FIRMWARE RELEASE NOTE ======================== Products affected: A8207-VE MK II/A8207-VE Release date: 2021-11-22 Release type: Production Firmware version: 10.8.1 Preceding release: 10.8.0 -------------------------------------------------------------------------------- Upgrade recommendations ======================== When updating the device, it is recommended to do an intermediate upgrade using an available AXIS OS LTS-release on the way to the desired AXIS OS version. For example, if the device currently is running AXIS OS 7.40 and you want to upgrade to the latest AXIS OS Active Track (Example: 10.1, October 2020) then you should do the upgrade in these steps: 7.40 => 8.40 LTS => 9.80 LTS => 10.1. More detailed recommendations can be found in the AXIS OS portal at https://www.axis.com/support/firmware. Upgrade the firmware according to the instructions given in howtoupgrade.txt, which is included in the firmware folder or according to instructions at https://www.axis.com/support/firmware. NOTE ======================== For latest information about Axis Cybersecurity, see: https://www.axis.com/support/product-security New features in 10.8.1 ================================================================================ 10.8.1:F1 Upgraded Apache to version 2.4.51. Features in 10.8.0 ================================================================================ 10.8.0:F1 Added support in action service - send notification action (HTTP/HTTPS) for optionally supplying; method, HTTP headers and (for applicable method types) a body. Added support in HW2 action engine UI to specify Method, HTTP headers and body. Added support in preview UI (ADA) to specify Method, HTTP headers and body. 10.8.0:F2 Added support for POST/PUT/PATCH/DELETE HTTP methods in event rule HTTP notifications actions. Together with the new methods, it is also possible to provide custom request body and HTTP headers. UI support is only available in the new web GUI. 10.8.0:F3 Device-level topic prefix support added. This feature can be used to specify a topic prefix that can be reused when publishing and subscribing to MQTT messages. This prefix can also be utilized as a device id within the global topic structure. 10.8.0:F4 Added support to create filepath when exporting to external disk. 10.7.0:F1 ACAPs containing a manifest.json file are now fully supported. The manifest.json file contains settings and parameters for the application. The older package.conf file is still supported. 10.7.0:F2 Added support for .ogg and .opus encoded mediaclips. 10.7.0:F3 Net-SNMP is now the new SNMP backend for AXIS OS devices and will replace the legacy SNMP backend that was used previously. Net-SNMP provides significant higher security mechanism and authentication for SNMPv3 than previously could be provided. 10.7.0:F4 Added support for MQTT subscription. With this support, it will be possible to use incoming MQTT messages as action triggers in the rule engine of the new preview web GUI. 10.7.0:F5 Extended the 802.1x EAP-Identity field character limit from 32 to 128 characters. 10.7.0:F6 Added optional API status property in VAPIX API Discovery JSON response body. 10.7.0:F7 Updated Apache to version 2.4.48 to increase overall cybersecurity level. 10.7.0:F8 Updated OpenSSL to version 1.1.1l to increase overall minimum cybersecurity level. 10.7.0:F9 Updated Video Motion Detection to version 4.5.1. Fixed a streaming issue on configuration web page on some products. 10.6.0:F1 MQTT subscription support added. With this support, it will be possible to use incoming MQTT messages as action triggers in the rule engine. 10.6.0:F2 Removed support for stream specific legacy overlays. The URL options for legacy image and legacy text overlay will not be supported any more. 10.6.0:F3 Added option to select which overlay should be used in a stream profile. 10.6.0:F4 HTTPS Ciphers are checked and unsupported ciphers removed on standard firmware upgrade 10.6.0:F5 Added a parameter to disable Apache & OpenSSL version in HTTP(S) responses in Plain Config -> System. 10.6.0:F6 Changed the default values for input and output gain to better reflect whats used in normal installations. Values will not change after upgrade, only after default. 