Release notes for Mividas Core and Mividas Rooms.
[4.0.0] - 2024-10-09
This release contains a major revamp of the suite's user interface, with quicker response times and faster access to related information for objects displayed on the screen.
The first screen load often uses cached data to allow instant continued navigation, while live data refreshes in the background.
Prominent feature additions are Webex API support, a monitoring feature for MCUs and video systems, and end-user self-service of VMRs from the Portal.
The foundation changes have been significant but will allow each future release to contain fewer new features. Minor versions will focus on the most important security and bug fixes that do not involve architectural changes.
Recommended versions of related components (at the time of release):
- Installer v1.8.9
- Portal v2.10.2
- Identify v1.0.1
Added
General
- Embedded charts allow for inline time filters, debug dialog, popup expansion and image downloads
- Extended schemas and many new API endpoints required by the new user interface have been added to the API. Please verify your API integrations for any conflicting changes in a test environment before upgrading. See
/json-api/v1/
Mividas Core
- Monitoring tab to be able to see an overview of all active and historic warnings and acknowledge or ignore them
- Support for displaying current and historic MCU cluster load if having a license for Insights
- Meeting statistics graphs and data in Insights
- Add setting for auto-locking Cisco Meeting Server calls to block auto-join of started meetings
- Add a setting for requiring member status for Cisco Meeting Server spaces
- Add setting for setting initial microphone mute for VMRs and meetings
- Add organization tree editor
Mividas Core - Scheduling API
- Add support for end users to create- and manage their VMRs from Portal (needs flag in Backend admin > Scheduling API Keys)
Mividas Rooms
- Support for provisioning Cisco systems registered to Webex using the Webex API - see below
- Monitoring tab to be able to see an overview of all active and historic warnings and acknowledge or ignore them
- Support for dynamic variables in Room controls and macros, with endpoint-specific overrides
- Display attached peripherals for video conference systems
- Display all information in the system details view, where some fields were only visible in the edit form
Mividas Rooms - Webex
- Perform all communication using the Webex API to allow for access to all systems outside of the LAN.
- Automatic sync of registered systems
- Provides access to manage Webex systems without giving users full admin access to Webex
- Systems can be switched back to use a direct xAPI-connection to allow for additional features, e.g. call control for personal systems
Changed
General
- The API has been extended. Please verify your API integrations for any conflicting changes in a test environment before upgrading. See
/json-api/v1/
- Syntax highlighting in Debug-logs
- Change logging format in syslog logs to Logfmt-format, include related object IDs and relevant information as attributes
- Extract information on connection errors and display them in a more informational way
Mividas Core
- New call control-interface for Cisco Meeting Server
- The generic list API-actions of users and VMRs has been changed to include only basic information. Use
?output=full
to include more information
Mividas Core - Scheduling API
- Override the name of participants connected to secure meetings to the one provided by the idP
[3.1.8] - 2024-10-21
This will probably be the last v3.1.x-release. We recommend that all customers prepare to upgrade to v4.0.0.
Recommended versions of related components (at the time of release):
- Installer v1.8.9
- Portal v2.10.2
- Identify v1.0.1
Fixed
General
- Fix manually specifying SAML claim names using uri-syntax - e.g. http://schemas.microsoft.com....
Mividas Core
- Fix duplicates of Pexip gateway rules during local sync
- Fix guests_can_see_guests-setting when provisioning webinars to Pexip infinity 35+
- Fix turning off forced encryption for CMS VMRs
- Fix bulk-removing a large number of VMRs
- Fix bulk creation of VMRs when using custom format for SIP-URIs
- Verify owner JIDs before importing each CMS cospaces in bulk. Display error messages under the correct field
- Fix obscured change tenant-dropdown for bulk cospace changes dialog
Mividas Core - Scheduling API
- Mark overridden the first occurrence as cancelled when cancelling meeting series
- Mark recurrence_id as read only in scheduling API documentation
- Fix callId in web URL for CMS webinars if no explicit moderator PIN has been set
- Fix custom uri-format for Pexip webinar moderator webrtc-uri
- Fix the active status indicator of CMS secure meetings in the meeting list
- Fix the overridden title of the closest occurrence from the point in time a meeting series is modified
Mividas Rooms
- Fix searching address book items using H323- and e.164-URI
- Recalculate merged address book groups after deleting groups in the tree
- Update MAC-address from Network WiFi MacAddress to Network Ethernet MacAddress in case of missmatch
- Raise error if trying to provision CA-certificates to TC7-systems (not supported in API)
- Fail unsupported tasks for TC7-systems - CA-certificates + commands when using a passive connection
- Fix saving provisioning errors when the same batch contains both errors and successful tasks
- Fix automatic update of active tasks in queue-list
Security
- Block uploading firmware files using null-bytes in filename
- Patch django and django-rest-framework
- Related CVEs: CVE-2022-36359, CVE-2024-24680, CVE-2024-21520
Changed
General
- Use role as fallback SAML claim name if none is provided
- Use plain 404- and 500-responses for separate Rooms-FQDN
- Log bulk object ids to audit log
Mividas Core
- Store history for cluster policy objects in the backend admin
- Require Pexip native service url-suffix for chained external policy requests
- Populate name and email adress for Pexip meeting invite messages
- Disable CDR services when free disk space is less than 4GB
- Limit debug statistics export to 100 000 rows
- Display user-JID in CMS users list
- Known issue: Static webinars are temporarily hidden from the user interface but will be back in the next patch release
Mividas Core - Scheduling API
- Disable scheduling-API when free disk space is less than 1GB
- Disable scheduling in existing VMRs belonging to another tenant
- Pass disk space warning to Portal
Mividas Rooms
- Improve queue handling when mixing lots of slow (e.g. firmware) and fast tasks
- Increase concurrency during active provisioning
- Include hostname in system Excel export
- Block firmware uploads if free disk space is less than 10GB
- Log standard passwords attempts to syslog
- Try to extract human-readable information from connection error messages
- Disable incoming event services when free disk space is less than 4GB
[3.1.7] - 2024-07-01
Note: Proxy Client-component has been hot-fixed 2024-07-09
Added
Mividas Rooms
- Add argument to only fetch remote meetings of calendar to API-action
/ews_calendar/{id}/sync_calendar/
Fixed
General
- Log UI-errors to browser developer console
- Fix cache expiry for SAML-metadata
Mividas Core
- Fix scheduled removal of static Pexip conference rooms
- Fix tenant filter for Pexip end users if cache is disabled
Mividas Rooms
- Return new status for endpoint upon errors during live refresh, instead of that of last attempt
- Fix filter in API-action to sync single calendar to not treat other meetings as removed
- Warn if multiple calendars are using the same EWS FolderID
- Fix issue with status being reset every 15 minutes for systems that return redirect to /web/signin
- Fix EWS calendar folder lookup for delegated access to resource calendars
- Fix OBTP-parsing of meetings when SIP-URI uses a text prefix, e.g. "[email protected]"
- Load H323-URI for all endpoints in list, without having to display details page of a single one
Security
- Hotfix upgrade 2024-07-09 of SSH server in Proxy Client-component (running on port 2222 by default) to fix CVE-2024-6387. Mitigation for older versions is to disable Proxy service in Installer and re-deploy
