FIRMWARE RELEASE NOTE
=====================

Products affected:        AXIS C2005/C1004-E

Release date:             2018-05-14

Release type:             Production

Firmware version:         1.81.040.1

Preceding release:        1.65.032

--------------------------------------------------------------------------------

Upgrade instructions
====================

Upgrade the firmware according to the instructions given at
https://www.axis.com/ca/en/support/tecnical-notes/how-to-upgrade 
or howtoupgrade.txt, which is included in the firmware folder.


New features in 1.81.040.1
================================================================================

F1
The FTP Server is now disabled by default as it is not used during normal
operation and may pose a security risk.

F2
The functionality of enabling Axis DNS Service via control button has been
disabled by default. 

F3
Support for AXIS Audio Streaming Capabilities API for better handling of product
supported audio streaming settings. The API allows a client to request all the
product supported audio stream settings and its combinations e.g. audio codecs,
sample and bit rates as well as channels.

F4
If no audio active, not sending any audio data between audio peers to avoid
network load. Earlier design always sent audio data, even if no audio.

F5
Audio in foreground and background will have separate latency profiles, where
foreground will run with lower latency and background set up for more stability.

F6
The ARP/Ping method to set the products ip-address has been removed in order to
increase minimum cyber security standards.

F7
Changed the default web server authentication from Basic & Digest to Digest
only.

F8
Support for Brute Force Delay Protection. The product can block a client for a
period of time if too many login attempts failed. 

F9
Upon a factory default, the device will generate a self-signed certificate at
boot and enable HTTPS. This allows clients to use encrypted access from start.
If HTTPS is to be used in daily operations, it is recommended to replace the
generated self-signed certificate with a CA-signed certificate.

F10
Apache web server has been updated to version 2.4.25.

F11
Support for 24bit LPCM audio mode.

F12
OpenSSL has been updated to version 1.0.2k to increase overall minimum cyber
security level.

F13
audio-relay service discoverable via mDNS/Bonjour service 

F14
Support for AXIS SD card health API. The SD card health API allows a client to
track and request the health and wear-out state of an camera with AXIS
Surveillance SD Card.

F15
Improved frequency characteristics for the speakers and added EQ profiles

F16
Support for Flash All/Factory Default while performing a firmware update. 

F17
Support for Password Security Confirmation Check. To increase overall
cybersecurity awareness, a user-configured password that is considered "weak"
need to be confirmed actively twice by the user.

F18
Name and Leader information possible to retrieve via API call

F19
Improved frequency characteristics for the speaker's microphone.

F20
Support for recordings with G711 mu-law audio encoding.


Corrections in 1.81.040.1
================================================================================

C1
Fixed Security vulnerability CVE-2016-5195.

C2
Corrected an issue that prevented the user from saving a action rule with a
Email Recipient that had SSL enabled.

C3
Running http://ip /incl/bw to get the network bandwidth now requires login
credentials. Improved Cyber Security.

C4
Fixed an issue resulting in that HTTP notification action rules stopped retrying
from contacting the receiving server after a failed attempt.

C5
Corrected Content-Type in pwdgrp.cgi response.

C6
Corrected security vulnerability CVE-2016-2147 and CVE-2016-2148.

C7
Corrected critical vulnerability ACV-128401.