JumpServer v4.10.19-lts Release Notes

JumpServer v4.10.19-lts is now available. This release introduces the KOTL component for visualized operations and maintenance, consolidates Magnus service ports with automatic protocol detection, adds clipboard access control for graphical sessions, and delivers over 20 improvements and 14 bug fixes.

What's New

• KOTL Component — Added the KOTL component to provide visualized operations and maintenance for JumpServer itself, offering deeper visibility into system health and performance.
• Magnus Service Port Consolidation — Consolidated Magnus service ports with automatic protocol detection based on incoming connection traffic, simplifying configuration and reducing port management overhead.
• Account Policy for File Transfers — Added account policy support for file transfers, including enhanced account selection, permission validation, and anomalous asset confirmation.
• SMTP Certificate Support — Added SMTP support for system CAs, custom CAs, and optional certificate verification for secure email delivery.
• Clipboard Access Control for Graphical Sessions — Introduced clipboard access control for graphical sessions, primarily for RDP and VNC connections, preventing unauthorized clipboard data exfiltration.

Improvements

• Improved resource selection and data-loading performance for many-to-many fields in forms.
• Enhanced the search and filtering experience at the top of resource lists.
• Refined the interaction design for bulk-edit forms and bulk resource selection.
• Improved query performance for ticket-related APIs, reducing the number of SQL statements executed.
• Refined the API OPTIONS response structure by returning query metadata such as filters, ordering, and search as dedicated top-level fields.
• Simplified the user creation page by removing unique-name validation, allowing duplicate display names.
• Upgraded the Chen SQL parser.
• Enhanced Chen's parsing of PostgreSQL column type changes, including ALTER COLUMN TYPE, SET DATA TYPE, COLLATE, and USING.
• Added configurable timing parameters for user account and authorization expiration emails.
• Enhanced Chen's support for the Oracle SQL dialect.
• Upgraded the Huawei Cloud OBS SDK to 3.26.2 for improved object storage compatibility.
• Added FusionCompute user type configuration, supporting local users, domain users, and API integration users.
• Added support for creating custom ticket workflows and configuring CC recipients.
• Improved automation task logging.
• Optimized password-change credential push performance for automation tasks.
• Added su_from account support for network switches.
• Added global configuration options for user preferences.
• Improved the stability of rzsz file transfers in Koko.
• Updated password reset emails to display both the user's name and login username.
• Enhanced dependency checks when deleting organizations, including warnings for account template dependencies.
• Upgraded the Ansible Executor image to Python 3.14 and added the required AWS SDK dependencies.
• Enhanced the NEC VNC Proxy to support connections to macOS assets.
• Refined clipboard access control in Koko Web Terminal.
• Extended command storage support to Elasticsearch 9.

Bug Fixes

• OAuth2 client authorization callbacks no longer generate Grant operation logs.
• Prevented errors caused by improper null-value handling when unbinding UKey serial numbers.
• Corrected an issue where -- line comments in Chen SQL could inadvertently comment out subsequent fields or expressions after formatting.
• Added proper handling for Oracle pagination syntax, including FETCH FIRST ... ROW ONLY and OFFSET ... ROW.
• Prevented Chen from incorrectly splitting Oracle SQL without semicolon delimiters into multiple statements.
• Resolved Chen connection failures affecting certain MySQL databases with Public Key Retrieval restrictions.
• Restored compatibility with LDAP services that prohibit anonymous queries.
• Addressed configuration test and access failures affecting certain S3-compatible object storage services.
• Eliminated collation conflicts when querying resource activity logs in certain database environments.
• Ensured database connections are properly released by LDAP worker threads, preventing connection errors.
• Guarded against timestamp processing errors caused by empty querysets during audit command cleanup.
• Restored authorization node search functionality in Job Center.
• Corrected database parameter passing in the PostgreSQL Ping module.
• Resolved Koko login failures when accessing Ubuntu assets through su_from accounts.

Upgrade

Upgrade to v4.10.19-lts via the standard update procedure. For details, refer to the official documentation.

Full release notes: https://github.com/jumpserver/jumpserver/releases/tag/v4.10.19