This bug has been resolved and is only active if you load chan_skinny by default this does NOT affect asterisk business edition If you dont want to mess around with the modules.conf and no load update to 1.2.13 all the "security fixes" are applied on that release.