Skip to content

Latest commit

 

History

History
517 lines (349 loc) · 25.9 KB

DSE_6.0_Release_Notes.md

File metadata and controls

517 lines (349 loc) · 25.9 KB

Release notes for DataStax Enterprise 6.0

DSE 6.0.x is compatible with Apache Cassandra™ 3.11 and adds additional production-certified changes, if any. Components that are indicated with an asterisk (*) (if any) are known to be updated since the prior patch version.

⚠️ NOTE: DSE 6.0.x line has EOSL date of November 30, 2022. Please consider upgrading to DSE 6.8 for our latest features and patches.

Downloads migration: downloads.datastax.com no longer available for DSE

3 November 2025

Important: Beginning January 2026, DataStax Enterprise (DSE) downloads will no longer be available on the downloads.datastax.com website.

IBM Fix Central will distribute all DSE packages (binary tarballs, RPM packages, and DEB packages) exclusively.

All package formats remain available through Fix Central:

  • Binary tarball (dse-{version}-bin.tar.gz) - for installations without package managers.

  • RPM packages (dse-{version}-rpm.zip) - for RHEL-based systems.

  • DEB packages (dse-{version}-deb.zip) - for Debian-based systems.

  • cqlsh - All package formats include cqlsh.

Prerequisites

Before you download DSE packages from IBM Fix Central, you need an IBMid with MFA enabled:

  • If you are an existing IBM customer with an IBMid, you can continue to use your established account.

  • If you don't have an IBMid, you can create one.

  • If your company uses Enterprise Federation (EF) for authentication with corporate credentials, see the EF documentation.

How to download from Fix Central

  1. Sign in to IBM Fix Central.

  2. In the Product selector field, enter IBM DataStax Enterprise.

  3. Select the DSE version you want to install from the Release list.

  4. Select All in the Platform list, and then click Continue.

  5. On the Identify fixes page, click Continue to use the default Browse for fixes option.

  6. Select the fixes (DSE version) you want to install, and then click Continue.

  7. On the Download options page, select the Download using your browser (HTTPS), and then click Continue.

    This step is only required the first time you download a file using Fix Central. If you need to change your download method for subsequent downloads, use the Change download options link in the Download options section of Fix Central pages.

  8. Review the terms and conditions, and then click I agree.

  9. From the file list, click the file you want to download.

Set up local repositories for RPM and DEB installations

After downloading packages from Fix Central, you must set up a local repository for RPM and DEB installations:

RPM installations (RHEL-based systems)

  1. Extract the RPM files from the zip file:

    sudo unzip dse-{version}-rpm.zip

  2. Set up a local Yum repository to host the downloaded RPM files.

    Choose one of the following methods:

  3. Add the local Yum repository to /etc/yum.repos.d/datastax.repo:

    [datastax]
name=DataStax Repo for DataStax Enterprise
baseurl=file://**REPOSITORY_DIRECTORY**
enabled=1
gpgcheck=0

    Replace **REPOSITORY_DIRECTORY** with the path to your repository directory.

  4. Update the packages:

    sudo yum update

  5. Install all required DSE packages (you must specify all packages):

    # For the latest version
sudo yum install dse-full

# For a specific version (replace {version} with actual version, e.g., 6.0.15)
sudo yum install dse-{version}-1 \
    dse-full-{version}-1 \
    dse-libgraph-{version}-1 \
    dse-libcassandra-{version}-1 \
    dse-libhadoop2-client-{version}-1 \
    dse-libsolr-{version}-1 \
    dse-libtomcat-{version}-1 \
    dse-liblog4j-{version}-1 \
    dse-libspark-{version}-1

DEB installations (Debian-based systems)

  1. Extract the DEB files from the zip file:

    sudo unzip dse-{version}-deb.zip

  2. Set up a local APT repository to host the downloaded Debian package.

    For more information, see Setting up a Debian repository.

  3. Add the APT repository file /etc/apt/sources.list.d/datastax.sources.list:

    echo "deb [trusted=yes] file:**REPOSITORY_DIRECTORY** ./" | sudo tee -a /etc/apt/sources.list.d/datastax.sources.list

    Replace **REPOSITORY_DIRECTORY** with the path to your repository directory.

    The [trusted=yes] option allows APT to use the repository without GPG key verification.

