New Post on freeswitch.org from Kathleen King check it out at http://ift.tt/1PVLSC6 FreeSWITCH Week in Review (Master Branch) November 14th – November 21st This week we had a number of features and a very important security fix listed below. It is highly recommended that you upgrade as soon as possible to avoid this vulnerability and you can find out more about the 1.6.5 release here. Join us Wednesdays at 12:00 CT for some more FreeSWITCH fun! This week we have Martin O’Shield from Windy City SDR! And head over to freeswitch.com to learn more about FreeSWITCH support. Security issues: A bug allowing for a remotely exploited DoS attack through custom crafted network traffic via JSON has been fixed. We classify this issue as High Severity. A patch was added by Anthony Minessale in commit 4bdca81 to resolve this issue. All versions from 1.4.4 through the previous release are vulnerable. We highly recommend updating to the current release version as soon as possible.http://ift.tt/1S9TUXf New features that were added: FS-8543 [mod_conference] Improve mute handling on conference and WebRTC FS-8546 [mod_conference][mod_verto] Make original video demo backward compatible with livearray-json-status FS-8529 [mod_conference] Added video-floor to personal canvas mode FS-8401 [verto_communicator] Added Speaker selection in settings model and video page and fixed model to modal FS-8545 [verto_communicator] Improve controls for screen share, fixed a read lock regression, do not allow video floor on a member with a reservation id set, and add missing code to deal with screen share part FS-8549 [mod_http_cache] Add support for AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY environment variables in S3 profiles FS-8547 [core] Add error log into stats to log when quality impacting events begin and end FS-8559 [mod_shout] Add “mpga” to the list of supported extensions Improvements in build system, cross platform support, and packaging: FS-8333 [build][Debian] Added mod_hiredis.deb The following bugs were squashed: FS-8537 [mod_lua] Fixed a segfault caused by passing nil to various lua functions FS-8527 [mod_conference] Do not send the video of last_video_floor_holder to video_floor_holder if the videos are related FS-8542 [verto_communicator] Fixed the tooltips of video controls FS-8053 [mod_conference][mod_sofia] Fix for WebRTC’s SDP containing a=sendonly for video, but the client still receiving the video stream FS-8553 [config] Include verto_contact into the dial-string in the samples FS-8556 [mod_verto] Screen shares are not recoverable so do not try FS-8293 [mod_verto] Fixed some regressions where speed test caused excessive downlink bandwidth The FreeSWITCH 1.4 branch had this week’s previously mentioned security fix and a bug fix back ported as well as the release of 1.4.26. And again, keep in mind that 1.4 is quickly moving toward end of life and won’t be supported any longer except for high level security issues. FS-8537 [mod_lua] Fixed a segfault caused by passing nil to various lua functions