Asterisk Security Patch: No More Snooping for You!
The Asterisk Development Team has rolled out Certified Asterisk 20.7-cert4. This update tightens security by confining AMI ListCategories to the configuration directory. So no more accidental file sightseeing! Download your drama-free version now.
Hot Take:
In a world where hackers are constantly knocking on our digital doors, Asterisk just installed a new security peephole and chain lock. Kudos to Ben Ford for slamming the door on sneaky cyber intruders and reminding us all that not all heroes wear capes—some just write really good code.
Key Points:
- Certified Asterisk 20.7-cert4 is now available with a significant security update.
- The update resolves a path traversal vulnerability in the Asterisk Manager Interface (AMI).
- The issue allowed unauthorized file access outside the configuration directory.
- Ben Ford authored the critical fix, restricting file access to the configured directory.
- No other issues or advisory resolutions were included in this release.
Already a member? Log in here