XiVO Rhea Intermediate Versions

2026.10.01 (IV Rhéa): September 2026

Consult the 2026.10.01 (IV Rhéa) Roadmap.

Components updated:

Docker: config-mgt, ivr-editor, recording-server, xivo-confgend, xivo-db, xivo-web-interface, xivocc-fluentd, xucmgt, xucserver

Debian: asterisk, xivo-ci, xivo-confd, xivo-config, xivo-dao, xivo-dird, xivo-provisioning, xivo-upgrade, xivocc-installer, xivo

Others: play-authentication

Asterisk

  • #9303 - Missing Meetme application in Asterisk 22.10

Directory

  • #9320 - Filtre répertoire interne - Schéma DB et DAO

  • #9321 - Filtre répertoire interne - Filtrage par labels dans la recherche confd

  • #9322 - Filtre répertoire interne - Génération de la conf dird par confgend

  • #9324 - Filtre répertoire interne - Menu d’administration webi

  • #9328 - Webi - Déplacer le menu Filtres LDAP sous Serveur CTI > Répertoires

  • #9333 - Filtre répertoire interne - API REST de configuration (config-mgt)

  • #9337 - Directory - Fuzzy match must be excluded from ranking

  • #9343 - Directory - Lookup ranking ignores the very field that produced the match (LDAP and phonebook sources)

Internal QOL

Provisioning

  • #9271 - Provisioning - Improve provisioning mechanism when devices is behind a NAT

Recording

  • #7820 - Bump scala in recordingserver

  • #9311 - OpenId authentication for recording server

    Important

    Behavior change When OIDC Code flow authentication is enabled, the recording server redirect to OIDC Authorization server so it must be declared in the IdP client configuration, in addition to the URIs already declared:

    • Valid redirect URI to add: https://<xivocc_host>/recording/login

    Without the redirect URI, the IdP rejects the authorization request and login to the recording interface is not possible.

Reporting

  • #9304 - Audio quality visualisation does not take report from MApp into account

UC App

  • #9188 - Add cypress test for call rights

Web Assistant

  • #9309 - Add a “no result” found in uc assistant if no results are found

  • #9341 - Dark mode glitches

XiVO PBX

  • #9286 - Directory - I want to identify clearly which directory labels have access to

  • #9295 - Update XiVO webi to reflect chan pjsip options instead of chan_sip

    Important

    Behavior change The web interface no longer offers chan_sip options that never reached pjsip.

    • SIP general settings: 62 options removed

      • The Jitter Buffer, Real time and Internals tabs are gone; 10 tabs become 7 (General, Network, Security, Signalling, T38, Default, Authentication).

      • allowexternaldomains, allowguest, alwaysauthreject, authfailureevents, autocreatepeer, autodomain, buggymwi, call-limit, callcounter, cos_text, directrtpsetup, disallowed_methods, domain, domainsasrealm, dumphistory, dynamic_exclude_static, externrefresh, hash_dialogs, hash_peers, hash_users, ignoreregexpire, ignoresdpversion, jbenable, jbforce, jbimpl, jblog, jbmaxsize, jbresyncthreshold, jbtargetextra, match_auth_username, matchexterniplocally, maxcallbitrate, mohinterpret, mwiexpiry, notifycid, notifyhold, notifymimetype, pedantic, prematuremedia, promiscredir, qualifygap, qualifypeers, recordhistory, regextenonqualify, relaxdtmf, rfc2833compensate, rtautoclear, rtcachefriends, rtsavesysname, rtupdate, session-refresher, shrinkcallerid, snom_aoc_enabled, srvlookup, subscribe_network_change_event, t1min, t38pt_usertpsource, textsupport, tos_text, useclientcode, use_q850_reason, usereqphone, videosupport

    • SIP trunk: 15 options removed

      • accountcode, amaflags, callbackextension, call-limit, callcounter, ignoresdpversion, maxcallbitrate, promiscredir, rfc2833compensate, session-refresher, timerb, timert1, useclientcode, usereqphone, videosupport

      • timert1 and timerb are removed per trunk only: they are system-wide in pjsip and remain on the general page.