- Running version may be verified using
sudo docker ps --no-trunc | awk '/proxy-server/ { print /@sha256:96f92ebd/ ? "OK" : "Vulnerable" }'
[3.1.6] - 2024-05-29
Added
General
- Add support to filter error log using customer- and/or endpoint ID
Mividas Rooms
- Add support to filter task queue using action type in API
- Add support to return warnings export in JSON-format
/json-api/v1/endpoint/export_warnings/?format=json
. Add headers and additional data to export - Add API-endpoints to force synchronization of a single calendar
/ews_calendar/{id}/sync_calendar/
Mividas Core - General
- Add support for automatic CMS LDAP-sync
- Add support to provide custom webrtc-uri for Pexip Infinity (requires changes in Portal for full support)
Mividas Core - Scheduling API
- Add invite message placeholder flag to be able to use different message content for recurring meetings
- Add support for formatted SIP-uris for webinars
Fixed
General
- Fix SVR lookup for LDAP server
- Fix automatic API-documentation for actions using empty body
- Add health-check for RabbitMQ vhosts to detect additional errors
- Don't display username and password fields on start page when having both local accounts and SAML activated in Installer
- Handle authn requests with missing fields from wrongly configured SAML idP's more gracefully
- Fix translation of cleanup setting keys in backend admin
- Speed up initial database migrations
Mividas Core - General
- Fix Pexip external policy response for static VMRs
- Lock CMS database snapshot call to decrease errors due to concurrent runs
- Don't recurse into too many versions in meeting diagnostics report
- Fix tracking newly created CMS profiles during meeting update
- Fix clearing CMS profile-settings if changing multiple enabled settings at the same time
- Fix custom uri format for CMS moderator access methods
- Fix invalid owner values during CMS bulk cospace creation
- Fix bulk provisioning Pexip VMRs if using the call ID-field
- Fix concurrency issue where multiple copies of new organization units could be created during CMS space bulk-creation
- Fix Pexip gateway rule trace when using another cluster than that of the current customer
- Fix updating dashboard status for restricted users in multitenant-installations
Mividas Core - Scheduling API
- Escape HTML-characters in all invite placeholder content before running final cleanup
- Try to detect already existing VMR when provisioning scheduled meetings to restore previously aborted operation
- Fix updating only guest pin if moderator pin is not provided for Pexip Meeting
- Stop setting default layout for CMS webinar access-methods
- Remove additional guest permissions from Pexip webinars
Mividas Rooms - General
- Always try standard passwords in order.
- Fix race condition where wrong standard password was selected if status was updated < 1 seconds before submit
- Stop trying to provision OBTP-settings to Webex endpoints with cloud calendar enabled for 60 minutes every failed attempt
- Fix system ID-filter if reloading browser with system debug-view visible
- Stop trying to fetch valuspace data outside the regular status update-job if only that file has failed
- Fix selecting child groups when bulk-importing addressbook items
Changed
General
- Display error message in user interface if unhandled errors occurred
- Log missing SAML-claims to console
Mividas Core - General
- Faster Pexip conference alias sync for VMR with many aliases
- Use additional filters to remove distribution call-legs for clustered CMS-calls
- Disable controlRemoteCameraAllowed for CMS guest call-legs
- Re-provision manually removed VMRs for recurring series for clusters that has not scheduled provisioning enabled
- Display reference meeting instance for recurring series on debug view
Mividas Core - Scheduling API
- Provision numeric-only version of alias for Pexip Infinity VMRs when using custom URI-format
[3.1.5] - 2024-03-28
Notes
- Recommended Installer version: 1.8.6
- Upgrade path: It is now possible to upgrade directly to v3.1.5
Added
Mividas Core - General
- Add diagnostics report for CMS space-troubleshooting
- Add support to make automatic backups for CMS servers using SSH (enable using backend admin cluster settings) - [beta]
Mividas Core - Scheduling API
- Pass moderator invite message to Portal for scheduling meetings in static VMRs
- Add API-endpoint
/json-api/v1/provider/<id>/rematch_deprovisioned_meetings/
to force matching of de-provisioned meetings to already existing VMRs in case of out of sync-errors - Add support for availability-status for H323-systems
Mividas Rooms
- Add support to remove all existing address book items when importing an Excel file
- Use HTTP(S)-proxy for EWS and MS Graph calendar sync
Fixed
General
- Fix some database/cache connection leaks in thread pool operations
- Preload data before entering new task pool to decrease the number of new database connections
- Fix scheduled housekeeper cleanup of endpoint provisioning tasks
- Limit the number of keep-alive connections to MCUs and endpoints
- Fix upgrade from \< v3.0.0-rc1-versions
- Disable Core/Rooms background tasks depending on the license
- Auto-enable Core/Rooms visibility for default customer if the license is changed
- Stop creating extra copies of CA-certificates during health checks to limit memory usage
Mividas Core - Scheduling API
- Fix unbooking the first occurrence in a recurring series when using the rebook API-call
- Fix removing moderator access method from Cisco Meeting Server space using API
- Fix scheduled VMR provisioning for non-recurring meetings starting after provisioning time but \<24h from now
- Don't try to set the owner to invalid CMS usernames (without @)
- Don't schedule duplicate events for multi-day meetings
- Fix increasing call count from Pexip policy request
- Don't create any default connection details for CMS secure meetings if access method is enabled
- Fix overriding IVR phone number for a specific multi-tenant customer
- Omit VMRs scheduled in separate installations in "schedule meeting in the existing room"-list
- Fix SIP-URIs for moderator URI when using number series with custom format
- Mark VMRs of scheduled conferences in Pexip as schedules to remove them from Portal lists
- Remove dot after SIP-URI in default invite message to decrease risk of third-party OBTP parsing-errors
Mividas Core - General
- Fix tenant-validation when performing Cisco Meeting Server VMR-removal
- Add support to enable multi-tenant matching for Pexip Infinity with live data instead of cached lists
- Fix changing Pexip VMR tenant from the dropdown
- Fix the callProfile setting for disabling chat messages for CMS
Mividas Core - Statistics
- Fix parsing ambiguous VCS CDR call times during DST -> Non DST transition
- Fix locking of statistics database rows when merging distributed calls after call end
Mividas Rooms
- Fix log message with false positive calendar count diff during EWS sync if syncing > 60 calendars
- Fix Exchange EWS sync for service accounts without a mailbox when using delegation
- Include EWS connection ID in server logs
- Unpack Room control panels in uploaded zip files
- Fix API field definitions for some API endpoints
- Fix the selection of single groups in the tree-view checkbox list
- Create statistics data-container before running bulk call history update to prevent duplicated
- Include mac address and serial number in the global search of systems
- Allow searching for hidden columns in the system list
- Increase the performance of dashboard loading if using many scheduled meetings
- Don't import already existing address book items from the Excel file
- Reset expired active meetings for endpoints if the server has been shutdown too long
- Update EWS auto-discover data if changing the EWS server
- Stop displaying address book source errors in JSON format
- Fix exporting all endpoints using API
- Fix copy button for the addressbook URL in info dialog
- Fix removing firmware object if file has been deleted manually on server
