VALT 6.6.10: Difference between revisions

From IVS Wiki
Jump to navigation Jump to search
Created page with "May 22nd, 2026 '''Application''' * Fixed issue that caused recording video files to infinitely grow in size ** This specifically impacted recordings put in the Prepared State..."
 
No edit summary
 
(11 intermediate revisions by the same user not shown)
Line 1: Line 1:
May 22nd, 2026
May 26th, 2026


'''Application'''
'''Application'''
* Fixed issue that caused recording video files to infinitely grow in size
* Fixed issue that caused recordings' video files to infinitely grow in size
** This specifically impacted recordings put in the Prepared State and then started with an I/O trigger
** This specifically impacted recordings put in the Prepared State and then started with an I/O trigger
 
* Fixed issue in Schedules incorrectly specified the wrong overlapping Schedule when a user attempts to create a new Schedule that overlaps with an existing one
* Fixed issue in Reports that did not allow a Report type to be changed
* Fixed issue in Reports that did not include User-level Video Access permissions as an option in the Custom Users list
* Fixed issue in Admin > Templates that allowed unexpected input in the Value fields for Single-Select and Multi-Select fields for Evaluation templates


'''Technical'''
'''Technical'''
* Security Updates
* Nginx reverse proxy Docker image: Updated Nginx version to 1.30.2
* Various security improvements
** Enabled HTTP2
** Enabled HTTP2
** Updated header response to no longer show Nginx and PHP versions
** Strengthened HTTP security response headers
** Added the following security headers
** Server version information no longer exposed in HTTP responses
*** x-frame-options "sameorigin"
** Fixed issue where certain paths did not enforce HTTPS security policies
*** x-permitted-cross-domain-policies: none
** Updated API endpoints to now return consistent JSON error responses
*** x-xss-protection: 0
** Improved API redirect handling for more reliable client compatibility
** Fixed issue that that did not apply HSTS to /socket.io and /api paths
** Fixed duplicate header conflict on the phpMyAdmin path
** Updated /api paths to return JSON responses instead of HTML
** Added HSTS header to Wowza Streaming Engine paths
** Updated /api/v3 redirect to /api/v3/ with 308 code instead of 302 code
** Added several other points of application security hardening regarding authentication, input validation, and reporting
** Updated /phpmyadmin path to strip duplicate upstream headers

Latest revision as of 20:40, 27 May 2026

May 26th, 2026

Application

  • Fixed issue that caused recordings' video files to infinitely grow in size
    • This specifically impacted recordings put in the Prepared State and then started with an I/O trigger
  • Fixed issue in Schedules incorrectly specified the wrong overlapping Schedule when a user attempts to create a new Schedule that overlaps with an existing one
  • Fixed issue in Reports that did not allow a Report type to be changed
  • Fixed issue in Reports that did not include User-level Video Access permissions as an option in the Custom Users list
  • Fixed issue in Admin > Templates that allowed unexpected input in the Value fields for Single-Select and Multi-Select fields for Evaluation templates

Technical

  • Nginx reverse proxy Docker image: Updated Nginx version to 1.30.2
  • Various security improvements
    • Enabled HTTP2
    • Strengthened HTTP security response headers
    • Server version information no longer exposed in HTTP responses
    • Fixed issue where certain paths did not enforce HTTPS security policies
    • Updated API endpoints to now return consistent JSON error responses
    • Improved API redirect handling for more reliable client compatibility
    • Fixed duplicate header conflict on the phpMyAdmin path
    • Added HSTS header to Wowza Streaming Engine paths
    • Added several other points of application security hardening regarding authentication, input validation, and reporting
Retrieved from "https://ivs.help/wiki/index.php?title=VALT_6.6.10&oldid=17524"