Release Notes

Rhea

Below is a list of New Features and Behavior Changes compared to the previous LTS version, Quantum (2026.05).

New Features

Authentication

LDAP authentication can be configured via LDAP_* custom.env values for the xucserver, the Recording server and Configmgt. Recording server and Configmgt users logging in with username@domain are also found by username - see LDAP Authentication
XiVO based authentication can be disabled via the DISABLE_XIVO_AUTH=true custom.env value - see Disabling XiVO based authentication
OIDC authorization code flow (with PKCE) support, and OIDC authentication for the Recording server - see OpenID Connect (OIDC) Authentication

Directory

Directories by labels: the directories a user can search are now restricted by their User Labels, from the UC Assistant and from a provisioned deskphone - see Directories by labels and Searched directories
The internal directory (XiVO users) can be filtered by labels, for the search and the reverse lookup
Search results are ordered by a scoring based ranking, LDAP search handles multiple words in any order - see Relevance of results in lookup and Search on each word of the search term
The similarity threshold of the fuzzy search on the xivo backend is configurable - see Directory search similarity threshold
A directory definition can be duplicated

Assistants (UC, CC)

Dark mode theme for UC and CC apps
Agent call history over a configurable number of days - see Agent Call History
WebRTC: a banner shows when the softphone is initializing and not ready to receive calls yet

XiVO PBX

Sound files: search among the playback files when selecting one, import several sound files at once, and new Configmgt API to manage them
SIP options of the web interface reflect the pjsip options: 9 chan_sip options now reach pjsip.conf (allowoverlap, vmexten, remotesecret…)
New way to customize XiVO globals - see xivo_globals.conf
Provisioning:
- improved provisioning of devices behind a NAT, and version-aware plugins server (plugins resolved per XiVO LTS)
- SIP proxy and registrar can be defined as a FQDN in line templates

System

XDS: the XiVO Main can be upgraded without stopping the Media Servers, and new mds-resync-db command to rebuild the database of a Media Server - see Upgrading XDS and Resynchronizing a Media Server Database
Security updates: unattended-upgrades and needrestart are shipped with a default XiVO security policy, and the admin is notified by mail of the telephony services to restart - see Security Updates
All XiVO containers have a Docker healthcheck

Behavior Changes

Authentication

OIDC authentication now uses the authorization code flow (with PKCE) by default instead of the implicit flow. It is recommended to switch to authorization code flow which is much more secure than the deprecated implicit flow. In the meantime, deployments that rely heavily on the implicit flow can explicitly set OIDC_USE_IMPLICIT_FLOW=true to keep the previous behavior. See OpenID Connect SSO Authentication.
- With the code flow, https://<xivocc_host>/recording/login must be added as a valid redirect URI in the IdP client configuration, otherwise login to the recording interface fails.
- The new optional OIDC_SCOPE variable overrides the requested scopes.
Deactivated user / disabled CTI account now actually prevents access: a deactivated user gets no SIP endpoint (its phone cannot register nor call), and a deactivated user or one with a disabled CTI account can no longer log in to UC, its open session being disconnected.

Directory

Deskphone directory search is now scoped by labels instead of by telephony profile. The phone plugins must be upgraded (version >= 2026.09.00) and the devices synchronized - see Searched directories.
Web interface menus:
- The Direct Directories menu was removed, replaced by CTI Server > Lookup page. Its former configuration was dumped to /var/tmp/xivo-upgrade-lookup-by-label/dird-services.yml. Restricted admins of this page also need the User Labels, Restart Dird Server and Authenticate configuration server web services request permissions.
- LDAP filters moved under Services > CTI Server > Directories: re-grant CTI Server > Directories > LDAP filters to restricted admins after upgrade.
The Direct match of the internal directory is now effective. To search all fields as before, empty it. xivo-dird logs a warning on start if it is incorrect.
Search results are capped by the new max_result parameter (default 200) - see lookup_service section.
The xivo-dird lookup, favorites and personal APIs no longer return the user_uuid key in the relations object.

Assistants (UC, CC)

Agent call history now returns every call of the last 7 days instead of the last 20 entries. Set AGENT_CALL_HISTORY_REQUEST_METHOD=size in custom.env to restore the previous behavior - see Agent Call History.
When a user invites an external number into a conference, the external number now sees the user’s outgoing caller id.
The xucserver now depends on xivo-confd: it does not work properly if confd is not running.

Mobile App

The XiVO global variable XIVO_MAPP_LOOPS_WEBAPPANDMOBILEAPP was renamed XIVO_MAPP_LOOPS_MOBILEAPP_AND_OTHERS (renamed automatically during upgrade).

