Update to version v3.3.2 (#220)

Author: kamyarz-aws

CHANGELOG.md

@@ -5,6 +5,18 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.3.2] - 2024-11-01
+
+### Security
+
+- `http-proxy-middleware` to mitigate [CVE-2024-21536]
+- Bumping cryptography to v43.0.1 in docker image to mitigate (https://github.com/advisories/GHSA-h4gh-qq45-vh27)
+- Bumping setuptool to 65.5.1 in docker image to mitigate [CVE-2022-40897]
+
+### Fixed
+
+- Fixed bug pertain to start button not working properly (https://github.com/aws-solutions/distributed-load-testing-on-aws/issues/218)
+
 ## [3.3.1] - 2024-10-02
 
 ### Security

VERSION.txt

@@ -1 +1 @@
-3.3.1
+3.3.2

deployment/ecr/distributed-load-testing-on-aws-load-tester/Dockerfile

@@ -37,18 +37,23 @@ RUN rm -rf /root/.bzt/python-packages/3.10.12/werkzeug*
 RUN cp -r /usr/local/lib/python3.10/dist-packages/werkzeug* /root/.bzt/python-packages/3.10.12/
 
 # Replacing cryptography with more stable version to resolve vulnerabilities
-RUN pip install cryptography==42.0.6
+RUN pip install cryptography==43.0.1
 RUN rm -rf /root/.bzt/python-packages/3.10.12/cryptography*
 RUN cp -r /usr/local/lib/python3.10/dist-packages/cryptography* /root/.bzt/python-packages/3.10.12/
 
+# Replacing setuptools with more stable version to resolve vulnerabilities
+RUN pip install setuptools==65.5.1
+RUN rm -rf /root/.bzt/python-packages/3.10.12/setuptools*
+RUN cp -r /usr/local/lib/python3.10/dist-packages/setuptools* /root/.bzt/python-packages/3.10.12/
+
 # Removing dotnet dependencies as NUnit and Xunit is not supported in DLT
 RUN rm -rf /usr/share/dotnet
 
 # Replacing aiohttp with more stable version to resolve CVE-2024-23334
 RUN rm -rf /usr/local/lib/python3.10/dist-packages/aiohttp* 
 RUN  pip install --upgrade aiohttp
 
-# Replacing idna and Flas_Cors with more stable version to resolve CVE-2024-3651 and  CVE-2024-6221
+# Replacing idna and Flask_Cors with more stable version to resolve CVE-2024-3651 and  CVE-2024-6221
 RUN pip install --upgrade idna Flask_Cors
 RUN rm -rf /root/.bzt/python-packages/3.10.12/idna* /root/.bzt/python-packages/3.10.12/Flask_Cors*
 RUN cp -r /usr/local/lib/python3.10/dist-packages/idna* /usr/local/lib/python3.10/dist-packages/Flask_Cors* /root/.bzt/python-packages/3.10.12/

deployment/ecr/distributed-load-testing-on-aws-load-tester/load-test.sh

@@ -155,7 +155,7 @@ if [ -f /tmp/artifacts/results.xml ]; then
   fi
 
   if [ "$TEST_TYPE" == "simple" ]; then
-    TEST_TYPE = "jmeter"
+    TEST_TYPE="jmeter"
   fi
 
   echo "Uploading results, bzt log, and JMeter log, out, and err files"

source/api-services/package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "api-services",
-  "version": "3.3.1",
+  "version": "3.3.2",
   "description": "REST API micro services",
   "repository": {
     "type": "git",

source/api-services/package.json

@@ -1,6 +1,6 @@
 {
   "name": "distributed-load-testing-on-aws-ui",
-  "version": "3.3.1",
+  "version": "3.3.2",
   "private": true,
   "license": "Apache-2.0",
   "author": {

source/console/package-lock.json

@@ -188,4 +188,6 @@ class App extends React.Component {
   }
 }
 
-export default withAuthenticator(App);
+export default withAuthenticator(App, {
+  hideSignUp: true,
+});

source/console/package.json

@@ -82,7 +82,7 @@ class TestControlButtons extends React.Component {
       },
     };
     payload.testScenario.scenarios[data.testName] = obj[data.testType];
-
+    if (data.testType !== "simple") payload.fileType = data.fileType;
     return payload;
   }
 

source/console/src/App.js

@@ -1,6 +1,6 @@
 {
   "name": "custom-resource",
-  "version": "3.3.1",
+  "version": "3.3.2",
   "description": "cfn custom resources for distributed load testing on AWS workflow",
   "repository": {
     "type": "git",

source/console/src/Components/Shared/Buttons/TestControlButtons.js

@@ -1,6 +1,6 @@
 {
   "name": "distributed-load-testing-on-aws-infrastructure",
-  "version": "3.3.1",
+  "version": "3.3.2",
   "author": {
     "name": "Amazon Web Services",
     "url": "https://aws.amazon.com/solutions"

source/custom-resource/package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "metrics-utils",
-  "version": "3.3.1",
+  "version": "3.3.2",
   "main": "index.ts",
   "license": "Apache-2.0",
   "description": "Distributed Load Testing on AWS Ops Metrics",

source/custom-resource/package.json

@@ -1,6 +1,6 @@
 {
   "name": "source",
-  "version": "3.3.1",
+  "version": "3.3.2",
   "private": true,
   "description": "ESLint and prettier dependencies to be used within the solution",
   "license": "Apache-2.0",

source/infrastructure/package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "real-time-data-publisher",
-  "version": "3.3.1",
+  "version": "3.3.2",
   "description": "Publishes real time test data to an IoT endpoint",
   "repository": {
     "type": "git",

source/infrastructure/package.json

@@ -1,6 +1,6 @@
 {
   "name": "results-parser",
-  "version": "3.3.1",
+  "version": "3.3.2",
   "description": "result parser for indexing xml test results to DynamoDB",
   "repository": {
     "type": "git",

source/metrics-utils/package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "solution-utils",
-  "version": "3.3.1",
+  "version": "3.3.2",
   "description": "Utilities package for Distributed Load Testing on AWS",
   "license": "Apache-2.0",
   "author": {

source/metrics-utils/package.json

@@ -1,6 +1,6 @@
 {
   "name": "task-canceler",
-  "version": "3.3.1",
+  "version": "3.3.2",
   "description": "Triggered by api-services lambda function, cancels ecs tasks",
   "repository": {
     "type": "git",