The Vancouver Patch 1 release contains important problem fixes.

Vancouver Patch 1 was released on September 20, 2023.
  • Build date: 09-07-2023_2046
  • Build tag: glide-vancouver-07-06-2023_patch1-08-30-2023
Important: For more information about how to upgrade an instance, see ServiceNow Upgrades.

For more information about the release cycle, see the ServiceNow Release Cycle.

Note: This Now Platform major family release is now available in ServiceNow's Regulated Market environments. For more information about services available in isolated environments, see KB0743854.

Overview

Vancouver Patch 1 includes 242 problem fixes in various categories. The chart below shows the top 10 problem categories included in this patch.

Figure 1. Top 10 problem categories
Fixed issues grouped by problem categories bar chart

Security-related fixes

Vancouver Patch 1 includes fixes for security-related problems that affected certain ServiceNow® applications and the Now Platform®. We recommend that customers upgrade to this release for the most secure and up-to-date features. For more details on security problems fixed in Vancouver Patch 1, refer to KB1516548.

For a downloadable, sortable version of the fixed problems in this release, click here.

Changes in Vancouver Patch 1

Password2 encryption with the Key Management Framework (KMF)
Beginning in the Vancouver release, administrators can deprecate 3DES encryption on password2 fields in favor of the newer Advanced Encryption Standard (AES). For details, see Deprecate GlideEncrypter usage of 3DES for password2 fields
Deprecate GlideEncrypter usage of 3DES for password2 fields
In the Vancouver release, administrators can choose to deprecate the 3DES algorithm entirely. After completing this change, your instance uses AES encryption exclusively for all encryption and decryption tasks relating to password2 data. This change provides better instance security than compared with 3DES encryption, and is necessary to remain NIST compliant.
Prepare your instance for GlideEncrypter deprecation
Use an instance scan script to find and remove GlideEncrypter API calls on your instance. Removing these calls is a necessary step in deprecating 3DES encryption on your instance.
GlideEncrypter - Global
CMDB 360/Multisource CMDB
You can optionally exclude classes and their descendents from collecting and processing CMDB 360 data. The CMDB MultiSource Data [cmdb_multisource_data] table doesn't contain data for those excluded classes.
Components related to CMDB 360
Classes that are excluded from CMDB 360 data collection and processing. For any class with an active record, there won't be any data in the CMDB 360 Data [cmdb_multisource_data] table.
Exclude classes from CMDB 360
Prevent CMDB 360 from collecting, storing, and analyzing data for classes for which it isn't needed. CMDB 360 processes large amounts of data. Therefore, excluding classes can help improve the performance of the Multisource Dashboard Analytics Population scheduled job and of CMDB 360 queries.
Encryption Key Management release notes
The GlideEncrypter API is planned for deprecation, and will be unavailable staring in the X release.

Notable fixes

The following problems and their fixes are ordered by potential impact to customers, starting with the most significant fixes.

All other fixes

Fixes included

Unless any exceptions are noted, you can safely upgrade to this release version from any of the versions listed below. These prior versions contain PRB fixes that are also included with this release. Be sure to upgrade to the latest listed patch that includes all of the PRB fixes you are interested in.