Security Issues

[hardocp]

Just saw the following on my dashboard:

cel (Cur v. 15.0.15.8) should be upgraded to v. 15.0.15.9 to fix security issues: SEC-2020-006
logfiles (Cur v. 13.0.10.8) should be upgraded to v. 13.0.10.10 to fix security issues: SEC-2020-005

Went to module updates and did not see the proposed upgrade versions in order to address the security issue

How can I access the newer module versions to address these items

thanks

[mbrooks (Matt Brooks)]

@hardocp Sorry for the inconvenience. We may have got the announcements pushed to the mirror server before the updates were ready to go. It should be fixed now, so try it again!

More information:

Security Releases

Hey All, Just a heads up that a few different FreePBX modules had security issues which were disclosed to us. Two were SQL injection type vulnerabilities in the CDR and CEL modules and one was a potential XSS problem with the logfiles module. You can read more details about the impact of the vulnerabilities at: https://wiki.freepbx.org/display/FOP/2020-08-17+SQL+Injection+In+cdr+module https://wiki.freepbx.org/display/FOP/2020-08-17+SQL+Injection+In+cel+module https://wiki.freepbx.org/disp…

[hardocp]

Working now

thank you