Can not update vulnerable modules

I have FreePBX 14.0.16.11

Dashboard says that some modules have security issues and must be updated:

voicemail (Cur v. 14.0.6.6) should be upgraded to v. 14.0.6.25 to fix security issues: SEC-2021-09
blacklist (Cur v. 14.0.3) should be upgraded to v. 14.0.5 to fix security issues: SEC-2021-011
tts (Cur v. 13.0.13) should be upgraded to v. 13.0.15 to fix security issues: SEC-2021-011
bulkhandler (Cur v. 13.0.23) should be upgraded to v. 13.0.25 to fix security issues: SEC-2021-011
ucp (Cur v. 14.0.3.20) should be upgraded to v. 14.0.3.22 to fix security issues: SEC-2021-011
manager (Cur v. 13.0.2.9) should be upgraded to v. 13.0.2.10 to fix security issues: SEC-2021-010
restapps (Cur v. 13.0.92.18) should be upgraded to v. 14.0.22.2 to fix security issues: SEC-2020-004

But when I go to the Update menu, it checks for online updates but don’t find any updates for this modules.

Where can I download these updates?

Hi @Globba
Security fix versions of the above mentioned modules are now pushed to stable please check again.
Thank you.

I’m running FreePBX 13.0.197.31

I’m having the same issue, but only with Bulkhandler. I select upgrade all and then process and it says there are none to update.

38%20am

Same for me, not showing an actual update to 15.0.11 bulkhandler. This is on 4 different systems.

same for me, too
I’ve disabled the module

Now:
Warning: Cannot connect to online repository(s) (http://mirror1.freepbx.org,http://mirror2.freepbx.org). Online modules are not available.

Now:
modules are available but the problem didn’t fixed

Please check now, bulkhandler v13.0.24 for the Freepbx 13/14/15 and v16.0.3 for 16 should be available now which has security fixes. Security fixes release wiki also updated with module information.

thanks

1 Like

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.