    • SIP line: 21 options removed

      • The Advanced tab autocomplete drops 60 suggestions. accountcode, amaflags, buggymwi, call-limit, callcounter, disallowed_methods, ignoresdpversion, maxcallbitrate, maxforwards, promiscredir, rfc2833compensate, session-refresher, snom_aoc_enabled, t38pt_usertpsource, textsupport, timerb, timert1, useclientcode, use_q850_reason, usereqphone, videosupport

      • maxforwards is removed per line only: pjsip has it in [global] only, so it stays on the general page.

    • Newly converted to pjsip: 9 options

      • These were displayed but discarded before. They now reach pjsip.conf.

      chan_sip

      pjsip

      Section

      Offered on

      allowoverlap

      allow_overlap

      endpoint

      general, trunk, line

      g726nonstandard

      g726_non_standard

      endpoint

      general, trunk, line

      vmexten

      voicemail_extension

      endpoint

      general, trunk, line

      vmexten (general)

      default_voicemail_extension

      global

      general

      media_address

      media_address

      endpoint

      general

      unsolicited_mailbox

      incoming_mwi_mailbox

      endpoint

      line

      remotesecret

      outbound_auth plus its own type=auth section

      endpoint, auth

      trunk

      maxforwards

      max_forwards

      global

      general

      regcontext

      regcontext

      global

      general

      realm

      default_realm

      global

      general

      remotesecret gets a dedicated [outbound_auth_<peer>] auth object, so outbound credentials no longer overwrite the peer’s own inbound password.

  • #9305 - deactivate user or remove cti account doesn’t prevent user to log in and make calls

    Important

    Behavior change

    Web Interface: Deactivating a user or disabling its CTI account now actually prevents access.

    • A deactivated user no longer gets a SIP endpoint: its phone cannot register or place calls.

    • Disabling a CTI account is now persisted (confd no longer forces enableclient back to 1).

    • A deactivated user, or one with a disabled CTI account, can no longer log in to UC through any entry point, and its open session is disconnected.

    xivo-confd API:

    • The user resource now returns an additional field: cti_enabled (boolean).

      • Exposed on GET /1.1/users and GET /1.1/users/{id}

      • Reflects userfeatures.enableclient (CTI account enabled)

      • Distinct from the existing enabled field, which reflects userfeatures.commented (user deactivated)

      • Read-only: not accepted by PUT, so it cannot be modified through this API

    • The api /users dont set enable_client to true if you have login or password defined anymore. If you want to activate cti login by api use /users/{id}/cti api instead.

  • #9327 - Dird does not follow the direct match fields defined for internal directory

    Important

    Behavior change xivo-dird now raises a warning in its logs on start if the source of type XiVO Directory has incorrect Direct Match or Reverse Match parameters (namely the internal source, containing the internal users)

    the filter of Direct Match for internal users is now effective. To search all fields of the internal (like before the fix), empty the field

2026.10.00 (IV Rhéa): August 2026

Consult the 2026.10.00 (IV Rhéa) Roadmap.

Components updated:

Docker: config-mgt, xivo-confgend, xivo-ctid, xivo-db, xivo-web-interface, xucmgt, xucserver

Debian: xivo-auth, xivo-confd, xivo-dao, xivo-dird, xivo-upgrade, xivo, xivocc-installer

Others: xivo-desktop-assistant

CTI

  • #9274 - MeetMe in UC - Missing participant event (role or participant in conference might not be correct)

Directory

  • #9281 - Directory by labels - Cleanup and migrate configuration

    Important

    Behavior change

    • Admin webi users: since the logic was moved and the page renamed, dedicated administrative users for CTI Server > Direct Directories have been granted access to CTI Server > Lookup page. But for it to work correctly, they also need:

      • IBPX > IPBX Settings > User Labels

      • IPBX > Control System > Restart Dird Server

      • IPBX > Control System > Authenticate configuration server web services request (required for admin users)

    • The old menu Direct Directories and its configuration was removed. During upgrade the old configuration was dumped to /var/tmp/xivo-upgrade-lookup-by-label/dird-services.yml

