Difference between revisions of "VALT 6.6.10"

From IVS Wiki
Jump to: navigation, search
 
(9 intermediate revisions by the same user not shown)
Line 1: Line 1:
May 22nd, 2026
+
May 26th, 2026
  
 
'''Application'''
 
'''Application'''
 
* Fixed issue that caused recordings' video files to infinitely grow in size
 
* Fixed issue that caused recordings' video files to infinitely grow in size
 
** This specifically impacted recordings put in the Prepared State and then started with an I/O trigger
 
** This specifically impacted recordings put in the Prepared State and then started with an I/O trigger
 +
* Fixed issue in Schedules incorrectly specified the wrong overlapping Schedule when a user attempts to create a new Schedule that overlaps with an existing one
 +
* Fixed issue in Reports that did not allow a Report type to be changed
 +
* Fixed issue in Reports that did not include User-level Video Access permissions as an option in the Custom Users list
 
* Fixed issue in Admin > Templates that allowed unexpected input in the Value fields for Single-Select and Multi-Select fields for Evaluation templates
 
* Fixed issue in Admin > Templates that allowed unexpected input in the Value fields for Single-Select and Multi-Select fields for Evaluation templates
 
  
 
'''Technical'''
 
'''Technical'''
* Security Updates
+
* Nginx reverse proxy Docker image: Updated Nginx version to 1.30.2
** Enabled HTTP2  
+
* Various security improvements
** Server version information no longer exposed in HTTP responses  
+
** Enabled HTTP2
** Strengthened HTTP security response headers
+
** Strengthened HTTP security response headers
** Resolved an issue where certain paths did not enforce HTTPS security policies  
+
** Server version information no longer exposed in HTTP responses
** API endpoints now return consistent JSON error responses  
+
** Fixed issue where certain paths did not enforce HTTPS security policies
** Improved API redirect handling for more reliable client compatibility  
+
** Updated API endpoints to now return consistent JSON error responses
 +
** Improved API redirect handling for more reliable client compatibility
 
** Fixed duplicate header conflict on the phpMyAdmin path
 
** Fixed duplicate header conflict on the phpMyAdmin path
 +
** Added HSTS header to Wowza Streaming Engine paths
 +
** Added several other points of application security hardening regarding authentication, input validation, and reporting

Latest revision as of 15:40, 27 May 2026

May 26th, 2026

Application

  • Fixed issue that caused recordings' video files to infinitely grow in size
    • This specifically impacted recordings put in the Prepared State and then started with an I/O trigger
  • Fixed issue in Schedules incorrectly specified the wrong overlapping Schedule when a user attempts to create a new Schedule that overlaps with an existing one
  • Fixed issue in Reports that did not allow a Report type to be changed
  • Fixed issue in Reports that did not include User-level Video Access permissions as an option in the Custom Users list
  • Fixed issue in Admin > Templates that allowed unexpected input in the Value fields for Single-Select and Multi-Select fields for Evaluation templates

Technical

  • Nginx reverse proxy Docker image: Updated Nginx version to 1.30.2
  • Various security improvements
    • Enabled HTTP2
    • Strengthened HTTP security response headers
    • Server version information no longer exposed in HTTP responses
    • Fixed issue where certain paths did not enforce HTTPS security policies
    • Updated API endpoints to now return consistent JSON error responses
    • Improved API redirect handling for more reliable client compatibility
    • Fixed duplicate header conflict on the phpMyAdmin path
    • Added HSTS header to Wowza Streaming Engine paths
    • Added several other points of application security hardening regarding authentication, input validation, and reporting