FIRMWARE RELEASE NOTE ====================== Products affected: P3235-LV/P3235-LVE Release date: 2019-08-26 Release type: Production Firmware version: 8.40.3 Preceding release: 8.40.2.2 -------------------------------------------------------------------------------- Upgrade instructions ==================== Upgrade the firmware according to the instructions given at https://www.axis.com/ca/en/support/tecnical-notes/how-to-upgrade or howtoupgrade.txt, which is included in the firmware folder. NOTE ==================== For latest information about Axis Cybersecurity, see https://www.axis.com/se/sv/support/product-security. Corrections in 8.40.3 since 8.40.2.2 ===================================== 8.40.3:C01 General minor improvements to the 8.40 LTS platform. 8.40.3:C02 Removed the root users default password in factory defaulted firmware. The password of the root user must be set first in order to initialize VAPIX and ONVIF interfaces to allow further configuration. This change only affects products in its factory defaulted state, products that are already deployed in production systems are not affected by this update until factory defaulted. 8.40.3:C03 Update libssh2 to version 1.9.0 to increase overall minimum cyber security level. This update includes correction for CVE-2019-13115. Corrections in 8.40.2.2 since 8.40.2.1 ======================================= 8.40.2.2:C01 General minor improvements to the 8.40 LTS platform. 8.40.2.2:C02 Corrected the following kernel vulnerabilities to increase overall minimum cyber security level (collectively known as "TCP SACK PANIC"): CVE-2019-11477, CVE-2019-11478, CVE-2019-11479. 8.40.2.2:C03 Corrected an issue that caused problems accessing devices via O3C/Axis Guardian using Microsoft Edge browser. 8.40.2.2:C04 Improved the certificate management system: It is now possible to upload PKCS#12 certificates with a total size of 102400 bytes. The previous limit was 1/10 of it. 8.40.2.2:C05 Corrected an issue that caused some users not to be displayed in the webGUI's user list on rare occasions. 8.40.2.2:C06 Improved the certificate management system: added support for certificate IDs with long names. 8.40.2.2:C07 Updated openSSL to version 1.1.1c to increase overall minimum cyber security level. 8.40.2.2:C08 Added support for TLSv1.3. 8.40.2.2:C09 Corrected security vulnerability in Systemd CVE-2019-6454 to increase overall minimum cyber security level. 8.40.2.2:C10 Improved the certificate management system: added system log information for failing certificate upload. 8.40.2.2:C11 Corrected an issue that caused SMB connection problems to NetApp NAS configured for SMBv2. 8.40.2.2:C12 Updated libssh2 to version 1.8.2 due to that version 1.8.1 broke publickey-userauth requests. 8.40.2.2:C13 Corrected an issue that caused images to be unusually dark in WDR mode on rare occasions. 8.40.2.2:C14 Corrected an issue that caused view areas, set in the web GUI, not to be preserved after changing camera resolution. Corrections in 8.40.2.1 since 8.40.2 ===================================== 8.40.2.1:C01 General minor improvements to the 8.40 LTS platform. 8.40.2.1:C02 Updated Apache to version 2.4.39 to increase overall minimum cyber security level. 8.40.2.1:C03 Improved robustness of the O3C client. 8.40.2.1:C04 Updated OpenSSL to version 1.1.1b to increase overall minimum cyber security level. 8.40.2.1:C05 Updated OpenSSH to version 7.9p to increase overall minimum cyber security level. 8.40.2.1:C06 Added information about Certificate ID to the Installed Certificates section in the server report. Corrections in 8.40.2 since 8.40.1.2 ===================================== 8.40.2:C01 General minor improvements to the 8.40 LTS platform. 8.40.2:C02 Corrected the following security vulnerabilities to increase overall minimum cyber security level: CVE-2019-3855, CVE-2019-3856, CVE-2019-3857, CVE-2019-3858, CVE-2019-3859, CVE-2019-3860, CVE-2019-3861, CVE-2019-3862, CVE-2019-3863. 8.40.2:C03 Corrected security vulnerability CVE-2019-0217 in Apache to increase overall minimum cyber security level. 8.40.2:C04 Corrected security vulnerability CVE-2017-16544 in BusyBox to increase overall minimum cyber security level. 