System

  • #9302 - Agent may be displayed as “logged out” while actually logged in after a xuc restart under load

UC App

  • #7959 - UC App - Add a dark mode theme

XiVO PBX

  • #9239 - As an admin I want to be able to define a proxy or registrar with a FQDN form

  • #9268 - Make schedule list api more resilient to configuration errors

  • #9280 - fix privilege escalation story for lookup by label on phones

    Important

    Behavior change The relations object returned by the directory REST API no longer returns the user_uuid key. This affects xivo-dird APIs:

    • GET /0.1/directories/lookup/{profile}

    • GET /0.1/directories/lookup_by_label

    • GET /0.1/directories/favorites/{profile}

    • GET /0.1/directories/personal/{profile}

    It was not used, and presented a security risk.

  • #9284 - Sound files - Webi should now use configmgt API to add/delete/modify sound files

  • #9293 - Directory - Enhance search results ordering via a scoring based ranking system

    Important

    Behavior change search has been improved:

    • LDAP search is now more receptive to search with multiple words, and does not break on word ordering

    • Ranking has been enhanced with numeric weights

    • New max_result parameter configurable to avoid results overflow (defaults to 200)

  • #9294 - Group configuration has not the autofill parameter set

    Important

    Behavior change Groups now distribute calls to their available members in parallel Previously, waiting callers were connected one at a time, each waiting until the previous caller had been connected to a member. Existing groups are migrated automatically. See Groups.

2026.09.00 (IV Rhéa): August 2026

Consult the 2026.09.00 (IV Rhéa) Roadmap.

Components updated:

Docker: config-mgt, recording-server, xivo-confgend, xivo-db, xivo-web-interface, xivo-webi-nginx, xucmgt, xucserver

Debian: xivo-confd, xivo-config, xivo-dao, xivo-dird, xivo-dird-phoned, xivo-provisioning, xivocc-installer, xivo

Others: xivo-doc-devices, xivo-provd-plugins, xivo-provd-plugins-addons

API

  • #9245 - Sound files - Add API to be able to add a sound file on XiVO

  • #9246 - Sound files - Add API to be able to synchronize fs and db

Asterisk

  • #8666 - [S] Study impact of 2025 / 2026 Asterisk vulnerabilities

Directory

  • #9249 - Phone directory lookup by label (deskphones via xivo-dird-phoned)

    Important

    Behavior change Directory search from a deskphone is now scoped by labels instead of by telephony profile. A search started from a provisioned phone returns results only from the directories mapped to the labels assigned to the phone’s user. If that user has no labels, or none of their labels is mapped to a directory, the search falls back to the configured default_sources (the same behavior as the UC Assistant’s label-based search). Result presentation on the phone is unchanged.

    Warning: the following procedure MUST be followed to enable the change for the phones:

    • Update the plugin list

    • Upgrade the plugin to the latest version (plugin that needs an upgrade like xivo-yealink-* will have a version >= 2026.09.00)

    • Synchronize the devices to have the new configuration

  • #9263 - Directory by labels - Cleanup menu names

Provisioning

  • #9261 - Version-aware plugins-server (per-XiVO-LTS plugin resolution)

UC App

  • #9072 - Handle OIDC with code flow

    Important

    Behavior change OIDC authentication now uses the authorization code flow (with PKCE) by default instead of the implicit flow. Deployments that relied on the implicit flow must explicitly set OIDC_USE_IMPLICIT_FLOW=true to keep the previous behavior.

    The implicit flow is deprecated and will be removed in a future version; migrate to the default authorization code flow.

    A new optional OIDC_SCOPE variable allows overriding the requested scopes (default: openid profile offline_access email for the code flow, openid profile email for the implicit flow).

  • #9251 - Make agent call history number of days configurable

    Important

    Behavior change Agent call history now defaults to a days-based window

    • The agent call history now returns every call over a number of days (default 7), instead of the last 20 entries. There is no longer an entry-count limit in the default mode.

