Nx Witness Server 6.1.2.42921

What's new in 6.1.2.42921

IMPORTANT:
- These release notes cover changes implemented since the latest major release (6.1.1.42471).
BREAKING CHANGES:
- Support for MacOS 12 will be discontinued in the next major release (6.2).
- Security hardening: Access-Control-Allow-Credentials is now false. Browser integrations using cookie-based authentication on cross-origin requests (including fetch with credentials: 'include', XHR.withCredentials = true and Axios requests with withCredentials: true) will stop working and must migrate to Authorization: Bearer <token>.
NEW DEVICES / OPERATING SYSTEMS SUPPORT:
- Raspberry Pi OS 13 (Trixie)
SECURITY UPDATES:
- Security hardening: Access-Control-Allow-Credentials is now false. Browser integrations using cookie-based authentication on cross-origin requests (including fetch with credentials: 'include', XHR.withCredentials = true and Axios requests with withCredentials: true) will stop working and must migrate to Authorization: Bearer <token>.
- Server now sends HSTS headers during the HTTP → HTTPS redirections. As a result, the initial connection is no longer vulnerable to SSL stripping and MITM attacks.
GENERAL IMPROVEMENTS:
- Server Monitoring graph colors improved.
- VCA edge build size is optimized - debug symbols are removed.
- Localization has been improved.
Timeline date format id consistent with OS date format.
- It is now possible to download full health report at the “Advanced > Logs Management” page.
ENTERPRISE FUNCTIONALITY IMPROVEMENTS / FIXES:
- Fixed the issue with reporting Live Streaming service usage.
ANALYTICS IMPROVEMENTS / FIXES:
- Added Intrusion Detection events support on Milesight cameras.
- Metadata parsing (object attributes) is added for the Vivotek analytics plugin.
- After upgrading to 6.1, if trying to choose a Vehicle type in the Milesight plugin search box, it searched for bikes. Fixed.
- On Hikvision cameras, wrong previews of analytic objects (Vehicle or LPR) were shown on the right panel in the Desktop Client. Fixed.
- The Vivotek analytics plugin could initiate a large number of false-positive error notifications. Fixed.
- The analytic event/object from the Vivotek SD9384-EHL could stop appearing in the Desktop Client after some time. Fixed.
- Dahua analytics plugin did not load for autodiscovered devices (i.e. DH-SD22204UE-GN). Fixed.
- The built-in Milesight analytics could shows unexpected "Unknown" objects. Fixed.
- The analytics database could completely fill the storage after upgrading to v6.1. Fixed. …

Full release notes »