Release 9.2.32.1¶

Updated Apache Solr Dependencies¶

Upgraded Apache Solr dependencies to address known security vulnerabilities identified in the CVE (Common Vulnerabilities and Exposures) report.

Updated Apache Zookeeper Dependencies¶

Upgraded Apache Zookeeper dependencies to address known security vulnerabilities identified in the CVE (Common Vulnerabilities and Exposures) report.

PEG Server Base Image Upgraded¶

Updated the PEG Server base image to a newer version to address known security vulnerabilities identified in the CVE (Common Vulnerabilities and Exposures) report.

Updated PEG Server Dependencies¶

Upgraded PEG Server dependencies to address known security vulnerabilities identified in the CVE (Common Vulnerabilities and Exposures) report.

Fixed On-Demand Resource Sync Missing Resource Deltas (Databricks SQL Analytics)¶

• Fixed an issue where on-demand resource sync could miss resource deltas due to a RocksDB/in-memory cache inconsistency, which left GRANTs unapplied.
• Also improved on-demand sync response visibility by adding no_change, not_found, and duplicate resource counts and resource keys to the task summary for Databricks SQL Analytics, Databricks Unity Catalog, and Lake Formation connectors.

Snowflake Connector Azure Key Vault Startup Fix¶

Fixed a dependency compatibility issue that prevented the Snowflake connector from starting when Azure Key Vault was configured as the secret provider.

Fixed Unity Catalog {OWNER} Access Policy Grants Not Applied¶

When email is used as the service principal name, PolicySync now reverse-looks up the managed Ranger login from the Unity Catalog owner email (with email case normalization) so {OWNER} grants can be mapped and applied in Unity Catalog instead of being dropped during ACL scrub.

Impact: Databricks Unity Catalog — {OWNER} privileges sync for managed owner users.

Introduced Detailed Diagnostics Dashboard for Connectors¶

• Added a new dashboard providing detailed operational diagnostics for a single connector deployment, covering pod details, transaction rates (JDBC/HTTP/SDK), changelog and resource/principal/permission loader activity, RocksDB internals, tag sync, audit loading, and recovery stats — giving support and engineering teams a single place to drill into one connector instance's health.
• This release also introduces panels tracking the latency between a table being created in the source system and its policies being successfully applied, giving visibility into how quickly newly discovered resources become access-controlled. This is currently supported for the Databricks SQL Analytics and Databricks Unity Catalog connectors.

Fixed the Release Date Shown in the About Dialog¶

Fixed an issue where the About dialog's "Released on" field showed an unresolved placeholder instead of the build date. The release date now displays correctly (in UTC).

Privacera Manager Base Image Upgraded¶

Updated the base image to a newer Debian version to address known security vulnerabilities identified in the CVE (Common Vulnerabilities and Exposures) report.

Updated Grafana Image¶

Upgraded Grafana dependencies to address known security vulnerabilities identified in the CVE (Common Vulnerabilities and Exposures) report.

Updated Prometheus Image¶

Upgraded Prometheus dependencies to address known security vulnerabilities identified in the CVE (Common Vulnerabilities and Exposures) report.

Updated Opentelemetry-collector Image¶

Upgraded Opentelemetry-collector dependencies to address known security vulnerabilities identified in the CVE (Common Vulnerabilities and Exposures) report.

Updated Post Install Job Image¶

Upgraded Post Install Job dependencies to address known security vulnerabilities identified in the CVE (Common Vulnerabilities and Exposures) report.

Improved SCIM Server Performance¶

Improved performance of SCIM Server Groups endpoints when operating on large groups.

Added Air-Gap Pull Mode¶

Air-Gap installation prerequisites now include pull mode, so you can download packages and images to the local machine without pushing them to a private Docker registry.