- Fix disabling all meeting dialout/obtp for a system
- Fix recurring retry if trying to provision macros to systems without support
Security
- Fix tenant-validation when performing Cisco Meeting Server actions using form-based view
- Upgrade OpenSSH server for proxy client tunnel
- Add support to disable password login (LDAP/local database depending on configuration) when using SAML. Note: also disables basic auth to API
- Upgrade libncursesw6, libpq-dev, libpq5, libtinfo6, ncurses-base, ncurses-bin, setuptools, moment
- Related CVEs: CVE-2021-39537, CVE-2023-29491, CVE-2023-5869, CVE-2022-40897
Changed
General
- Check database index status on service startup
- Compile source for OpenSSL- and PostgreSQL-related libraries
- Force restart of celery primary workers if memory usage increases too much
- Stop old celery service before starting the new one during version upgrade
- Preload cluster settings to decrease database queries during MCU event handling
- Try to connect to at most 3 LDAP servers from SRV, ordered by priority. Log resolved addresses
- Log information if _ldaps._tcp SRV-pointer is missing but LDAPS is configured
- Don't try to do SRV-lookup if LDAP server is entered using IP-address
- Include information about the related objects in the audit log. Update action/scope names
- Change "not logged in"-redirect to be performed in the backend
- Remove some unnecessary information from login view initialization for unauthenticated users
- Improved formatting of errors messages, including removal of some JSON-based formatting
Mividas Core
- Log user actions to syslog when changing Cisco Meeting Server VMRs using form views
Mividas Rooms
- Upgrade EWS API-library for better compatibility with later Exchange/O365-versions
- Automatically disable EWS calendars that cannot be synchronized
- Pre-fetch existing address book entries to increase performance during sync
- Display checkbox to toggle Impersonation login during EWS-sync setup wizard
- Log endpoint status changes to console log
- Pre-update status of up to 50 systems before the 15 minute check-limit if not enough systems needed update since the last one
- Force valuespace fetch during initial endpoint system status-sync
- Use inline pagination of customer cluster overrides
- Lock running tasks in KV-store instead of locking full database table row
- Use faster initial check when testing online status
- Log each status offline reset-update separately during bulk run
- Increase default connect timeout to increase change of successful connection in networks with TCP SYN connection-issues (e.g. VPN)
- Abort form submission if trying to add a system that has duplicate MAC-address/serial number
[3.1.4] - 2023-11-01
Notes
- Upgrade path: Upgrade first to v3.1.2 before upgrading to v3.1.4.
Added
General
- Add support for full SAML SLO front channel flow
- Add support to replace substrings in part of LDAP + SAML claim values
Mividas Core
- Display link to pre-filtered statistics report from Pexip Infinity meeting rooms
Mividas Rooms
- Add support to restore deleted systems using backend admin
Fixed
General
- Fix initial migration in cases where earlier beta-versions wrote non-complete recurring meeting information
- Fix docker healthcheck interval to mark services as up earlier
Mividas Core - scheduling API
- Only use currently active meeting rooms when calculating available call ids
- Fix syncing of dialouts if sending updates to previous ID of meeting
- Display reference meeting for meeting series as not activated when the first occurrence is changed
Mividas Core
- Include schema for generic meeting rooms and user API-endpoints
- Fix LDAP user sync-button for Pexip Infinity
Mividas Rooms
- Don't add duplicate rows for firmware uploads for models matching multiple system ids in filename
- Fix re-enabling failed feedback event slot. Schedule it in background instead of doing it directly
- Fix provisioning offline meetings to Cisco endpoints when using old Bookings API
- Fix syncing the main EWS calendar of specified service account
- Log system bulk create/update/delete actions
- Update status of bulk-created endpoints in background instead of blocking response
Statistics
- Pass customer ID to PDF/excel export to allow changing customer in separate tab
Changed
General
- Add some more fallback claim names for SAML username/email
- Add notice about user permissions to backend admin
- Include customer name in excel export filename
- Process endpoint tasks and CDR events in separate background task workers to improve responsiveness
Mividas Rooms
- Ignore counting tasks temporarily disabled due to constraints or offline endpoints against active limit to decrease delay of task processing
- Improve meeting uri detection for when multiple valid urls are included in the same invite (e.g. both SIP and MS Teams)
- Allow creating firmware file objects using API without specifying file
- Hide password fields when changing existing systems, until user has checked the box to change password
- Sync calendars in the background when manually pressing the button
Mividas Core
- Start fetch of next object in page list before starting the processing of new one i CMS sync
[3.1.3] - 2023-09-22
Notes
- Upgrade path: Upgrade first to v3.1.2 before upgrading to v3.1.3.
Added
General
- Add support to pass SAML-claim containing admin user access from future version of Installer
Mividas Rooms
- Add support to export Status reports to excel
- Add API-endpoint to export all system warnings to excel
/json-api/v1/endpoint/export_warnings/
- Add support to update command and configuration templates in "Save template"-dialog
- Add bulk delete-support to organisation tree editor
Mividas Core
- Display direct link to call statistics from Cisco meeting server meeting rooms-view
- Add support to unschedule meeting series from meeting debug page
- Display organisation tree editor in Admin
Fixed
General
- Ignore some valid exceptions that ended up in error log
- Ignore some irrelevant browser errors in error reports
- Upgrade background task engine (celery) for some stability improvements
Mividas Core - Scheduling API
- Populate connected dialouts and endpoints for far future occurrences directly on reschedule
- Fix race condition where updated recurring meeting could be de-provisioned after ending, but before the deprovision-time was reached
- Use additional locking of meetings during dialout/provision tasks for more robust handling of multiple changes in short duration
- Fix detection of successfully connected dialouts in clustered Cisco Meeting Server-calls
- Fix meeting diagnostics report when call statistics is populated for occurrence
- Don't try to dial meeting dialout if the same url is already connected
- Fix parsing of ical files using windows timezone names
Mividas Core
- Fix converting text to integer-values for Pexip call statistics csv-import
- Fix incorrect merging of concurrent Cisco Meeting Server Ad-hoc calls (e.g. Skype)
- Clear cached moderator password at once during Cisco meeting server room updates
- Fix missing translation in meeting debug view
- Clear selection of meeting rooms after bulk move to another customer
- Better indicator of inactive/unscheduled meetings in scheduled meeting list
- Fix passing leading zeros to Cisco Meeting Server and Pexip Infinity meeting rooms through API
Mividas Rooms
- Fix H323 gatekeeper authentication configuration key-names
- Fix saving backups if system name is over 30 characters
- Fix removing last digit of Integer-based configuration values, without it resetting to previous value
- Redo firmware model matching if re-uploading new file
- Fix H323 gatekeeper authentication configuration key-names
- Fix exporting multiple endpoints (500+) when length of all ids exceeds 4000 characters
Security
- Update cryptography, certifi, reportlab
- Related CVEs: CVE-2023-37920, CVE-2023-33733, CVE-2023-33733
- Fix information leakage issue where some autogenerated widgets in API-documentation did not apply tenant filter in multi-tenant installations before displaying names of available objects
Changed
General
- Wait longer for service startup during deploy
