Version 22.2.6

What's new in this release?

  • Head of Anchor release
  • In accordance with the Vidyo Standard Software Maintenance Policy, Vidyo is pleased to announce VidyoReplay version 22.2.6 as the Head of Anchor for VidyoReplay on the Anchor 22.4.x branch. Anchor releases for Vidyo infrastructure and endpoints are listed in the Vidyo Anchor release compatibility matrix.
  • Bug fixes
  • In this release, we've addressed some issues to improve usability and reliability.
  • System updates
  • For added security and stability, updates for multiple third-party packages and libraries are included as part of this release.

SSH configuration information

In this version, the SSH configuration has been updated to improve security. Because of these changes, only modern SSH clients that support the configurations below will typically be able to successfully connect.

  • Supported host keys: RSA,ED25519
  • Key exchange algorithms: diffie-hellman-group-exchange-sha256,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,curve25519-sha256,sntrup761x25519-sha512@openssh.com,curve25519-sha256@libssh.org
  • MACs: hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,umac-128-etm@openssh.com
  • Encryption ciphers: Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com

Prior to upgrading, we recommend that you:

  • Update your SSH client to the latest version.
  • Confirm your client supports the above configurations.
  • Take a backup (snapshot) of your virtual machine.
  • Upgrade a single machine first to confirm connectivity and then proceed to the others.

Files

This file...

Should be applied on top of...

rp-TAG_RP_22.2.6.81-bundle-v7014.vidyo

VidyoReplay version 22.2.x or later

Upgrade notes

  • You must apply VidyoReplay version 22.2.6 on top of VidyoReplay version 22.2.x. If you have a VidyoReplay version earlier than 19.1.0, you must first upgrade to 19.1.0, then incrementally upgrade versions to version 22.2.6. Once you have done so, refer to the "Upgrade a VidyoReplay Cluster to 22.2.6" section below. These steps must be completed in order.
  • Multiple Super users can be managed only from the Active Controller in a VidyoReplay cluster.

Upgrade a VidyoReplay cluster to 22.2.6

To upgrade a VidyoReplay cluster to 22.2.6, you must perform the following steps in order:

  1. Place all Cluster Nodes into Maintenance mode.
  2. Upgrade all the Cluster Nodes.
  3. When the Cluster Node upgrades are completed and back online, upgrade the current Standby Controller.
  4. When the Standby Controller upgrade is complete, upgrade the Active Controller. The previous Standby Controller will now become the 22.2.6 Active Controller.
  5. When the former Active Controller completes its upgrade, it will then become the 22.2.6 Standby Controller.

    6. Note

    If you do not perform the above steps in order, there will be cluster instability and/or configuration loss.

Compatibility

VidyoReplay version 22.2.6 is compatible with VidyoPortal versions 20.1.x and later.

If your organization has an on-premises VidyoPortal (rather than a cloud subscription), refer to the Vidyo compatibility matrix to determine which endpoint versions are compatible with your VidyoReplay release.

Resolved issues

The following table lists the issues we have resolved in VidyoReplay version 22.2.6.

VidyoReplay version 22.2.6 - resolved issues

Key

Summary

VIDRPLY-440

OpenSSH, including CVE-2024-6387, was updated to improve security and stability.

VIDRPLY-439

The Apache web server was updated to improve security and stability.

VIDRPLY-438

Spring Framework was updated to improve security and stability.

VIDRPLY-407

We fixed an issue that caused VidyoReplay to experience a high amount of mount failures.

VIDRPLY-387

Apache Tomcat, including CVE-2023-46589, was updated to improve security and stability.

VIDRPLY-377

We now allow the NAS domain to be included as part of the configuration of the NAS mount.

Known issues

There are no new known issues for this release.