# Sonatype Nexus Repository 3.57.0 - 3.57.1 Release Notes

| #### Highlights in This Release |
| --- |
| **Note**<br>**Critical Fix for 3.57.0 and 3.58.0 Deployments Using Sonatype Repository Firewall (3.57.1)**<br>This release fixes a critical bug that could allow users to unintentionally download quarantined components. The bug impacts **3.57.0** and **3.58.0** Sonatype Nexus Repository deployments using Sonatype Repository Firewall.<br>**Default Role Alert (3.57.0)**<br>In this release, we added a _Default Role_ alert to inform administrators when the _Default Role_ capability is enabled and what role is configured as the default role granted to all authenticated users.<br>**Helpful New Columns in Repositories and Search Results Tables (3.57.0)**<br>This release includes multiple UX enhancements, including a new _Blob Store_ column in the _Repositories_ table and a sortable _Last Updated_ column to _Search_ results. |

#### **3.57.1 Released July 21, 2023**

## Critical Fix for 3.57.0 and 3.58.0 Deployments Using Sonatype Repository Firewall

This release fixes a critical bug impacting Sonatype Nexus Repository**3.57.0**and**3.58.0**deployments that use Sonatype Repository Firewall.

This bug could allow for users to unintentionally download quarantined components. We have retracted versions 3.57.0 and 3.58.0; please use 3.57.1 or 3.58.1 instead.

#### **3.57.0 Released July 5, 2023**

## Default Role Alert

The [_Default Role_ capability](https://help.sonatype.com/en/default-role.html "Default Role") allows administrators to select a configured role to be granted to all authenticated users. This means all authenticated users will have the privileges granted to the default role. To make it easier for you to see what role (if any) is configured as your default role, we added an alert to the _Roles_screen providing this information when you have a default role configured.

_Blob Store_ Column in Repositories Table

To make it easier for you to identify the blob stores to which your repositories belong, we added a _Blob Store_ column to the _Manage r__epositories_ table providing this information.

|     |
| --- |
|  |

_Last Updated_ Column in Search Results

In order to allow you to easily sort your search results by latest or oldest builds, we've added a _Last Updated_ column to the search results table.

|     |
| --- |
|  |

## Improvements in Support of Sonatype Repository Firewall

We continue to make changes in Sonatype Nexus Repository to continually progress in unifying Sonatype's product suite. To this end, we have made changes to ensure that highly available (HA) Sonatype Nexus Repository deployments can support the new Sonatype Repository Firewall SaaS offering. We have also added validation to ensure that Sonatype Nexus Repository and Firewall only exchange information when Firewall configuration is enabled to avoid data becoming out of sync.

In the UI, we've renamed the Component IQ and IQ Application fields in the component browse view to Sonatype Lifecycle Component and Application respectively.

We’ve also modified the policy-compliant component selection checkbox so that it is disabled until and unless both the Firewall - Audit and Quarantine capability is enabled and the Enable Quarantine checkbox that appears within that capability is checked. This is to prevent the Nexus Repository from getting into an inconsistent state with the Firewall server.

| Bug Fixes | Description |
| --- | --- |
| NEXUS-24088 | You can now properly remove an S3 blob store from a group even when it references an S3 bucket that is no longer accessible; such blob stores no longer cause UI errors. |
| NEXUS-24726 | Made enhancements to the Search APIs to improve the behavior for query parameters on fields that accept empty values. An empty value for most fields is now treated as “specifically empty" instead of the former behavior of treating it like a wildcard. However, note that the_repository_and_format_parameters should not be empty as every component is both stored in a repository and has a format. |
| NEXUS-27710 | Fixed errors that were sporadically preventing startup in some cases due to a corrupted org.apache.karaf.features.cfg file. |
| NEXUS-29638 | Downloading a pom.xml that uses unicode characters no longer fails due to calling `getBytes` without using UTF8. |
| NEXUS-31461 | Searching for Maven versions now returns versions in alpha-numeric order as expected. |
| NEXUS-31492 | Raw proxy URL no longer encodes special characters for outbound requests. |
| NEXUS-35917 | The _Repair - Reconcile component database from blob store_ task with only _Integrity Check_ option selected now removes stale objects from S3 blob stores as expected. |
| NEXUS-36599 | _Browse_privileges are no longer required to execute a NuGet search; only _Read_ is needed. |
| NEXUS-38662 | Deleting large repositories is no longer impeded by errors where Sonatype Nexus Repository looks for `repository_blobstore` in the component database. |
| NEXUS-38791 | Running a search for Maven assets in an HA environment now returns the versions in descending order. |
| NEXUS-38851 | npm exports no longer skip assets with an `application/x-tgz` content type. |
| NEXUS-39169 | The permissions required for the search API are now consistent between HA and non-HA environments. Searching a group repository from the API only requires the user to have read permissions for the group.