Asterisk Security Release 21.6.1: Path Traversal Bug Gets the Boot!
The Asterisk Development Team proudly announces Asterisk 21.6.1, a security release that tackles one pesky issue: stopping AMI ListCategories from wandering off to unauthorized files. Download it now and give your system the security boost it deserves, without needing to call in the Ghostbusters!
Hot Take:
Another day, another patch! Just when you thought your 2024 was going to end without a hitch, the Asterisk Development Team swoops in with a new security release to ensure your systems stay as secure as a mime in an invisible box. Who knew directory traversal could be such a thrill?
Key Points:
- Asterisk Security Release 21.6.1 addresses a path traversal vulnerability.
- The issue was linked to the AMI ListCategories action allowing access to external files.
- Ben Ford, the unsung hero, committed the fix.
- The update restricts file access to the configured configuration directory.
- Security advisory GHSA-33×6-fj46-6rfh was resolved with this release.
Already a member? Log in here