LogicMonitor GD Collector 32.002 is released on August 29, 2022. GD Collector 32.002 is a patch to the previously released GD Collector 32.001. This patch release mitigates the following high severity issues.
- We have identified a security vulnerability in the JDBC Jar file for postgres. As per Veracode SCA scan report, the currently used Postgresql version 42.3.2 is vulnerable to CVE-2022-31197. It is therefore mandatory to upgrade to Postgresql version 42.4.1.
- It was reported that it takes more time to upgrade Collector version from MGD Collector 30.002 to GD Collector 31.002. When it crosses more than 3 minutes, a false event is generated which leads to Collector down alert. Although the issue was fixed in EA Collector 32.100, we have again provided a patch to it in this current release.