2018 Release Notes

CVE-2018-16619

CVE-2018-16620

CVE-2018-16621

[NEXUS-17690] - Browse Docker Repository causes IllegalArgumentException 'Comparison method violates its general contract'

[NEXUS-17741] - Resolve Repository Health Check invalid states post-restart

[NEXUS-17772] - Migration from 2 to 3 leaves low heap memory ERROR in Nexus 3 performance

[NEXUS-17460] - Nexus 2 to 3 upgrade fails with concurrency error in NuGet

[NEXUS-17548] - Docker proxy repositories auto-block for images that don't exist

[NEXUS-12033] - Add method to configure request timeout via UI

[NEXUS-14593] - Errors reported when accessing UI via index.html

[NEXUS-17259] - NullPointerException and upload hangs using UI to upload a larger file to raw repository

[NEXUS-17614] - HTML Browse View Encodes File Paths

[NEXUS-16312] - Metadata for NPM group considers pre-release version higher than actual version

[NEXUS-17921] - REST API upload that fails due to lack of permissions returns 404 (not found)

[NEXUS-17611] - 404s returned for packages containing build-metadata in version

[NEXUS-17712] - Nuget repo unable to proxy packages with 4 digit version

[NEXUS-17498] - Option to generate URL-safe user tokens for URL based authentication

[NEXUS-10692] - Do not prompt for user credentials for RUT authenticated users

[NEXUS-17886] - Yum metadata from unrelated folder incorrectly removed when regenerating a folder

[NEXUS-17233] - Restarting while backup is in progress leaves NXRM as read-only

[NEXUS-9605] - Task last run and last result not persisted correctly

[NEXUS-13121] - Tasks may appear as 'Starting' or 'Cancelling' indefinitely and cannot be stopped, cancelled, or deleted

[NEXUS-17008] - Task will never run again if its previous run time passes its next scheduled start time

[NEXUS-17262] - Removing repository does not remove tasks specific to the removed repository

[NEXUS-16545] - Yum Metadata Generation performance improvements

[NEXUS-17440] - "Unable to detect which node you are currently connected to" warning can appear in non-clustered instance

[NEXUS-16430] - Connection reset when uploading large file using Apache Ivy

[NEXUS-17455] - Last-Modified not returned in header for migrated RAW artifacts

[NEXUS-16985] - Nexus 2 to 3 migration fails if there are staging build promotion repositories

[NEXUS-15714] - Continue to serve locally cached proxied npm packages that are unpublished on the remote

[NEXUS-16476] - Do not change NuGet API key when a user's password is changed

[NEXUS-16461] - New rubygems dependency files are cached in blob storage every time Nexus requests them from a proxy repository remote

[NEXUS-17231] - User role mappings will match user IDs case insensitively for LDAP, Crowd, and default authentication realms

[NEXUS-16409] - Support HTTP DELETE requests on RPMs to a Yum hosted repository

[NEXUS-16980] - User tokens cannot be retrieved by users who have "nx-usertoken-current" privilege

[NEXUS-16740] - Upload interface doesnt update or create metadata after upload file

[NEXUS-16225] - Swagger UI caching causing load problems on upgrade

[NEXUS-11139] - ConcurrentModificationException when deleting NPM resource

[NEXUS-15582] - docker proxy repository does not work for container-registry.oracle.com

[NEXUS-16718] - "scope" authentication errors when connecting to registry.connect.redhat.com

[NEXUS-16992] - 403 forbidden when a proxy repository authenticates to private docker registry in gitlab

[NEXUS-16227] - Roles are cleaned up when an associated repository has been deleted

[NEXUS-16387] - Rebuild of browse nodes is only performed on available repositories

[NEXUS-16584] - Fix to uploading large artifacts

[NEXUS-16393] - Correctly merge non-timstamped maven-metadata.xml files

[NEXUS-16539] - 401 responses now engage auto-blocking

[NEXUS-16753] - Connection pool leak when docker hub proxy repository receives 401 responses from auth.docker.io

[NEXUS-16757] - Ensures deletion of incomplete upload task

[NEXUS-16561] - Some database backups were prevented

[NEXUS-15816] - Paged results sets can now be disabled in LDAP searches

[NEXUS-10030] - Pre-released NuGet packages are now identified by their version string to workaround a NuGet bug

[NEXUS-16425] - Download endpoint now only returns the jar file if Maven classifier parameter is set

[NEXUS-16248] - Roles with circular references can no longer be created

[NEXUS-16470] - User-supplied filters are now properly escaped and sanitized

[NEXUS-16454] - Raw repository upload now works in IE11

[NEXUS-16503] - Artifacts can now be uploaded to the root of a Raw repository

[NEXUS-15745] - Yum proxy is now able to remove absolute URLs for metadata files that aren't at the root of a repository

[NEXUS-10255] NPM proxy failed with 404 for requests with version specified

[NEXUS-15746] Health check config database upgrade sometimes fails

[NEXUS-15795] Yum hosted caches 404 responses for files unnecessarily due to negative cache handler

[NEXUS-15461] Allow more tasks to be canceled

[NEXUS-15467] - Make blob store type field not editiable

[NEXUS-14956] - Upgrade to Eclipse Jetty 9.4.x

[NEXUS-12452] - Bower install no longer fails when user has only group level privileges

[NEXUS-15545] - Tree view now works properly with content selectors

[NEXUS-14969] - HA-C nodes now properly rejoin their cluster after cluster shutdown

[NEXUS-15084] - HA-C properly syncs user accounts between nodes

[NEXUS-15147] - Prevent ConcurrentModificationException when editing multiple user roles

[NEXUS-15364] - Logging from different task threads may log to the same task log if tasks are started within the same second

[NEXUS-12482] - Inconsistent behaviour with upload to snapshot repository fixed

[NEXUS-15282] - NPM allows redeploys despite Deploy Policy

[NEXUS-15425] - Assets now properly updated when a npm package is republished

[NEXUS-15466] - Welcome screen content is now displayed for administrators who are mapped in via LDAP group

[NEXUS-15202] - Take classifier into account when downloading a jar through the REST endpoint /rest/beta/search/assets/download

[NEXUS-15088] - Incorrect error response code 406 for bad ID in DELETE /component

[NEXUS-15089] - Error response code 204 not listed in REST API codes for component and asset delete

[NEXUS-15131] - Component naming for Yum Proxy now matches RPM header