Changelog

Current Version: v2.25.3

This changelog covers what has changed in the WhatsApp Business API client and AWS Templates.

Contents

• Recommended Versions of Software
• WhatsApp Business API Client
• Amazon Web Services Templates
• Known Issues

Recommended Versions of Software

WhatsApp Business API Client

Blocking updates are ones in which the Coreapp will suffer downtime while upgrading using the db-upgrade service. Non-blocking updates are ones in which the Coreapp should continue to run when upgrading using the db-upgrade service. You can only use the db-upgrade service to upgrade to a version >= 2.23.* from your current version.

Oct 7, 2019 (v2.25.3)

• Throughput for outbound text type messages is improved to 50 messages/second
• Improved efforts to show URL preview
• Improved error handling when preview URL is invalid or not supported
• [Bug fix] Mark messages as read in Postgres
• [Bug fix] Previously, photos larger than 63 KB were encoded. This limit is now increased to 5 MB, enabling original high quality pictures to be sent as they are.
• [Bug fix] Fixed security vulnerabilities for CVE-2019-11931 and CVE-2019-14835

Sep 9, 2019 (v2.25.2, v2.23.6)

• Improvements to Coreapp security

Aug 26, 2019 (v2.25.1)

• Throughput for outbound media type messages is improved to 18 messages/second
• Throughput for outbound text type messages is improved to 25 messages/second
• Throughput for inbound text type messages is improved to 100 messages/second for single instance
• “Non-secure http” Webhooks are deprecated — Please upgrade Webhooks to https for inbound notifications
• A long lived authentication token is available for health API calls to help monitor multiple deployments of WhatsApp Business API clients
  • The number of requests (rate limits) for the health endpoint is set to 10 per second
• Business vertical values to be enumerable rather than free-form text
• [Bug fix] Propagating mime-types correctly to address inbound media issues
• [Bug fix] Mark message read request in multiconnect mode should be distributed uniformly to all the shards rather than sending to shard 0 alone
• AWS cloud formation template is made publicly available from S3, removing manual step of requesting access via Direct Support

Security Advisory

The following security vulnerabilities impact the v2.25.1 Coreapp image. The next patch release will include fixes.

• CVE-2018-20856: A patch release will include the fix when published by the vendor for Ubuntu 16.04

Jun 18, 2019 (v2.23.5)

• [Fixed] WhatsApp Web Business Tool not working in Multiconnect mode
• Upload media file size now 100MB
• Disallow setting shards for single instance
• Improved error handling while
  
  • Setting shards
  • Setting two-factor verification
  • Sending message templates
• Oncall pager error messages improved for "structure unavailable errors"
• "Mark messages as read" now includes all readable message types

Apr 29, 2019 (v2.23.4)

• Ability to get the group icon and profile photo by URL instead of a binary blob
• Revamped WhatsApp Web Business Tool
• Ability to upgrade the WhatsApp Business API Client database independent from the WhatsApp Business API Client
• Ability to update business profile settings independently — no longer requires all of the fields
• Support PostgreSQL database in addition to MySQL
• Message template validations at send time have been added to reduce rendering errors on the customer's device
  
  • New error codes have been added to indicate why these failed
• Ability to send videos as a message, currently limited to videos that are in the MP4 format with H.264 video codec and AAC audio codec
• New Monitoring dashboards (Grafana) added that help track the performance of database and Coreapp more closely
• Ability to send media using a web link
  • Ability to support media providers to access web links that require authentication to download the media
• More descriptive error message for existing error codes (e.g., 471, 472, etc.)
• For document messages, ability set a filename in addition to the caption field that the user will see when they attempt to download the document
• When receiving document messages, the filename provided by the sender will now also be shared in the callback in addition to the caption field

Breaking Changes

Metrics

• callback_requests replaced with callback_requests_duration_ms_count and callback_requests_duration_ms_sum
• metric out_message_received_by_server, out_message_received_by_target, out_message_received_by_target_read, out_message_sent replaced with out_message_status
• Upgrade Prometheus/Grafana containers to 2.23+ to enable monitoring for new metrics

Security Advisory

The following security vulnerabilities impact v2.23.4 images. The next patch release will include fixes.

Coreapp

• CVE-2019-2683 (CVSS Rating Medium)
• CVE-2019-2566 (CVSS Rating Medium)
• CVE-2019-2581 (CVSS Rating Medium)

Webapp

• CVE-2019-11034 (CVSS Rating Critical)
• CVE-2019-11035 (CVSS Rating Critical)

Amazon Web Services Templates

The most recent version of the template is 2.3.3.

What's included in the Amazon Web Services (AWS) - Cloud Formation (CFN) templates:

Release 2.3.3

Template URLS

• Enterprise: https://wa-biz-cfn.s3-us-west-2.amazonaws.com/wa_ent.yml?versionId=jnUkOxCK0d.PKuI50esojEJuYXsQ7HiQ
• DB: https://wa-biz-cfn.s3-us-west-2.amazonaws.com/wa_ent_db.yml?versionId=W8wVUEc4qrdK4wEycvkKArmfLhxbd3dF
• Lambda: https://wa-biz-cfn.s3-us-west-2.amazonaws.com/wa_ent_lambda.yml?versionId=ltvjuVbzyk02hF8X4FnQL4WTGLQmwWPb
• Network: https://wa-biz-cfn.s3-us-west-2.amazonaws.com/wa_ent_net.yml?versionId=WmOUyj8x0nvGT3k0X7Oc1KGZ3_puX.En

Dependencies/Prerequisites

N/A

Changelog

• All CFN templates are now available in the new S3 bucket
• EC2 instance is now launched from a marketplace CentOS 7 AMI
• Removed unsupported EC2 instance type from the business API client template
• EC2 instance is now equipped with cron jobs for maintenance work (Webapp/Coreapp log rotate, ECS agent update)
• Use General Purpose SSD as the RDS instance storage in staging environment, now it’s the same as production environment
• Removed unused CloudWatch alarms

Release 2.3.1

Template URLs

• Enterprise: https://s3.amazonaws.com/wa-ent-cfn/wa_ent.yml?versionId=2xaTm9dKCdjmuxMKTZOfQI_o9iw.bBTK
• DB: https://s3.amazonaws.com/wa-ent-cfn/wa_ent_db.yml?versionId=tq8ZXaK30IIdlWhF3bevI2tCi5nIlFs6
• Lambda: https://s3.amazonaws.com/wa-ent-cfn/wa_ent_lambda.yml?versionId=IZykZHXo._QyKHPZKDffLB0ISJPfPevr
• Network: https://s3.amazonaws.com/wa-ent-cfn/wa_ent_net.yml?versionId=X51Ww5KtgjcbTwBrn_C3C0m5Sko150f3

Dependencies/Prerequisites

N/A

Changelog

• Support for new regions (Seoul, Singapore & Tokyo)

Known Issues