  4. Update the packages:

    sudo apt-get update

  5. Install all required DSE packages (you must specify all packages):

    # For the latest version
sudo apt-get install dse-full

# For a specific version (replace {version} with your version)
sudo apt-get install dse={version}-1 \
    dse-full={version}-1 \
    dse-libcassandra={version}-1 \
    dse-libgraph={version}-1 \
    dse-libhadoop2-client-native={version}-1 \
    dse-libhadoop2-client={version}-1 \
    dse-liblog4j={version}-1 \
    dse-libsolr={version}-1 \
    dse-libspark={version}-1 \
    dse-libtomcat={version}-1

Note: Replace **REPOSITORY_DIRECTORY** with your preferred repository directory path, and replace **DOWNLOAD_DIRECTORY** with the path where you extracted the downloaded packages.

Verify repository setup

After you set up your local repository, verify that it's configured correctly:

RPM installations

# Verify the repository is listed
sudo yum repolist

# Search for DSE packages
sudo yum search dse

DEB installations

# Update package lists
sudo apt-get update

# Check if DSE packages are available
apt-cache search dse

Clean up old repository configurations

If you previously had repositories configured for downloads.datastax.com, remove those configurations:

  • RPM installations: Remove or update any old repository files in /etc/yum.repos.d/ that reference downloads.datastax.com.

  • DEB installations: Remove or update any old entries in /etc/apt/sources.list or files in /etc/apt/sources.list.d/ that reference downloads.datastax.com.

Binary tarball installation

  1. Download the tarball from Fix Central: dse-{version}-bin.tar.gz

  2. Extract the tarball to your installation directory:

    sudo tar -xzvf dse-{version}-bin.tar.gz -C /opt

  3. The extraction creates a directory named dse-{version}.

  4. Follow your standard DSE configuration and startup procedures.

Impact on installation and automation

Binary tarball installations: After downloading from Fix Central, extract and install as before. You do not need to set up a repository.

RPM and DEB installations: Follow the repository setup instructions above, then proceed with the standard installation commands for your platform.

Note for automated deployments: If you have scripts or CI/CD pipelines that reference downloads.datastax.com URLs, you must update them to use Fix Central download procedures. Fix Central requires authentication and manual download initiation, so you must adjust scripts that previously used direct download URLs accordingly.

Release notes for 6.0.18

31 May 2022

Components versions for DSE 6.0.18

  • Apache Solr™ 6.0.1.1.2883
  • Apache Spark™ 2.2.3.18
  • Apache TinkerPop™ 3.3.11-20210727-ba40007e
  • Apache Tomcat® 8.5.75*
  • DSE Java Driver 1.8.3-dse+20201217 (DSE internal-only version)
  • Netty 4.1.25.7.dse
  • Spark JobServer 0.8.0.45.3

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

6.0.18 DSE Core

  • Improved reading logic to ensure that sstables are not unnecessarily read for columns that are not selected. See CASSANDRA-16737. (Previously DB-4974). (DSP-22478)
  • Fixed the URISyntaxException: Malformed IPv6 address when using nodetool or dsetool with Java 8u331 or 11.0.15. This is due to the recent changes of JDK-8278972, in which parsing of URL Strings in Built-in JNDI Providers is more strict. (DSP-22474)

6.0.18 DSE Cassandra

  • Fixed swapped greater than ('>') and less than ('<') operators in the slow query log for a table with DESC clustering keys (port CASSANDRA-15503). (DSP-22369)
  • Fixed a rare race condition where attempting to read from a sstable would fail with an assertion error. (DSP-22431)

6.0.18 DSE Security

  • Upgraded Bouncy Castle to the latest 1.70 version. (DSP-22352)

6.0.18 DSE CVE

  • Upgraded apache-commons compress library to 1.21 version. This version upgrade fixed several vulnerabilities that could be used to mount a denial of service attack against specially-crafted services that use a compress or decompress sevenz, tar, or zip package. (DSP-22383, CVE-2021-35515, CVE-2021-35516, CVE-2021-35517, CVE-2021-36090)
  • Upgraded snakeyaml version to 1.30. (DSP-22386, CVE-2017-18640)
  • Upgraded logback version to 1.2.11. This fixes a vulnerability affecting logback-classic and logback-core. (DSP-22237, CVE-2021-42550)
  • Upgraded version of Apache Tomcat from 8.5.72 to 8.5.75. (DSP-22360, CVE-2022-23181)
  • Upgraded version of Bouncy Castle to 1.67. (DSP-22301, CVE-2018-1000613, CVE-2018-1000180, CVE-2020-28052)

