FreeSWITCH v1.11.1 Security Release Notes

Vulnerability Overview FreeSWITCH version v1.11.1 includes multiple security fixes and stability improvements, particularly addressing TLS certificate reloading, SIP 603+ detection, and fixes for mod_sofia and mod_verto. Impact Scope TLS Certificate Reloading: In mod_sofia and mod_verto, TLS certificate reloading could cause disconnections. SIP 603+ Detection: Issues existed with SIP 603+ detection and passthrough control in mod_sofia. Other Issues: These include JSON parser nesting depth, core module fixes, session thread pool workers, STUN IPv6 write path, test builds, Content-Length validation, reloadacl description, OTP compatibility, memory issues, the sip-options-respond-503-on-busy configuration parameter, dispatch event threads, defer userstate status writing, HTTP POST request heap overflow, and auth block eviction across identities. Remediation TLS Certificate Reloading: The new API was added, allowing dynamic reloading of certificates without interrupting connections. SIP 603+ Detection: SIP 603+ detection and passthrough control were added to mod_sofia. Other Fixes: - Updated library requirements to version 2.0.11. - Limited JSON parser nesting depth to prevent stack overflow. - Fixed multiple issues in core modules, such as dead allocations, segment count checks, session thread pool workers, and the STUN IPv6 write path. - Validated Content-Length in . - Fixed OTP compatibility and memory issues in mod_erlang_event. - Fixed the configuration parameter and dispatch event thread issues in mod_sofia. - Fixed defer userstate status writing, HTTP POST request heap overflow, and auth block eviction across identities in mod_verto. Installation Guide FreeSWITCH Explained Release Notes FreeSWITCH 1.11.x Release Notes Asset 5 participants involved Summary FreeSWITCH v1.11.1 is a critical security update, and all users are advised to upgrade as soon as possible.

Goal Reached Thanks to every supporter — we hit 100%!

FreeSWITCH v1.11.1 Security Release Notes

More from this source