---
# System prepended metadata

title: EdgeHub Release Note v2.5

---

---
title: 'EdgeHub Release Note v2.5'
disqus: hackmd
---

:memo:EdgeHub Release Note
===

## Version: 2.5.0-rc.4 (2025/09/05)

### Device Management

#### [Update]

* API
  *  Improve the performance of batch CSV file import

#### [Fix]

* [#42337] [DPM] There should pop up warning message when import over 3000 devices
* [DPM] Fix the issue that batch create time and update time is the same
* [DPM] Fix the issue that unknown device can display tabs other than the Info tab
* [#42343] [DPM] Data won't be re-arange correct when Edgelink use data resume
* [#42348] [DPM] User can't use private FW to do OTA on device group

### Data Management
#### [Fix]

- #### Core
  - [Evaluator] if(...) always falls into false condition.
  - [api-portal] Use `devUpdate` MQTT to Update Unknown Device to Real Device
  - [api-portal] Tenant Log Not Written on Update
  - [#42336][DataWorker][DM] The EdgeLink device remains offline (auto provisioning) even though the device has been created in DPM.
  - [#42276][DataWorker][DPM] There is no #MSYS_EdgeStatus when use MAC to create device
  - [#42340][api-portal][DPM] It will pop up error msg when edit the unknown device with full quota

- #### Command center
  - [datasource-backend] Connot set value in SaaS Composer
  
### EdgeHub private network (EPN)
#### [Fix]

- #### EdgeHub Utility (1.1.0-rc.4)
  - [UI] Fix tab’s display text (Com → COM)
  - [UI] Widen IP field and calculate dynamic widths for name and associated device name
  - [#42322][EPN] There should have a tooltip on Device name when the device name is similar

## Version: 2.5.0-rc.3 (2025/08/29)

### Device Management

#### [Update]

* None

#### [Fix]

* [#42219] [DPM] There are pop up error msg "Some device don't suppurt this feature" (WISE-4050, WISE-4051)
* [#42231] [DPM] The device will not be on the list after adjust the resolution
* [#42245] [DPM] icon should be gray out when upload to the limited count

### Data Management
#### [Fix]
- #### Core
  - [#42276][DPM] There is no #MSYS_EdgeStatus when use MAC to create device
  - [#42234][DM] the #MSYS_EdgeStatus tag is not recorder when create a device via MAC
  - [Dataworker] Lack of IMEI format support in edgeId validation
  - [Cleaner] Fix the OOM bug of production K8S environment
  - [Cleaner] Fix the CVE issues to jar file
  - [Cleaner] Update gradle version due to update JDK 18 to JDK LTS 21.
  - 
### EdgeHub private network (EPN)
#### [Fix]
- #### EdgeHub Utility (1.1.0-rc.3)
  - [#42272][EPN] It will pop up error msg when log out from EdgeHub utility
- #### EPN service
  - [#42239][DM] The will pop up error when move Edgelink for tenant without EPN server
  - [#42180][EPN] Device can't delete or move to other tenant when EPN server is disable
  - [#42080][EPN] It can't stop to connect when make device online at first time
  - [Core] set cpu limit to 1 core, for easyrsa_size=4096 init pki
- #### Direct Access
  - [#42135][EPN] The layout of Notify alarm group will change when the description is too long
  - [UI]Disable tabs when server is disabled


## Version: 2.5.0-rc.2 (2025/08/22)

### Device Management

#### [Update]

* DPM API
  * Use the environment variable to configure the Cert API URL

#### [Fix]

* [DPM] Fix the issue that WISE devices can not be created using an IMEI code.
* [DPM] Fix the language translation in the device status filter
* [#42179] [DPM] device shouldn't move to a expired tenant
* [#42219] [DPM] There are pop up error msg "Some device don't suppurt this feature" (WISE-4050, WISE-4051)
* [#42203] [DPM] There is no MQTT info when using MAC to create a WISE-6610P(LoraWAN)
* [#42223] [DPM] The status of Edgelink isn't correct when use MAC to create

### Data Management
#### [Fix]
- #### Core
  - [api-portal] Fix EPN Channel Setting Migration
  - [api-portal] Add DBmaster Notificaton to Delete Unknown Device Cache
  - [api-portal] Fix setSsoUser atob Error
  - [Data-connect-portal] Upgrade advifactory/base-image to 1.1.1 for fixing the ubuntu version in Trivy scan report.

- #### Data management
  - [#42134][EPN] The WeCom will be enable automatically when enable the email setting at first time

### EdgeHub private network (EPN)
#### [Fix]
- #### EPN service
  - [#42180][Device] Delete device / move device / revoke device cert fail due to EPN server disable

- #### Direct Access
  - [UI] Lack of alarm rule field validation
  - [#42133][DPM] The Submit will successful without fill in the Alarm message info
  - [#42132][EPN] The layout will be out of range after select the long length Alarm Level and alarm category
  - [Portal] Upgrade advifactory/base-image to 1.1.1 for fixing the ubuntu version in Trivy scan report.

- #### EdgeHub Utility (1.1.0-rc.2)
  - [COM port mapping] When switching COM ports in the Monitor drawer, it reverts back to the original COM after a while.

## Version: 2.5.0-rc.1 (2025/08/14)

### Device Management

#### [New]

* The unknown device type
  * The unknown device type can be convert to specific device models through:
    * The user's manual modification
    * Device auto provisioning

* Added the Log tab for Auto provisioning and Batch import
  * This tab displays the task result for CSV batch import:
    * Result of the device batch creation
    * Result of the device auto provisioning

* Remove the Device Batch Task tab and Device Provision tab

#### [Update]

* Center API
  * Added the EdgeLink firmware version in the Device List API

* Fix following Pods' Vulnerabilities
  * Center API
  * Cert Management API
  * Batch Creation API
  * Management Portal API
  * Device Config worker

#### [Fix]

* [#42057] [DPM] WISE-6610P can't create anymore when delete tenant with WISE-6610P
* [#42100] [DPM] Edgelink will not be created when using auto provisioning
* [#42112] [DPM] There are some devices didn't be created automatically after import csv file
* [#42130] [DPM] It will popup error when create Edgelink and delete and create again

### Data Management
#### [Update]
- #### Core
  - [Subscription] Add new region “Central America and Caribbean” to registration form
  - [Tenant] Enable editing of Tenant Owner field
  - [Tenant] Enable editing of expiration date for subtenants under Trial tenants
#### [Fix]
- #### Core
  - [#42104][Evaluator] Cannot use `if(...)` after fixing CVE issues
  - [Alarm] EPN alarms have been included into data management alarms.
  - [#42144][Worker] Constant parameters did not perform 5-minute value interpolation.
  - [Evaluator] Fix CVE 
    - Upgraded [github.com/gin-gonic/gin](http://github.com/gin-gonic/gin) to v1.7.7 for a vulnerability patch
      - CVE-2020-28483(HIGH)
    - Upgraded [golang.org/x/crypto](http://golang.org/x/crypto) to v0.35.0 for a vulnerability patch
      - CVE-2025-22869 (HIGH)  
  - [Notification] Fix CVE
    - Upgraded [google.golang.org/grpc](http://google.golang.org/grpc) to v1.58.3 for a vulnerability patch
      - GHSA-m425-mq94-257g(HIGH)
    - Upgraded [golang.org/x/crypto](http://golang.org/x/crypto) to v0.35.0 for a vulnerability patch
      - CVE-2024-45337 (CRITICAL)
  - [porfile-proxy] Fix CVE
    - Upgraded [github.com/gin-gonic/gin](http://github.com/gin-gonic/gin) to v1.8.1 for a vulnerability patch
      - CVE-2019-25211(CRITICAL)
  - [connection-service] Fix CVE
    - Upgraded [github.com/gin-gonic/gin](http://github.com/gin-gonic/gin) to v1.8.1 for a vulnerability patch
      - CVE-2020-28483(HIGH)
    - Upgraded [golang.org/x/crypto](http://golang.org/x/crypto) to v0.35.0 for a vulnerability patch
      - CVE-2024-45337 (CRITICAL)
  - [api-hub-deviceon-bi] Fix CVE
    - Upgraded [golang.org/x/crypto](http://golang.org/x/crypto) to v0.35.0 for a vulnerability patch
      - CVE-2024-45337 (CRITICAL) 
  - [profile-server] Fix CVE
    - Upgraded [golang.org/x/crypto](http://golang.org/x/crypto) to v0.35.0 for a vulnerability patch
      - CVE-2024-45337 (CRITICAL)
  - [datapacker] Fix CVE
    - Upgraded [golang.org/x/crypto](http://golang.org/x/crypto) to v0.35.0 for a vulnerability patch
      - CVE-2024-45337 (CRITICAL)
  - [dbmaster] Fix CVE
    - Upgraded [github.com/golang-jwt/jwt/v4](http://github.com/golang-jwt/jwt/v4) to v4.5.2 for a vulnerability patch
      - CVE-2025-30204(HIGH)
    - Upgraded [github.com/tidwall/gjson](http://github.com/tidwall/gjson) to v1.9.3 for a vulnerability patch
      - CVE-2020-35380(HIGH)
      - CVE-2020-36066(HIGH)
      - CVE-2020-36067(HIGH)
      - CVE-2021-42836(HIGH)
    - Upgraded [golang.org/x/crypto](http://golang.org/x/crypto) to v0.35.0 for a vulnerability patch
      - CVE-2024-45337 (CRITICAL)
### EdgeHub private network (EPN)
#### [Update]
- #### EdgeHub utility (1.1.0-rc.1)
  - [COM port mapping] Display PC Virtual COM status
  - [COM port mapping] Automatically scroll the real-time log to stay at the bottom in the Monitoring page.
  - [COM port mapping] Add monitor button icons in each Virtual COM
  - [UI] Set the default window size to 1020×660 and update content for responsive layout.