Release notes for 6.0.17

18 February 2022

Components versions for DSE 6.0.17

  • Apache Solr™ 6.0.1.1.2883*
  • Apache Spark™ 2.2.3.18
  • Apache TinkerPop™ 3.3.11-20210727-ba40007e*
  • Apache Tomcat® 8.5.72*
  • DSE Java Driver 1.8.3-dse+20201217 (DSE internal-only version)
  • Netty 4.1.25.7.dse
  • Spark JobServer 0.8.0.45.3

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

6.0.17 DSE Core

  • Adds a new flag -t <number of days> for sstablescrub to update deletion times which are in the future. It accepts a command-line argument: -t <number of days>. All deletion times further in the future than the given number of days will be reset to the current time. Also fixed a potential issue that users may have the deletion time in the future updated to the current time if they run nodetool scrub. (DB-4964)
  • Added check against the negative value in local stream throughput (stream_throughput_outbound_megabits_per_sec) and inter dc stream throughput (inter_dc_stream_throughput_outbound_megabits_per_sec). (DB-5010)
  • Fixed an issue in preloading prepared statements that queries static columns. (DB-5012)
  • Port and adjust CASSANDRA-16686 for DSE. (DB-5022)
  • Fixed a bug in the authenticator that would use the default management mode instead of the defined mode by authentication when authenticating. (DSP-22067)
  • Fixes stack overflow with secondary indexes on collections. (DSP-22070)

6.0.17 DSE Cassandra

  • Enables periodic logging of system status (default every 5 minutes, configurable). (DSP-22039)
  • Await timeout for shutting down non periodic tasks is now configurable with the new jvm option cassandra.non_periodic_tasks_shutdown_timeout_in_minutes. When timeout is reached, force shutdown those tasks. (DSP-22241)
  • Lower commitlog replay sstable origin warning to info. (DSP-22270)
  • Fix a possible issue that shell tool could break with -h/--help in package install. (DSP-20375)
  • Added warning message in case of cases where dse was started with duplicated -Xmx options when used in jvm-server.options. (DSP-21795)

6.0.17 DSE Search

  • Fixed a bug where in rare cases search query routing might start to spin endlessly for a particular query. (DSP-21838)

6.0.17 DSE Spark

  • Fixes broken partition filtering in hive metastore leading to missing data in the spark-sql queries results for queries involving numeric partition keys or complex conditions. (DSP-21651)
  • Fixed and updated javax.mail dependency to com.sun.mail. (DSP-22085)

6.0.17 DSE Auth

  • Removed a possible false-positives error message in the log that would cause confusion when multiple authentication schemes are defined. (DB-5015)

6.0.17 DSE CQL

  • Prints TLS protocol information when running cqlsh with --debug parameter. (DB-4981)

6.0.17 DSE Local Write-Read Paths

  • Resolves a TPC weakness with large rows and collections, where DSE 6 would repeatedly attempt to read the same row and create a lot of on-heap garbage. (DB-3962)

6.0.17 DSE SSTables

  • When the Bloom filter is recreated due to FP chance change, sstable metadata is loaded and re-written in order to update validation metadata with the new fp chance. However, the loaded metadata lacked compaction metadata, so when rewritten, compaction metadata got truncated. (DB-5005)

6.0.17 DSE Upgrade

  • Retain changes to /etc/security/limits.d/cassandra.conf on yum upgrade. (DSP-21928)

6.0.17 DSE Security

  • This fixes an issue in the LDAP group_search_filter default value that meant that group hierarchies were not being loaded if the group_search_filter was not explicitly set in the dse.yaml. (DSP-21874)

6.0.17 DSE CVE

DataStax Enterprise 6.0.16

11 May 2021

NOTE: DSE 6.0.16 is the final release of the 6.0.x line. Please consider upgrading to DSE 6.8 for our latest features and patches.

Components versions for DSE 6.0.16

  • Apache Solr™ 6.0.1.1.2838*
  • Apache Spark™ 2.2.3.18*
  • Apache TinkerPop™ 3.3.7-20190521-f71ce0d7
  • Apache Tomcat® 8.5.65*
  • DSE Java Driver 1.8.3-dse+20201217 (DSE internal-only version)
  • Netty 4.1.25.7.dse
  • Spark JobServer 0.8.0.45.3*

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

DSE 6.0.16 Auth

  • Fixes an issue where a login attempt with missing credentials logged a misleading warning message with stack trace instead of an error message about the missing username or password. (DB-4806)

DSE 6.0.16 CQL

  • Fix an error in cqlsh encoding unicode in multi-line statements (DB-4855)
  • Make cqlsh prefer newer TLS versions. (DB-4966)

