Repository navigation
Releases: Particular/ServiceControl
Release list
6.21.3
As part of this release we had 3 commits which resulted in 6 issues being closed.
Dependency CVEs
- #6000 GitHub Security Advisory ID (GHSA-2fmv-rv2c-59x7) reported on branch release-6.21
- #6001 GitHub Security Advisory ID (GHSA-846f-f764-76mx) reported on branch release-6.21
Improvements
- #6017 .NET October 2026 Updates
- #6018 Windows installer packages unused Kafka client libraries that include a vulnerable libcurl
- #6019 Exclude unused Kafka libraries and update .NET to 10.0.13
- #6033 Update Particular.ServicePulse.Core to 2.12.1
Where to get it
You can download this release from our website.
🛡 ClamAV virus scan results: No viruses detected
Version: ClamAV 1.5.4
Scan Date: Fri, 23 Oct 2026 16:52:01 GMT
----------- SCAN SUMMARY -----------
Known viruses: 3628191
Engine version: 1.5.4
Scanned directories: 1
Scanned files: 4
Infected files: 0
Data scanned: 29.30 MiB
Data read: 496.98 MiB (ratio 0.06:1)
Time: 24.927 sec (0 m 24 s)
Start Date: 2026:10:23 16:51:35
End Date: 2026:10:23 16:52:00
6.21.2
As part of this release we had 2 commits which resulted in 2 issues being closed.
This release fixes two security vulnerabilities. See the security advisory for who is affected and what to do.
Bugs
- #5986 API accepts requests without a valid token when authentication is enabled and role-based authorization is disabled
- #5987 Email notification settings API returns the stored SMTP password
Where to get it
You can download this release from our website.
🛡 ClamAV virus scan results: No viruses detected
Version: ClamAV 1.5.4
Scan Date: Fri, 09 Oct 2026 16:15:17 GMT
----------- SCAN SUMMARY -----------
Known viruses: 3628144
Engine version: 1.5.4
Scanned directories: 1
Scanned files: 4
Infected files: 0
Data scanned: 29.27 MiB
Data read: 499.29 MiB (ratio 0.06:1)
Time: 45.521 sec (0 m 45 s)
Start Date: 2026:10:09 16:14:26
End Date: 2026:10:09 16:15:12
6.21.1
Caution
Deprecated. This version is affected by Security Advisory 2026-10-09:
- When authentication is enabled and role-based authorization is disabled, the API accepts requests without a valid token.
- The email notification settings API returns the SMTP password. This only affects instances where email notifications were configured with an SMTP password.
Upgrade to ServiceControl 6.21.2
As part of this release we had 3 commits which resulted in 2 issues being closed.
Bugs
- #5950 Migrated Lucene indexes are reset to Corax at start-up when the index is not locked (fixes #5948)
- #5959 Retry processor runs a dynamic query that creates the auto index Auto/RetryBatches/ByStatus (fixes #5960)
Where to get it
You can download this release from our website.
🛡 ClamAV virus scan results: No viruses detected
Version: ClamAV 1.5.4
Scan Date: Wed, 07 Oct 2026 11:28:45 GMT
----------- SCAN SUMMARY -----------
Known viruses: 3628133
Engine version: 1.5.4
Scanned directories: 1
Scanned files: 4
Infected files: 0
Data scanned: 29.16 MiB
Data read: 499.27 MiB (ratio 0.06:1)
Time: 42.470 sec (0 m 42 s)
Start Date: 2026:10:07 11:27:57
End Date: 2026:10:07 11:28:40
6.21.0
Caution
Deprecated. This version is affected by Security Advisory 2026-10-09:
- When authentication is enabled and role-based authorization is disabled, the API accepts requests without a valid token.
- The email notification settings API returns the SMTP password. This only affects instances where email notifications were configured with an SMTP password.
Upgrade to ServiceControl 6.21.2
As part of this release we had 35 commits which resulted in 1 issue being closed.
Improvement
- #5882 Update dependency Particular.ServicePulse.Core to 2.12.0
Where to get it
You can download this release from our website.
🛡 ClamAV virus scan results: No viruses detected
Version: ClamAV 1.5.3
Scan Date: Fri, 11 Sep 2026 14:20:24 GMT
----------- SCAN SUMMARY -----------
Known viruses: 3628060
Engine version: 1.5.3
Scanned directories: 1
Scanned files: 4
Infected files: 0
Data scanned: 29.10 MiB
Data read: 499.25 MiB (ratio 0.06:1)
Time: 42.331 sec (0 m 42 s)
Start Date: 2026:09:11 14:19:38
End Date: 2026:09:11 14:20:21
6.20.0
Caution
Deprecated. This version is affected by Security Advisory 2026-10-09:
- When authentication is enabled and role-based authorization is disabled, the API accepts requests without a valid token.
