Enforcer Image Update - 12 December 2023

Enhancements and capabilities in the enforcer image:

• The data path process has been updated with the latest SSL libraries (BNWAS-7335)

• A possible scenario that can lead to the WaaS responding with a “503 Server Unavailable” error when the servers are healthy, is now addressed (BNWAS-7884)

• A rare outage that can be caused by the CAPTCHA functionality is addressed (BNWAS-7489)

• The session recording feature is now available for better debuggability of sessions (BNWAS-7004)

• Enhancements to the access logs to log more details in cases of error conditions leading to non-success responses, usually the 408 status codes (BNWAS-6457)

• A change is made to ensure that WaaS does not accidentally mark allowed bots as “fake” following random DNS failures (BNWAS-7390)

• CVE-2023-44487- a recently disclosed vulnerability in HTTP2, is addressed (BNWAS-7698)