Release Notes for Helix Core Search Version 2021.4 Introduction HelixCore Search is a REST service providing an API and simple web application to support other Helix applications such as Swarm. It facilitates indexing the contents of your Helix Server and searching Helix meta-data and file content. HelixCore Search needs a connection to ElasticSearch and a HelixCore server. Perforce numbers releases YYYY.R/CCCCCC, for example, 2012.1/40716. YYYY is the year; R is the release of that year; CCCCCC is the bug fix change level. Each bug fix in these release notes is marked by its change number. Any build includes (1) all bug fixes of all previous releases and (2) all bug fixes of the current release up to the bug fix change level. Please send all feedback to support@perforce.com. Minimum Requirements Elasticsearch 7.6.2 - 7.15.2 Helix Core server 2019.2 or later (2021.2 is required for Windows Extension support) Supported Platforms Windows (x86_64) Windows 10 Windows 2016 server Windows 2019 server Linux (x86_64) Ubuntu 20.04 Ubuntu 18.04 CentOS 7 CentOS 8 Documentation Please see the official documentation for installation instructions and usage examples. https://www.perforce.com/manuals/p4search/Content/P4Search/Home-p4search.html ------------------------------------------- Updates in 2021.4 patch 3 #2226008 (job108967) Update log4j2 to version 2.17.0 CVE-2021-45105 ------------------------------------------- Updates in 2021.4 patch 2 #2221532 (job108915) Update log4j2 to version 2.16.0 CVE-2021-44228 CVE-2021-45046 ------------------------------------------- Updates in 2021.4 patch 1 #2211782 (Job job108677) Add missing protectFilter plugin versions for Elasticsearch. ------------------------------------------- Updates in 2021.4 #2208434 #2208517 (Job job108600) Upgrade Elasticsearch to 7.15.2 #2208389 (Job job108601) Extend PluginFilter to use ES 7.15.1 and 7.15.2 #2206635 (Job job108549) P4Search UI Content Search only return results in 'content' not depotPath or other fields. #2206264 (Job job108545) Change configuration behaviour to exit (with status -1) if no configuration is found. #2205626 (Job job108561) Add support for BlurHash. Uses library to encode a thumbnail into a 4x4 pixel blur. #2205306 (Job job108540) Remove logging showing JWT from INFO level logs. #2204926 (Job job108401) Update P4Java to 2021.1.2204486 to use ExtensionSummary object when installing Extensions. #2203599 (Job job108464) Use tmpFile from p4 print to generate thumb and add it to p4 attributes. Thumb is encoded as PNG 240x240 max dimensions. #2201611 (Job job108344) On Startup P4Search sets the Perforce Configuration for the P4Search external URL and X-Auth-Token used by the Lua Extensions. Added new property: com.perforce.p4search.service.external-url #2201596 (Job job108341) Extensions to read from p4 property instead of extension config. #2200862 (Job job108342) Extension Endpoints to Install, Delete and List. #2199632 (Job job108340) Fixing bug where we return bearer error when auth fails regardless of which auth method was used. #2198717 #2198244 (Job job108343) Build signed Extensions for p4search. #2198228 #2201632 #2207644 (Job job107832) Update Configuration to group properties and support multiple language for title and help text. #2197006 (Job job107847) Serverside Extensions for indexing attributes. #2196126 (Job job106953) JWT support for UI and maintain legacy BasicAuth for Swarm API access. #2191592 (Job job108062) Add i18next multiple language support to front-end. #2190888 #2198225 (Job job107833) Stats logging for HelixArtifacts, events: P4_DOWNLOAD, P4_UPLOAD, CACHE_DOWNLOAD, HA_SEARCH, HA_DETAILS #2188050 (Job job107745) Indexes Perforce file revision attributes in a new AssetModel for DAM. #2177100 #2177631 (Job job107746) Remove com.perforce.p4search.security.required and force 'admin' user access. #2174688 #2174761 (Job) Update ConnectionSession to use a CloseableConnection instead of IOptionsServer. #2173783 (Job job107727) Split Index and Service users. When upgrading we use the existing Service user for both roles. ------------------------------------------- Updates in 2021.3 patch 3 #2226006 (job108967) Update log4j2 to version 2.17.0 CVE-2021-45105 ------------------------------------------- Updates in 2021.3 patch 2 #2221530 (job108915) Update log4j2 to version 2.16.0 CVE-2021-44228 CVE-2021-45046 #2221595 (job108916) Update Gson to 2.8.9 WS-2021-0419 ------------------------------------------- Updates in 2021.3 patch 1 #2180834 (job107972) CentOS RPMs are now signed. ------------------------------------------- Updates in 2021.3 #2168286 (Job job107585) Update JRE's to 11.0.11+9 #2167625 (Job job107568) Remove Href Anchor link from status page to configuration page. #2167617 (Job job107570) Elastic Search Cardinality Aggregation gives wrong total number. Added precision_threshold to raw search query. #2164973 (CVE-2021-22145) Update elasticsearch to 7.13.4 #2164849 (Job job107581) Update P4Java #2160343 (CVE-2021-35516 CVE-2021-35517 CVE-2021-35515 CVE-2021-36090) Security fix - update org.apache.commons:commons-compress:1.20 --> 1.21 #2155722 (Job job107259) Search Help Url search-service update #2155382 (Job job107177) Setting p4search extended filespec parser to use new p4java filespec parser. #2155360 (CVE-2017-18640) Updated ElasticSearch High Level Rest Client to 7.13.3 due to Snake YAML version. #2154796 (Job job107234) fixed the bug of Search UI query results count incorrect. ------------------------------------------- Updates in 2021.2 #2134895 (Job #106784) New end-point to purge ElasticSearch entries during an obliterate. #2081568 (Job #105517) Full support for ElasticSearch queries with /api/v1.1/search/raw endpoint. #2133019 (Job #106892) Add 'Date' field to 'content' and 'revision' models. #2100953 (Job #105935) ThreadPoolExecutor leak JDK-6399443