DSE 6.0.16 Distributed Read/Write

  • Applied fix for CVE-2020-17516 (DB-4897)
  • Single node crash will no longer result in downtime with write in multi-DC setup when "dse.write.forwarding.disabled.consistency.levels" property is set for relevant Consistency Levels. (DB-2410)

DSE 6.0.16 Legacy Repair

  • Fixed a bug when in rare cases a terminated repair session would leak on-heap memory (DB-4833)

DSE 6.0.16 SSTables

  • Fixes a problem with nulls in tuples in the byte-comparable translation (i.e. sstables in bti format) as well as the comparator (i.e. sstables in big format, see CASSANDRA-19538). (DB-4813)

DSE 6.0.16 AOSS

  • AOSS returns additional parameter in ‘status' endpoint: “connection_hostname“. The new parameter is a FQDN of the node hosting AOSS, it may be used for connections (instead of connection_address) if needed. (DSP-21811)

DSE 6.0.16 Cassandra

  • Data export from cqlsh is now less noisy in the logs (DSP-21494)
  • Fixed intermittent "ERROR: java.util.ConcurrentModificationException at org.apache.cassandra.transport.CBUtil.writeStringList" (DSP-21336)
  • Fix for DESCRIBE TYPES in CQLSH (DSP-21667)

DSE 6.0.16 Core

  • Fixes SRCCLR-SID-22742: Insecure Input Validation Vulnerability in the Apache Commons Codec library (DSP-21747)
  • Fixed an issue with DSE daemon unable to stop after the default timeout expired. The issue only happened in the systems that use package install and init.d, such as centos. (DSP-21804)
  • Print a timestamp when nodetool exits due to an error (DB-4826)

DSE 6.0.16 Security

  • Add asynchronous update to KMIP key cache to fix blocking of commit log (DSP-20582)

DSE 6.0.16 Hadoop

  • Fixed CVE-2020-1945 affecting Apache Ant (DSP-21716)

DSE 6.0.16 CVE

  • Update tomcat version 8.0.53 to 8.5.61 (DSP-21394)
  • upgrade apache commons-compress to address CVE-2019-12402 (DSP-21679)
  • fixed CVE-2018-17197 affecting Apache Tika (DSP-21680)
  • Addresses CVE-2018-11796, CVE-2018-11761, CVE-2019-10094, CVE-2019-10088 in the Apache Tika library. (DSP-21689)
  • Update tomcat version 8.5.61 to 8.5.65 (DSP-21798)

DSE 6.0.16 Search

  • Fixed a bug where FilterCache warmup triggered by node health change can block GossipStage-1 thread for several seconds (DSP-21674)
  • Fixed a bug where under heavy load solr query worker threads would use 100% CPU due to contention on thread local map (DSP-21746)
  • A new jvm option is added: “dse.search.fc.warmup”: AUTO, ALWAYS & NEVER. (DSP-21813)

DSE 6.0.16 Spark

  • Fixed CVE-2014-0114, CVE-2014-0114 (DSP-21668)

DataStax Enterprise 6.0.15

12 February 2021

Components versions for DSE 6.0.15

  • Apache Solr™ 6.0.1.1.2811*
  • Apache Spark™ 2.2.3.17*
  • Apache TinkerPop™ 3.3.7-20190521-f71ce0d7
  • Apache Tomcat® 8.0.53
  • DSE Java Driver 1.8.3-dse+20201217* (DSE internal-only version)
  • Netty 4.1.25.7.dse
  • Spark JobServer 0.8.0.45.2

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

DSE 6.0.15 Auth

  • Works around a bug (JDK-8148854) in JDK 1.8u282. (DB-4884)

DSE 6.0.15 CommitLog

  • Addressed a bug where a CommitLogReplayException is caused by a bad header but correct CRC after restart (DB-3996)

DSE 6.0.15 CommitLog

  • Fixed a bug where some part of the commit log might not be replayed after injecting a foreign SSTable to a node or, on 6.8, after zero-copy streaming of an SSTable (DB-4629)

DSE 6.0.15 Local Write-Read Paths

  • Dropped messages metrics calculation doesn't cause assertion errors when dropped messages contain remote batch mutation. (DB-3905)

DSE 6.0.15 Tools

  • SSTablePartitions tool will no longer fail with "histogram overflowed" when its working for the server code (DB-2952)
  • SStableloader now uses native_transport_port_ssl over native_transport_port when passed a config file with the property set (DB-4632)

DSE 6.0.15 TPC

  • Fixes a problem in the scheduling and counting of active materialized view updates that could cause too many to be executed concurrently, overwhelming the node. (DB-4782)

