[image] Watch what we do with security fixes 👀 | FreePBX - Let Freedom Ring This article discusses meta-issues surrounding security fixes in FreePBX, investigates vulnerability scoring tools, and offers some ideas for improvements. System Administrators should walk away with a better und…

I just want code with a lot fewer defects, please. Looks like three critical vulns in the last month. Is that meeting acceptable metrics?

[image] FreerPBXer: fewer defects, please Agreed! Will keep trying – thank you for the support. [image] FreerPBXer: three critical vulns Regarding qualitative severity rating scale, there was one Critical and two High vulnerabilities fixed recently: [critical-high-high-Screenshot_2…

@FreerPBXer that’s the goal - we’re working hard on it.

Hoping to see an improvement. This isn’t that. [image] Security Advisory: Unauthenticated Denial Of Service Security Been a long day, so if I’m getting this wrong apologies. The CVE was posted a day before the fix correct? But its been an issue for a few months, since May.…

That post was replied to in that topic about 12 hours later: [image] Security Advisory: Unauthenticated Denial Of Service Security There were two CVEs addressed on September 15th – both in the “framework” module. The fixed “framework” modules started shipping from the Fre…

Mentioning that topic here is an illustration cogent to this topic, and in direct response to “that’s the goal - we’re working hard on it”.

Here’s the current list of published GitHub Security Advisories for the FreePBX project , demonstrating that “we’re working hard on it”: [ghsa-published-Screenshot_2025-09-18_13-23-56]

Watch what we do with security fixes 👀

Blog News

FreerPBXer (FreerPBXer) September 18, 2025, 4:24pm 6

Hoping to see an improvement. This isn’t that.