Version 23.2.4

What's new in this release?

  • Bug fixes
  • In this release, we've addressed some issues to improve usability and reliability.
  • SSH update and configuration
  • This release includes an update to SSH as well as configuration updates to improve security by deprecating legacy protocols.
  • Prior to upgrading, please review the SSH configuration information section below in detail to ensure you have the right configuration to connect to the Vidyo appliances after the upgrade.
  • System updates
  • For added security and stability, updates for multiple third-party packages and libraries are included as part of this release.

SSH configuration information

SSH configuration information

In this version, the SSH configuration has been updated to improve security. Because of these changes, only modern SSH clients that support the configurations below will typically be able to successfully connect.

  • Supported host keys: RSA,ED25519
  • Key exchange algorithms: diffie-hellman-group-exchange-sha256,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,curve25519-sha256,sntrup761x25519-sha512@openssh.com,curve25519-sha256@libssh.org
  • MACs: hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,umac-128-etm@openssh.com
  • Encryption ciphers: Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com

Prior to upgrading, we recommend that you:

  • Update your SSH client to the latest version.
  • Confirm your client supports the above configurations.
  • Take a backup (snapshot) of your virtual machine.
  • Upgrade a single machine first to confirm connectivity and then proceed to the others.

Upgrade notes

  • You must upgrade to VidyoGateway version 23.2.4 from VidyoGateway version 21.1.x or later. Therefore, if you have a VidyoGateway version earlier than 21.1.x, you must first upgrade to 21.1.x and then upgrade to version 23.2.4. Please refer to the Upgrade a VidyoGateway 21.1.x cluster to version 23.2.4 section below for more information. These steps must be completed in order.
  • If you have installed a previous VidyoGateway version 23.2.4 beta, you should first downgrade your VidyoGateway to the previous GA using the Recovery Utility on the System Console, and then upgrade directly to the GA 23.2.4 version. For more information, refer to "Run the recovery utility" section of the VidyoGateway Administrator Guide.

Compatibility

VidyoGateway version 23.2.4 is compatible with VidyoPortal version 21.6.x and later.

Files

This file...

Should be applied on top of...

gw-TAG_GW_23_2_4_114-bundle-Gen2-v6954.vidyo

VidyoGateway version 21.1.x or later

Upgrade a VidyoGateway 21.1.x cluster to version 23.2.4

To upgrade a VidyoGateway 21.1.x+ cluster to version 23.2.4, please perform the following steps in order:

  1. Place all Cluster Nodes into Maintenance mode.
  2. Upgrade all the Cluster Nodes.
  3. When the Cluster Node upgrades are completed and back online, upgrade the current Standby Controller.
  4. When the Standby Controller upgrade is complete, upgrade the Active Controller. The previous Standby Controller will now become the 23.2.4 Active Controller.
  5. When the former Active Controller completes its upgrade, it will then become the 23.2.4 Standby Controller.

Resolved issues

The following table lists the issues we resolved in VidyoGateway version 23.2.4.

VidyoGateway version 23.2.4 - resolved issues

Key

Summary

VIDGW-482

Updates were made to Tomcat to move to a supported branch (Tomcat 9).

VIDGW-412

We fixed an issue where the SIP TLS outbound connection may have failed if the SIP server was presenting an SSL/TLS certificate with a SAN that was used for certificate verification.

Known issues

There are no new known issues for this release.