8.40.2:C05 Corrected an issue that caused a viewer user to not be able to obtain the list of image resolution properties via param.cgi. 8.40.2:C06 Corrected an issue in the Web-GUI that prevented to upload a Client Certificate or CA certificate using the Edge browser. 8.40.2:C07 Updated pre-installed Mozilla CA-certificates to versions available at 20190122. 8.40.2:C08 Added GOP Length option to the Stream Profile Settings. 8.40.2:C09 Corrected the following vulnerabilities in order to increase overall minimum cybersecurity level: CVE-2018-16864, CVE-2018-16865, CVE-2018-16866. 8.40.2:C10 Updated OpenSSL to version 1.0.2r to increase overall minimum cyber security level. 8.40.2:C11 Corrected an issue with timestamps in the RTCP Sender Report that could cause RTSP recordings/playbacks not to work correctly in some video players using the Live555 library such as VLC and ffmpeg. 8.40.2:C12 Added Status LED as an action type that can be selected in the drop down menu of triggered Events. Corrections in 8.40.1.2 since 8.40.1.1 ======================================= 8.40.1.2:C01 General minor improvements to the 8.40 LTS platform. 8.40.1.2:C02 Corrected an issue in the web GUI when creating a preset position and the language was set to German. 8.40.1.2:C03 Corrected an issue that could cause the camera to get unresponsive when two clients are streaming over multicast using the same streaming parameters. 8.40.1.2:C04 Upgraded Apache to version 2.4.38 to increase overall minimum cyber security level. 8.40.1.2:C05 Corrected an issue with Always Multicast over IPv6. 8.40.1.2:C06 Corrected an issue that caused factory default settings to not be applied correctly when upgrading from a firmware version prior to 6.20. 8.40.1.2:C07 Corrected an issue in the web GUI that caused IO Port values to be displayed incorrectly. 8.40.1.2:C08 Corrected an issue that caused Recorded Guard Tour not to work properly on rare occasions. 8.40.1.2:C09 Improved re-connection behavior to AVHS server. The time between failed connection attempts will now gradually increase until a hard limit is reached. 8.40.1.2:C10 Corrected an issue that prevented usage of the same port for two different multicast streams. 8.40.1.2:C11 Corrected an issue that caused IR cut filter to not work properly when Synchronize IR Illumination was turned off. 8.40.1.2:C12 Improved list.cgi to display all installed applications (no longer limited to 8). 8.40.1.2:C13 Corrected an issue with pre-installed applications using startmode set to "never". 8.40.1.2:C14 Corrected an issue that could cause an incorrect error message when testing HTTP recipient. 8.40.1.2:C15 Corrected an issue that could cause corrupted video recordings when UserData or TriggerData are enabled. 8.40.1.2:C16 Improved stability in the httptest.cgi. 8.40.1.2:C17 Corrected an issue that caused an HTTP-recipient based action rule to fail when the response from the server excluded the textual phrase (Example: HTTP 200). This will work now. 8.40.1.2:C18 Added Firmware Recovery (Firmware Rollback) information to the server report. Corrections in 8.40.1.1 since 8.40.1 ===================================== 8.40.1.1:C01 Corrected an issue that produced corrupted JPEG file data while the image itself was good. 8.40.1.1:C02 Corrected an issue that caused the camera to not zoom or focus after user input. 8.40.1.1:C03 Corrected an issue that prevented the user from uploading a certificate that contains "Bag Attributes" before and after the actual certificate content. 8.40.1.1:C04 Corrected an issue that prevented the user from receiving the correct recording list in AXIS Companion in combination with view areas or multi-sensor products. 8.40.1.1:C05 Corrected an issue in the ACAP framework that could cause ACAPs to freeze on rare occasions. 8.40.1.1:C06 Patched the following security vulnerabilities to increase overall minimum cyber security level: CVE-2018-10876, CVE-2018-10877, CVE-2018-10878, CVE-2018-10879, CVE-2018-10880, CVE-2018-10881, CVE-2018-10882, CVE-2018-10883. 8.40.1.1:C07 Updated to OpenSSL version 1.0.2p to increase overall minimum cyber security level. 8.40.1.1:C08 Updated Apache to version 2.4.35 to increase overall minimum cyber security level. 8.40.1.1:C09 Patched security vulernability CVE-2018-17182 to increase overall minimum cyber security level. 