- Stop passing exception message when excel file parsing fails
- Automatically load call statistics report if using pre-generated link
- Display error message when inputing invalid timestamps e.g. in Scheduled meeting filter
- Allow exporting call statistics report as excel using API-authentication
- Filter cleanup settings list depending on active license. Make type field read only
- Stop passing gunicorn version in Server-header
Mividas Core
- Mark some customer cluster provisioning settings overrides as non-required in backend admin
- Disable dial-button for Pexip meeting rooms without any aliases
- Include CDR-logs from merged calls in call debug view
- Mark dialout as active after 15 seconds, redial if not still active after 60 seconds
Mividas Rooms
- Ignore more status values to decrease number of versions stored in Endpoint status file history
- Pass BookingId to Dial-command to make system identify already connected calendar meeting
- Stop loading redacted values when loading configuration values from another system
- Add notice about Addressbook group tab only pertains to manually created groups
- Add notice about passwords not being saved to system backups
- Add notice if trying to change password of passive system, which is not supported
- Re-enable HttpFeedback-slot even if default slot has been changed in settings
[3.1.2] - 2023-07-12
Added
General
- Display warnings on dashboard if background server is down or delayed
- Add API-support to force re-parsing previous CDR events for Pexip and CMS using
/json-api/v1/callstatistics_server/$id/reparse_logs
- Add SAML metadata url (
/saml/metadata/
) and basic support for SLO - Add support to provide SAML sign certificate/key from future version of Installer
Mividas Core - scheduling-API
- Add support to get availability data from API using POST to allow for more values
Mividas Core - general
- Add new fields to Rooms system bulk-import form
Fixed
General
- Remove warning from logs about connection errors and "envelope"-URL
- Display guest duration in call statistics instead of non-guest durations twice
- Fix manually adding call statistics server in backend admin
- Ignore error for parsing invalid SIP-participants where URI is reported as starting with ;
- Fix reading offline SAML SP XML-configuration
- Truncate VCS jitter value to maximum 32767 to fit in database column
Mividas Core - general
- Fix syncing Cisco Meeting server API-data triggered in case of newly removed coSpaces
- Store first decimal in packet loss percentage value for VCS/Pexip
- Fix parsing Pexip call statistics where Leg unique identifier is over 128 characters long
- Log error during CMS pagination
- Ignore errors when trying to disconnect already disconnected call
- Add support for Pexip policy gateway rules with null-values in crypto_mode and external_participant_avatar_lookup
- Fix handling of moderator access method-passcode if sent using API
- Run VCS statistics sync in correct queue
Mividas Rooms
- Use correct scope for endpoint API requests in audit logs
- Fix updating SIP display-name for Cisco TC-systems
- Fix event handling so that "in call"-status is not reset by unrelated events
Security
- Re-check if user is valid in LDAP database every 10 minutes
- Lower session cookie expiration value. Add support to change from future version of Installer
Changed
- Join multiline log-messages with \r instead of \n to allow merging entries in syslog
- Delay scheduling background tasks for meeting events until 10h before meeting start. Also enables new features, e.g. meeting is ending-messages for previously scheduled meetings
- Stop creating separate thread to save endpoint status/configuration-files
- Use correct widgets for ID-fields in API example-forms
[3.1.1] - 2023-05-31
Added
- Add support to display multi-tenant endpoint statistics in Insights
- Send email notification to superusers if system disk space reaches < 2GB
- Add option to toggle automatic synchronization of Room lists for EWS/MSGraph
- Add option to toggle impersonation when using EWS Basic Auth
Fixed
General
- Use only temporary subfolder on filesystem for uploaded firmware, and revert to memory storage of other temporary files to prevent increasing data build-up. Old files will be automatically removed
- Fix redundant warning message regarding that cleanup log has already been run during incremental cleanups
Mividas Core - general
- Include all user Pexip meeting rooms if the number exceeds 10
- Add Pexip conference aliases using separate API call to block creation if unknown alias is in use in another conference
- Fix connecting CMS call leg to video conference system
- Fix Cisco meeting server member permission where canChangePassword and canAddRemoveMember checkboxes were always checked
- Don't fetch first page twice during Cisco meeting server page-iteration if no results are included
- Handle connection errors when trying to send meeting is ending-notifications
Mividas Rooms
- Fix adding MSGraph Oauth credentials through API
- Group MS graph items by recurring series
- Display EWS setup errors on screen
- Update last check timestamp in case if system is in authentication error-state
- Faster detection of removed Cisco meeting server meeting room members during data-sync
- Mark endpoints value as not required to statistics API-endpoint
- Reuse EWS-session longer to decrease number of opened connections
- Don't treat already removed Pexip aliases as an error during removal
Mividas Core - scheduling API
- Fix changing Cisco meeting server moderator password for static meeting rooms
- Fix updating callProfile for meetings when using moderator password
Security
- Fix issue in error reporting where the system tried to contact Mividas-servers to report the number of exceptions that was not sent, due to that error reporting was disabled
- Fix issue in multi-tenant installation where video conference systems names from other tenants was included in Excel export as systems without calls
Changed
General
- Compress CDR/event messages before passing to message broker
Mividas Core - scheduling API
- Include cospace members in response
- Include moderator invite texts for static meeting rooms
Mividas Core - general
- Close edit Pexip meeting room-dialog after save
- Also clean Pexip policy log during audit log cleanup schedule
- Also clean Proxy status change log during endpoint data file cleanup schedule
- Add validation for guest PIN if allow guest is not checked for Pexip meeting rooms
- Display error message if trying to select Combine servers in statistics backend admin for servers other than type Combine
- Log updating and creating meeting rooms to console log
Mividas Rooms
- Try harder not to sync EWS and msgraph calendars and room lists at the same time
- Try to provision large macros without "Transpile: yes" if it looks to be transpiled already
- Try to activate provisioned macros again after at least 10 seconds if Macro runtime was unresponsive
- Only sync OBTP meetings less than 48 hours from now
- Reset form fields after adding new addressbook group
- Reset form fields after adding new addressbook sync-source
- Re-use parent XML-nodes when running multiple commands
- Add extra deduplication-step before sending OBTP-meetings to system (duplicates may still happen if invites have been forwarded/changed to multiple calendars so that matched URIs differ)
- Fix recursive loop if assigning new endpoint on EWS calendar where permissions are missing
- Increase delay between room list syncs for EWS and MS Graph to decrease number of API-requests
- Sync EWS calendars in chunks of 60 calendars when using delegate authorization
[3.1.0] - 2023-04-13
The previously released v3.0.1-rc2 has been relabeled as v3.1.0, and some relevant fixes have been repurposed as v3.0.1. Changelog since v3.0.0:
Added
Mividas Core - general
- Add invite message placeholders for guest- and moderator passwords to be used in user welcome messages
Mividas Core - scheduling API
- Add support to automatically disconnect scheduled dialouts (Backend admin > Provider > Cluster setting)
- Add support to automatically disconnect meeting participants after meeting has ended (Backend admin > Provider > Cluster setting) or API
settings.force_hangup: int
- Add support to notify meeting participants if the meeting is about to end (Backend admin > Provider > Cluster setting)
- Use API member permissions when determining if Cisco Meeting Server member may change PIN-codes
- Pass information about recording providers to Portal
Mividas Core - API
- Add API endpoint to force MCU data sync (
/json-api/v1/provider/123/force_data_sync/
) - Add API endpoint to get current sync state (
/json-api/v1/provider/123/sync_state/
) - Add API endpoint to repopulate removed CMS space members (
/json-api/v1/provider/123/repopulate_cospace_members/
)
Mividas Rooms
- Add support to upload cop.sha512 firmware files
- Add DTMF-command from system call control
- Add support to automatically disconnect scheduled system dialouts
- Add support to save inventory ID, service tags and notes in edit form
- Add support to save metadata to be used by external systems
- Add support to use separate SMTP address for EWS service account
- Add support to allow partial autodiscovery of EWS server settings when using specific server
- Add serial number and email address to bulk import form
- Include personal email address in system Excel export
- Include system name in Excel call statistics exports
- Include endpoints without any active calls statistics during the period of the Excel export
Fixed
Mividas Core - general
- Display meetings in "scheduled meetings"-list if date filter matches part of the meeting
- Fix tab wrapping in call debug participant list
- Fix UI indicator of customer match rule mode in backend admin
- Fix local/remote conference alias order when determining call tenant for live Pexip call data
- Fix field error indicator for Pexip conference form
- Handle continuous page iteration in case of response errors during Cisco Meeting Server background page iteration
- Fix specifying webapp-version for Pexip WebRTC URLs in Cluster settings
- Set the default language for all background tasks
- Fix lookup for meeting room owner email when cached Cisco meeting server data is enabled
- Fix Cisco meeting server bulk-create room email function
- Fix displaying errors when creating Cisco meeting server webinar rooms
- Fix invite view for meetings where meeting room have been removed
- Populate owner and organization unit for bulk-created meeting rooms instead of awaiting the next sync
- Display API key value when adding a new key in the backend admin
- Fix UI-refresh of loading status label on dashboard widgets
- Reload dashboard widget data when pressing refresh-button
- Workaround Cisco meeting server bug where setting the same secret as before raises an error when using multiple access methods and updating room
- Allow (de)provisioning meetings 0 minutes before and after the meeting time
- Preparations for enabling recording capabilities
Mividas Core - scheduling API
- Raise correct error if static meeting room has been deleted since the last call
- Add extra locking to fix (de)provisioning when recurring meetings starts/stops before the previous occasion should have been de-provisioned
- Fix cache of formatted SIP URI which caused participant URI to be returned when using unique moderator URI
- Fix response error when listing user static meeting rooms if no LDAP synced rooms are available
- Add support to force an update of numeric call id
Call statistics
- Fix normalizing RTMP-URLs in call statistics
- Fix bug where multipart- and gateway legs were included in call statistics report even if not enabled in backend admin > Statistics > Server. Historical data will be automatically fixed
Mividas Rooms
- Fix head-count status indicator in provision tab
- Fix removing systems if using timescale database for logs
- Redact some extra possible password/private key formats from queue information and trace log
- Use the filesystem to stream upload firmware to decrease memory usage
- Fix specifying explicit EWS server in the onboarding wizard
- Fix OBTP where some meetings sometimes did not show up if system had more than 8 future meetings.
Security
-
Fix ACL check that allowed non-authenticated users to initiate page requests waiting on external API calls
- May be used by a bad actor to cause a denial-of-service of web user interface service
-
Add brute force lockout for CDR event receiver
-
Upgrade paramiko, cryptography, certifi, pyopenssl, sentry-sdk, urllib, pyredis
-
Related CVEs: CVE-2022-23491, CVE-2023-0286, CVE-2023-23931, CVE-2022-24302, CVE-2023-28858, CVE-2023-28859, CVE-2023-28117
Changed
General
- Defer loading some memory-hungry modules to decrease idle memory usage
- Change all reports to XML-based Excel format, resize columns to better fit width, change to time-based format for durations
- Add a summary sheet to Excel call report
- Warn about low disk space when there is less than 20 GB of free space
- Try to display correct fields when navigating to a single API view using the web browser
- Display recurring meeting start times in local timezone, and include weekday in debug view
Mividas Core - general
- Include "Expressway" in VCS label
- Display packet loss as percent value
- Merge multiple API-calls for Pexip call control to decrease the number of requests
- Stop auto-reloading call control view after 5 minutes of inactivity
- Log scheduling API username to audit log
- Navigate to newly created meeting rooms after creating it
- Remove muteMicrophone and muteCamera URL-arguments for Pexip meeting due to Webapp 3 bug where value is always treated as true
- Use dynamic invite message by default for new Cisco Meeting Server tenants
- Store VCS jitter value for call debug data
- Include both directions when calculating Pexip packet loss
Mividas Rooms
- Stop displaying the load indicator when enough data is available
- Display error-messages if any information fails to load
- Don't display call history until button is pushed
- Use separate background tasks to process system online status/configuration for faster processing
- Reset online status for systems with in call-status after 4 hours without feedback
- Allow changing serial number
- Remove OAuth secret from admin user API-response
- Add help texts to the room analysis report form
- Reset firmware form when pressing cancel
- Display call history in Rooms timezone
- Change edit address book tab labels
- Group recurring MS Graph based meetings. Populate EWS ID
- Disable OBTP for passive Cisco systems on v10.19.x firmware due to firmware bug CSCwd53004 that causes crash. Will be re-enabled in a coming release after the bug is fixed
[3.0.1] - 2023-04-13
The previously released v3.0.1-rc2 has been relabeled as v3.1.0, and some relevant fixes have been repurposed as v3.0.1
Added
Mividas Rooms
- Add support to upload cop.sha512 firmware files
Fixed
Mividas Core - general
- Handle response errors during Cisco meeting server background page iteration
- Fix local/remote conference alias order when determining call tenant for live call data
- Fix specifying web app-version for Pexip WebRTC URLs
- Fix displaying errors when creating Cisco meeting server webinar rooms
- Display API key value when adding a new key in the backend admin
- Fix Cisco meeting server bulk-create room email function
- Fix UI-refresh of loading status label on dashboard widgets
Mividas Core - scheduling API
- Add extra locking to fix (de)provisioning when recurring meetings starts/stops before the previous occasion should have been de-provisioned
- Fix cache of formatted SIP URI which caused participant URI to be returned when using a unique moderator URI
Call statistics
- Fix normalizing RTMP-URLs in call statistics
- Fix bug where multipart- and gateway legs were included in call statistics report even if not enabled in backend admin. Historical data will be fixed automatically
Mividas Rooms
- Fix specifying explicit EWS server in the onboarding wizard
- Use the filesystem to upload firmware to decrease memory usage
- Fix removing systems if using timescale database for logs
- Fix OBTP where some meetings sometimes did not show up if system had more than 8 future meetings.
Security
-
Fix ACL check that allowed non-authenticated users to initiate page requests that waited on external API calls
- May be used by a bad actor to cause a denial-of-service of web user interface service
-
Upgrade paramiko, cryptography, certifi, pyopenssl, sentry-sdk, urllib, pyredis
-
Related CVEs: CVE-2022-23491, CVE-2023-0286, CVE-2023-23931, CVE-2022-24302, CVE-2023-28858, CVE-2023-28859, CVE-2023-28117
Changed
Mividas Core - scheduling API
- Log scheduling API username to audit log
- Remove muteMicrophone and muteCamera URL-arguments for Pexip meeting due to Webapp 3 bug where value is always treated as true
Mividas Core - general
- Fix UI-refresh of loading status label on dashboard widgets
- Reload dashboard widget data when pressing refresh-button
Mividas Rooms
- Disable OBTP for passive Cisco systems on v10.19.x firmware due to firmware bug CSCwd53004 that causes crash. Will be re-enabled in a coming release after the bug is fixed
[3.0.0] - 2023-01-10
Added
General
- Add support to match LDAP users to a customer using DN path (using "dn" as the matching field in the installer)
Mividas Core - general
- Add support to specify Pexip webapp version for generated web URL in Cluster settings (format: join.example.org/webapp2/)
- Add support to format SIP URIs for scheduled and static meeting rooms (Backend admin > Number series)
- Display VCS nodes in video meeting bridge-admin view
Mividas Core - scheduling API
- Add support to override meeting numeric ID and secret
- Add support to schedule dial outs for external meetings
- Add support to schedule dial-out in existing Cisco Meeting Server / Pexip Infinity meeting rooms
- Performance optimization for large recurring series
- Add separate message templates for meetings with extended authentication
Mividas Rooms
- Add support to connect calendars to endpoints using "Calendar connection" in backend admin (Customer filter needs to be activated for multi-tenant installations)
- Add support to override join mode for scheduled meetings per Customer and single endpoint (Dialout + OBTP / OBTP only / dial from the system (pin code not supported))
- Add support to schedule OBTP / dial-out from Scheduled meetings (requires Mividas Core)
- Add support to match Skype URIs in invites and rewrite them according to Backend Admin > Provider > Cluster settings
Fixed
General
- Fix disabling Core/Rooms for specific Customers
- Fix translation of VCS deactivated CDB API warning message
- Fix dates in Excel call statistics export filename
- Fix warning for log cleanup schedule
- Fix reusing the same cluster object during onboarding for multiple nodes
- Improve cleanup of lingering database connection after thread usage
Mividas Core - general
- Handle connection errors during large Cisco Meeting Server page iterations
- Fix displaying generated API key for new objects in backend admin
- Fix updating expired recurring meeting
- Limit the number of threads when updating the status for large VCS clusters
Mividas Core - scheduling API
- Refresh secrets when using multiple Cisco Meeting server access methods during schedule
Mividas Rooms
- Use inline pagination in backend admin to allow updating calendar connections for large room lists
- Fix room list sync for rooms with invalid email addresses as name
- Add missing cache choice from endpoint API documentation
- Make sure to stop non-finished concurrent status updates when task timeout is reached
- Fix updating dial info for Webex systems
- Add missing fields to provision API documentation
- Fix indicators for room analysis in provision tab
Security
- Upgrade libcrypto1.1 and libssl1.1 in smtp + proxy services
- Related CVEs: CVE-2023-0286, CVE-2023-0286, CVE-2022-4304, CVE-2022-4450, CVE-2023-0215, CVE-2022-4304, CVE-2022-4450, CVE-2023-0215
Changed
General
- Log LDAP user attributes if customer matching is enabled, but no fields did match
- Match permission flags using LDAP parent group as well as exact DN
- Group large clusters in dashboard widgets
- Update provider status in background
- Use monospaced font in combined file upload/textarea widget
- Use a more visible popup to remind about license expiry
- Use xlsx-format for all exports
- Resize columns in Excel exports
Mividas Core - general
- Use hash (#/?pin=1234) based connection URL for Pexip meeting rooms
- Allow recurring meeting series longer than one year (pre-provision 6 months ahead)
- Display provision status in meeting debug view
- Improve performance for large recurring series
- Log node load for future use
- Use autocomplete-widget for SIP dialout field when starting new Cisco Meeting Server-meeting
- Use cached information for Cisco meeting server Excel export. Include member list
- Use v3.0+ Cisco Meeting Server invite link format
Mividas Rooms
- Disable calendar bookings in passive mode if using RoomOS 10.19.x - firmware bug causes system crash
- Send max 8 upcoming meetings to endpoint Bookings-list
- Include the number of seats in system Excel export
- Limit number of incoming endpoints from a single IP
- Separate warning for changed system name and SIP/H323 info
- Add column with name of endpoint in statistics debug export
[3.0.0-rc6] - 2022-11-24
Added
General
- Add support for automatic cleanup/redaction of debug logs and call statistics, set through backend admin (beta)
- Display link to wizard in backend admin when trying to add MCU's or customers
Mividas Core - general
- Add initial support to communicate with VCS servers with disabled CDB-API
- Add support for adding authentication requirement for Pexip policy for standalone meeting rooms (i.e. no matching number serie)
- Display moderator join-URL for Pexip meeting rooms
Mividas Core - scheduling API
- Add support for recurring meetings
- Add additional fields to scheduling API to set EWS itemId and iCal UID-field
- Add placeholder invite template code to check if the meeting have a moderator password set
- Support sending scheduling API payload as application/json
- Add cluster option to use scheduled provisioning of virtual meeting rooms instead of always eager mode
- Add support to adding additional access methods to scheduled meetings through API, with optional authentication support (needs flag enabled in Backend admin > Scheduling API Keys)
- Add availability API-endpoint
- Cache join connection details for better performance during schedule API-requests
- Include start buffer time in meeting response
- Allow scheduling meetings without generated numeric ID (to be used with unique participant IDs)
Mividas Rooms
- Display per endpoint based history for people count
- Start storing sensor data from touch panels - temperature, noise level
- Add support to set overridden address book for a specific endpoint
- Display all tasks that will be repeated in provision dialog
- Display warning if dial settings/system name have been changed on system
- Apply dial settings from chained provisioning service
- Add setting to enable/disable OBTP for meetings scheduled from Core
- Add setting to set default OBTP/dial mode for system (API only) + add support for dial out from system
- Fix saving setting to automatically add incoming endpoints
Fixed
General
- Use correct multiformat for GET arrays in API swagger documentation
- Fix potential lock race condition during object update
Mividas Core
- Fix unsetting moderator password for scheduled meetings
- Return updated secret when changing moderator password for CMS access method
- Fix generation of numeric alias for Pexip conferences created with single add form
- Fix populating CMS space streamUrl in edit form
- Populate CMS secondaryUri for spaces created from external system in edit form
- Handle response errors when trying to add CDR receiver to Cisco Meeting server with too many existing objects
- Apply usage limit for temporary Pexip policy authorizations
- Limit possible fields in backend admin for meeting room provision mode
- Fix lock race condition during scheduling API-call in combination with unsynced meeting room
Mividas Rooms
- Don't set passive system to online status when displaying cached status data
- Allow connecting Proxy client to separate Rooms hostname
- Use correct help text for active screen - branding logo field
- Handle removed connected calendars in EWS sync
- Fix browser freeze-up when setting zero-value in required, number-based command arguments
- Handle connection error during re-activation of HttpFeedback slot
Security
- Don't pass current passwords to backend admin views
- Encrypt passwords (AES in CBC mode) before saving to database
Changed
General
- Use secure flag for cookies
- Use ed25519 cipher for Proxy tunnel for new deployments
- Connect to external systems in the following order (if set): API host, hostname, IP instead of API host, IP, hostname
- Retry failed API-requests to MCUs and video systems
- Use monday as first day of week in date picker dropdown
Mividas Core
- Automatically try to restart Pexip event sink connected to Core instance
- Display warning if trying to change CMS coSpace with call(Leg)Profile set from external system
- Try to fetch status data as online-check before syncing cluster data
- Decrease timeout for syncing CMS load, increase concurrency
- Connect new Pexip meeting room to current customer in case of no number series-match
- Try to guess moderator vs guest access method for externally create Cisco Meeting Server spaces
Mividas Rooms
- Stop display uuid in call history for spark/webex-calls
- Hide non-approved proxy clients for non-admin users
- Include created provision task id in API response
- Use file upload for CA root certificate setting
- Display information about TlsVerify on dashboard
- Stop trying to connect to incoming endpoints using external remote IP if internal IP connection failed
- Display last sync time of each EWS/MS Graph calendar
- Stop trying to update EWS calendar connection status for calendars not connected to any system
- Log EWS item id if folder does not have a correct value
- Only fill SIP proxy password value when default password is set
- Don't pass default SIP proxy-password or Proxy client password to non-admin
- Return HTTP 403 when proxy registration fails
[3.0.0-rc5] - 2022-07-06
Added
General
- Include all available choices in API documentation
Mividas Rooms
- Initial support for repeating provisioning
- Display warning if passive provision events have stopped coming in while live events still are
- Display information about CA certificate validation in Dashboard provisioning widget
- Add option to validate SSL-connection to systems (require trusted CA in installer)
- Add API endpoint filter for online and warning-status
- Display hostname and MAC-address on system dashboard
Fixed
General
- Fix logging for background tasks
Mividas Core
- Form validation of non-active tab for Pexip call rule editor
- Always fetch active secret for CMS space/access method
- Remove reference to google fonts when rendering email invite message content
- Make sure to check for occupied generated aliases when scheduling Pexip Infinity meetings to mitigate silent reassignment issue in API
Mividas Rooms
- Don't display system meeting status in list except for when in head count view
- Fix endpoint API data type for warning about missing live events
- Only allow .cop.sgn and .pkg-files in firmware upload
Changed
General
- Use debian ca-certificates instead of Mozilla as default trusted CA list
- Hide permissions from user backend admin due to not being used elsewhere
Mividas Core
- Only run LDAP sync for current CMS tenant by default
- Use endpoint autocomplete when dialing new participants in call control
- Try to include incomplete call legs for CMS call statistics when CDR events are missing
- Disable disconnecting other participants when not using moderator access method
- Add new permissions to default CMS moderator call leg profile
- New dialog interface for bulk change of meeting room tenant/org unit
- Remove extra API call when adding new CMS spaces
Mividas Rooms
- Use locally stored call history for active endpoints as well if system could not be contacted
- Increase concurrency when updating active endpoint status
- Use separate background tasks to update calendar items and available EWS/MS Graph-rooms
- Lower timeout when contacting EWS/Graph
- Stop allowing proxy connections without password by default for new installation
- Brute force lockout for proxy client registration attempts
- Remove deprecated SSH algorithms for proxy client tunnels
[3.0.0-rc4] - [2022-05-31]
Added
General
- Add support for LDAP referral chasing
- Lookup LDAP servers using SRV query
- Extended trace log for all API calls
Mividas Core
- Add button to hangup call for Pexip meeting control
- First beta for scheduled RTMP-recording for Pexip meetings
- Update scheduling API documentation
Mividas Rooms:
- Support to merge identically named groups in addressbook search
- Add filters and API documentation for endpoint list function
Fixed
General
- Hide All items from pagination from tables that lacks support
Mividas Core
- Fix recvc recording
- Display more call control error messages on screen
- Fix error response format for callcontrol API actions
- Fix bulk meeting room creating error handling for Pexip
- Fix setting organization unit for CMS spaces with access methods
- Use the same moderator call profile for all nodes of CMS cluster
- Fix removing scheduled meeting rooms from Portal meeting room list
- Fix recurring meeting example and sync items throughout occurrences
- Pexip meeting room Excel export using type-filter
- Sending emails to non CMS users when bulk-creating CMS spaces
- Changing PIN code using scheduling API
Mividas Rooms:
- Fix restoring configuration from backup file
- Don't display proxy count as new when using non-admin account
Security
- Upgrade django, openssl, libssl1.1, libgnutls30 libssl1.1 libsystemd0 libudev1 openssl tzdata
- Related CVEs: CVE-2022-28346, CVE-2022-28347, CVE-2022-0778, CVE-2023-0361, CVE-2022-4450, CVE-2023-0215, CVE-2023-0286, CVE-2023-26604, CVE-2022-4450, CVE-2023-0215, CVE-2023-0286
Changed
Mividas Core
- Hide clear chat message from CMS space details view if running v3.1+
- Go to todays call statistics when pressing button on dashboard
- Regenerate CMS secret when changing PIN codes
- Decrease number of API calls to update CMS space
- Change Pexip call route rule header
Mividas Rooms
- Hide add new organization unit from systems list - groups without systems is immediatly hidden
[3.0.0-rc3] - 2022-05-02
Added
- Display license information on Dashboard
Mividas Core:
- Add support to use manual call routing when dialing out to external participants in Pexip meeting
- Support to set canChangeScope permission for CMS meeting room members
- Add support to trigger Pexip LDAP user sync using API
- Pre-fill cluster name as default Pexip management node description in onboarding wizard
- Pass recording provider playback-support to Meeting Portal
- Add support for changing basic settings of CMS spaces with externally created access methods
Mividas Rooms:
- Add support to bulk provision saved dial settings from Rooms to endpoints
- Add support to bulk provision chained passive provisioning
- Display loading errors on dashboard
- Send MS Graph and EWS sync errors to Error log
- Add setting to use addressbook for Scheduling portal searches
- Save number of items per page for data tables between page navigations
- Display call history from local call statistics for passive endpoints
- Support for syncing external sources to nested subgroup (delimited by >)
- Merge folders with the same name from multiple sources in addressbook search
- Add API endpoint to force addressbook sync
- Log TMS address book sync error, force UTF-8 encoding
- Add API-endpoint for external monitoring of system online status/warnings
Fixed
- Fix database initialization if using FQDN with over 100 characters
- Fix translation in policy views and macro dialog
- Don't display full html page as error message if raw error is passed to frontend
- Remove empty columns from endpoint debug view error log
Mividas Core:
- Don't use number input for lobby pin to allow for PIN-codes starting with 0
- Remove console error message when displaying meeting list as a non-admin user
- Fix pagination of participants for Pexip meetings with over 10 participants
- Fix updating moderator call leg profile settings for CMS meetings when combining it with other properties
- Hide deprecated fields in backend admin, display only relevant cluster types
- Ad-hoc recording/streaming for CMS meetings
- Better error message on chained provisioning errors
- Don't reset streamUrl of CMS Space if RTMP streaming is not enabled
- Automatically sync data of users and cospaces when doing freetext search
Mividas Rooms:
- Strip XML namespace from chained passive provision services using tandberg CUIL namespace
- Better connection/response error-handling when updating endpoint status
- Better error handling of disconnecting participants in ongoing meeting list
- Fix using prefilled default SIP proxy password when bulk-provisioning endpoint dial settings
- Fix saving endpoints if changing it from backend admin
- Fix freetext search for address book items in root folder
- Fix rescheduling tasks for next night when last task in particular timezone had errors