DSE 6.0.15 Build

  • The version of DSBulk bundled with DSE has been updated to 1.7.0. (DSP-21535)

DSE 6.0.15 Cassandra

  • Fixed a bug where the slow query log would fill with queries that do not meet the slow query threshold (DSP-21417)

DSE 6.0.15 Core

  • Add support for multiple authentication sources (LDAP + DSE Internal) (DSP-14233)
  • fix a bug in cassandra.repair.mutation_repair_rows_per_batch setting that caused sending all repair mutations at once (DSP-21429)
  • Addressed several Jackson databind vulnerabilities by upgrading jackson-databind to version 2.9.10.8 in DSE 5.1.21, 6.0.15 and 6.7.13 and version 2.10.5.1 in DSP 6.8.10. (DSP-21503) (DSP-21503)

DSE 6.0.15 Docke

  • Update Jetty to 9.4.34.v20201102 and update Spark Version (DSP-21506)

DSE 6.0.15 Spark

  • SCC by default enables direct join optimization only when size_estimates for both tables are available. (DSP-21628)
  • Fix: Spark Master fails to start if keystore (used by web UI) contains more than one certificate (DSP-21703)

DSE 6.0.15 Search

  • A system property dse.solr.fuzzy.max.expansion was added. The property allows to workaround https://issues.apache.org/jira/browse/SOLR-4824 by defining a custom number of fuzzy query expansions. The maximal possible value is 1024. When unset, the default number of max expansions is 50. (DSP-21605)
  • Search queries will no longer fail when querying clustering columns of certain types on which the order is reversed (DSP-21363)

DSE 6.0.15 Security

  • When optimized group retrieval was used in {memberof_search mode (ldap_options.all_parent_groups_search_type parameter in dse.yaml), DSE confused attributes specified by ldap_options.user_memberof_attribute and ldap_options.all_parent_groups_memberof_attribute making the optimized search work only in case both attributes were set to the same value. (DSP-21537)

DSE 6.0.15 SparkConnector

  • Fixed direct join optimization for Spark SQL. (DSP-21498)
  • DSE Spark now supports connections to Astra clusters. (DSP-21510)

DataStax Enterprise 6.0.14

26 October 2020

Components versions for DSE 6.0.14

  • Apache Solr™ 6.0.1.1.2793
  • Apache Spark™ 2.2.3.15
  • Apache TinkerPop™ 3.3.7-20190521-f71ce0d7
  • Apache Tomcat® 8.0.53
  • DSE Java Driver 1.6.10 (DSE internal-only version)
  • Netty 4.1.25.7.dse
  • Spark JobServer 0.8.0.45.2

NOTE: above-listed DSE Java Driver is an internal-version only. If you're developing applications, please refer to the Java Driver documentation to choose an appropriate version.

DSE 6.0.14 Backup and Restore

  • Snapshot schema.cql files now contain IF NOT EXISTS clause for CREATE TYPE statements (DB-4685)

DSE 6.0.14 Compaction

  • Fixed a problem where races in notifying compaction strategies of added and removed SSTables can cause compaction to try to use non-existing SSTables and repeatedly fail to make progress. (DB-4711)

DSE 6.0.14 core

  • Fixed extreme local pauses on all nodes in the cluster on a node restart. (DB-4657)
  • Added TTL and TimeWindowCompactionStrategy (TWCS) to system_distributed.repair_history and system_distributed.parent_repair_history tables. (DB-2009)
  • Fixed node restart issue after dropping a PointType column. (DSP-21326)
  • Added new system property to cap the maximum amount of memory used by bloom filters: -Dcassandra.max_bf_memory_mb. By default, this is unlimited. (DSP-21344)

DSE 6.0.14 Local Write-Read Paths

  • Improved performance of estimation of partition counts for subranges. (DB-3679)

DSE 6.0.14 Schema

  • Removed a race condition that may lead to reopening a keyspace during keyspace drop. (DB-4564)

DSE 6.0.14 Security

  • Fixed LDAP user permissions problem following LDAP server restart. (DSP-21284)

DSE 6.0.14 DSEFS

  • DSEFS waits for a schema agreement before starting and issuing the first CQL query. (DSP-20743)

DSE 6.0.14 Spark

  • SPARK-18838 backported to DSE Spark 2.2.3. (DSP-21300)
  • Fixed Spark Applications contacting Nodes in non-local DC. (DSP-19961)

Release notes for previous versions

Release notes for previous DSE patch releases can be found here: https://docs.datastax.com/en/dse/6.0/dse-admin/datastax_enterprise/releaseNotes/RNdse.html#RNdse