10.6.0:F7 New VAPIX Intercom APIs can be found at https://www.axis.com/vapix-library 10.6.0:F8 Upgraded OpenSSL to 1.1.1k to increase overall minimum cyber security level. 10.6.0:F9 Support of stream specific legacy overlay is removed on Artpec platform. With this change, the URL option for both legacy image and text overlay will not be supported any more on Artpec platform. 10.5.0:F1 RTSP and HTTP stream URL:s now allow for filtering overlays based on overlay type. This is done by setting 'overlays=' in the URL (only one value). 10.5.0:F2 New configuration check page have been added for ease of installation and troubleshooting. Making it possible to verify configurations without physically being on site at the unit. 10.5.0:F3 Clarified the call button LED behaviour in the web interface. 10.5.0:F4 Updated pjsip to version 2.10 to increase overall cyber security. 10.5.0:F5 OpenSSL upgraded to 1.1.1j to fix CVE-2021-23841 and CVE-2021-23840. 10.4.3:F1 Added option to perform a factory default in combination with upgrading/downgrade. It's mandatory to factory default the product when downgrading to an older firmware. 10.4.0:F1 Added support for new action "Publish MQTT", available in the web-interface in Events -> Device events -> Rules setup. This new action allows to publish MQTT messages with custom topic and payload. 10.4.0:F2 Added actions "Play audio clip while active" and "Stop playing audio clip" to the event system. 10.4.0:F3 Corrected an issue that required the user to re-enter the password for the user for the MQTT broker connection upon changing other MQTT settings. 10.4.0:F4 Successful and failed user login attempts are now logged in detail when the Access Log parameter is enabled from Plain Config -> System -> Access Log 10.4.0:F5 Added the feature to retrieve OAK in the web interface, found under Services/AVHS 10.4.0:F6 Added Output formatter feature for keypad, to be able to modify the output PIN format when using Wiegand protocol. 10.4.0:F7 Added Output formatter feature for cards, to be able to modify the output format for card numbers. 10.4.0:F8 Added feature to change OSDP address in the web interface. 10.4.0:F9 OpenSSL upgraded to 1.1.1i to fix CVE-2020-1971. Corrections in 10.8.0 ================================================================================ 10.8.0:C1 Corrected CVE-2021-31987. 10.7.3:C1 Improved streaming stability for devices used in Axis Companion systems. 10.7.1:C1 Corrected a network issue that on rare occasions could cause the product to lose its internet-connection. 10.7.0:C1 Corrected CVE-2021-31986. 10.7.0:C2 Corrected CVE-2021-31988. 10.7.0:C3 Corrected an issue that prevented legacy motion detection from working. 10.7.0:C4 Corrected an issue with MQTT subscriptions when reconnecting. 10.7.0:C5 Corrected MQTT default message so it no longer starts with an empty string. 10.7.0:C6 Corrected an issue that caused the "Anonymous viewer" functionality to be removed after upgrade to 10.6.0. 10.7.0:C7 Corrected an issue that interrupted the NTP-time-sync between the Axis device and NTP-server when the NTP-server was operating instable and suffered fluctuating time-changes. 10.7.0:C8 Audio now uses the new audiodevicecontrol.cgi instead of the old API. This means that the gain values may be different in the GUI, but the actual audio level should be the same as before. 10.7.0:C9 Corrected an issue that prevented the Sound Intelligence Sound Detector ACAP to get an audio stream. 10.7.0:C10 Improved RTP timestamp accuracy for metadata streams. 10.7.0:C11 Corrected an issue that could cause an RTSP stream to stop after 60+ seconds if streamed to an openRTSP client. 10.6.8:C1 Improved double talk performance in SIP/VMS calls. 10.6.7:C1 Corrected an issue with MQTT subscriptions when reconnecting. 10.6.7:C2 General improvements in streaming management. 10.6.6:C1 Corrected an issue with MQTT subscriptions when reconnecting. 10.6.6:C2 Corrected an issue with O3C-based solutions when accessing the intercom interface remotely. 10.6.2:C1 General improvements in streaming management. 10.6.0:C1 Improved Motion Detection to handle scenes with extreme lighting changes , improving general behavior for applications that make use of this engine and data. 10.6.0:C2 Improved behavior when using Guard Tour with the Control Queue. 