- #### Direct Access
  - [Device] Lazy Loading for Device Images in Device List
  - [Server] Adjust configuration fields for OpenVPN v2.6.12
    - Removed `Compression` field
    - Removed `ENCRYPTION_SIZE_1024` option
    - Added `ENCRYPTION_SIZE_4096` option in `RSA encryption length (bit)` field
  - [General] Hide `Usage insight` and `Activity log`
  - [General] Show / Hide `alarm setting` functions by user's `Alarm and event` scope

#### [Fix]
- #### EPN service
  - [#42079][Core] Virtual devices will be created multiple times during sync device.
  - [#42062][EPN] The Device name will become "-" after Online/Offline
- #### EdgeHub utility (1.1.0-rc.1)
  - [COM Port Mapping] Sort list by `PC Virtual COM`
- #### Direct Access
  - [#42106][EPN] RSA encryption 1024 length should be or emoved if encryption 1024 not support anymore
  - [#41936][EPN] The cert date of EPN Client or device will be added 0 automatically
  - 
## Version: 2.5.0-beta.2 (2025/07/31)

### Device Management

#### [New]

* X.509 Certificate
  * For the ADAM device, users can paste the X.509 CSR(Certificate Signing Requests) on the website to create the device. 

* Auto Provision Enhancements
  * Modify the Add Device button to include the following features:
    * **Quick registration**: Create unknown devices
    * **Single device**: For creating ADAM, WISE, EdgeLink, SCADA, Computer, LoRaWAN device models
    * **Batch import**: Import multiple devices of all supported models(including unknown device) by uploading one CSV file
  * Add the unknown device type (can be convert to specific device models through manual modification or auto provisioning in the next version)

#### [Fix]

* [#41977] [DPM] Translation improvements for better Mandarin localization
* [#41978] [DPM] Configuration text should be translated to Mandarin
* [#41960] [DPM] Fixed display issue where long descriptions for device 2210 would overlap with other information

### Data Management
#### [Update]
- #### Core
  - [api-portal] Supports auto-adding default EPN channel settings for new and existing tenants.
  
#### [Fix]
- #### Core
  - [Archiver][Archiver-restore] Prevent redundant mongoDB index creation and ensure collection readiness before insertion
  - [#41894][Dataworker] If the device goes online immediately after going offline, its online time may not be recorded correctly.

### EdgeHub private network (EPN)
#### [New]
- #### EPN service
  - [Core] Upgrade openvpn from 2.4.9 to 2.6.12
- #### Data connect portal
  - [Device] Device list with devices' online/offline status
  - [Server] Server's alarm rule setting
    - Monthly traffic (total, upload, download) limit of all devices & EpnClients
    - Monthly traffic (total, upload, download) limit of all devices
    - Monthly traffic (total, upload, download) limit of all EpnClients
    - Please note that monthly traffic is reset at 00:00:00 UTC on the first day of each month.
  - [Device] Device's alarm rule setting
    - Monthly traffic (total, upload, download) limit of a device
    - Please note that monthly traffic is reset at 00:00:00 UTC on the first day of each month.
  - [EpnClient] EpnClient's alarm rule setting
    - Monthly traffic (total, upload, download) limit of an EpnClient
    - Please note that monthly traffic is reset at 00:00:00 UTC on the first day of each month.
  - [Alarm settings] Alarm settings for EPN
    - Levels & Categories
      - Alarm Level
      - Alarm Categroy
    - Event & actions
      - Alarm groups
        - Allow to add alarm rules from server / device / EpnClient into an alarm group
      - Alarm user groups
      - Notification groups
        - Allow to set notification message with client variables and usage variables
      - Channel settings
- #### EdgeHub utility (1.1.0-beta.2)
  - [Device] Device list with devices' online/offline status
  - [COM port mapping] 
    - Show the list of COM port mappings created on this device.
    - Note: If the EpnClient has not connected to the EPN, this list will appear empty.
    - Operations for each COM port mapping
      - Enable / disable mapping
      - Unbind mapping
      - Monitor COM log


## Version: 2.5.0-beta.1 (2025/07/24)

### Device Management

#### [New]

* X.509 Certificate
  * ADAM Utility can call DPM APIs to create ADAM devices which use device generated CSR certificates
* The signature algorithm for ADAM devices is ECDSA-256

#### [Fix]

* [#38339] [UM] The repository user number is the same after deleting a tenant user.