- The email notification settings API returns the SMTP password. This only affects instances where email notifications were configured with an SMTP password.
Upgrade to ServiceControl 6.21.2
Warning
Upgrading audit instances rebuilds the audit message index. This version changes the definition of the audit instance index MessagesViewIndex, or MessagesViewIndexWithFullTextSearch when full-text search on message bodies is enabled. At the first start-up after the upgrade, RavenDB rebuilds the index side by side. On large audit databases the rebuild can take a long time, degrades ingestion and indexing rates while it runs, and requires additional storage, usually at least the size of the index being replaced.
Plan the upgrade of audit instances before upgrading. See Audit message index definition changed in the upgrade guide, and Upgrades that rebuild indexes for how to upgrade multiple audit instances one at a time without disrupting the environment.
Note
The default RavenDB full-text search engine is changing from Corax to Lucene to address performance and stability issues on large database instances.
Existing instances will not automatically be migrated and will continue to use Corax. A warning is logged at startup and ServicePulse will display a failed custom check until indexes have been migrated to Lucene.
Migration is recommended to avoid encountering performance and stability issues as the database grows. It requires a full index rebuild, so migration should be planned separately for each environment.
See the 6.19 to 6.20 upgrade guide for the migration procedure.
As part of this release we had 274 commits which resulted in 23 issues being closed.
Bug
- #5784 Properly await throughput recording in MonitoringService
Improvements
- #5662 Fix conditional GET across the API
- #5824 Switch to standard OpenTelemetry environment variables for OTLP configuration
- #5825 Remove references to TotalThroughput in usage report
- #5828 Report deployment and storage environment data in the usage report
- #5832 Disable RavenDB storage prefetching by default
- #5833 Use Lucene search engine for new RavenDB databases and flag indexes still on Corax
- #5836 Add OpenTelemetry metrics for retry and archive operations
- #5837 Simplify and clarify Platform Install experience on ServiceControl Management
- #5840 Enrich internal custom checks with flag showing them as such
- #5848 Terminate message queries that exceed a configurable time limit
- #5858 Show the "add instance" screen if no instances are installed when using ServiceControl Management
- #5859 Update dependency Particular.ServicePulse.Core to 2.11.0
Where to get it
You can download this release from our website.
🛡 ClamAV virus scan results: No viruses detected
Version: ClamAV 1.5.3
Scan Date: Fri, 11 Sep 2026 05:41:26 GMT
----------- SCAN SUMMARY -----------
Known viruses: 3628058
Engine version: 1.5.3
Scanned directories: 1
Scanned files: 4
Infected files: 0
Data scanned: 28.54 MiB
Data read: 499.45 MiB (ratio 0.06:1)
Time: 48.056 sec (0 m 48 s)
Start Date: 2026:09:11 05:40:33
End Date: 2026:09:11 05:41:21
6.19.3
Caution
Deprecated. This version is affected by Security Advisory 2026-10-09:
- When authentication is enabled and role-based authorization is disabled, the API accepts requests without a valid token.
- The email notification settings API returns the SMTP password. This only affects instances where email notifications were configured with an SMTP password.
Upgrade to ServiceControl 6.21.2
As part of this release we had 3 commits which resulted in 2 issues being closed.
Bugs
- #5820 Include Microsoft.Data.SqlClient.Extensions.Azure for Entra support
- #5821 ASBS "Dead Letter Queue" custom check can never pass with Entra ID / managed identity authentication
Where to get it
You can download this release from our website.
🛡 ClamAV virus scan results: No viruses detected
Version: ClamAV 1.5.3
Scan Date: Tue, 25 Aug 2026 03:58:36 GMT
----------- SCAN SUMMARY -----------
Known viruses: 3628027
Engine version: 1.5.3
Scanned directories: 1
Scanned files: 4
Infected files: 0
Data scanned: 26.72 MiB
Data read: 497.11 MiB (ratio 0.05:1)
Time: 41.505 sec (0 m 41 s)
Start Date: 2026:08:25 03:57:50
End Date: 2026:08:25 03:58:32
6.19.2
Caution
Deprecated. This version is affected by Security Advisory 2026-10-09:
- When authentication is enabled and role-based authorization is disabled, the API accepts requests without a valid token.
- The email notification settings API returns the SMTP password. This only affects instances where email notifications were configured with an SMTP password.
Upgrade to ServiceControl 6.21.2
As part of this release we had 3 commits which resulted in 1 issue being closed.
Improvement
- #5749 .NET August 2026 Updates
Where to get it
You can download this release from our website.
🛡 ClamAV virus scan results: No viruses detected
Version: ClamAV 1.5.3/28097/Wed Aug 19 06:24:38 2026
Scan Date: Wed, 19 Aug 2026 23:25:45 GMT
----------- SCAN SUMMARY -----------
Known viruses: 3628010
Engine version: 1.5.3
Scanned directories: 1
Scanned files: 4
Infected files: 0
Data scanned: 26.26 MiB
Data read: 492.53 MiB (ratio 0.05:1)
Time: 33.354 sec (0 m 33 s)
Start Date: 2026:08:19 23:25:10
End Date: 2026:08:19 23:25:44
6.19.1
Caution
Deprecated. This version is affected by Security Advisory 2026-10-09:
- When authentication is enabled and role-based authorization is disabled, the API accepts requests without a valid token.
- The email notification settings API returns the SMTP password. This only affects instances where email notifications were configured with an SMTP password.
Upgrade to ServiceControl 6.21.2
As part of this release we had 2 commits which resulted in 1 issue being closed.
Bugs
- #2759 SCMU Fails to start when one or more instances have a corrupt configuration file.
Where to get it
You can download this release from our website.
🛡 ClamAV virus scan results: No viruses detected
Version: ClamAV 1.5.3/28090/Wed Aug 12 16:34:25 2026
Scan Date: Wed, 12 Aug 2026 18:45:25 GMT
----------- SCAN SUMMARY -----------
Known viruses: 3627998
Engine version: 1.5.3
Scanned directories: 1
Scanned files: 4
Infected files: 0
Data scanned: 26.26 MiB
Data read: 492.46 MiB (ratio 0.05:1)
Time: 22.779 sec (0 m 22 s)
Start Date: 2026:08:12 18:44:59
End Date: 2026:08:12 18:45:21
6.19.0
Caution
Deprecated. This version is affected by Security Advisory 2026-10-09:
- When authentication is enabled and role-based authorization is disabled, the API accepts requests without a valid token.
- The email notification settings API returns the SMTP password. This only affects instances where email notifications were configured with an SMTP password.
Upgrade to ServiceControl 6.21.2
As part of this release we had 6 issues closed.
Features
- #5631 API endpoints for storing/retrieving license metadata
- #5675 Add flag to license info to indicate whether endpoint metadata is available
Improvements
- #5575 Allow installing error instance from SCMU without a valid license
- #5647 Apply masking to scope names in usage reports
- #5709 Update dependency Particular.ServicePulse.Core to 2.10.1
- #5710 Update license details RBAC permissions to match that used by other usage tabs
Fixed bugs
- #4753 SCMU does not set ServiceControlQueueAddress when only adding audit instances
How to know if you are affected
You are affected if:
- Using SCMU 6.1.3 and above.
Symptoms
ServiceControl.Audit/ServiceControlQueueAddress is not set in the app.config file after installing an audit instance when no error instance is being installed too.
Where to get it
You can download this release from our website.
🛡 ClamAV virus scan results: No viruses detected
Version: ClamAV 1.5.3
Scan Date: Fri, 07 Aug 2026 06:37:00 GMT
----------- SCAN SUMMARY -----------
Known viruses: 3627999
Engine version: 1.5.3
Scanned directories: 1
Scanned files: 4
Infected files: 0
Data scanned: 26.14 MiB
Data read: 492.45 MiB (ratio 0.05:1)
Time: 40.985 sec (0 m 40 s)
Start Date: 2026:08:07 06:36:15
End Date: 2026:08:07 06:36:56
6.18.3
Caution
Deprecated. This version is affected by Security Advisory 2026-10-09:
- When authentication is enabled and role-based authorization is disabled, the API accepts requests without a valid token.
- The email notification settings API returns the SMTP password. This only affects instances where email notifications were configured with an SMTP password.
Upgrade to ServiceControl 6.21.2
As part of this release we had 1 commit which resulted in 2 issues being closed.
Bug
- #5633 Allow operators to opt out of the
offline_accessscope in the ServicePulse auth configuration
Improvement
- #5645 .NET July 2026 Updates (release-6.18)
Where to get it
You can download this release from our website.
🛡 ClamAV virus scan results: No viruses detected
Version: ClamAV 1.5.3
Scan Date: Thu, 30 Jul 2026 14:37:23 GMT
----------- SCAN SUMMARY -----------
Known viruses: 3627981
Engine version: 1.5.3
Scanned directories: 1
Scanned files: 4
Infected files: 0
Data scanned: 22.39 MiB
Data read: 467.54 MiB (ratio 0.05:1)
Time: 39.491 sec (0 m 39 s)
Start Date: 2026:07:30 14:36:39
End Date: 2026:07:30 14:37:19