In this release:
This release contains important security updates, it is highly recommended to update the systems to this version as soon as possible.
Additional changes: user interface and auto provisioning enhancements, an option to add custom SIP header fields, and various bug fixes.
IMPORTANT NOTE! When upgrading from version 5.0.59 or older, follow the following procedure (click to expand)
If you are upgrading a Spark system, you may ignore the special instructions. For any other system of version 5.0.59 or lower please perform the following steps:
1. run
yum install xorcom-centos-release
2. run yum update
This will ensure the system will be updated from the correct repositories.
PBX Improvements
Auto Provisioning
- Phonescan is now defunct and removed from the Endpoint Manager menu.
- Fanvil and Vtech phones are now added to Zero-Touch devices.
- VLAN and background image parameters were added to SNOM D712, D717, D735, D765, and D785.
- Fixed an issue with T54S missing DSS configuration.
- Fixed an issue with Fanvil templates that cannot be opened.
General
- The maximum Ring Time within Extensions, Trunks, and other modules was previously restricted to 120 seconds, proving insufficient for certain operational scenarios. This limitation has been addressed, and the allowable Ring Time is now configurable between 5 and 3600 seconds.
- It is now possible to add custom headers to SIP trunks.
User Interface
- Call center feature codes were reordered for consistency.
- Input validation has been improved across all modules.
- The Phonebook module dialog has been improved. The Import Contacts option is now presented more intuitively.
Security
- Resolved XSS vulnerability
- Patched shell injection vulnerability in Task Manager
- Prevented arbitrary file downloads through the Backup/Restore and Diagnostic modules
We thank Valentin Lobstein for the detailed analysis and reporting of the vulnerabilities.
Bug Fixes
- Fixed an issue with restricted web access when setting the session timeout to 0.
- Fixed an issue with CID lookup not working for Inbound Calls.
- The show password button is now shown when adding a new device.
- Fixed an issue where the Task Manager ran tasks twice when Randomize was disabled.
- Fixed an issue with T54S missing DSS configuration.
- Fixed an issue with Fanvil templates that cannot be opened.
