Contact Center - Patch Release Notes - Version 4.13.34

release details release date 5 june 2025 short description this release includes security fixes related to host header injection and validation, vla api fixes, and resolves various bugs impacting api functionality, user state management, ui display, and agent call handling highlights / summary security fix (host header injection) implemented validation for incoming request hosts against an allowed list configured in the ini file vla api fix resolved an issue with the "fetch voicelog by crt object id" api failing in scenarios with multiple call ids api functionality fixed issues with a real time dashboard api and agent availability reporting in node flows agent state management addressed inconsistencies related to agents receiving calls on multiple extensions during fallback and duplicate agent id displays in monitoring ui fix resolved an issue where supervisor ui showed duplicate agent ids in live monitoring build versions the following table lists the updated component versions for this release component build url ameyo server ameyo server 4 13 592 20250603 r 199682 linux gtk x86 64 rpm ameyo art ameyo art 4 13 89 20250603 r 199679 linux gtk x86 64 rpm management server ameyo management server 3 15 128 20220819 r 53820 x86 64 management ui ameyo management server ui 3 15 79 20220825 r 54354 x86 64 ameyo asterisk ameyo asterisk13 100 0 123 20230202 r 54429 el7 linux gtk x86 64 rpm ameyo asterisk13 100 0 122 20230201 r 77845 el8 x86 64 rpm ameyo asap ameyo asap 100 0 19 20210708 r 53436 linux gtk x86 64 rpm ameyo asap 100 0 31 20231212 r 122778 el8 linux gtk x86 64 rpm ameyo djinn ameyo djinn 100 0 411 20250115 r 176400 x86 64 rpm ameyo codec ameyo codecs13 100 0 10 20180312 r 37320 i386 rpm ameyo codecs16 3 10 1 20150917 linux gtk x86 64 rpm ameyo crm ameyocrm 100 0 379 20240516 r 54694 x86 64 rpm jdk java 1 8 0 amazon corretto devel 1 8 0 312 b07 1 x86 64 rpm caf google play store caf googleplay 100 0 37 20231011 r 112974 x86 64 rpm caf youtube caf youtube 100 8 0 20230904 r 54528 x86 64 rpm ui less integration zoho connector laravel build zoho connector 100 0 36 20230817 r 104650 x86 64 rpm ui less integration zoho user management app zoho crm connector 100 0 10 r 54327 aaex wfm nice response transformation app nice connector app 100 0 13 r 54375 aaex amf for whatsapp, cogno and instagram integration amf 100 0 239 20250327 r 54787 x86 64 rpm voicelog privilege app voice log privilege app 100 0 61 r 54105 aaex dial user app dial user app 100 0 31 r 51344 aaex system smart view app smart user app 100 0 94 r 54159 aaex pick call app pick call app 100 0 36 r 51381 aaex bulk operation app bulk operation 100 0 48 r 51285 aaex desktop notification app notificationapp 100 0 29 r 52192 aaex agent signature app agent signature app 100 0 27 r 51283 aaex agent self monitoring app agent self monitoring 100 1 98 r 51265 aaex redirection app redirectionapp 100 0 3 r 51489 aaex quota app quota management app 100 0 74 r 54362 aaex skill monitoring app skill monitoring app 100 0 14 r 54167 aaex routing test app routingtest 100 0 1 r 54180 aaex debugger app debuggerapp 100 0 7 r 54338 aaex acp acp 100 1 92 20231130 r 120901 x86 64 rpm amd ameyo amd16 100 0 31 20210521 r 52916 linux gtk i386 rpm zabbix ameyo zabbix 100 0 127 20221115 r 63336 el7 x86 64 rpm ameyo zabbix agent 100 0 54 20210617 r 53204 x86 64 rpm failover ameyo failover 100 0 29 20230504 r 89111 x86 64 rpm video micro service video 4 13 110 20240304 r 133174 x86 64 rpm voice agent mobile app android voice agent app 5 7 5 r (voice agent 5 7 4 20211011 release apk) ios voice agent app 3 3 field agent mobile app android field agent app 5 4 r (ameyo fieldagent com 5 4 20230905 release apk) ios field agent app version 3 3 supervisor mobile app android supervisor app com ameyo supervisor 2 1 20210812 release apk ios moved to live on apple store grafana grafana 7 1 4 1x86 64 rpm sfdc integration app crm integration 100 0 8 r 54454 aaex note only components with significant changes are listed full build details are available in internal documentation feature enhancements no new features introduced in this patch focus is on security and bug fixes bug fixes system common bugs real time dashboard api (sl 17050) fixed an issue where a rest api intended for real time logged in user data failed when executed with a jwt token agent availability node (sl 16896) resolved an inconsistency where the agent availability node reported incorrect statuses when used at the queue level compared to the campaign level extension fallback issue (sl 17054) fixed an issue where agents received calls simultaneously on webrtc and dual call leg extensions during extension fallback, leading to erroneous states supervisor monitoring ui (sl 16973) addressed an issue where supervisor live monitoring randomly displayed duplicate agent ids, particularly when allowmultipleextension was false vla voicelog download api (sl 17029) corrected the "fetch voicelog by crt object id" api to handle scenarios with multiple call ids correctly, ensuring the proper recording is fetched even if entries without recording dacx uri exist security and performance updates arbitrary host header injection (ga 14877) earlier, the system did not validate the host specified in incoming requests, which allowed requests with any host value to pass through successfully update the system now validates the host in each request against a list of approved hosts administrators can define this list in the server’s ini configuration file limitations / known issues no new limitations identified in this patch browser and platform compatibility supported browsers chrome version 137 0 7151 56 (official build) (arm64) or later is recommended mobile apps no updates in this patch hot fixes included (from previous versions if applicable) report upload security (ga 15080) added regex validation and keyword filtering to the "upload jrxml" field in reporting to prevent insecure file uploads (included via art build ameyo art 4 13 90) contact / support information for issues or queries, please contact exotel contact center support via the support portal or through designated email channels