Overview ======== NSC 3.0 is a major upgrade to the platform and packages that the Sangoma NSC, NSG and MSBG products are built upon. The changes address a number of security and functional issues, as well as providing a strong foundation for future product development. Upgrade Process --------------- The upgrade to Release 3.0 is a service affecting upgrade. This is a requirement as the filesystem upgrade mandates re-formatting the storage in the system. A backup must be taken of the system before the upgrade. This can then be restored onto the newly upgraded system and all configuration will be preserved. If you require any advice or assistance please contact support. ------------------------------------------------------------------------------------------------------------- 2024-01-22: NSC 3.0.17-5-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == Implemented JIRA NSC-1685: Support / upgrade SBC to SNG7.8 to support kernel 5.4 == BUG FIXES == Fixed NSC-1672: SBC to provide IP iptables whitelist rule more priority than sipsecmon rules Fixed NSC-1701: Introduce code to show Default Gateway on webUI when its IP is set to DHCP Fixed NSC-1707: Introduce new Refresher configuration to allow user to set refresher as uas / uac as per the configuration Fixed NSC-1720: SBC to prompt user Restart is required for changeing the TLS version config Fixed NSC-1723: SBC to properly generate CDR and show it on GUI Fixed NSC-1730: SBC to restore actualy unumber of trunks as per the config uploaded effect Fixed NSC-1733: SBC to allow user to change some config as present within profile on the fly Fixed NSC-1745: Support uploading license on SBC appliance ------------------------------------------------------------------------------------------------------------- 2023-08-31: NSC 3.0.15-41-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == Fixed NSC-1620 SBC to register profile on to secondary proxy as per DNSSRV if the primary proxy stops responding to OPTIONS Fixed NSC-1661 SBC to apply DHCP IP changes on the fly if SBC is running and Apply Config Changes is set to enable this will lead to calls drops in order to apply the network changes and restart SBC == BUG FIXES == Fixed NSC-1497 SBC to allow user to Configure Ciphers Used By TLS from GUI Fixed NSC-1629 SBC to properly send BYE to Egress Leg Fixed NSC-1638 Disable TLS respective configuration on GUI if transport is not selected as TLS Fixed NSC-1641 Installed default self signed certificate for SIP profile to allow TLS call to work with self signed certificate ------------------------------------------------------------------------------------------------------------- 2022-11-08: NSC 3.0.14-38-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == Fixed NSC-1256 Add option to delete all HA data before reconfigure == BUG FIXES == Fixed NSC-1317 Memory leak when dialplan matching regex type 'any' Fixed NSC-1416 CSRF issue start/stop SIP Profile in status page Fixed NSC-1445 Handle REFER replace string from and to tags in upreg scenario Fixed NSC-1481 UserACL IP Address check issue Fixed NSC-1530 Added changes to handle 180 after 200OK Fixed NSC-1551 Added changes to use cseq of current call when deflect application is used Fixed NSC-1570 SRTP Static noise Added changes to properly drop the error SRTP packets ------------------------------------------------------------------------------------------------------------- 2022-04-21: NSC 3.0.13-37-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == Fixed NSC-1493 Update polkit package to mitigate CVE-2021-4034 Fixed NSC-1432 Added support to set max forwards for options Fixed NSC-1478 Added support to add custom firewall rule Fixed NSC-1491 Added options to enable bypass media after attended transfer Fixed NSC-1527 Check update package only from current branch after 3.0 == BUG FIXES == Fixed NSC-1428 SNMPv3 user configuration fix for nsc3 Fixed NSC-1431 TOS setting on IPv6 SIP packets Fixed NSC-1490 Memory leak validating LCR entries Fixed NSC-1397 Advance routing save and apply Fixed NSC-1401 IPv6 subnet range check excluding start IP Fixed NSC-1384 Parse and replacing the proper transport type for upreg Fixed NSC-1453 Updated on re-INVITE telephone event change Fixed NSC-1487 License update fix Fixed NSC-1502 Added check to handle display update INFO response and INVITE response at incorrect order in upreg scenario ------------------------------------------------------------------------------------------------------------- 2021-12-12: NSC 3.0.12-33-GA ------------------------------------------------------------------------------------------------------------- This is a major release that includes the addition of full High Availability support. The addition of HA and the completion of the assocaited testing bring feature parity between 3.0 and 2.3. == FEATURES & IMPROVEMENTS == Fixed NSC-1405 Added High Availability Support Fixed NSC-1396 Added expiry settings for database binlog file ------------------------------------------------------------------------------------------------------------- 2021-09-02: NSC 3.0.11-27-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == Fixed NSC-1343 Handle RFC2833 with wide band codecs Fixed NSC-1200 Handle sip unhold when reinvite wihtout sdp and variable 'sip_unhold_nosdp' exported Fixed NSC-1254 Added improvements while destroying server request Fixed NSC-1313 Added option to export custom pid header param Fixed NSC-1315 Updated last bridge hangup cause on channel variable Fixed NSC-1318 Increasing the core start timeout based on number of sip profiles and added warning == BUG FIXES == Fixed NSC-1060 RFC2833 UDP to SRTP leg Fixed NSC-1290 Update HEP capture logging for tls Fixed NSC-1319 Handled authenticate response when registaer usage is removed