Bosch VMS Patch for BVMS-11.1.1.65: 431808, 419002, 399765, 387477, 398299, 398300, 398396 - VCA Aggregation, Tattile improvements
----------------------------------------------------------------------------------------------------------------------------------

Patch ID: 431808, 419002, 399765, 387477, 398299, 398300, 398396
Patch Title: VCA Aggregation, Tattile improvements
Patch Target Version: BVMS-11.1.1.65


Patch Details:
----------------

This patch fixes issue 431808, improving the handling of the aggregation time in the VCA config on CPP4 cameras.

This patch fixes issue 419002, preventing security issues.
CVE identification numbers:
CVE-2021-3449  
CVE-2021-23841  
CVE-2020-1971  
CVE-2021-4160  
CVE-2021-23840  
CVE-2022-0778  
CVE-2022-2097  
CVE-2021-3712  
CVE-2021-3711  
CVE-2022-2068  
CVE-2022-1292 
CVE-2023-0465  
CVE-2023-0466  
CVE-2023-3817  
CVE-2022-4304  
CVE-2023-2650 
CVE-2023-0286  
CVE-2023-0464  
CVE-2022-4450  
CVE-2023-0215  
CVE-2023-4807 

This patch fixes issue 399765, preventing security issues from which BVMS is not affected (nevertheless the corresponding Dll is exchanged).

This patch fixes issue 387477, preventing security issues.
CVE identification number:
CVE-2021-26701

This patch fixes issue 398299 by solving the authentication problem with regards to Tattile cameras.
This patch fixes issue 398300 by mapping the events from different Tattile cameras correctly.
This patch fixes issue 398396 by solving the problem of not showing events of Tattile cameras after changin the system.


Problem Details:
----------------

Issue 398299 caused the problem that the aggregation time in the VCA config is going back to zero after changing it from zero to twenty on CPP4 cameras.

Issue 419002 caused a security problem via a vulnerability.
Issue 399765 caused a security problem via a vulnerability.
Issue 387477 caused a security problem via a vulnerability.

Issue 398299 caused the problem that the authentication to a Tattile camera may fail if credentials are changed to another valid user.
Issue 398300 caused problems receiving events from different Tattile cameras as they are mapped to only one camera.
Issue 398396 caused the problem that no events (alarms) of Tattile cameras are shown if the system was changed, e.g. change port of the Tattile camera.


Important hint:
---------------

After installing the patch and a reboot, the following configuration changes need to be done once.

On the camera:
1) On the Tattile camera upload the new "LPR_Event_Template.txt" file

In BVMS:
1) Open "Edit" dialog of Tattile
2) Press "Authenticate" to retreive updated information from camera
3) Press "OK"
4) Check that correct "Device Serial Number" is displayed on properties tab
5) Save & Activate
This will change the configuration to use the device SN in BVMS.


Affected Bosch VMS Components / Machines:
-----------------------------------------

- Bosch VMS Management Server
- Bosch VMS Configuration Client
- Bosch VMS Operator Client
- Bosch VMS Cameo SDK
- Tattile camera


Uninstallation of the Patch:
----------------------------
Logon as a User with 'Administrator rights' or as the 'Administrator' itself
Open 'Control Panel'  'Programs'  'Programs and Features'  'View installed updates'
Select the Patch in the list and press 'Uninstall'

or

Start cmd.exe with 'RunAs Administrator'
Run the following command
msiexec.exe /I {ABE97F4F-8AC2-FADB-EE7C-2512330CA006} MSIPATCHREMOVE={2B71E9C7-21A2-4767-B7E0-53D62C6CA25E} /qb


List of Replaced Files:
-----------------------

- AppData\LPR_Event_Template.txt
- AppData\Client\OpClient\ApplicationWiring\CameoSdk\CameoSdkOnly.config
- AppData\Server\DeviceAdapter\Spring.Lpr.ServerSettings.xml
- Bosch.Vms.Backend.CentralServer.WcfServices.LicensePlateReaderService.dll [Version 11.1.1.123]
- Bosch.VMS.Backend.DeviceAdapter.TattileAdapter.dll [Version 11.1.1.123]
- Bosch.Vms.Config.VcsConfigHelper.dll [Version 11.1.1.123]
- Bosch.Vms.Server.Lpr.LprAdapter.dll [Version 11.1.1.123]
- BvmsCentralServer.exe.config
- ConfigClient.exe.config
- ConfigWizard.exe.config
- DotNetZip.dll [Version 1.16.0.0] exchanges former Ionic.Zip.dll
- ExportPlayer.exe.config
- libcrypto-3-x64.dll [Version 3.0.11.0] exchanges former libcrypto-1_1-x64.dll
- libssl-3-x64.dll [Version 3.0.11.0] exchanges former libssl-1_1-x64.dll
- net-config2.dll [Version 4.41.49.12347]
- netConfigUm2.dll [Version 4.41.49.12347]
- ntcp.dll [Version 2.2.0.0]
- ntcpsdk.NET.dll [Version 2.2.0.0]
- ObjectRepository.Vms.ImportExport.dll [Version 11.1.1.123]
- OperatorClient.exe.config
- System.Text.Encodings.Web.dll [Version 4.700.21.11602]
- VL_ConfigManager.dll [Version 7.51.97.0]
- licenses\opensource\OpenSourceLicenses.txt
- licenses\opensource\component_licenses\tattile_open_source_licenses.txt
- licenses\opensource\component_licenses\THIRD-PARTY-NOTICES_DotNetZip.TXT
