Author :
sthen
Date :
2014-06-12 22:39:12
Hash :d24707e8 Message :SECURITY update to asterisk 11.10.1
- AST-2014-006: MixMonitor manager action allows arbitrary shell commands
to be called from AMI (management interface) users without having proper
permissions.
- AST-2014-007: add a timeout to mitigate possible DoS on http interface
(connecting but making no request ties up a connection)