We hope everyone out there had a great Holiday Season and Happy New Year! In addition to enjoying "the season" ourselves we've been quite busy so we're back to give you a quick update on all the threads of activities that have been keeping us going! Those include 2.10 Release Candidate coming up, new site and repository servers and the fast approaching Open Telephony Training Class.

We've made great progress on the new repository and web site servers and are happy to report that all is going very well! As you may recall, we've been having server problems for some time on our 5 year old hardware and have been undergoing the first phase of our modernization process! Time for another update...

With the holidays fast approaching we're firing on all pistons trying to move everything forward, keep the site healthy and prepare for those of you who will be joining us in Naples, FL for the next Open Telephony Training.! Progress is solid on the new repository site and website that we discussed in the last blog. and version 2.10 is close to entering release candidate state.

Back from Astricon a week ago and catching up ... for those of you who made it out to Denver last week, it was great to see you! If you weren't able to make it, maybe we'll see you in a MUCH SUNNIER PLACE in NAPLES, FLORIDA at our next Open Telephony Training Seminar quickly coming up in January! To be fair, Denver is usually very sunny but we happened to get one of those "once every 5 year" late October snow storms that can hit the front range.

We wanted to drop you a quick note on the 2.10 progress and all the great feedback everyone has provided both in our last blog post as well as the various forum threads and tickets that have been filed! We also want to make sure everyone is aware that we will be at Astricon in Denver this year so come to the Open Source corner and visit us at the booth, you may even have a chance to wind a valuable prize, read on for details!

We are currently looking for 2-3 beta testers to try out the new Appointment Reminder module for the FreePBX Distro. This is a professional module and is only availiable for the FreePBX Distro. Testers will recieve a free beta copy of the module.

What is it?

We are working on a new Distro Install Process as we speak.

The plan is to let you go through the normal Centos Setup screens with a full Centos ISO and than we will prompt you with a payload/version option for what version of the Distro you want to install and it would pull down the packages it needs for the Distro like Asterisk, Dahdi, FreePBX and such so the amount of time it spends pulling down packages from the Internet should be about 1/4 of what it currently is with the Net Install only option that we have.

Which brings be to this Blog.

Aug. 11, 2011

The FreePBX development team has identified with some zero day security vulnerabilities related to httpd and php. These vulnerabilities may allow a remote user to gain full root control over a system, and are present in lots of popular asterisk-related distro's.

The FreePBX development team strongly urges all user of the FreePBX Distro to immediately upgrade their systems and patch these vulnerabilities. Additionally, users are reminded never to keep their web port accessible to the internet.