Release Notes

26
Release Notes for Cisco TelePresence System Software Release 1.10
Caveats in the CTS 1.10 Releases
CSCux49232
Symptom Cisco TelePresence System (CTS) includes a version of Partial Hypertext Preprocessor (PHP)
library that is affected by the vulnerabilities identified by the following Common Vulnerability and
Exposures (CVE) IDs: CVE-2015-6831, CVE-2015-6832 and CVE-2015-6833
Conditions Device with default configuration.
Workaround Not currently available.
CSCuu82518
Symptom This product includes a version of OpenSSL that is affected by the vulnerability identified by
the Common Vulnerability and Exposures (CVE) IDs: CVE-2015-4000, CVE-2015-1788,
CVE-2015-1789, CVE-2015-1790, CVE-2015-1792, CVE-2015-1791, CVE-2014-8176
Conditions Exposure is not configuration dependent. The following product lines are affected:
CTS500-32, CTS1100, CTS1300, CTS3200, and TX9200. Currently latest code runs OpenSSL 1.0.1m.
An update to the OpenSSL code is required.
Workaround Not Available
CSCux72873
Symptom For CTS systems using an IP Phone as the interface, TMS scheduled OBTP (one button to
push) meetings end up with the "Join" button being active 5 minutes before the meeting start, irrespective
of the set up buffer timer specified in TMS.
Conditions CTS systems running releases earlier than 1.10.14 with Cisco 797x phone running the
TelePresence IP Phone midlet
Workaround None
Caveats in Cisco TelePresence System Software Release 1.10.13
The following sections show the resolved and unresolved caveats for this software release:
• Unresolved Caveats in Release 1.10.13, page 27
• Resolved Caveats in Release 1.10.13, page 27