XiVO PBX

Groups now distribute calls to their available members in parallel (existing groups are migrated automatically) - see Groups.
SIP options: the web interface no longer offers the chan_sip options which never reached pjsip (62 general options, 15 trunk options, 21 line options). remotesecret now gets a dedicated outbound auth section, so it no longer overwrites the peer’s inbound password. See the 2026.10.01 release notes in XiVO Rhea Intermediate Versions for the full list.
xivo-confd API: the user resource returns a new read-only cti_enabled field, and /users no longer enables the CTI account when a login or password is set - use /users/{id}/cti instead.

System

XDS upgrade procedure changed - see Upgrading XDS:
- The Media Servers are no longer stopped before the XiVO Main upgrade. When needed, the database replication is cut and mds-upgrade then rebuilds the Media Server database (the statistics not sent to the XiVO CC yet and the local call_log table are lost).
- The upgrade order XiVO Main, then XiVO CC, then the Media Servers is enforced by mds-upgrade.
- The statistics not sent to the XiVO CC yet are shown before the confirmation. With -f, the upgrade stops if they would be lost, unless the new -s option is given.
XiVO CC postfix is now configured as a satellite of the XiVO PBX: its previous configuration is backed up in /var/tmp/ and replaced at installation and upgrade - see SMTP relay configuration.
xivo-dcomp start <service> now starts enabled docker services (rabbitmq, db, nginx, webi, proxy, confgend, config_mgt) even when xivo-service is disabled.
XiVO CC silent install: when XUC_HOST is a FQDN, XUC_INTERNAL_HOST (XiVO CC LAN IP) must now be set, otherwise the install aborts.

Deprecations

This release deprecates:

LTS Luna (2023.10) : This version is no longer supported.

OIDC implicit flow: the OIDC implicit flow (OIDC_USE_IMPLICIT_FLOW=true) is deprecated and will be removed in a future version. Migrate to the default authorization code flow.

Upgrade

Manual steps for LTS upgrade

Warning

Don’t forget to read carefully the specific steps to upgrade from another LTS version

Generic upgrade procedure

Then, follow the generic upgrade procedures:

Rhea Bugfixes Versions

Components version table

Table listing the current version of the components.

Component \| current ver.
XiVO
xivo	2026.10.02
config-mgt	2026.10.02
db	2026.10.02
outcall	2026.10.02
db_replic	2026.10.02
nginx	2026.10.02
webi	2026.10.02
stats-reports-exporter	2026.10.02
usage-writer	2026.10.02
usage-collector	2026.10.02
agid	2026.10.02
confgend	2026.10.02
asterisk	8:22.2.0-1
docker-ce	5:28.5.2
XiVO CC
mattermost	2026.10.02
nginx	2026.10.02
pack-reporting	2026.10.02
pgxivocc	2026.10.02
recording-rsync	2024.10.04
recording-server	2026.10.02
metabase	2026.10.02
full-stats	2026.10.02
xucserver	2026.10.02
xucmgt	2026.10.02
Edge
edge	2026.10.02
nginx	2026.10.02
kamailio	2026.10.02
coturn	2026.10.02
Meeting Rooms
meetingroom	2026.10.02
web-jitsi	2026.10.02
jicofo-jitsi	2026.10.02
prosody-jitsi	2026.10.02
jvb-jitsi	2026.10.02
jigasi-jitsi	2026.10.02
IVR
ivr-editor	2026.10.02

2026.10.02 (Rhea.02): October 2026

Consult the 2026.10.02 (Rhea.02) Roadmap.

Components updated:

Docker: config-mgt, ivr-editor, rabbitmq, recording-server, xivo-ctid, xivo-db, xivo-jicofo-jitsi, xivo-jigasi-jitsi, xivo-jvb-jitsi, xivo-meetingrooms, xivo-prosody-jitsi, xivo-proxy, xivo-stats-reports-exporter, xivo-usage-collector, xivo-usage-writer, xivo-web-interface, xivo-web-jitsi, xivo-webi-nginx, xucmgt, xucserver

Debian: asterisk, xivo-confd, xivo-dao, xivo-dird, xivo-manage-db, xivo-service, xivo-upgrade, xivocc-installer, xivo

Others: xivo-desktop-assistant, xivo-install-script

Desktop Assistant

#9129 - Bump electron version

Directory

#9325 - Filtre répertoire interne - Documentation
#9368 - Directory - Move LDAP filter

Important

Behavior change LDAP filters are now under Services > CTI Server > Directories. Their admin permission moved there too. Re-grant CTI Server > Directories > LDAP filters to restricted Web interface admins after upgrade.
#9426 - Directory - As an admin I can duplicate a directory definition

IVR Editor

#9355 - IVR - Menu node does not work if one of the parameter is not filled

System

#9319 - XDS - Upgrade du XiVO Main sans arrÃªt des MDS
Important

Behavior change The XDS upgrade procedure changed, see Upgrading XDS.
- The Media Servers are no longer stopped before the XiVO Main upgrade. When the upgrade changes the database schema or the PostgreSQL major version, xivo-upgrade cuts the database replication instead and they keep serving calls on a frozen replica; otherwise their replication is kept. The decision is shown before the upgrade confirmation. The downtime of a Media Server is now its own upgrade only. Stopping the Media Servers before the XiVO Main upgrade, as in the former procedure, is still supported.
- The official order is now XiVO Main, then XiVO CC, then the Media Servers. It is enforced: mds-upgrade refuses to run while the XiVO Main is not upgraded, before stopping or upgrading anything on the Media Server.
- When its replication was cut, mds-upgrade rebuilds the Media Server database instead of migrating it: its PostgreSQL data directory is erased and the replica is copied again from the XiVO Main. The cel and queue_log rows not sent to the XiVO CC yet and the local call_log table are lost, a customized pg_hba.conf is preserved and the cluster locale is renormalized on the one of the image.
- xivo-upgrade, mds-upgrade and mds-resync-db show the statistics not sent to the XiVO CC yet before the confirmation, with a prominent warning when their replication is interrupted for more than 15 minutes. With -f, the upgrade stops in that case if these statistics would be lost; the new -s option goes on anyway.
- New mds-resync-db command to rebuild the database of a Media Server on its own, to repair a replication or to reattach a Media Server not upgraded yet to a XiVO Main restored in the previous version.
#9345 - Upgrade to Quantum - postgres upgrade fails for pre-Pollux LTS

Important

Behavior change xivo-dcomp start <service> now starts an enabled docker service (rabbitmq, db, nginx, webi, proxy, confgend, config_mgt) even when xivo-service is disabled. Previously any start was refused with “xivo-service is disabled”. Required by the db upgrade recovery, which runs while xivo is disabled.
#9365 - UC Addon - la base recording n’est pas créée à l’installation
#9378 - Ship unattended-upgrades and needrestart with a default XiVO security policy

Important

Behavior change XiVO CC postfix configuration: postfix is now a dependency of xivocc-installer and is configured as a satellite of the XiVO PBX (relayhost set to the XiVO PBX IP, myorigin = /etc/mailname, mydestination = localhost, inet_interfaces = loopback-only), so that mails sent by the XiVO CC (e.g. the security updates report) are relayed by the XiVO PBX. At installation and upgrade, the previous configuration (/etc/postfix and /etc/mailname) is backed up in /var/tmp/YYYYMMDD-xivo-<version>-postfix-conf-backup and replaced, even if a relay host was already configured (a warning is then displayed). On the XiVO PBX, the XiVO CC IP is added to the postfix mynetworks option through the custom template /etc/xivo/custom-templates/mail/etc/postfix/main.cf; if this cannot be done automatically, a warning asks to follow the SMTP relay configuration procedure.
#9379 - Notify the admin which telephony services need a restart after a security upgrade
#9415 - Add a Docker healthcheck to all XiVO containers
#9418 - Asterisk may start before db on boot

UC App

#9357 - UC Assistant: meeting room invitation toasts are lost after logout/login without page refresh
#9380 - As an admin I can modify the similarity threshold for xivo backend
#9381 - Fuzzy search for meeting room not working properly
#9401 - xucserver v1.0 dial, DND and forward endpoints accept unauthenticated requests (Rhéa)
#9412 - Unauthenticated page discloses the admin API token (recording-server)
#9413 - Unauthenticated page discloses the admin API token (config-mgt)
#9414 - We should not trigger a popup in ccmanager when a user associate a mobile app
#9429 - CTI login fails without explicit log when xuc and XiVO timezones differ (Rhea)

XiVO PBX

#9313 - Sound files - I want to be able to search among the playback files when selecting it
#9330 - Sound files - As an admin I want to be able to import several sound files
#9367 - Buttons color and fieldset style consistency
#9389 - Deleting a schedule path with a schedule assigned, an orphan link stay in the database

Rhea Intermediate Versions

XiVO Rhea Intermediate Versions