signalwire/freeswitch v1.11.1

FreeSWITCH v1.11.1 Release

on GitHub

This is an important release containing critical security fixes and stability improvements, alongside the new reloadcert API for hot TLS certificate reloads without disconnects across mod_sofia and mod_verto, and SIP 603+ detection and passthrough control. We strongly encourage all users to upgrade to v1.11.1 as soon as possible.

 Release Notes - FreeSWITCH - Version 1.11.1

Enhancement

• [GHA] Update ffmpeg and libpq in macos.yml
• [mod_commands, mod_verto] Add new reloadcert API and let mod_verto reload certificates on the fly without disconnects.
• [mod_sofia] Add SIP 603+ detection and passthrough control.
• [mod_sofia] capture SIP reason header on INVITE failure
• [mod_sofia] Reload certificates on the fly without disconnects using reloadcert API.

Bug

• [Build-System] Update libks requirements to 2.0.11
• [build] Cap cJSON parser nesting depth to prevent stack overflow.
• [Core, modules] Fix various dead assignments.
• [core] Fix segments count check in clean_uri(). Add unit-test.
• [core] Fix use-after-free in session thread pool worker.
• [core] Use switch_stun_ipv6_t for STUN IPv6 write paths.
• [libesl] Fix build of tests
• [libesl] Validate Content-Length in esl_recv_event.
• [mod_commands] Fix reloadacl description
• [mod_erlang_event] Fix correctness, OTP compatibility, and memory issues
• [mod_sofia] Fix handling of sip-options-respond-503-on-busy profile parameter
• [mod_sofia] Fix use-after-free in dispatch event thread.
• [mod_verto] Defer userauth state writes until after password gate.
• [mod_verto] Fix heap overflow in HTTP POST body read.
• [mod_verto] Gate sessid bind on auth, block cross-identity eviction.

Installation guides

https://developer.signalwire.com/freeswitch/FreeSWITCH-Explained/Release-Notes/
https://developer.signalwire.com/freeswitch/FreeSWITCH-Explained/Release-Notes/FreeSWITCH-1.11.x-Release-notes