CatDV is an agile media management and workflow orchestration platform. It helps organisations with large volumes of video, stills, audio and metadata to organize, communicate and collaborate more effectively. The CatDV platform delivers a wide variety of media-centric capabilities, including traditional PAM, MAM and DAM, sophisticated workflow automation and fully customised applications.
Summary
SBS is notifying you of a vulnerability impacting the CatDV Server software. There is a known CVE (Common Vulnerabilities & Exposures) related to this issue, which has been publicly disclosed and assigned ID number CVE-2021-26705. Under certain active session conditions, this vulnerability may be able to be exploited to allow an attacker to gain administrative-level access to the CatDV Server system and it is therefore mandatory that all CatDV Server users upgrade to the latest versions to avoid any unauthorized access.
Solution
There is a mandatory upgrade for all CatDV Server users, most critically for internet-accessible systems. The fix for this vulnerability has been made in all recent, major versions of the CatDV Server.
If you are currently running any version of Server 6 please upgrade to Server 6.10.7
If you are currently running a version of Server between 7.0.1 and 7.3.5 please upgrade to Server 7.3.6
If you are currently running a version of Server between 7.4.1 and 7.4.3 please upgrade to Server 8.0.8
If you are currently running a version of Server 8 please upgrade to Server 8.0.8
If you are currently running any version of Server 9 please upgrade to Server 9.3.2 or later
There is a self-guided installation process included as part of the software, though if you do need assistance please contact sup...@catdv.com stating upgrade assistance required, and the CatDV technical support team will provide a guided upgrade.
CatDV Desktop version 13.0.14, Server 9.3, and Worker 8.0.7 and above are Apple M1 & M2 compatible, running in emulation mode under Rosetta. Please check the system requirements then choose the version of CatDV, Pegasus, CatDV Server, Worker Node, or other products you want from the links below.
Welcome to the official release of CatDV 14. Download the appropriate version of CatDV for your platform and follow the instructions in the Read Me files. These downloads are the real application and depend on a registration code to function; without a registration, CatDV will operate as a free time-and feature-limited demo. Codes are issued on-line once you purchase a license. Please contact us if you require a fully functional time-limited evaluation license for a more thorough test prior to purchase. To use the latest version of CatDV you will normally require a license purchased within the past three months or be under a current software maintenance agreement.
Details on how to add enhanced support for PDF files making them viewable on CatDV desktop can be found here.
If you are running Catalina, details on how to install CatDV products can be found here.
If you are running Big Sur or above, you will need to install the desktop client versions 13.0.14 onwards.
IMPORTANT INFORMATION FOR ARCHIVE PLUGIN USERS WHEN UPGRADING.
Most CatDV archive plugins now work with Server 10. Azure, Backblaze, and Soda work with the existing plugins. Black Pearl and S3 work with Server 10 using the latest archive plugin release. Object Matrix, Google Cloud, IBM Cleversafe are still in progress.
IMPORTANT INFORMATION FOR WORKGROUP SERVER USERS.
Please note that Workgroup Server has been discontinued, the latest supported version is 7.4.3, links below. Please contact sup...@catdv.com for special commercials terms to migrate to Enterprise Server.
IMPORTANT INFORMATION FOR SERVER 6 USERS:
CatDV Server 7 and onwards stores its metadata in a different way from previous versions or CatDV Server. The upgrade process must, therefore, migrate your data from the old format to the new format. This step cannot be undone so it is vital that your data is properly backed up before you start in case it becomes necessary to roll back your installation. Please make sure you read the information on the following link before upgrading more information on Server 7 upgrade.
The CatDV Worker Node, is available to registered users only. As a prerequisite to installing Worker 9 for Linux, you will need to ensure that library is installed. A quick google search will point you in the direction of where you can download it. Please contact us if you require further information or would like an evaluation copy. Please note that for users without a current maintenance support contract, Worker 8 is a paid upgrade and you will need a new license code to activate it.
Details on how to add enhanced support for PDF files making them viewable in CatDV desktop can be found here.
