Nexus IQ Server Release 149

[Anshul Sharma]

Hi!

Latest version of Nexus IQ Server version 149 has been released and is freely available for download for all existing users.

This release offers improvements, bug fixes and a policy violation fix.

Improvements:

1. Enabled scanning of pom.xml files located inside a META-INF directory

This release offers a new configurable option to enable scanning of pom.xml files, for scan targets that could contain manifest files.

2. Performance tuning for Attribution Reports

We have optimized our queries and API calls resulting in improved query statistics for attribution reports for the Advanced Legal Pack (ALP.)

3. Dashboard performance improvements

With this release we continue our improvements to the performance of the Dashboard page, to offer a fast and comprehensive risk profile of your applications.

Notable Bug Fixes:

1. This release fixes a bug in the Expiration Date filter option for the Waivers Dashboard that retrieved expired waivers, in addition to the waivers that met the filter criteria.  

2. For Nexus IQ Server release 132 and higher, users access will be timed out after 30 minutes of inactivity.

3. A tooltip to display the email address of users (from LDAP) on the New Role page under Add a Role, has been made visible again.

Policy Violation Fix:

To maintain and improve the stability and security, we continually scan all Nexus products and applications internally for vulnerabilities. This release fixes our internal policy violation associated with CVE-2022-1415.

For more detailed information on release 149, please refer to release notes.

Thank you,

Anshul Sharma Product Manager - Lifecycle