FIRMWARE RELEASE NOTE ====================== Products affected: Q6124-E Release date: 2018-01-02 Release type: Production Firmware version: 7.40.1.1 File name: Q6124-E_7_40_1_1.bin Preceding release: 7.40.1 -------------------------------------------------------------------------------- Upgrade instructions ==================== The firmware can be upgraded using Axis Camera Management, HTTP or FTP. Please follow the instructions from the user's manual, the web page at http://www.axis.com/techsup/cam_servers/how_to_upgrade.htm or the file named howtoupgrade.txt. Corrections in 7.40.1.1 since 7.40.1 ==================================== 7.40.1.1:C01 Corrected an issue that let MJPEG images become corrupted in rare occasions. 7.40.1.1:C02 - Affects P1435-E and P1425-LE-MkII only - Corrected an issue where IR Illumination light could not be switched off. 7.40.1.1:C03 Added support for allowing hostname to start with numeric character. 7.40.1.1:C04 Corrected an issue that in some occations could cause respawned ACAPs to run as an incorrect user. 7.40.1.1:C05 The Apache webserver has been updated to version 2.4.29 to increase overall minimum cybersecurity standards. 7.40.1.1:C06 - Affects AXIS Q6124-E product only - Improved pan/tilt handling when using electronic image stabilization. New features in 7.40.1 ================================================================================ 7.40.1:F1 AXIS Motion Guard is now pre-installed. 7.40.1:F2 AXIS Fence Guard is now pre-installed. 7.40.1:F3 Support for Firmware Recovery under Settings -> System -> Maintenance. The product is saving a restore point every time the firmware is updated, allowing the user to rollback to a previous firmware and its configuration. 7.40.1:F4 Support for HTTP keep-alive connections via ONVIF. PTZ products can now be controlled via HTTP keep-alive connections. This increases PTZ control accuracy, reduces overhead communication and therefore lowers the risk for security focused network infrastructure or unstable networks to block or drop PTZ control commands. 7.40.1:F5 Support for browser stream statistics in Live View. 7.40.1:F6 Updated AXIS Video Motion Detection to version 4.1.8. 7.40.1:F7 Support for Password Security Confirmation Check. To increase overall cybersecurity awareness, a user-configured password that is considered "weak" need to be confirmed actively twice by the user. Features in 7.30.1 ================================================================================ 7.30.1:F1 The FTP Server is now disabled by default as it is not used during normal operation and may pose a security risk.The FTP Server may be enabled during advanced maintenance or troubleshooting in Settings -> System -> PlainConfig -> Network. 7.30.1:F2 Support for Adaptive Resolution. Adaptive Resolution is enabled per default and takes only effect when viewing live stream in the web-interface. The viewing client will receive a image resolution that is adapted or close to the viewing clients real display resolution to higher the user experience. 7.30.1:F3 Support for Zipstream Dynamic FPS - Lower Limit Support for Zipstream Dynamic GOP - Upper Limit It is now possible to further adjust and set limits for Dynamic FPS and Dynamic GOP settings and can be configured under Stream settings -> Zipstream. 7.30.1:F4 Support for Flash All / Factory Default while performing a firmware update. It is possible now to select a option that will factory default the camera after a firmware update / downgrade has been performed under Settings -> System -> Maintenance. 7.30.1:F5 The ARP/Ping method to set the products ip-address has been removed in order to increase minimum cyber security standards. 7.30.1:F6 Support for Brute Force Delay Protection. The product can block a client for a period of time if too many login attempts failed. Brute Force Delay Protection can be configured under System -> PlainConfig -> System -> System PreventDoSAttack. 7.30.1:F7 OpenSSL has been updated to version 1.0.2k to increase overall minimum cyber security level. 7.30.1:F8 Products can list now all the supported auxiliary commands such as PTZ Test, Calibration, Speed Dry for clients asking for http:///axis- cgi/com/ptz.cgi?query=auxiliary. 7.30.1:F9 PTZ products can be controlled now via HTTP 1.1 keep-alive connections which increases PTZ control accuracy, reduces overhead communication and therefore lowers the risk for security focused network infrastructure to block PTZ control commands when controlling a PTZ camera. 7.30.1:F10 Support for automatic license key installation when installing an ACAP under Settings -> Apps. 7.30.1:F11 Support for SRTP (Encrypted Video Streaming) according to RFC 3711. The cameras video stream can be received via secure end-to-end encrypted transportation method only by authorized clients. 7.30.1:F12 The area zoom functionality has been removed from the web-interface. Area zoom was used to draw a rectangle in the live view to let the camera PTZ to this desired position. Corrections in 7.40.1 ================================================================================ 7.40.1:C1 Corrected security vulnerability CVE-2016-2147 and CVE-2016-2148. 7.40.1:C2 Corrected an issue that let a configured overlay disappear when switching to Image or View Area Tab. 7.40.1:C3 Corrected an issue that let the camera become unresponsive in rare occasions when performing a Guard Tour together with Image Freeze functionality. 7.40.1:C4 Corrected an issue that required the user to enter login credentials when anonymous viewer is enabled. Corrections in 7.30.1 ================================================================================ 7.30.1:C1 Fixed critical vulnerability ACV-116267. Known Bugs/Limitations ================================================================================ 7.40.1.1:L1 It is not possible to create user accounts in Microsoft Edge 38 or IE 11. More information on recommended browsers can be found here https://www.axis.com/support/technical-notes/browser-support. 7.30.1:L1 Video streaming H.264 for Safari has been temporarily disabled in the web- interface because of an bug in the Safari browser. 7.30.1:L2 It is recommended to refresh the browser page (F5) when a OSDI zone is deleted as the control buttons (Add, Modify, Enable/Disable, Remove) will disappear after doing so. 7.30.1:L3 The Windows 10 "Film&TV"-player may show a black image at the beginning when playing a video that has been captured from the cameras live view. 7.30.1:L4 Videos recorded using the video capture feature in live view may not be playable or might get stuck in some media players. This was seen e.g. with Windows Media Player. 7.30.1:L5 Connecting to a camera will fail and result in "Unauthorized" message due to an bug in Microsoft Edge 40 browser. This will be corrected by Microsoft in the next version of Edge 41. Supported AXIS VAPIX API Image Resolutions for Q6124-E ================================================================================ Resolution Exceptions ========== ========== 1280x720 800x450 480x270 320x180 1024x768 1) 1024x576 1) 800x600 1) 768x576 1) 720x576 1) 704x576 1) 704x480 1) 640x480 1) 640x360 1) 704x288 1) 480x360 1) 704x240 1) 384x288 1) 352x288 1) 352x240 1) 320x240 1) 240x180 1) 192x144 1) 176x144 1) 176x120 1) 160x120 1) 160x90 1) analyze 1) 1) Not visible in web user interface