D212: Duo Release Notes for April 2, 2021

Hello everyone! Here are the release notes for the most recent updates we’ve made to Duo.

Starting with this edition of release notes, we have added the public version number to the title of the post. This number can be found in the Duo Admin Panel and describes the version assigned to core components of the Duo service. Learn more in this post.

You can subscribe to notifications for new release notes by following the process described here. If you have any questions about these changes, please comment below.

What’s in this release?

New and updated applications

New features, enhancements, and other improvements

Bug fixes

See all bug fixes


New and updated applications

Duo Authentication Proxy version 5.2.1 released

  • Addresses an elevation of privilege vulnerability in the Duo Authentication Proxy for Windows installer that could allow an authenticated local attacker to overwrite files in privileged directories (CVE-2021-1492). The vulnerability was limited to the Windows installer only, and did not affect the application once installed. This vulnerability does not apply to any version of Duo Authentication Proxy for Linux.

Duo Mobile for iOS version 3.52.0 released

  • Various behind-the-scenes improvements and minor bug fixes to enhance your authentication experience.

Duo Mobile for Android version 3.52.0 released

  • Various behind-the-scenes improvements and minor bug fixes to enhance your authentication experience.

New features, enhancements, and other improvements

Device data will now be collected by default if Duo Device Health application is installed and running

  • Updated the behavior of the default policy configuration option in the Duo Device Health application policy to provide a “data collection-only” mode for the Device Health application.
  • The default policy option “Don’t require users to have the app” will now automatically collect device health data if the Device Health app is already present and running on a user’s machine without the need to configure policy. Previously, the default option of “Don’t require users to have the app” did not collect device data.
  • The Duo Device Health app is available on Duo Access and Beyond editions.

Bug fixes

  • No bug fixes this release.
2 Likes