10.6.0:C3 Increased the maximum speaker output volume which helps to improve conversations in loud environments. 10.6.0:C4 Corrected an issue that did not account for MTU packet fragmentation for IEEE 802.1x authentication. Previously the Axis device was not able to authenticate properly against an 802.1x network when the MTU was configured to 1410 or lower. 10.6.0:C5 Corrected an issue that on some occasions could prevent export of a part of a recording. 10.6.0:C6 Corrected an issue that in combination with some VMSes and low resolution could cause brief disconnections in the video stream. 10.5.2:C1 Corrected an issue that on some occasions prevented an upgrade to firmware version 10.5.0. 10.5.2:C2 Corrected an issue that could cause O3C-based connections with the device to be interrupted. 10.5.0:C1 Increased the number of allowed characters for event condition name to 512. 10.5.0:C2 Corrected an issue that prevented the use of some special characters in ONVIF passwords. 10.5.0:C3 Corrected an issue that caused the video to be stretched if in corridor mode and cropped. 10.5.0:C4 Corrected an issue that prevented the Axis device to respond with HTTP 403 Forbidden when the source-ip address was blocked when using PreventDOSAttack in Plain Config -> System. Previously HTTP 401 Unauthorized was returned. 10.4.0:C1 Corrected an issue that erased the password from the MQTT broker connection settings when editing settings occasionally. This required the user to re-enter the password when this happened. 10.4.0:C2 Corrected an issue that caused the MQTT configuration in the device to get corrupt on rare occasions. 10.4.0:C3 Corrected an issue that could caused an MQTT event to be duplicated upon registering the same event multiple times. 10.4.0:C4 Updated digital input LogicalState metadata API to consistently use 0/1 on all camera models. 10.4.0:C5 Corrected an issue that caused the device to send an EPRT command when transferring an image or video via FTP instead of an EPSV command. 10.4.0:C6 Corrected an issue where a network share used as a recipient could get its properties overwritten by another network share created from the Storage page. 10.4.0:C7 Corrected nice names for the PreventDoSAttack parameters in Settings -> System -> Plain Config-> System -> PreventDoSAttack. 10.4.0:C8 Improved Link Layer Discovery Protocol (LLDP) system stability. Known Bugs/Limitations ================================================================================ 10.8.0:L1 On single channel products, text- and image-overlays are no longer shown for streams using overview=1. This results in that some ACAPs, like e.g. VMD and ALPS, will no longer have text- and image-overlays on their configuration pages. It also means that text- and image-overlays are not shown on the Image, Privacy Mask, and View Area tabs in the web interface if a view area is created. 10.6.0:L1 Sometimes the web page get stuck in a loop trying to load the plain config page, refreshing the page will solve this. 10.4.0:L1 Saved VAPIX reader password will be lost when upgrading from 1.85.1. Needs to be re-entered after the upgrade. Supported AXIS VAPIX API Image Resolutions for A8207-VE MK II/A8207-VE ================================================================================ Resolution Exceptions Capture mode ------------ ------------ -------------- 3072x2048 3) 2560x1920 2) 3) 2560x1440 2) 3) 1920x1440 2) 3) 1920x1280 3) 1920x1200 2) 3) 1920x1080 2) 3) 1600x1200 2) 3) 1440x960 3) 1400x1050 3) 1280x960 2) 3) 1280x800 2) 3) 1280x720 2) 3) 1024x768 2) 3) 1024x640 2) 3) 960x1280 2) 3) 960x640 3) 854x480 3) 800x600 2) 3) 800x500 2) 3) 800x450 2) 3) 720x1280 2) 3) 640x480 2) 3) 640x400 2) 3) 640x360 2) 3) 480x640 2) 3) 480x360 2) 3) 480x320 3) 480x300 2) 3) 480x270 2) 3) 320x240 2) 3) 320x200 2) 3) 320x180 2) 3) 240x180 2) 3) 240x160 3) 160x120 2) 3) 160x100 2) 3) 160x90 2) 3) 1408x1152 1) 2) 3) 704x576 1) 2) 3) 704x480 1) 2) 3) 352x288 1) 2) 3) 352x240 1) 2) 3) 320x320 1) 2) 3) 192x72 1) 2) 3) 176x144 1) 2) 3) 96x64 1) 2) 3) 1) Not visible in web user interface 2) Available on Quad channel 3) 3K @ 25/30 fps