Details on how to install CatDV products if you are using OSX Catalina can be found here.
Server plugins enable us to expand the functionality of the core CatDV products and provide extensive customisation and integrations for the CatDV Platform. These plugins are available to registered users only and require CatDV Server 7.2.5 as a minimum.
Project Template Plugin
Standardise your environment by defining one or more templates for creating new projects to a standard layout. Check out our docs site for more information -plugins/project-template-plugin/
SAML
Allows CatDV to integrate with your Single Sign-on Provider allowing SSO for CatDV Desktop and Web client. We currently support Okta and Shibboleth, and we can work with you to add new providers to suit your organisation.
Important Plug-in Upgrades
Please read the plug-in install notes (contained inside the plug-in ZIP file) BEFORE upgrading any plug-in and make sure you follow all the instructions for upgrades when applying the upgrades.
Welcome to the CatDV Worker Plugins page. These downloads are available to registered users only and require CatDV Worker 7.0.0 as a minimum. Please contact sup...@catdv.com if you require further information or would like an evaluation copy. Please note that these downloads depend on a registration code to function in normal operation, except the CatDV Backup plugin which is free of charge and does not require a license, details of how to install and configure this can be found on our documentation site.
CatDV Server works with a number of common SQL database products. The included open-source H2 database is suitable for testing & evaluation only. For production databases, CatDV Server requires MySQL 5.7 or 8 (with the requirement that the legacy password encryption method be selected at the time of install) or Maria DB 10.4 or newer.
Small systems can operate well using 2 x top specification mac minis: with SSD and as much RAM and processor as can be afforded / specified. One mac mini would run the CatDV server, and one the Worker.
When encoding resources in summary mode, it is now possible to override the built-in list of summary elements, by adding additional elements and/or by removing elements from the default list. This can be done for an individual parser instance, or globally using the ParserOptions object available from the FhirContext.
A new utility method has been added to BundleUtil which converts a FHIR Bundle containing resources (e.g. a search result bundle) into a FHIR transaction bundle which could be used to upload those resources to a server.
Previously, since hapi-fhir 7.0, when retrieving the consecutive pages of a Bundle resource search operation using a client with read permissions for Bundle resources, the request would fail with a 403 Forbidden error. This has been fixed.
Added support for filtering on CodeSystem defined properties when using database (hibernate) filtering. The following ValueSet filters can be used to filter on CodeSystem defined properties: EQUAL, EXISTS, IN, NOTIN
When processing a batch job, OpenTelemetry spans named hapifhir.batch_job.execute are now generated by the worker threads. These spans have the following span attributes related to the batch job: hapifhir.batch_job.definition_id, hapifhir.batch_job.definition_version, hapifhir.batch_job.instance_id, hapifhir.batch_job.step_id, hapifhir.batch_job.chunk_id.
When performing a search for a resource which uses versioned canonical references to another resource (e.g. a QuestionnaireResponse with a questionnaire reference of -questionnaire1.0), the server failed to process _include directives which should bring in these references. Includes will now fetch all versions of a canonical reference, which is still not perfect but is an improvement over the current behaviour. A future update may add more targeted behaviour to address including versioned reference targets, but this will require a significant re-architecture of the loading module.
When uploading an invalid CodeSystem to the JPA server containing duplicate codes, the server responded with an unhelpful error message referring to a database constraint error. This has been fixed so that a more informative error message is returned.
A new configuration option, StorageSettings#setIndexStorageOptimized(boolean) has been added. If enabled, the server will not write data to the SP_NAME, RES_TYPE, SP_UPDATED columns for all HFJ_SPIDX_xxx tables. This can help reduce the overall storage size on servers where HFJ_SPIDX tables are expected to have a large amount of data.
The in-memory search matcher module (used for Subscriptions and other places where a resource needs to be evaluated against an existing pool of search parameter expressions) has been optimized so that it doesn't evaluate unnecessary search parameters while analyzing the resource. Thanks to Ahmet Melih Aydoğdu for the pull request!
b1e95dc632