Release 9.2.46.1¶

These are the Rolling Release Notes for Release 9.2.46.1. These release notes are applicable to Privacera's Self-Managed version.

Apache Solr¶

Updated Apache Solr Dependencies

Updated Apache Solr Dependencies¶

Upgraded Apache Solr dependencies to address known security vulnerabilities identified in the CVE (Common Vulnerabilities and Exposures) report.

Apache Zookeeper¶

Updated Apache Zookeeper Dependencies

Updated Apache Zookeeper Dependencies¶

Upgraded Apache Zookeeper dependencies to address known security vulnerabilities identified in the CVE (Common Vulnerabilities and Exposures) report.

Audit Server¶

Security Updates for Audit Server Dependencies

Security Updates for Audit Server Dependencies¶

Upgraded vulnerable dependencies in the Audit Server, including Jackson, Bouncy Castle FIPS and LZ4 Java, and refreshed the Chainguard base image (OpenJDK 25) to its latest digest. Container scans confirm that the known CVEs (Common Vulnerabilities and Exposures) in these dependencies are resolved. There are no functional changes.

Metadata-Service (OMNI)¶

AWS Lake Formation: Fixed Failed Permission Applies Showing No Reason

AWS Lake Formation: Fixed Failed Permission Applies Showing No Reason¶

Fixed an issue where failed permission requests displayed only lakeformation batch failed for all entries in the Privacera UI. The connector now shows the specific AWS error for each grantee, including the last error when retries are exhausted.

AWS Lake Formation: Fixed Row Filter Policies Failing to Apply

AWS Lake Formation: Fixed Row Filter Policies Failing to Apply¶

Fixed row filter failures caused by using the AWS preview SDK after row-level security became generally available. The connector now uses the public AWS SDK and GA API, allowing row filters to be applied, updated and removed without AWS preview enrollment.

PolicySync Connector¶

BigQuery: Fixed Audit Logs Not Appearing in the Privacera UI

BigQuery: Fixed Audit Logs Not Appearing in the Privacera UI¶

Fixed BigQuery PolicySync audit logs not appearing in the Privacera UI because the joda-time library was missing from the connector Docker image. The image now includes joda-time, so audits are delivered.

Databricks Unity Catalog: Dedicated Changelog Queue for Policy Changes

Databricks Unity Catalog: Dedicated Changelog Queue for Policy Changes¶

Policy changes can now run on a dedicated changelog queue, so they reach Unity Catalog in seconds instead of waiting behind long resource syncs, permission syncs or reconciles. The feature is off by default; enable it with CONNECTOR_DATABRICKS_UNITY_CATALOG_DEDICATED_QUEUE_ENABLED: "true". It is not supported with tag-based masking or tag sync.

Databricks Unity Catalog: Fixed Parallel Grant Updates Being Turned Off on Large Deployments

Databricks Unity Catalog: Fixed Parallel Grant Updates Being Turned Off on Large Deployments¶

Fixed an issue where parallel grant updates were silently turned off on deployments with many loader threads. The number of helper threads was derived from the JDBC connection pool size and could resolve to zero, so grants ran one at a time even with CONNECTOR_DATABRICKS_UNITY_CATALOG_ENABLE_PARALLEL_GRANT_UPDATES set to true. The helper threads now follow the configured thread count; size the JDBC connection pool for it.

Databricks Unity Catalog: Template-Based Row-Level Filters

Databricks Unity Catalog: Template-Based Row-Level Filters¶

Added template-based row-level filtering to the Databricks Unity Catalog connector. Row-filter policy items reference named conditions in a reusable Ranger Template UDF, and the connector generates a single row-filter function per table that evaluates all conditions in one scan, improving query performance. One template can be shared across tables. The feature is off by default; enable it with CONNECTOR_DATABRICKS_UNITY_CATALOG_ENABLE_TEMPLATE_BASED_ROW_FILTER: "true".

MSSQL: Fixed Users Losing Unmasked Access When a Column Mask Is Changed or Re-applied

MSSQL: Fixed Users Losing Unmasked Access When a Column Mask Is Changed or Re-applied¶

Fixed MSSQL PolicySync issues where users lost UNMASK access after mask changes, columns were temporarily left unmasked when changing mask types, and Custom partial masks were incorrectly reported as out of sync.

Opt-in Diagnostics for Slow Changelogs

Opt-in Diagnostics for Slow Changelogs¶

Added opt-in PolicySync changelog diagnostics for changelogs that are intermittently slow: a per-phase slow-task warning written to a dedicated log file, an automatic thread dump on the pod when a changelog exceeds a configurable threshold, and resource.process pool metrics, plus an optional per-task time limit so that a single slow resource task does not block the changelog. All of them are off by default; enable them per connector when diagnosing slowness.

Portal¶

Configurable Password Length for Privacera Portal Users

Configurable Password Length for Privacera Portal Users¶

Administrators can now set the minimum and maximum password length for Privacera Portal users with the PORTAL_PASSWORD_MIN_LENGTH and PORTAL_PASSWORD_MAX_LENGTH Privacera Manager properties (default 8 to 20). The length applies when a password is created or changed; existing users can still log in with their current password. Passwords must still contain at least one uppercase letter and one digit.

Fixed Pagination for Access Audits on OpenSearch

Fixed Pagination for Access Audits on OpenSearch¶

Fixed pagination on the Access audits tab when audits are stored in OpenSearch: the pager no longer shows "Page NaN", the page arrows work, and the last page loads. Added a note clarifying the 10,000 audit viewing limit.

Privacera Manager¶

Base Image Upgraded

Base Image Upgraded¶

Updated the Privacera Manager base image to a newer Debian version to address known security vulnerabilities identified in the CVE (Common Vulnerabilities and Exposures) report.

Fixed Upgrade Failures with Legacy RC2 PKCS12 Keystores

Fixed Upgrade Failures with Legacy RC2 PKCS12 Keystores¶

Fixed Privacera Manager upgrade failures for legacy RC2 .p12 keystores. Setup now automatically re-encrypts them using AES.

Privacera Monitoring¶

Updated Grafana Image

Updated Grafana Image¶

Upgraded Grafana dependencies to address known security vulnerabilities identified in the CVE (Common Vulnerabilities and Exposures) report.

Updated Prometheus Image

Updated Prometheus Image¶

Upgraded Prometheus dependencies to address known security vulnerabilities identified in the CVE (Common Vulnerabilities and Exposures) report.

Updated Metrics Annotation Job Image

Updated Metrics Annotation Job Image¶

Upgraded Metrics Annotation Job dependencies to address known security vulnerabilities identified in the CVE (Common Vulnerabilities and Exposures) report.

Updated OpenTelemetry Collector Image

Updated OpenTelemetry Collector Image¶

Upgraded OpenTelemetry Collector dependencies to address known security vulnerabilities identified in the CVE (Common Vulnerabilities and Exposures) report.

Updated Post Install Job Image

Updated Post Install Job Image¶

Upgraded Post Install Job dependencies to address known security vulnerabilities identified in the CVE (Common Vulnerabilities and Exposures) report.

Privacera UserSync¶

Entra ID: Fixed Sync Cycle Failing When User or Group Search Is Disabled

Entra ID: Fixed Sync Cycle Failing When User or Group Search Is Disabled¶

Fixed an issue where the sync cycle would fail to complete if User Search or Group Search were disabled.

Prev topic: Releases