### Data Management
#### [Fix]
- #### Core
  - [#41679][EPN] Even if the tenant status is disabled, the EPN server can still operate.
  - dc-evaluator-dispatcher
      - fix CVE-2024-45337
  - dc-evaluator
      - fix CVE-2024-45337 (Critical)
      - fix CVE-2025-29786 / CVE-2025-22869 (High)
  - dc-event-dispatcher
      - fix CVE-2024-24790 / CVE-2024-45337 (Ctitical)
      - fix CVE-2025-22869 / GHSA-m425-mq94-257g / CVE-2023-39325 / CVE-2023-45283 / CVE-2023-45287 / CVE-2023-45288 / CVE-2024-34156 (High)
  - dc-dataworker
      - feat: add handle tenant device statistics
      - Upgraded `github.com/jackc/pgx/v5` to v5.5.4 to patch
          - CVE-2024-27304 (HIGH)
      - Upgraded `golang.org/x/crypto` to v0.35.0 to patch
          - CVE-2024-45337 (CRITICAL)
          - CVE-2025-22869 (HIGH)
      - uploading the cfg again would not update data type from unknown to a correct type
  - dc-config-loader
      - fix CVE-2024-45337 (CRITICAL)
      - fix CVE-2025-22869 (HIGH)
  - alarm-service
      - Upgraded `gin-gonic/gin` to v1.7.7 to patch
          - CVE-2019-25211 (CRITICAL)
          - CVE-2020-28483 (HIGH)
          - CVE-2020-36567 (HIGH)
      - Upgraded `golang.org/x/crypto` to v0.35.0 to patch
          - CVE-2024-45337 (CRITICAL)
          - CVE-2025-22869 (HIGH)
      - Upgraded `mellium.im/sasl` to v0.3.1 to patch
          - CVE-2022-48195 (CRITICAL)
  - dc-import-export-service
      - Upgraded `github.com/jackc/pgx/v5` to v5.5.4 to patch
          - CVE-2024-27304 (HIGH)
  - api-forwarding
      - Upgraded `go version` to 1.23.0
          - CVE-2024-45283
          - CVE-2024-45287
          - CVE-2024-45288
          - CVE-2024-34156
      - Upgraded `golang.org/x/net` to v0.17.0 to patch
          - CVE-2024-24790 (CRITICAL)
          - CVE-2023-39325 (HIGH)
          - CVE-2023-45288 (HIGH)
      - Upgraded `golang.org/x/crypto` to v0.35.0 to patch
          - CVE-2024-45337 (CRITICAL)
          - CVE-2025-22869 (HIGH)
      - Upgraded `google.golang.org/grpc` to v1.58.3
          - GHSA-m425-mq94-257g
  - archiver
      - Upgrade 'toolchain' to go1.24.4 to fix
          - CVE-2024-24790 (CRITICAL)
      - Upgrade package '[golang.org/x/crypto](http://golang.org/x/crypto) ' to 0.39.0 to fix
          - CVE-2024-45337 (CRITICAL)
  - api-plugin
      - Upgrade 'toolchain' to `node:22.17.0-alpine3.21` to fix
          - CVE-2023-45853 (CRITICAL)
      - Upgrade packages `hbs` to `4.2.0` fix
          - CVE-2021-23369 (CRITICAL)
          - CVE-2021-23383 (CRITICAL)
- #### User management
  - [#38339][UM] The repository user number is the same after deleting a tenant user.

### EdgeHub private network (EPN)
#### [New]
- #### Direct access portal
  - [UI] Connection statistic infomation
    - Total client devices
    - Online devices
    - Online EpnClients
    - Current traffic (Realtime traffic)
    - Monthly traffic (for the current month, counted from 00:00:00 UTC on the 1st day of the month)
  - [UI] Device list with traffic information
    - Current Download / Upload traffic (reset to 0 while device offline)
  - [UI] EpnClient list with traffic information
    - Current Download / Upload traffic (reset to 0 while EpnClient offline)
  
- #### EdgeHub utility (1.1.0-beta.1)
  - install `SetupEdgeLinkVCOM_1.3.2_Release_2506123_v1.3.2.exe` if there is no VCOM installed 
  - [Device] COM list in the device list
  - [Device] Bind / Unbind device's COM
