asterisk announce - Jun 2009 - Asterisk 1.4.26-rc1 Now Available

The Asterisk Development Team is pleased to announce the first release
candidate of Asterisk 1.4.26. Asterisk 1.4.26-rc1 is available for
immediate download at http://downloads.asterisk.org/pub/telephony/asterisk/

This release is primarily a fix for an issue (#14867, #14717) related to
security fix AST-2009-001 where IAX was not sending REGREJ to terminate invalid
registrations. Instead it sent another REGAUTH if the authentication challenge
failed. This caused a loop of REGREQ and REGAUTH frames. Additionally, an issue
(#15183) with broken attended transfers where the bridge was terminating
immediately after the transfer is resolved in this release, along with some
other issues reported by the community.

For a full list of changes in this release candidate, please see the ChangeLog:

http://svn.asterisk.org/svn/asterisk/tags/1.4.26-rc1/ChangeLog

The original security advisory can be found here:

http://downloads.asterisk.org/pub/security/AST-2009-001.html

Issues found in this release candidate can be reported at
http://issues.asterisk.org

Thank you for your continued support of Asterisk!

Asterisk Development Team wrote:
> The Asterisk Development Team is pleased to announce the first release
> candidate of Asterisk 1.4.26. Asterisk 1.4.26-rc1 is available for
> immediate download at http://downloads.asterisk.org/pub/telephony/asterisk/
> 
> This release is primarily a fix for an issue (#14867, #14717) related to
> security fix AST-2009-001 where IAX was not sending REGREJ to terminate
invalid
> registrations. Instead it sent another REGAUTH if the authentication
challenge
> failed. This caused a loop of REGREQ and REGAUTH frames. Additionally, an
issue
Excellent timing. I was just setting up an IAX account (incorrectly) in 
Zoiper and my console was being flooded by registration failure 
messages. As I was scratching my head going "what the heck", this
email
magically pops in my inbox explaining it.

Wish that worked with my bills...

-Dave