    • New environment variables (in /etc/docker/compose/custom.env):

      • AGENT_CALL_HISTORY_REQUEST_METHOD (default days): days to fetch every call over a period, or size to restore the legacy behaviour (a number of entries).

      • AGENT_CALL_HISTORY_LIMIT: the value applied to the chosen method -> a number of days when the method is days (default 7), or a number of entries when the method is size (default 20).

    • Impact: an agent with more than 20 calls over the period now sees all of them instead of only the last 20. Agents with 20 or fewer calls over the period are unaffected.

    • To fully restore the previous behaviour: set AGENT_CALL_HISTORY_REQUEST_METHOD=size (optionally AGENT_CALL_HISTORY_LIMIT=20).

    • Note: with the days method there is no entry limit; setting a large number of days may slow down the solution.

XiVO PBX

  • #9243 - We want more than 8 different colors for labels in directory access by label

2026.08.00 (IV Rhéa): July 2026

Consult the 2026.08.00 (IV Rhéa) Roadmap.

Components updated:

Docker: xivo-agid, xivo-confgend, xivo-db-replication, xivo-edge, xivo-web-interface, xucmgt, xucserver

Debian: xivo-auth, xivo-confd, xivo-config, xivo-dao, xivo-dird, xivo-upgrade, xivo-utils, xivocc-installer, xivo

CTI

  • #9187 - Protection from ghost calls in call tracker (specially in xds context)

  • #9204 - xuc cli improvements

Directory

  • #8991 - Dird - Add ACL to lookup by label

  • #9085 - Webi - I can configure the directory per label

  • #9131 - PRD: Directory Access Control by Labels

  • #9136 - xivo-web-interface: Label-Based Directory Configuration UI

Mobile App

  • #9181 - MApp wake up loop is not correctly taken into account when calling a WebAppAndMobileAppAndPhone user

    Important

    Behavior change XiVO globals variable XIVO_MAPP_LOOPS_WEBAPPANDMOBILEAPP was renamed to XIVO_MAPP_LOOPS_MOBILEAPP_AND_OTHERS.

    Rename is automatically taken into account during upgrade.

    Note also that this version introduces a new way to customize XiVO globals - see xivo_globals.conf.

Reporting

  • #9194 - dbreplic - log is no longer written to file

System

  • #9193 - OIDC authentication - use id token instead of access token

  • #9214 - Fix silent installation for a two-machine XiVOCC deployment.

  • #9230 - xivocc-installer: prevent FQDN in pg_hba (use CC IP for XiVO config)

    Important

    Behavior change Silent installs of type full/app where XUC_HOST is a FQDN must now also set XUC_INTERNAL_HOST=<XiVO CC LAN IP>. If it is missing (and XUC_HOST is not an IP), the install aborts with an explicit error instead of silently writing an invalid pg_hba.conf.

    Answer-files that set XUC_HOST=<IP> and no XUC_INTERNAL_HOST are not affected — the IP is auto-derived. Interactive installs are not affected.

  • #9233 - xivocc-installer: don’t use the public FQDN as the nginx→metabase upstream

UC App

  • #9001 - As a Web App user I want the directory search to be filtered by label

  • #9195 - Avoid the ability to type too long number in assistant

  • #9231 - Lookup_by_label default_sources missing meeting room (and base) sources breaks directory search

  • #9235 - default container timezone to the host machine

XiVO PBX

  • #8660 - when I import/update a webi user with several incalls, the import fails

  • #9210 - xivo-collect-logs does not take the correct log for cc

XiVOCC Infra

  • #9200 - reduce cypress flakiness

2026.07.00 (IV Rhéa): June 2026

Consult the 2026.07.00 (IV Rhéa) Roadmap.

