FIRMWARE RELEASE NOTE
=====================

Products affected:        AXIS M5065

Release date:             2019-11-27

Release type:             Production

Firmware version:         6.53.4

Preceding release:        6.53.2.1

--------------------------------------------------------------------------------

Upgrade instructions
====================

Upgrade the firmware according to the instructions given at
https://www.axis.com/ca/en/support/tecnical-notes/how-to-upgrade 
or howtoupgrade.txt, which is included in the firmware folder.

NOTE
====================

For latest information about Axis Cybersecurity, see
https://www.axis.com/se/sv/support/product-security.


Corrections in 6.53.4 since 6.53.2.1
=====================================

6.53.4:C01
Corrected an issue that caused snapshot JPEG images to contain erroneous data 
and
resulting in problems to display them in some viewers.

6.53.4:C02
Increased the limit of concurrent HTTP requests for I/O related VAPIX commands from 4 to
10.

6.53.4:C03
Removed the root users default password in factory defaulted firmware. The password of the
root user must be set first in order to initialize VAPIX and ONVIF interfaces to allow
further configuration. This change only affects products in its factory defaulted state,
products that are already deployed in production systems are not affected by this update
until factory defaulted.

6.53.4:C04
Corrected an issue that prevented the insertion of triggered data in SEI messages when
streaming H.264.

6.53.4:C05
Updated OpenSSL to version 1.0.2s to increase overall minimum cyber security level.

6.53.4:C06
Updated libssh2 to version 1.8.2 due to that version 1.8.1 broke publickey-userauth
requests.

6.53.4:C07
Updated Mozilla ca-certificates to versions available at 20190122.

6.53.4:C08
Corrected security vulnerability in Systemd CVE-2019-6454 to increase overall minimum
cyber security level.

6.53.4:C09
Improved robustness of the O3C client.

6.53.4:C10
Updated Apache to version 2.4.39 to increase overall minimum cyber security level.

6.53.4:C11
Patched the following security vulnerabilities to increase overall minimum cyber security
level: CVE-2019-3855, CVE-2019-3856, CVE-2019-3857, CVE-2019-3858, CVE-2019-3859,
CVE-2019-3860, CVE-2019-3861, CVE-2019-3862, CVE-2019-3863.

6.53.4:C12
Corrected the following vulnerabilities in order to increase overall minimum cybersecurity
level: CVE-2018-16865, CVE-2018-16866.

6.53.4:C13
Corrected an issue that prevented the user from uploading a certificate that contains
“Bag Attributes” before and after the actual certificate content.

6.53.4:C14
Corrected an issue that caused event notifications not been triggered on storage
disruption.

6.53.4:C15
Corrected an issue with HTTP response which prevented the camera from streaming on rare
occasions.

6.53.4:C16
Corrected an issues that could cause an incorrect error message when testing HTTP
recipient.

6.53.4:C17
Patched security vulernability CVE-2018-17182 to increase overall minimum cyber security
level.

6.53.4:C18
Adjusted re-connection behavior of interrupted AVHS connections on AVHS-server side. The
time between failed connection attempts will now gradually increase until a hard limit is
reached.

6.53.4:C19
Patched the security vulnerability CVE-2017-16544 in BusyBox to increase overall minimum
cyber security level.

6.53.4:C20
Corrected an issue in the ACAP framework that could cause ACAPs to freeze on rare
occasions.

6.53.4:C21
Corrected an issue that could cause corrupted video recordings when UserData or
TriggerData are enabled.

6.53.4:C22
Corrected an issue with the Axis event handling interface when deactivating events.

6.53.4:C23
Added Perfect Forward Secrecy ciphers (DHE-RSA) to the ciphers selection.

6.53.4:C24
Patched security vulernability CVE-2018-14526 to increase overall minimum cyber security
level.

6.53.4:C25
Added selection boxes for disabling TLSv1.0 and TLSv1.1 in Settings -> System ->
PlainConfig -> HTTPS to enforce the highest possible HTTPS negotiation client handshake
via TLSv1.2.

6.53.4:C26
Corrected an issue causing CIFS networkshare to become read only on mount on rare
occasions.

6.53.4:C27
Added a Storage Stability Helper service for better handling of Network Shares.

Supported AXIS VAPIX API Image Resolutions for AXIS M5065
=========================================================

Resolution  Exceptions
==========  ==========
1920x1080
1280x960
1280x720
800x600
800x450
640x480
640x360
480x360
480x270
320x240
320x180

1400x1050   1)
1440x900    1)
1024x768    1)
1024x640    1)
800x500     1)
768x576     1)
720x576     1)
704x576     1)
704x480     1)
704x288     1)
704x240     1)
640x400     1)
480x300     1)
384x288     1)
352x288     1)
352x240     1)
320x200     1)
240x180     1)
240x135     1)
192x144     1)
176x144     1)
176x120     1)
160x120     1)
160x100     1)
160x90      1)
80x50       1)

1) Not visible in web user interface