Skip to content

Comments

asterisk: update to version 20.14.1#911

Merged
Ansuel merged 1 commit intoopenwrt:masterfrom
dangowrt:asterisk-20.14.1
Nov 22, 2025
Merged

asterisk: update to version 20.14.1#911
Ansuel merged 1 commit intoopenwrt:masterfrom
dangowrt:asterisk-20.14.1

Conversation

@dangowrt
Copy link
Member

Maintainer: @jslachta
Compile tested: mips_24kc
Run tested: lantiq/xrx200 (incl. asterisk-chan-lantiq)

Description:
Changes since 20.14.0:

asterisk.c: Add option to restrict shell access from remote consoles.

Author: George Joseph Date: 2025-05-19

UserNote: A new asterisk.conf option 'disable_remote_console_shell' has been added that, when set, will prevent remote consoles from executing shell commands using the '!' prefix.

Resolves: #GHSA-c7p6-7mvq-8jq2

res_pjsip_messaging.c: Mask control characters in received From display name

Author: George Joseph Date: 2025-03-24

Incoming SIP MESSAGEs will now have their From header's display name sanitized by replacing any characters < 32 (space) with a space.

Resolves: #GHSA-2grh-7mhv-fcfw

@jslachta
Copy link
Contributor

Thank you for the PR and for the run testing! Much appreciated!

@BKPepe
Copy link
Member

BKPepe commented Jul 20, 2025

@dangowrt Do you know if your PR fixes #908 ?

Changes since 20.14.0:

asterisk.c: Add option to restrict shell access from remote consoles.

Author: George Joseph Date: 2025-05-19

UserNote: A new asterisk.conf option 'disable_remote_console_shell' has
been added that, when set, will prevent remote consoles from executing
shell commands using the '!' prefix.

Resolves: #GHSA-c7p6-7mvq-8jq2

res_pjsip_messaging.c: Mask control characters in received From display
name

Author: George Joseph Date: 2025-03-24

Incoming SIP MESSAGEs will now have their From header's display name
sanitized by replacing any characters < 32 (space) with a space.

Resolves: #GHSA-2grh-7mhv-fcfw

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
@Rondom
Copy link
Contributor

Rondom commented Jul 30, 2025

I think the commit message should mention the CVE ID as well for easier tracking.

@Ansuel Ansuel merged commit cb6a45e into openwrt:master Nov 22, 2025
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants