Hello everyone! Here are the release notes for our most recent updates to Duo.
Public release notes are published on the Customer Community every other Friday, the day after the D-release is completely rolled out. You can subscribe to notifications for new release notes by following the process described here. If you have any questions about these changes, please comment below.
Check out the Guide to Duo End-of-Life and End-of-Support Plans. This guide provides an up-to-date list of current and past end-of-life plans for Duo products.
- New features, enhancements, and other improvements
- Now generally available: Duo Trust Monitor actionable Security Events
- Now generally available: Unenrolled user lockout
- Duo Universal Prompt Update Progress report now makes it easy to update applications that are Ready to Activate
- Improved default passkey nicknames
- Updated platform authenticator re-enrollment flow available in MFA and Passwordless
- Updated Duo Universal Prompt messaging to indicate when a platform authenticator was unsuccessful
- Improved access to the WebAuthn credential details page in the Duo Admin Panel
- Duo Admin Panel banner reminder to review firewall rules
- New and updated applications
- Duo Authentication Proxy version 6.3.0 released
- Duo Network Gateway version 3.0.0 released
- Duo Desktop for macOS version 6.4.0.0 released
- Duo Desktop for Windows 10 and 11 version 6.4.0 released
- Duo Mobile for Android version 4.58.0 released
- Duo Mobile for iOS version 4.58.0 released
- Bug fixes
Duo Universal Prompt Update Progress report now makes it easy to update applications that are Ready to Activate
- Application status > Using Traditional Prompt now provides a button to Activate Universal Prompt for N apps that are in Ready to Activate status.
Improved default passkey nicknames
- Passkeys registered during enrollment in a protected application or from the Duo Self-Service Portal will default to a nickname that describes where the credential is stored.
- For example: "iCloud Keychain," "1Password," "Security Key."
Updated platform authenticator re-enrollment flow available in MFA and Passwordless
- When an end user with a platform authenticator cancels an authentication attempt from a new authentication device, the Duo Universal Prompt will give them an option to add their platform authenticator.
- This feature requires Duo Self-Service Portal enabled for the protected application.
|
|
|
|
Updated Duo Universal Prompt messaging to indicate when a platform authenticator was unsuccessful
- When an end user does not successfully complete Passwordless or MFA platform authentication, the Universal Prompt indicates which authentication method didn’t work and lets them choose another authentication method.
Improved access to the WebAuthn credential details page in the Duo Admin Panel
Duo Admin Panel banner reminder to review firewall rules
- Duo administrators will see a reminder to review the Knowledge Base article What are Duo's IP ranges and data residency areas by deployment? and to review firewall rules make sure communication can reach all Duo MFA service IP blocks for the data residency area for the customer deployment.
New and updated applications
Duo Authentication Proxy version 6.3.0 released
- Fixes sort order of factors from preauth result.
- Fixes OpenSSL error when enabling FIPS mode on certain systems.
- Updates Python to 3.11.7 to address CVE-2023-36632, CVE-2023-24329, CVE-2023-40217, CVE-2023-27043, and CVE-2007-4559.
- Updates various internal dependencies to resolve CVEs including CVE-2023-49083, CVE-2023-46137, CVE-2022-40898, CVE-2021-32559, and CVE-2022-42969.
- All CVEs resolved by this update are related to third-party dependencies. Duo has verified that Duo Authentication Proxy security and operation has not been affected by these CVEs.
Duo Network Gateway version 3.0.0 released
- General availability of Custom Application Relay support for all TCP ports and protocols.
- General availability of Duo Network Gateway API for DNG administration.
- Upgraded bundled OpenSSL to 3.0.12.
- Upgraded bundled Redis version to 6.2.14.
- Updated libxml2 to 2.12.3.
- Increase validation for CA certificate renewal process.
Duo Desktop for macOS version 6.4.0.0 released
- Minor improvements and enhancements.
Duo Desktop for Windows 10 and 11 version 6.4.0 released
- Minor improvements and enhancements.
Duo Mobile for Android version 4.58.0 released
- End users may now input a verified Duo Push code without opening the Duo Mobile app.
Duo Mobile for iOS version 4.58.0 released
- Replaced "Duo Device Health" with "Duo Desktop" in the Bluetooth permissions dialog.
Bug fixes
- Fixed a bug in the Duo Trusted Endpoints for Ivanti Neurons (formerly known as MobileIron Cloud) Managed Device Deployment that prevented daily device synchronization.
- Fixed a bug in the Duo Admin Panel Authentication Proxy Dashboard that displayed an incorrect version number for an Authentication Proxy configured to use a Single Sign-on Authentication Source.
- Fixed a bug that caused a Duo Passwordless Push authentication request to fail if Duo Push was not enabled for the policy.
- Fixed a bug in the Duo Authentication Log that logged a timed out Duo Passwordless Push with the reason Credential Denied.
- Fixed a bug in Duo Passwordless that allowed an end user to authenticate successfully from an operating system blocked by policy when using an out-of-date web browser to log into a web app protected by Passwordless.
- Fixed a bug in Duo Single Sign-On for KnowBe4 to support authentication requests for both common customers and resellers.