Version 23.2.2

What's new in this release?

  • SSH update and configuration
  • This release includes an update to SSH as well as configuration updates to improve security by deprecating legacy protocols.
  • Prior to upgrading, please review the SSH configuration information section below in detail to ensure you have the right configuration to connect to the Vidyo appliances after upgrade.
  • Bug fixes
  • In this release, we've addressed some issues to improve usability and reliability.
  • System updates
  • For added security and stability, updates for multiple third-party packages and libraries are included as part of this release.

SSH configuration information

SSH configuration information

In this version, the SSH configuration has been updated to improve security. Because of these changes, only modern SSH clients that support the configurations below will typically be able to successfully connect.

  • Supported host keys: RSA,ED25519
  • Key exchange algorithms: diffie-hellman-group-exchange-sha256,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,curve25519-sha256,sntrup761x25519-sha512@openssh.com,curve25519-sha256@libssh.org
  • MACs: hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,umac-128-etm@openssh.com
  • Encryption ciphers: Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com

Prior to upgrading, we recommend that you:

  • Update your SSH client to the latest version.
  • Confirm your client supports the above configurations.
  • Take a backup (snapshot) of your virtual machine.
  • Upgrade a single machine first to confirm connectivity and then proceed to the others.

Upgrade notes

  • You must upgrade to VidyoGateway version 23.2.2 from VidyoGateway version 21.1.x or later. Therefore, if you have a VidyoGateway version earlier than 21.1.x, you must first upgrade to 21.1.x and then upgrade to version 23.2.2. Please refer to the Upgrade a VidyoGateway 21.1.x Cluster to Version 23.2.2 section below for more information. These steps must be completed in order.
  • If you have installed a previous VidyoGateway version 23.2.2 beta, you should first downgrade your VidyoGateway to the previous GA using the Recovery Utility on the System Console, and then upgrade directly to the GA 23.2.2 version. For more information, please refer to "Run the Recovery Utility" section of the VidyoGateway Administrator Guide.

Compatibility

VidyoGateway version 23.2.2 is compatible with VidyoPortal version 21.6.x and later.

Files

This file...

Should be applied on top of...

gw-TAG_GW_23_2_2_103-bundle-v6697.vidyo

VidyoGateway version 23.2.x or later

Upgrade a VidyoGateway 21.1.x cluster to 23.2.2

To upgrade a VidyoGateway 21.1.x cluster to version 23.2.2, please perform the following steps in order:

  1. Place all Cluster Nodes into Maintenance mode.
  2. Upgrade all the Cluster Nodes.
  3. When the Cluster Node upgrades are completed and back online, upgrade the current Standby Controller.
  4. When the Standby Controller upgrade is complete, upgrade the Active Controller. The previous Standby Controller will now become the Active Controller.
  5. When the former Active Controller completes its upgrade, it will then become the Standby Controller.

Resolved issues

The following table lists the issues we resolved in VidyoGateway version 23.2.2.

VidyoGateway version 23.2.2 - resolved issues

Key

Summary

VIDGW-459

Addressed and issue where the CSR details were not displayed on the UI.

VIDGW-455

Addressed upgrade issue where not all packages would get updated correctly.

VIDGW-392

When upgrading, the configuration parameters for Display Name will now be translated correctly.

VIDGW-391

We fixed an issue for RTMP-enabled profiles where attributes were inadvertentlyremoved.

VIDGW-022

Updates to OpenSSH to mitigate CVE-2023-48795.

Known issues

There are no new known issues for this release; however, to view the previous known issues, please see the known issues for VidyoGateway section.