Components updated:

Docker: config-mgt, edge-coturn, recording-server, xivo-agid, xivo-confgend, xivo-db, xivo-db-replication, xivo-edge, xivo-outcall, xivo-web-interface, xucmgt, xucserver

Debian: xivo-config, xivo-dao, xivo-dird, xivo-upgrade, xivo-utils, xivocc-installer, xivo

Others: cypress-helper

API

  • #8748 - API - prevent two schedules to have the same name

  • #9163 - API - Merge LegacySchedule and Schedule in configmgt

  • #9175 - Schedule deletion is not working

CTI

  • #9153 - Auth - OIDC - Fix Implicit Flow for OKTA provider

  • #9184 - Outcall - callerid changes correctly

  • #9173 - InviteToConf - Correctly use user callerid when inviting someone in conference

    Important

    Behavior change Now when user U1 invites into conference external number E1, E1 will see U1 outgoing number (same behavior as when U1 calls E1).

Config mgt

  • #9126 - Queue recording fixes

Devops

  • #8807 - Deployment improvements

Directory

  • #9132 - Directory by labels - Database Schema & DAO Foundation

  • #9133 - Directory by labels - Core Lookup Service with Multi-Label Support (End-to-End)

  • #9135 - Directory by labels - Config-mgt REST API

Edge

  • #9058 - Update coturn to 4.12.0

Meeting Room

  • #9161 - No audio in videoconferences on firefox in TURN 443

Mobile App

  • #9142 - Add caller name in push notification (and fix caller num)

Reporting

  • #8528 - Bump scala in xivo-db-replication

System

  • #9125 - Resilience - Automatic login after a fallback on standby stack may fail if xuc is not completely started (user not loaded)

  • #9130 - set node LTS for projects using npm

  • #9146 - Ease log collection on XiVO

  • #9179 - MDS database upgrade is not working

UC App

  • #9128 - Xucmgt applications should not retry the connexion for every auth error types

WebRTC

  • #9139 - Enhance user reconnection

    Important

    Behavior change Add a banner indicating when the softphone is initializing and is not ready to receive calls yet.

XiVO PBX

  • #9144 - Correctly download UC Addons containers when using -d option of xivo-upgrade

  • #9154 - Jenkins build server does not understand NVM properly in pipelines

  • #9177 - Uprade - Deb13 - Refine /boot requirements

2026.06.00 (IV Rhéa): June 2026

Consult the 2026.06.00 (IV Rhéa) Roadmap.

Components updated:

Docker: config-mgt, metabase_export_import, xivo-agid, xivo-confgend, xivo-metabase, xivo-metabase-reports, xivo-stats-reports-exporter, xivo-web-interface, xucmgt, xucserver

Debian: xivo-ci, xivo-confd, xivo-config, xivo-service, xivo-upgrade, xivocc-installer, xivo

API

  • #8734 - API - handle error cases for schedules

CCAgent

  • #9100 - Agents and activities popover may breaks display in desktop assistant

CTI

  • #9087 - Upgrade to latest JDK bugfix - stats report exporter

Config mgt

  • #7562 - Bump scala in configmgt

Internal QOL

  • #9079 - [QOL] Make External Release Step Conditional

Meeting Room

  • #9083 - As a user I can send the meetingroom share link via mail with template

Reporting

  • #9092 - Agents report - Queues calls counter wrong when a call overflow from one queue to the other

Reporting BI

  • #9115 - Enhance sample reports import

    Important

    Behavior change metabase installation has been automated using the package xivocc-metabase only

System

  • #9095 - Resilience - Fix service order and refresh in resilience management page

  • #9097 - Resilience - Can’t login after a fallback on standby stack

  • #9106 - Resilience - Add resilience management table in web interface monitoring page

    Important

    Behavior change New visuals for resilience, with a dedicated resilience management page, and some informations alongside the monitoring page (displayed by default after login)

UC App

  • #8989 - Xuc be able to retrieve users labels at init

    Important

    Behavior change The XUC component is now dependent on the confd service on the XiVO. It will not function properly if confd is not running.

  • #8990 - Xuc users label live update

  • #9091 - Forward destination not displayed in header when fwd number enter in E.164 format

WebRTC

  • #9117 - UA account is not detected as WebRTC if there is another custom sip options set before webrtc

XiVO PBX

  • #9102 - Debian 13 - Upgrade fixes

  • #9112 - Take into account user’s simultcall for incoming and outgoing calls