CVE 2006-5444 is fixed there: http://lists.digium.com/pipermail/svn-commits/2006-October/017805.html http://svn.digium.com/view/asterisk?rev=45332&view=rev
Please recheck if the patch is the correct one. It applies fine to the asterisk_1.2.12.1.dfsg.orig.tar.gz, I didn't make any further investigations. -- Asterisk vulnerabilities in chan_skinny.c and chan_sip.c https://launchpad.net/bugs/66912 -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs