Instaclustr has released the general availability of Apache Cassandra® versions 4.0.10 and 3.11.15 on the Instaclustr Platform. 

Apache Cassandra® versions 4.0.10 and 3.11.15 are now generally available on Instaclustr’s Managed Platform. Instaclustr’s Managed Cassandra version 4.0.10 includes a fix for CVE 2023-20601 that impacts Apache Cassandra 4.0.0 through 4.0.9, and 4.1.0  to 4.1.1. Click here for information from the National Institute of Standards and Technology (NIST) National Vulnerability Database on CVE 2023-20601.  

Instaclustr Managed Cassandra version 4.0.1, 4.0.4, and 4.0.9 are now supported under legacy support prior to these versions being marked as ‘End of Life’ on 31 July 2023, as per our lifecycle policy. If you have any further queries regarding this vulnerability and how it relates to Instaclustr services, please contact the Instaclustr Support team. 

The latest 3.11.15 version also addresses bugs and CVEs and maintains availability of the latest Cassandra application version. Click here for Apache Cassandra 4.0.10 full release notes, and click here for Apache Cassandra 3.11.15 full release notes. 

We recommend new and existing customers use Apache Cassandra 4.0.10 for their clusters on Instaclustr’s Managed Platform. You can contact our Support team for assistance with minor application upgrades to your Cassandra clusters.