Cluster name (Kubernetes service) for your environment.
  2. Follow prompts for steps, ensuring fields are updated according to your environment including Azure AD tenant ID and Azure AD admin group IDs for your environment. Update allowed CIDRs for your environment. Once all the fields are verified; click Create button to start the upgrade process.
  3. Once the upgrade process completes, check that the CDWM is reporting the correct version of 3.65.12-527.06079e02 and YBD is version 6.5.1-4828.f23a29cd

Changes in Behavior and Compatibility

ybtools Compatibility

Yellowbrick recommends that you always upgrade ybtools to match the Yellowbrick server version you are running (for example, upgrade to ybtools Version 6.5 before connecting to a Version 6.5 database). In most cases, using an older version of ybtools, such as 5.2 or 6.4, to connect to a Version 6.4 database will work but is not recommended.

Using Version 6.5 of ybtools with an older server version (such as Version 6.4 or 5.2) may result in error messages for some commands or a mismatch between client and server features.

The Version 5.2 and 5.4 ybtools packages install two sets of backup and restore tools: legacy tools (BAR1) and current versions of the tools (BAR2). The legacy tools are deprecated and have been removed from the 6.x releases.

BAR2 and Replication Compatibility

Important: The source and target systems used for database backup and restore (BAR2) and database replication must be compatible. To support full functionality, the source and target systems should both be running a 6.4 version of Yellowbrick software.

Nonetheless, you can back up and restore a database, or replicate a database, from:

  • 5.2.x to 6.4.x
  • 5.4.3 or later to 6.4.x
  • 6.1.x to 6.4.x
  • 6.2.x to 6.4.x
  • 6.3.x to 6.4.x
  • 6.4.x to 6.5.x

Although you can start replication from a 5.2, 5.4, 6.1, or 6.2, 6.3 or 6.4 source to a 6.5 target, and you can fail over to the 6.5 target, you cannot fail back to the 5.2, 5.4, 6.1, 6.2, 6.3 or 6.4 source. In general, you cannot fail back to a Yellowbrick version with a catalog version that is earlier than the current catalog version.

What's New in Version 6.5.1

Version 6.5.1 provides critical bug fixes for issues reported by customers.

Issues Fixed in Version 6.5.1

The following issues are fixed in Version 6.5.1.

ReleaseIssueDescription
6.5.132571, 32542The Java-based client tools (ybload, ybunload, ybbackup, ybrestore) do not support the --auth-token connection option. Support for this option is added in this release.
6.5.129045BAR2: Could not create temp directory for caching of metadata for use with ybbar
6.5.131970Could not handle object store path containing spaces on YbFileInfo/Ybload
6.5.132533Could not support JSON lookup for not null column
6.5.132538Unable to connect using --auth-token on all java based client tools (i.e. ybload)
6.5.132721Accomodate user specified start/end time for diagnostics

CVE addressed in Version 6.5.1

The following CVEs were addressed Yellowbrick Version 6.5.1:

CVESummary
CVE-2023-2650Possible DoS translating ASN.1 object identifiers
CVE-2023-2975AES-SIV implementation ignores empty associated data entries
CVE-2023-3446Excessive time spent checking DH keys and parameters
CVE-2023-3817Excessive time spent checking DH q parameter value
CVE-2023-35945Envoy vulnerable to HTTP/2 memory leak in nghttp2 codec
CVE-2022-29458ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.
CVE-2022-3715A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.
CVE-2022-41409Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.
CVE-2022-4899A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.
CVE-2016-1585In all versions of AppArmor mount rules are accidentally widened when compiled.
CVE-2016-2568pkexec, when used with --user nonpriv, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.
CVE-2023-34969D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon.