FIRMWARE RELEASE NOTE ======================== Products affected: COMPANION RECORDER Release date: 2020-05-03 Release type: Production Firmware version: 9.80.1 Preceding release: 9.70.1.5 -------------------------------------------------------------------------------- Upgrade recommendations ======================== Upgrade the firmware according to the instructions given in howtoupgrade.txt, which is included in the firmware folder or at the firmware portal at https://www.axis.com NOTE ======================== For latest information about Axis Cybersecurity, see: https://www.axis.com/support/product-security New features in 9.80.1 ================================================================================ 9.80.1:F1 Added support for Custom Header CGI. It is now possible to customize headers to support e.g. Access-Control-Allow-Origin (CORS) and X-Frame-Options to increase minimum cybersecurity level. Please https://www.axis.com/vapix-library for more information. 9.80.1:F2 Added support for Message Queuing Telemetry Transport protocol (MQTT). The AXIS products acts as a client able to publish its events to a MQTT broker. More information can be found in the VAPIX library at https://www.axis.com/vapix- library/. 9.80.1:F3 Added the functionality to automatically restart ongoing recordings when time in the product is updated significantly. This ensures that the time displayed in text overlays match the timeline. 9.80.1:F4 Updated Video Motion Detection to version 4.4.5. Features in 9.70.1.5 ================================================================================ 9.70.1:F1 Added support for resolve domain name trap addresses in SNMP. 9.70.1:F2 SEI (Supplemental enhancement information) messages is since 9.60.1 included in recorded H.264 videos. 9.60.1:F1 Added Geolocation API. See VAPIX documentation for more information. 9.60.1:F2 Updated Video Motion Detection to version 4.4.3. 9.60.1:F3 Added NTP synchronization status to VAPIX Time API. 9.50.1:F1 Updated Apache to version 2.4.41 to increase overall minimum cyber security level. 9.50.1:F2 Updated OpenSSL to version 1.1.1d to increase overall minimum cyber security level. 9.40.1:F1 Added support for search functionality in help files. 9.40.1:F2 Added support for systemready.cgi which will improve re-connection of the browser to the web-interface after e.g. powercyle or restart of the product. 9.40.1:F3 Added support for automatic firmware rollback verfication. The user can chose to select this option prior to performing an firmware upgrade. When chosen, the product will perform the upgrade and then wait a pre-defined time for the user to acknowledge the upgrade in the web-interface. If not acknowledged in time, the product will rollback to its previous firmware. 9.40.1:F4 Added support for the possibility to configure a secondary NTP server in web- interface under Settings -> System -> Date & Time or via VAPIX Time API. 9.40.1:F5 Removed the root users default password in factory defaulted firmware. The password of the root user must be set first in order to initialize VAPIX and ONVIF interfaces to allow further configuration.This change only affects products in its factory defaulted state, products that are already deployed in production systems are not affected by this update until factory defaulted. For more information please see https://www.axis.com/support/faq/FAQ116429. 9.40.1:F6 Added support for uploading custom firmware certificates in the web- interface under Settings -> System -> Security in order to allow the Axis product to accept AXIS developer firmware during firmware upgrade. 9.30.1:F1 TLS1.0 and TLS1.1 is now disabled by default. 9.30.1:F2 Added support for TLSv1.3. 9.30.1:F3 Added support for ACAP2. 9.30.1:F4 Upgraded Apache to version 2.4.39 to increase overall minimum cyber security level. 9.30.1:F5 It is now possible to upload .PFX formatted certificates with a total size of 102400 bytes. The previous limit was 1/10 of it. 9.30.1:F6 Added support for "Wait at least time x" before re-running an configured actionrule. 9.20.1:F1 Firmware is now signed by AXIS to increase overall minimum cyber security level. More information about Signed Firmware can be found here https://www.axis.com/support/faq/FAQ116424. 9.20.1:F2 Upgraded Apache to version 2.4.38 to increase overall minimum cyber security level. 9.20.1:F3 Updated Video Motion Detection to version 4.3.4. 9.20.1:F4 Updated OpenSSL to version 1.1.1a to increase overall minimum cyber security level. Corrections in 9.80.1 ================================================================================ 9.80.1:C1 Corrected an issue that caused the device to respond with "false" for WSPullPointSupport during ONVIF Get Capabilities request. 9.80.1:C2 Corrected an issue that caused the network settings to reset on rare occasions when the device was power-cycled. Corrections in 9.70.1.5 ================================================================================ 9.70.1.5:C1 Improved system stability. 9.70.1.3:C1 Corrected an issued that made the Companion Recorder loose connection to the Companion Software after upgrade, if it was configured with a static IP address. 9.70.1:C1 Improved video streaming robustness in unstable network environments. 9.70.1:C2 Improved cyber security by adding the possibility to disable Web-Service Discovery (WS-Discovery). 9.70.1:C3 Corrected an issue that removed information about recipients in the server report. 9.70.1:C4 Corrected Vendor class identifier for DHCP negotiation. 9.60.1:C1 Corrected the following security vulnerabilities: CVE-2019-13377 CVE-2019-16275 9.50.1:C1 Improved recording robustness in the event of temporary storage loss. 9.50.1:C2 The deprecated parameter HTTPS.AllowSSLV3 has been removed completely now. 9.50.1:C3 Corrected an issue that could cause wireless configuration loss during firmware upgrade when the product was paired via WPS. 9.40.1.2:C1 Increased system robustness and re-connection behaviour after performing a firmware upgrade. 9.30.1:C1 Corrected an issue that prevented the user from exporting recordings when the camera was configured to Alaska timezone. 9.30.1:C2 Corrected an issue that stopped continuous recording after upgrade or restart of Axis Companion Bullet/Dome/Eye Mini. 9.30.1:C3 Corrected an issue that prevented the user to play recordings as a viewer. 9.30.1:C4 Extended the charater limits for query string suffix in action rules in order to allow for longer URLs. 9.20.1.2:C1 Corrected an issue that made the Companion Recorder not compatible with older FW versions. 9.20.1:C1 Corrected an issue that could cause the camera to get unresponsive when two clients are streaming over multicast using the same streaming parameters. Known Bugs/Limitations ================================================================================ 9.70.1.3:L1 Corrected an issue that on rare occasions could report the Companion Recorder as unsupported in Companion 4. 9.70.1:L1 It is not possible to upgrade the product from 9.60 to any other release while having SOCKS proxy configured in the product. 9.30.1:L1 There might be features currently explained in the help files that may not be supported by the camera.