Fixed NSC-1344 Update to override the local SIP and RTP address on session basis Fixed NSC-1320 Updated binding of sofia_private and handle before set param called Fixed NSC-1328 counter 32bit over flow on TLS outbound calls Fixed NSC-1220 Root access enabled in backend and disable in db on backup restore Fixed NSC-1270 Test notification email error Fixed NSC-1180 Adding domain users requesting for restart Fixed NSC-1389 Unhold attribute incorrectly accessed due to sdp string not null terminated ------------------------------------------------------------------------------------------------------------- 2021-04-10: NSC 3.0.9-25-GA ------------------------------------------------------------------------------------------------------------- == BUG FIXES == Fixed NSC-1304 Cleanup unwanted GUI files Fixed NSC-1306 Prevent local code execution from GUI Fixed NSC-1302 Changed deallocating order of event object Fixed NSC-1305 Updated handling malformed header ------------------------------------------------------------------------------------------------------------- 2021-03-30: NSC 3.0.8-22-GA ------------------------------------------------------------------------------------------------------------- == BUG FIXES == Fixed NSC-1227 firewall restart dependency on sipsecmon Fixed NSC-1246 Handling ptime change of 50ms which was hanging channel Fixed NSC-1284 start and stop service issue after control panel refresh Fixed NSC-1257 configurable core start timeout ------------------------------------------------------------------------------------------------------------- 2021-03-01: NSC 3.0.7-21-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == Dnsmasq package upgraded to dnsmasq-2.76-16.el7_9.1 == BUG FIXES == Fixed NSC-1264 XSS issue on login page Fixed NSC-1253 Javascript not updated due to browser cache Fixed NSC-1197 Removed sensitive files from phpsysinfo reported by Infosec Fixed NSC-1286 Prevent admin url access Fixed NSC-1287 Validation for sng capture form data Fixed NSC-1262 Skipped CSRF cookie settings for excluded URLs with type GET Fixed NSC-1289 Sqlite database disk image malformed on factory reset Fixed NSC-1285 World writable file in nsg cardinfo db. ------------------------------------------------------------------------------------------------------------- 2021-02-04: NSC 3.0.6-19-GA ------------------------------------------------------------------------------------------------------------- == BUG FIXES == Fixed NSC-1255 CSRF Issue at TDM Capture. Fixed NSC-1252 Input field validation error message issue ------------------------------------------------------------------------------------------------------------- 2021-01-31: NSC 3.0.5-18-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == This is a maintenance patch release to address a number of security vulnerabilities. There are no functional changes. Upgraded CodeIgniter version 3.1.11 Fixed Authenticated local code execution Authenticated cross site scripting Unauthenticated cross site scripting Directory traversal attack CSRF protection Fixed NSC-1191 Clickjacking issue Fixed NSC-1193 Backup files are opensssl encrypted Fixed NSC-1196 Updated permission of executable scripts Fixed NSC-1197 sensitive files discovery issue Fixed NSC-1232 webconfig huge log file generating issue Fixed NSC-1199 Disable X11Forwarding ssh Fixed NSC-1194 Added option to disable SSHD password authentication ------------------------------------------------------------------------------------------------------------- 2020-11-20: NSC 3.0.4-14-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == Added TLS 1.2 support Updated jQuery-3.5 Update rpm packages with security fixes == BUG FIXES == Fixed NSC-1182 Handle contact with multiple invalid uris upreg while unregister Fixed NSC-1203 Backup Restore Issue. Fixed issues in TDM UI interface. ------------------------------------------------------------------------------------------------------------- 2020-10-30: NSC 3.0.3-13-GA ------------------------------------------------------------------------------------------------------------- == FEATURES & IMPROVEMENTS == Fixed NSC-1068 Provided configurable option to disable ptime warning Fixed NSC-1112 Updated mod_oreka module Fixed NSC-1022 Added option to upload WebSSL certificates Updated http ssl configuration to improve security Added option to get the octasic license file using sngtc_tool Fixed smartd config update == BUG FIXES == Fixed NSC-1063 Update correct capture id HEP3 Fixed NSC-1021 Handle odbc config issue on backup restore from 2.2 version Fixed NSC-1145 Added option to force SRTP on outbound leg Fixed NSC-1026 Allow stun address in external sip address field Fixed NSC-1177 Issues related to update package ------------------------------------------------------------------------------------------------------------- 2020-09-22: NSC 3.0.2-12-GA ------------------------------------------------------------------------------------------------------------- == FEATURES/BUG & IMPROVEMENTS == * Fixed network Interface renaming when new interface is added. * Updated TDM Gateway Patches * Included libusb packages for MSBG Release 3.0.1-9-GA ================== Release date: 2020-08-21 This is the initial release of NSC version 3.0. It contains a large number of changes to the platform but no functional changes over release 2.3.27. These changes will allow for future development and more rapid response to security vulnerabilities. Major changes ------------- * Base distribution is now based upon Centos 7 with kernel version 3.10.0-957.21.3 * The filesystem has been changed to XFS * openssl has been upgraded to 1.0.2k * openssh-server has been 7.4 * mysql has been upgraded to 5.5.62 * PHP has been upgraded to 7.3.17 * jquery has been upgraded to 3.0.0