The Asterisk Development Team has announced security releases for
Asterisk 1.4,
1.6.2 and 1.8. The available security releases are released as versions
1.4.43,
1.6.2.21 and 1.8.7.2.
These releases are available for immediate download at
http://downloads.asterisk.org/pub/telephony/asterisk/releases
The release of Asterisk versions 1.4.43, 1.6.2.21, and 1.8.7.2 resolves
an issue
with possible remote enumeration of SIP endpoints with differing NAT
settings.
The release of Asterisk versions 1.6.2.21 and 1.8.7.2 resolves a remote
crash
possibility with SIP when the "automon" feature is enabled.
The issues and resolutions are described in the AST-2011-013 and
AST-2011-014
security advisories.
For more information about the details of these vulnerabilities, please
read the
security advisories AST-2011-013 and AST-2011-014, which were released
at the
same time as this announcement.
For a full list of changes in the current releases, please see the
ChangeLogs:
http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.4.43
http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.21
http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.7.2
Security advisory AST-2011-013 is available at:
* http://downloads.asterisk.org/pub/security/AST-2011-013.pdf
Security advisory AST-2011-014 is available at:
* http://downloads.asterisk.org/pub/security/AST-2011-013.pdf
Thank you for your continued support of Asterisk!
--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
http://www.asterisk.org/hello
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users
