Updated 7/17: SoundTouch Ecosystem Update - 19.x - Release Notes and Security Notice

Update 7/17:

 

Lifestyle 600 and Lifestyle 650 systems receive a firmware update consisting of various enhancements today on 7/17/2018. After the update, the new version will be 19.0.7.2862116 (1.11.2.2862041). Thank you and please let us know if you have any questions.

 

Update 6/27:

 

On Thursday, June 27, 2018, an update is available to the SoundTouch app. If the App is configured to receive updates automatically, it will occur when the app is opened. The update includes various bugs fixes and enhancements and the updated version is 19.1.7. Please let us know if you have any questions. Thank you very much!

 

Please note: This update is for the app itself and does not contain new firmware for SoundTouch systems.

 

Original Post:

 

The SoundTouch 19.x ecosystem update is expected to begin on May 15, 2018.

 

The release will be handled in three phases and will include the following security updates and bug fixes:

 

Release Timeline:

 

Phase 1: May 15

Targeting active global user accounts.

 

Phase 2: May 22

Additional global accounts.

 

Phase 3: 5/24

Remainder of accounts not already updated

 

Versions:

 

Android/Kindle:

 

App: 18.1.57

Interface: 19.1.7 (June 27)

Protocol: 60

Available: May 15

 

iOS:

 

App: 18.1.4

Interface: 19.1.7

(June 27)

Protocol: 60

Available: May 15

 

PC/MAC:

 

App: 18.1.4

Interface: 19.1.7

(June 27)

Protocol: 60

Available: May 15

 

Firmware:

 

Firmware: 19.0.5

 

 Security Updates:

 

The 19.x SoundTouch ecosystem update will include several security related enhancements to address issues that have been raised in the affected products. Customers are strongly encouraged to apply the update to eliminate or reduce security vulnerabilities, some of which if exploited could result in a severe disruption to the operations of the product and/or an impact to data security.

 

19.x security enhancements include:

 

  • Restrictions on cross-subnet control of SoundTouch devices
  • Fixes to address a Wi-Fi Protected Access (WPA/WPA2) handshake traffic vulnerability commonly known as “KRACK”
  • Fixes to address potential information disclosure and other potential security concerns in on-device services 

 

In addition to applying the 19.x update release, customers are encouraged to follow security best practices when attaching their products to a wired or wireless network. For additional information and best practices for securing your home network, please see the below resources: 


https://www.consumer.ftc.gov/articles/0013-securing-your-wireless-network  

https://www.pcworld.com/article/3093362/how-to-secure-your-router-and-home-network.html

https://lifehacker.com/how-to-keep-your-internet-connected-home-safe-and-secur-1677537047

 

We appreciate the hard work and effort made by the community to help make the SoundTouch ecosystem more secure. If you believe you've found a security issue in our product or service, we encourage you to notify us. We will continue to update this community on future security vulnerabilities found and enhancements made.

 

Questions regarding information privacy and security as it relates to the use of Bose products or services should be sent to privacyandsecurity@bose.com.

 

 

Bug Fixes

 

  • SoundTouch App optimized for Mac OS 10.13.4 to improve compatibility.
  • Fix to address Android 8.0.0 users having difficulty adding SoundTouch devices to their accounts.
  • Addresses Bluetooth volume adjustment inconsistencies when using Microsoft devices connected to SoundTouch products.
  • Resolved account creation issues in SoundTouch App impacting customers in some regions/languages.
  • Fixed issue impacting ability to update SoundTouch App on Windows PCs set to non-English languages.
  • Resolves and case sensitivity issue causing limited or no results when searching with NAS hosted Music Libraries for content.