The Asterisk Development Team has announced the release of Asterisk 1.4.40.2. This release is available for immediate download at http://downloads.asterisk.org/pub/telephony/asterisk/ After the initial release of AST-2011-006, a regression was found and then resolved. This release contains the correct change. * Reverted part of r314607, as it can introduce a regression. Specifically, the security check for the "system" privilege was removed. If a user had the "call" privilege but not the "system" privilege, they would lose the ability to execute the system app and dialplan functions that run commands in a shell. This branch never used the "system" privilege for that purpose and did not need to be patched. (Related to AST-2011-006) For a full list of changes in this release, please see the ChangeLog: http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.4.40.2 Thank you for your continued support of Asterisk!
|