Posted: Tue Jul 24, 2007 11:57 pm Post subject: [asterisk-announce] Asterisk 1.2.23 and 1.4.9 released
The Asterisk development team has released Asterisk versions 1.2.23 and
1.4.9.
These releases contain bug fixes, including one for a security vulnerability.
The vulnerability is a potential Denial of Service attack when the Asterisk
IAX2 channel driver is configured to allow unauthenticated calls.
We have released an Asterisk Security Advisory for the vulnerability. The
current version of the advisory can be downloaded from the ftp site.
http://ftp.digium.com/pub/asa/ASA-2007-018.pdf
* Affected systems include all Asterisk installations running an affected version
that allow unauthenticated IAX2 calls. Affected open source versions include
1.2.20 through 1.2.22, and 1.4.5 through 1.4.8.
All users that have systems that meet the criteria listed above should
upgrade as soon as possible.
Thank you very much for your support.
_______________________________________________
--Bandwidth and Colocation Provided by http://www.api-digital.com--
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
