Not yet released. Next week

Includes DB changes. You must log all c9 terminals out to install

Security enhancements

This version of c9 includes a range of security changes as part of our regular security audit efforts

• General Cryptography improvements
  • Passwords / Clerk keys migrated to PBKDF / HMAC-SHA256 hashes
  • At rest encryption of all other critical data migrated to AES/GCM using a new key management regime that will allow use to easily rotate and expire old/compromised keys
• Remote Access improvements
  • Add ability to set a per user remote access password, configured in login users. A new remote client needs to be installed in order to make use of this. This will allow disabling /retiring of the existing global remote access password for stricter access control
  • Part of above change mobile capture on remote access will use 2FA mobile configured on login user to enforce strict MFA authenticiation
• Stricter C9 support tooling.  For our own remote access into dealer systems as part of our support work, this version forces our existing access to use strict MFA linked to staff mobile phones. Previous support access was /only single factor verification.
• Other security related changes
  • clerkkey input now requires an explicit Enter key press to test the clerk key. So clerk input now requires two enter key presses to continue on. This is necessary to both improve security of clerk access to minimise risk accidental/intentional discovery of low entrophy clerk keys, but also because PBKDF algorithm is intentionally slow, it is no longer possible to check for a match on every key stroke
  • TFN presentation on payroll tab is by default hidden. There is a unhide button you can click to review TFN
  • PayDay super log / STP log clearing: interaction with STP and PayDay super now clears potentially sensitive request payloads once the operation is finalized (failed or completed)
  • Disable access to database menu until login is completed. Contents of this menu have security implications so access to be constrained
  • Payroll super report : make it obvious export will also export TFNs
  • VicRoads : fix misaligned DOB on new authority form

Other small changes

• New GL expense code for tools
• delete unit costs /floorplan costs / rebates etc. Previously when deleted if you viewed the deleted journal it wasn’t obvious what unit the deleted entry was for. Now this can be interrograted. This change is expected to be useful for untangling reckless pulling of levers in the backoffice that sometimes happens at some shops in order to try to make a bankrec align for example
• unit Stocklist / stocktake reports : sort results by reference. Previously didn’t apply any sorting, output was whatever postgres felt like doing. Now fixed

Note: this version moves from 5.2.162 to 5.2.164 : this is intentional because of nature of re-encryption changes on database.

This version of c9 fixes a long standing nuisance when transactions auto allocate. It is mostly a problem with bulk transactions so mostly affects when we install a new c9 and bulk import AR and AP txn history. But this issue could also explain unexpected results in some scenarios when doing bulk linking. Normally reconcile masks problem because when we reconcile are are usually tallying unallocated txn totals of exact same amount. But if reconcile is unbalance then this misallocation could happen too. Also adding txns one at a time as what normally happens doesn’t trigger the incorrect behaviour.

Scenario is txns are supposed to auto allocate from oldest to newest but because of a bug when processing multiple txns simultaneously it could leave unexpected gaps in txn allocation depending on how AR and AP txns line up in terms of their relative amounts. Illustrating:

The correct outcome is we want unallocated gaps in the most recent transactions, not interleaved in historical txns.

Fix 1 : low level bug could lead to unrelated invoices appearing to be tangled on an invoice : depends on what invoices you were eyeballing before and whether or not those invoices contain and merged parts from other invoice.  This bug has been in c9 for a very long time, since 2016. Symptoms explained by this bug brought to our attention today. Even though it has been there for a decade and only just reported now, the symptoms are a nuisance enough needed an urgent fix

Fix 2 : tidy a visual bug with deposit held report. Would not render a date for customer held lines in some circumstances when running the report historically (misfiltering lines)