The Asterisk Development Team
2008-Jul-22 23:23 UTC
[asterisk-users] Asterisk 1.4.21.2 and 1.2.30 Released
The Asterisk.org development team has released Asterisk versions 1.4.21.2 and 1.2.30. Both of these releases include fixes for two security issues. Both of these issues affect users of the IAX2 channel driver. For more details on these vulnerabilities, see the published security advisories, AST-2008-010 and AST-2008-011. AST-2008-010: Asterisk IAX 'POKE' resource exhaustion - http://downloads.digium.com/pub/security/AST-2008-010.html AST-2008-011: Traffic amplification in IAX2 firmware provisioning system - http://downloads.digium.com/pub/security/AST-2008-011.html Thank you for your continued support of Asterisk!
Possibly Parallel Threads
- Asterisk 1.4.21.2 and 1.2.30 Released
- AST-2008-010: Asterisk IAX 'POKE' resource exhaustion
- AST-2008-011: Traffic amplification in IAX2 firmware provisioning system
- Asterisk 1.8.15-cert7, 1.8.28.2, 11.6-cert4, 11.10.2, 12.3.2 Now Available (Security/Regression Release)
- Asterisk 1.8.15-cert7, 1.8.28.2, 11.6-cert4, 11.10.2, 12.3.2 Now Available (Security/Regression Release)