Resolved issues

To inquire about a particular bug, please contact Fortinet Customer Service & Support.

• If the FortiRecorder file system becomes read-only, an SNMP trap should be sent

• On models with no power supply status monitoring, SNMP OID frcHwSensorCount should return 0

• When downgrading firmware, the configuration manager (cmdb) should not crash

• FortiRecorder-VM license did not validate, showing the error message Invalid license Duplicated

• If a camera name has more than 26 characters, video playback should not fail

• Users should be able to change their own mobile device in the device list for FortiRecorder Mobile

• Bug ID 1053197: After upgrading a FortiRecorder, the ONVIF transport type and port should not be reset to their default values.

• Bug ID 0892720: After upgrading, the live view REST API failed, showing the error message Failed: Access denied

• Bug ID 1102855: Avoid unnecessary communication with camera when retrieving the pixel resolution

• Bug 1050943: Heatmap for motion analytics should not show static

Vulnerabilities

• Bug ID 1041227: CVE-2023-52434 (Linux kernel issue with SMB/CIFS network shares)

• Bug ID 1051895: CVE-2024-6387 (OpenSSH regreSSHion RCE attack)

• Bug ID 0985980: CVE-2023-48795 (OpenSSH Terrapin attack)

• Bug ID 1009228: Upgrade to curl 8.8.0

• Bug ID 1044758: Upgrade to libexpat 2.6.2

• Bug ID 0975717: Upgrade to traceroute 2.1.3

• Bug ID 1057588: Security fabric (csfd) daemon inserted sensitive information into data that it sends

• Bug ID 1060912: Security fabric (csfd) daemon path traversal attack