8.40.1.1:C10 Corrected an issue that caused upload of Axis People Counter via curl to fail in rare occations. 8.40.1.1:C11 Corrected an issue that could cause incorrect snapshot resolutions on view areas. New features in 8.40.1 ================================================================================ 8.40.1:F1 Renamed "Browser Stream Statistics" to "Client Stream Information". The Client Stream Information are available in the web-interface of the camera. 8.40.1:F2 Added support for ONVIF Audio Backchannel. 8.40.1:F3 Updated apache webserver to version 2.4.33 to increase overall minimum cyber security level. 8.40.1:F4 Added support for AES-CBC 256-bit SD card encryption. 8.40.1:F5 AXIS Video Motion Detection 4.2.5 is now pre-installed. 8.40.1:F6 Updated help files with more detailed information about SMB and Certificate support in AXIS products. 8.40.1:F7 Added a new section "Snapshot of current CPU utilization" that prints information about CPU utilization and memory consumption of processes in the server report. 8.40.1:F8 Changed the default timeout of HTTP-Recipient based action rules from 10s to 120s to compensate for unstable networks or slow clients. After the timeout is reached, the action rule will be re-tried. Corrections in 8.40.1 ================================================================================ 8.40.1:C1 Corrected an issue with incorrect handling of ACAPs after camera boot. 8.40.1:C2 Corrected an issue that prevented the user from formatting SD cards and the web- interface to show incorrect information about network share status in Settings -> System -> Storage. 8.40.1:C3 Added selection boxes for disabling TLSv1.0 and TLSv1.1 in Settings -> System -> PlainConfig -> HTTPS to enforce the highest possible TLS version for HTTPS-based connections. 8.40.1:C4 Corrected an issue that could cause a network share to become read-only. 8.40.1:C5 Corrected an issue that prevented the overlay to show the correct state of inputs when toggling. 8.40.1:C6 Corrected an issue in the ACAP framework that caused installed ACAPs to become unresponsive and the Apps tab not to be shown correctly. 8.40.1:C7 Corrected an issue that let the network share test under Events -> Recipient fail when a NAS was connected that only supports SMB 1.0 or SMB 2.0. 8.40.1:C8 Corrected an issue that caused AXIS Perimeter Defender or SafeZoneEdge to stop working after a firmware upgrade. 8.40.1:C9 Corrected an issue that caused the certificate signing request not to have an LF (alt. CR-LF) every 64th character causing the certificate considered not being valid e.g. when using symantec certificates. 8.40.1:C10 Corrected an issue that prevented the user from creating a Recipient when a "-" sign was present in the host name. 8.40.1:C11 Corrected an issue that caused the camera to become unresponsive on rare occasions and improved the overall camera performance when AXIS Perimeter Defender is used. 8.40.1:C12 Corrected an issue that could cause the configuration file upload from ADM to camera to fail. 8.40.1:C13 Corrected an issue that prevented the user to export recordings in the desired time range. 8.40.1:C14 Patched security vulnerability CVE-2018-5390 to increase overall minimum cyber security level. 8.40.1:C15 Patched security vulernability CVE-2018-14526 to increase overall minimum cyber security level. Known Bugs/Limitations ================================================================================ 8.40.3:L1 Exporting MJPEG clip with sound can sometimes export partial recording. 8.40.3:L2 It is recommend to refresh the browser with F5 after doing a FW upgrade from FW 6.xx to 8.xx or higher in order to show all the new settings in the web- interface. Supported AXIS VAPIX API Image Resolutions for P3235-LV ================================================================================ Resolution Exceptions ========== ========== 1920x1080 1600x1200 1400x1050 1280x960 1280x720 1024x768 800x600 854x480 800x450 640x480 640x360 480x360 320x240 320x180 240x180 160x120 160x90 768x576 1) 720x576 1) 704x576 1) 704x480 1) 704x288 1) 704x240 1) 480x270 1) 384x288 1) 352x288 1) 352x240 1) 240x135 1) 192x144 1) 176x144 1) 176x120 1) 1) Not visible in web user interface