Apache Solr™ 6.0.1.4.2769

Apache Spark™ 2.4.0.16

Apache TinkerPop™ 3.4.5 with additional production-certified changes

Apache Tomcat® 8.0.53

DSE Java Driver 1.10.0-dse+20200217

Netty 4.1.25.7.dse

Spark JobServer 0.8.0.49

New systemd units for package installs on RHEL and other compatible operating systems. See RedHat systemd configuration. (DSP-7603)

New nodetool import command that lets you import SSTables from one or more directories. See nodetool import. (DB-3253)

New disk-usage guardrail, disk_usage_max_disk_size_in_gb, added in cassandra.yaml. See disk_usage_max_disk_size_in_gb. (DB-4380)

New snapshot_before_dropping_column configuration option added in cassandra.yaml. See snapshot_before_dropping_column.(DB-2690)

Increased the default direct_reads_size_in_mb value in cassandra.yaml. See direct_reads_size_in_mb. (DB-4348)

New entries to jvm.options to assist with capturing thread dumps. (DSP-20778)

If encryption is set on an SSTable, the SAI indexes are encrypted as well. Specifically the entire trie string terms dictionary is encrypted. Also, the user-readable sections of the kdtree are encrypted. See About SAI encryption. (DSP-16939)

Storage-Attached Indexing (SAI) adds support for queries using SAI indexes based on INET columns (IPv4 and IPv6). The queries may use EQ, GT, LT, GE, and LE operators. (DSP-17734)

Storage-Attached Indexing (SAI), a beta feature, adds supports for defining an index based on an individual column that is part of the table’s composite partition key. You can define separate, additional SAI indexes on other individual columns in the same table’s composite partition key. SAI 6.8.x continues to support defining multiple SAI indexes on any non-partition key column in the same table. See Examine SAI column index and query rules. (DSP-20634)

PKCS11 keystore is supported in Advanced workloads. See keystore_type. (DSP-20094)

Python 2.7.x and 3.6+ are supported for cqlsh. (DB-4151)

When working on encrypted SSTables, Cassandra tools such as sstabledump or sstablesplit need to create a remote connection in ReplicatedKeyProvider to a Cassandra node in order to be able to decrypt the sstables. (The sstableloader tool is not affected.) However, if security is enabled on the cluster, the tools won’t be able to decrypt the sstables because they have no way of specifying security parameters for the cluster connection. (DSP-12666)

LDAP servers can now handle multiple, comma separated addresses, with or without a port. If the port is not provided, the ldap_options.server_port parameter is used by default. See LDAP options. (DSP-13086)

Recording a slow CQL query to the log will no longer block the thread. (DSP-20894)

Fixed an issue where after a node replacement procedure, the bootstrap indexing in DSE Search was happening only on one TPC core. (DB-4049)

Fixed an issue to prevent an unbounded number of flushing tasks for memtables that are almost empty. (DB-4376)

Fixed an issue that caused nodes to crash after an upgrade from DSE 5.1 to 6.7.7. (DB-4379)

Fixed the problem with unrepairable digest mismatch between nodes running DSE 5.0.x and DSE 5.1+ (during upgrade) where the query includes a subset of columns. (DB-4399)

Fix an issue that was causing excessive contention during encryption/decryption operations. The fix resulted in an encryption/decryption performance improvement. (DB-4419)

Fixed an issue where during a large test run that reached a density of about 9TB/node, several instances of a TPC WouldBlockException messages, related to NodeSync, appeared in the logs of multiple nodes. (DB-4456)

Fixed a problem with the treatment of zeroes in the type decimal that could cause assertion errors, or not being able to find some rows if their key is 0 written using different precisions, or both. (DB-4472)

Fixed the NullPointerException issue described in CASSANDRA-14200: NPE when dumping sstable with null value for timestamp column. (DB-4512)

An issue that occurred while attempting to create an SSTable index (SASI) in 6.8.0 has been fixed. Previously, attempts to create a SASI index resulted in a NoSuchMethod error. (DSP-20720)

Fixed an issue where the bloom filter false-positive rate calculation did not properly take into account true negatives, such as cases where read operations were attempted on non-existing rows. (DB-3246)

None.

Enhanced LDAP settings to properly handle nested groups so that LDAP enumerates all ancestors of a user’s distinguishedName. (DSP-20107)

Two new LDAP options in dse.yaml (DSP-12612)

While there is no change in default behavior, there is a new render_cql_literals option in dse.yaml under audit logging section, which is false by default. When enabled, bound variables for logged statements will be rendered as CQL literals, which means there will be additional quotation marks and escaping, as well as values of all complex types (collections, tuples, UDTs) will be in human readable format. (DSP-17032)

When DSE tries one authentication scheme and finds that the password is invalid, DSE now tries another scheme, but only if the user has a scheme permission for that other scheme. Example scenarios:

if user has permission to authenticate with scheme A, try scheme A
   if authenticated with A, success, exit
if user has permission to authenticate with scheme B, try scheme B
   if authenticated with B, success, exit
otherwise
   fail, exit

Raised the upper bound limit on DSE LDAP caches. See ldap_options.credentials_validity_in_ms and ldap_options.search_validity_in_seconds. (DSP-21072)

Provided information about how to get tools — such as sstabledump, sstablerepairedset, and sstableloader — working with SSTables that are encrypted with Transparent Data Encryption. See Using tools with TDE-encrypted SSTables. (DSP-20940)

CVE security issues:

Fixed some security vulnerabilities for Solr HTTP REST API when authorization is enabled. Now, users with no appropriate permissions can perform search operations. Resources can be deleted when authorization is enabled, given the correct permissions. (DSP-20749)

Fixed an issue where the audit logging did not capture search queries. (DSP-21058)

Fixed an error condition when DSE failed to get the LDAP roles while refreshing a database schema. (DSP-21075)

In DSEFS, fsck (file system consistency check) throttling is possible via p or -parallelism arguments. In the following example, the command performs fsck by repairing up to 8 files at a time:

dse fs fsck -p 8

Backported the fix from DSP-15762: optimize remove recursive implementation - to lower the tombstone impact on Spark jobs. (DSP-20750)

Fixed excessive number of connections. (DSP-21021)

PKCS11 keystore is supported in Advanced workloads. See keystore_type. (DSP-20094)

Reduced the encrypted search core loading/reloading time. (DSP-20692)

Fixed some security vulnerabilities for Solr HTTP REST API when authorization is enabled. Now, users with no appropriate permissions can perform search operations. Resources can be deleted when authorization is enabled, given the correct permissions. (DSP-20749)

Fixed an issue where a decryption block cache occasionally was not operational (SOLR-14498) (DSP-20987)

Fixed an issue where the audit logging did not capture search queries. (DSP-21058)

Fixed an issue where, after an LCM upgrade, the Solr http API was broken either through curl or the Solr UI. (DSP-21115)

Fixed an issue where after a node replacement procedure, the bootstrap indexing in DSE Search was happening only on one TPC core. (DB-4049)

See DataStax Kubernetes Operator for Apache Cassandra (Cass Operator) release notes.

See DataStax Studio 6.8 release notes.

See DataStax Bulk Loader release notes.

See DataStax Apache Kafka Connector release notes.