- Better error handling for connection errors when updating call statistics from previously offline endpoints
- Fix saving endpoint in backend admin if default protocol is not specified
- Fix omitting null arguments when running commands
- Timestamp for recent Spark calls for Room OS 10
- Use password input for new password field in provisioning view
- Separate offline command definitions for passive systems where the same model uses both TC7 and CE-firmware
Security
- Upgrade libgmp, zlib1g, libssl, libzma5, gzip
- Related CVEs: CVE-2022-0778, CVE-2021-43618, CVE-2018-25032, CVE-2022-1271
Changed
- Increase log verbosity for LDAP logins
- Allow multiple reverse proxy/load balancer hops when resolving client ip
Mividas Core:
- Automatically add moderator permissions to new users of a CMS meeting room if multiple access methods exists
- Use wider fields for number serie input in backend admin
- Include CMS participants without CDR remoteParty-information in call statistics
- Add some jitter to delay of retrying call statistics consolidation to minimize risk of locking issues
- Display more information about access methods for CMS Spaces
- Use limited form to only display fields allowed changing for auto generated CMS spaces
Mividas Rooms:
- Log firmware version when called endpoint commands fail
- Automatically disable further calendar sync from expired MS Graph credentials
- Don't set endpoint status to "in call" when display endpoint status until call is connected
- Always display mac address and serial field in endpoint form to be able to replace it with a new one
- Pass endpoint remote IP as X-Forwarded-For to chained provisioning servers to enable geo-location
- Separate task in for room analytics provisioning to filter unsupported settings for each system
- Don't bulk provision room analytics settings for personal systems by default
- Disable change password functionality for passive endpoints - not supported
- Populate MAC/software version from initial passive provision event
- Change checkbox text label for provisioning room controls
[3.0.0-rc2] - 2022-03-09
Added
Mividas Core:
- API endpoint to rematch call statistics tenants from number series
- Add CMS meeting room owner as member for new rooms
- Include CMS error cause for failed API calls - e.g. invalid user id, duplicate uri
- Add placeholder codes for Pexip desktop client in invite messages
- Add flag to include moderator joining details in scheduling API to decrease number of API calls
- Send more API errors from calls to external systems (e.g. MCUs) to Error log
- Display more error information when bulk-creating Pexip meeting rooms
- Display customer name of scheduled meeting if using multi-tenant search
Mividas Rooms:
- Support for getting provisioning data from external passive provisioning server
Fixed
- Reset user session if currently selected customer is removed
- Remove console log for missing favicon
Mividas Core:
- Fix disabling rows in bulk create form
- Use callId as lobby user for CMS meeting rooms without set uri
- Force including CMS tenant in next object sync if newly created or when scheduling meetings
- Fix webinar moderator permission if empty lobby pin is included in scheduling API
- Fix placeholder codes for moderator webinar invite messages
- Fix updating CMS meeting rooms when using dialog from meeting room list, pre-set existing PIN code
- Fix translations in Excel export
Mividas Rooms:
- Remove console warning in organization tree view
- Fix endpoint proxy-client empty password in multi-tenant Rooms installations
- Prefill default sip proxy settings when provisioning multiple endpoints
- Bulk provisioning missing endpoint device aliases to Pexip Infinity
Security
- Upgrade libexpat1
- Related CVEs: CVE-2022-23852 CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25315
Changed
Mividas Core:
- Display error message containing reason for failed CMS meeting room creation
- Better label for CMS tenant API key field in new tenant form
Mividas Rooms:
- Open endpoint web admin interface in new window
- Set default passive provision heartbeat to 7 minutes (activated endpoint still use < 1 min)
- Reject invalid SMTP recipient domains instead of silently discarding emails
- Hide call id generation field when editing existing meeting room
- Display password indicator in provision dialog if default sip proxy password is set
- Only allow selecting one endpoint when filtering statistics instead of silently ignoring extra ones
[3.0.0-rc1] - 2022-02-10
Added
- Audit and Error-log in debug view
- Improve API schema documentation
- Display progress log while waiting for data layers to start up on deploy
Mividas Core:
- Support for changing meeting room pin code from Mividas Portal
- Support for setting Pexip meeting room layout
- Support for moderator layout for CMS, Pexip and scheduled meetings
- Increase console log verbosity
- Fix incremental pagination for Pexip call statistics sync
- Basic support for automatic multi-tenant self-management from user LDAP attributes
Mividas Rooms:
- Support to identify Pexip service registered endpoints
- Support for chained passive provisioning service
- Display more information in backend admin
- Add support to requiring shared key before adding Rooms Proxy client
- Support for collecting air quality, temperature and humidity from endpoints with sensors that allow it
- More interactive help texts for EWS and Microsoft Graph calendar integration
- Support for Rooms addressbook search in Mividas Portal and connecting with users private endpoint
- Support disabling OBTP function for a customer
- Detect webex registered endpoints and disable some dial settings
- Display endpoint MAC address in details view
- Display call status in call history list
Fixed
Mividas Core:
- Correct order of debug call statistics tab and content
- Populate owner name and email for scheduled Pexip meetings
- Validating of policy auth source field
- Better support for handling pruned endpoint history data
- Allow submitting Pexip Infinity onboarding-wizard form without preparing event sink and policy configurations
- Moving Pexip user to default tenant for multi-cluster installations
- Fix displaying self-management call statistics in multi cluster environments if user only belongs to default tenant of a cluster
Mividas Rooms:
- Fix Endpoint statistics view in mobile browser
- Don't allow connecting scheduled meeting to endpoint before it is approved
- Increase timeout for uploading branding files to allow for larger images over low bandwidth
- Mark tasks for removed endpoints as cancelled
- Fix some translations
- Don't send out empty scheduled meeting list to endpoints if no meetings have been scheduled in Rooms
- Use correct Excel file extension for debug report
- Fix removing room controls
- Fix endpoint online filter
- Update call status for passive endpoints
- Reset endpoint head count when is goes offline
- Fix parsing call history from Room OS 10 systems
Security
- Lock out user/IP during bruteforce login attempt
- Run containers with read only root file system where possible
- Add option to disable local accounts if LDAP is being used
- Add option to enable certificate validation for MCU nodes
- Upgrade Django, celery and lxml backend libraries
- Upgrade frontend javascript libraries
- Related CVEs: CVE-2021-23727 CVE-2022-23833 CVE-2021-45116 CVE-2021-45115
Changed
- More consistent UI page actions/search
- Remove points from room analytics graph
- Better handling of default language when user browser does not support any of the available languages
- Increase gap between soft- and hard limit for backend tasks to decrease number of force-killed processes
Mividas Core:
- Join call participants for ended distributed calls to a merged one in a background task instead of when receiving event
- Display user profile icon for user/logout menu
- Hide sections from backend admin and API documentation that are not available in license
- Handle incoming CDR data and endpoint events in background task instead of when receiving event
- Allow adding management node to empty Pexip clusters
- Allow adding more VCS nodes to cluster
Mividas Rooms:
- Decrease initial connection timeout value for endpoint API requests
- New UI for handling branding profiles
- Better navigation between items in debug log views and single endpoint debug tables
- Better multithreading of updating endpoint status
- Display help texts when people count sensor is disabled (e.g. sleep mode)
- Reload more data on endpoint dashboard if button is pressed
- Reload call history when call status changes
- Use single endpoint provision dialog if only one endpoint is selected in system list