D241: Release Notes for May 27, 2022

timshores1 · ‎05-27-2022

Hello everyone! Here are the release notes for the most recent updates we’ve made to Duo.

You can subscribe to notifications for new release notes by following the process described here. If you have any questions about these changes, please comment below.

What’s in this release?

New features, enhancements, and other improvements

Universal Prompt adds support for fifteen languages

New language support for Chinese (Simplified), Czech, Danish, Finnish, Hindi, Indonesian, Italian, Korean, Norwegian, Polish, Portuguese (Brazil), Swedish, Thai, Turkish, and Vietnamese. The end-user’s browser language settings determine the language shown in the prompt as well as the language used for Duo Mobile activation and SMS passcode text messages.
Note that this set of supported languages does not apply to authentication by phone callback. Phone callback supports English, German, French, Spanish, and Japanese, and will default to English when a user’s default UI is configured for another language.

Added the ability to cancel a Duo directory synchronization in progress

The Directory Sync detail page displays a new Cancel sync control while a full Azure Active Directory sync, Active Directory sync, or OpenLDAP sync is in progress.

Duo will not revert attribute changes applied to synced users when a sync is canceled. After canceling a sync and updating the configuration, running a full sync is recommended to avoid leaving users in an unexpected state.
The Administrator Actions report lists a canceled sync Action as Sync failed. The Action Detail displays that the sync was canceled and the administrator who canceled it.

Announcing public preview for device management in Duo Central

If configured by an administrator, end-users can now manage their devices via a Manage Devices link in Duo Central. The link loads the same self-service portal accessible from the Universal Prompt, where end-users can add, remove, or update their own Duo MFA and Duo Passwordless devices. Note that Duo Passwordless is currently in public preview.

Duo Central tiles support more URL schemes

Duo Central tiles now permit URLs that begin with schemes other than http:// or https://, such as rdp:// or ssh://, to allow you to link to web applications other than websites.

Added filter to list Applications reaching end of support

On the Applications page in the Duo Admin Panel, there is now an End of Support filter that displays protected applications that are approaching or have reached End of Support status.

Protected applications that meet this criteria are still displayed under All Applications.
The Applications page export also now works with both the search filter and the End of Support filter.

Added timestamp filters to the Telephony Log report

On the Telephony Log page in the Duo Admin Panel, there is now a Time Range filter that supports control over the report range. These function the same as the timestamp filters on the Authentication Log page.

Windows 10 version 20H2 will reach end-of-life in operating systems policy

Starting June 14, 2022, Duo operating system policy will treat Windows 10 version 20H2 as end-of-life following Microsoft’s end of servicing for this version.

New and updated applications

Duo Authentication Proxy version 5.7.1 released with security updates

Updated to Python 3.8.12 to resolve CVE-2020-14422 and CVE-2021-29921.

Duo Device Health application for Windows 10 and 11 production version 2.25.2 released

Fixed issue with DuoConnect integration.

Duo Device Health application public beta version 2.25.3 released

macOS beta version 2.25.3.0 and Windows beta version 2.25.3
Increase in version number to allow testing of silent updates.

Duo Mobile for Android version 4.16.0 released

Customer organization name now displays on full screen Duo Push authentication.

Duo Mobile for iOS version 4.16.0 released

Miscellaneous bug fixes and behind-the-scenes improvements.

Bug fixes

Fixed a UI bug on Admin Panel application details pages in which a long group name or a long list of group names obscured the plus and minus buttons behind the group dropdown control.

jbarker@nossaman.com · ‎05-27-2022

Starting June 14, 2022, Duo operating system policy will treat Windows 10 version 20H2 as end-of-life following Microsoft’s end of servicing for this version.

Duo, an enterprise product, should probably follow the End-of-Servicing date for Windows 10 Enterprise. This date is May 9, 2023

Amy2 · ‎05-31-2022

Hi @jonathanb, thanks for sharing this feedback with us! I already responded to your other post, but I will link it here as well in case anyone else reading would like to officially share their feedback with the Duo Team on this issue, or learn some of the background of why we currently follow the Home edition support schedule over the Enterprise one. Windows 10 20H2 support ends a year early - #2 by Amy

timshores1 · ‎06-08-2022

More good news! A late addition to these notes, a new Telephony Log feature released in D241 and the upcoming D242 release notes will reveal even more Telephony Log timestamp fun.

Added timestamp filters to the Telephony Log report

On the Telephony Log page in the Duo Admin Panel, there is now a Time Range filter that supports control over the report range. These function the same as the timestamp filters on the Authentication Log page.

timshores1 · ‎06-09-2022

I’ve just posted another update related to Authentication Proxy 5.7.1, in order to provide specifics about the Python library vulnerabilities resolved in that version, and vulnerabilities that remain under review. Special thanks to our Authentication Proxy and Security Operations teams for awesome due diligence!