Asterisk dialplan injection vulnerability

Hi,

I just wanted to ask a simple question.

There was a vulnerability discovered earlier this year:
http://downloads.asterisk.org/pub/security/AST-2010-002.txt

I wanted to ask whether FreePBX contains proper patches already applied to fix this problem. If not what is the workaround to put FILTER() into channel $EXTEN variable ?

I’m really appreciated your help.

Thank you.

Regards,
Jarek