--- title: Contact Center - Patch Release Notes - Version 4.13.36 slug: contact-center/contact-center-patch-release-notes-version-41336 docTags: createdAt: 2025-10-24T10:18:00.052Z --- # Release Details **Release Date:** 4th-August-2025 This document outlines the feature enhancements, bug fixes, and other updates included in the ECC 4.13.36 patch release. # Highlights / Summary This patch introduces enhancements to the `cm_cdr_history` table for improved billing reports, validates VLA storage mounting, includes security fixes for error handling and rate limiting, and addresses several bugs related to reporting and UI behavior. - **CDR Enhancement for Billing:** Added `contact_center_id`, `crt_object_id`, and `call_id` columns to `cm_cdr_history` table to support detailed call leg reporting for billing purposes. - **VLA Storage Mounting Validation:** Tested and validated mounting external object storage (OCI tested) for VLA voice log storage using s3fs. - **Security Fixes:** Addressed improper error handling for CSV uploads, removed patch flag dependency for a security fix, fixed improper access control vulnerability, and implemented rate limiting. - **Bug Fixes:** Resolved issues with duplicate entries in chat reports, ticket ID display, negative talk time logging, rule engine events, and UI password masking. # Build Versions Key versions included in this release are: | Component | Build URL | | --------------------- | ------------------------------------------------------------------ | | ameyo-server | **ameyo-server-4.13.595.20250802-R\_213005-linux-gtk.x86\_64.rpm** | | ameyo-art | **ameyo-art-4.13.92.20250801-R\_212705-linux-gtk.x86\_64.rpm** | | System Smart View App | **Smart\_User\_App-100.0.135-R\_54858.aaex** | :::hint{type="info"} **Note - **Release details provided in the above table has the change only, other releases has no change and are same delivered in last patch cycle ::: # Feature Enhancements - ***PI-VOIP-Billing (EN-143741)*****: **The *cm\_cdr\_history* table has been enhanced to support detailed, call leg–based reporting. The newly introduced fields improve the traceability of each call leg across contact centers and routing configurations. | **Column Name** | **Type** | **Description** | | ------------------- | ----------- | ------------------------------------------------------ | | contact\_center\_id | String/Int | Identifier of the contact center where the call landed | | crt\_object\_id | UUID/String | Call Routing Tree object ID used in routing logic | | call\_id | String | Unique call identifier used to group all call legs | **** - ***Storage Mounting in 4x VLA (EN-144138)*****:** This task involved validation and testing of the existing storage mounting configuration within the 4x VLA environment, rather than implementing a new setup. - The test environment used **Oracle Cloud Infrastructure (OCI) Object Storage** as the cloud provider. Mounting was done using the **s3fs** utility with configuration parameters including bucket name and region. The access mode for validation was set to **FTP**, and the mount path on the server was **/home/testingandshared**. - Authentication was managed through access and secret keys securely stored in the **.passwd-s3fs** file. Appropriate permissions and access control were configured using **allow\_other**, **umask**, and **use\_path\_request\_style** options to ensure proper read/write access across dependent services. - The objective of this exercise was to validate that the mounted bucket is accessible by Ameyo services (VoiceLog) for seamless voice log storage and retrieval. - ***Video Integration – Media Permission Issue (EN-143938)*****:** As part of CRM integration and multimedia compatibility testing, validation was conducted to ensure smooth functioning of embedded iframe-based video calls alongside Ameyo audio calls. - The test involved embedding a **WebRTC-enabled video iframe** within the CRM and initiating parallel audio streams—one via the embedded video call and another via the Ameyo dialer. - **Key Observations:** :::Paragraph{listStyleType="decimal" listRestartPolite="1" indent="2"} Video and Ameyo audio calls worked without issues when used independently. ::: :::Paragraph{listStyleType="decimal" listStart="2" indent="2"} During simultaneous operation, potential audio stream conflicts or merging were observed, influenced by the system’s configuration and audio handling behavior. ::: ## Bugs Fixes - ***Duplicate Entries in Chat Detail Report (SL-17275)*****:** Resolved an issue where duplicate entries appeared in the Chat Detail Report for a single chat session. The problem occurred when a chat was transferred across multiple queues, resulting in multiple rows with the same `chat_id.` The report now correctly displays a single consolidated record per chat. This issue has been fixed in the latest App Server build. - ***Incorrect Ticket ID in Ticket Summary/PDF View (SL-17273)*****:** Previously, the HTML always contained the interactionId, which caused it to appear in the exported ticket header even when a customId was configured. The HTML generation logic has been updated to prioritize the customId when available. If no customId is configured, the `interactionId` will be displayed. The issue has been resolved in this App Server build. - ***Negative Agent Talk Time Display (SL-17165)*****: **Logs have been added in this release to assist in diagnosing cases where agents’ talk time appeared as negative. To enable detailed tracing, activate TRACE logs for the following modules: - `cc.voicecampaign.impl.calculator.callhistory` - `cc.voicecampaign.impl.calculator.userdispositionhistory` **** - ***Tickets Missing After Status Rename (SL-17125)*****:** Addressed an issue where tickets became invisible in the UI when a ticket status was renamed (for example, from “Pending CSD” to “CSD”). The fix ensures that both `internal_state` and `external_state` fields are updated consistently during status renaming. The issue has been resolved in this App Server build. - ***Rule Engine Timer Precision (GA-15001)*****:** Introduced a configurable flag, *officeHoursPreviousDaysLimit*, to define the number of previous days considered for Timer-Based Rules during Office Hours lookups. This flag is stored in the `server_preference_store` table. :::Paragraph{listStyleType="disc" indent="2"} **Configuration Details:** Query: SELECT \* FROM server\_preference\_store WHERE key ILIKE '%officeHoursPreviousDaysLimit%'; ::: :::Paragraph{listStyleType="disc" listStart="2" indent="2"} Default Value: 7 days ::: :::Paragraph{listStyleType="disc" listStart="3" indent="2"} Minimum Value: 0 (interpreted as 1 day) ::: :::Paragraph{listStyleType="disc" listStart="4" indent="2"} Maximum Value: 30 days ::: - ***Password Policy Reminder Popup Issue with Secure Login (SL-17301)*****:** Fixed an issue that prevented agents from logging in after changing their passwords when both password policy enforcement and secure login were enabled. With this fix, agents can now successfully log in under these conditions in the latest App Server build. ## Monitoring Data and Reports - ***Feedback Report Showing Duplicate Data (SL-17153)*****:** Resolved an issue where the Feedback Report displayed five duplicate rows instead of the expected two when multiple feedback entries were submitted for a single interaction. To address this, an *ORDER BY 1,2 *clause was added to the crosstab source query, ensuring proper grouping by *feedback\_id *and correct ordering by *question\_id. *This issue has been fixed in the latest ART build. - ***Incorrect Data Order in Default Calls Quality Report (SL-17239, GA-15189)*****:** In the Calls Quality Report, QA parameters were previously listed alphabetically, causing misalignment between parameter sequence and intended scoring order. This led to inaccurate interpretation of QA scores across campaigns. The issue has been rectified—QA parameters in the report now follow the original configuration order, ensuring correct mapping between parameters and their respective scores. - ***NBR Report Clarifications (SL-17218) (GA-15122)*****:** Fixed a display issue in which the CRM page failed to reappear after navigating from the Knowledge Base (KB) page back to the Customer tab. The CRM page now loads correctly during tab switching. This issue has been resolved in the current App Server build. ## SI Apps - ***Smart User App – Multiple Issues (SER-2882):*** - **Agent Listing Issue:** Resolved an issue where agents did not appear in the listing screen when a PowerUser remained logged in continuously without logging out. The agent listing logic has been updated to exclude the PowerUser role type, preventing listing failures under such conditions. - **Multi-Select Filter Issue:** Fixed a problem with the “Select All” checkbox functionality, which previously selected only the visible items on the current page after filters were applied. The correction ensures that the “Select All” action now applies to the entire filtered dataset. ## Security and Performance Updates - ***VAPT – Improper Error Handling (GA-15082)*****: **The issue related to handling invalid CSV uploads was re-evaluated and found non-reproducible under standard error scenarios. The system now properly handles invalid file extensions at the UI level by displaying a toast notification indicating that only .csv files are allowed. This issue has been verified and fixed in the latest App Server build. - ***Vulnerabilities in 4.x Code (SL-17090, GA-14986)*****:** A previous security fix requiring `patch.apply=true` has been integrated directly, removing the flag dependency for this specific fix. Deployment teams must validate this configuration during rollout. - ** Deployment Note:** Before or after applying the patch, ensure the following: - Verify that patch.apply = true in the system\_configuration\_parameter table. - Manually update the value to true if not already set. *** *** - ***VAPT – Improper Access Control (GA-14865)*****:** Addressed a reported vulnerability where authorization checks were not consistently applied before executing user operations, allowing actions to proceed regardless of user privileges. Authorization enforcement has been implemented, and the issue is fixed in this App Server build. - ***Rate Limiting for 4.x App Server (SL-17006, GA-14925)*****:** The VAPT scan reported missing rate-limiting controls, making the App Server susceptible to excessive API requests. The fix introduces a rate-limiting mechanism where any subsequent requests made within one minute after the first successful request now return **HTTP Error 429 – Too Many Requests**, confirming rate-limit enforcement for improved API security. ## Limitations / Known Issues - No new limitations identified in this patch. ## Browser and Platform Compatibility - **Supported Browsers:** Chrome Version 138.0.7204.169 (Official Build) (arm64) - **Mobile Apps:** No updates in this patch. ## Contact Support For issues or queries, please contact Exotel contact center Support via the support portal or through designated email channels.