Is there an archive of security advisories for Asterisk? We recently upgraded a customer from 1.2 to 1.4 and now they are asking for documentation of all security and bug related fixes. I know the advisories get published on this list but is there an easier way to find them than trying to search the list. -- Telecomunicaciones Abiertas de M?xico S.A. de C.V. Carlos Ch?vez Prats Director de Tecnolog?a +52-55-91169161 ext 2001 -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 198 bytes Desc: This is a digitally signed message part Url : http://lists.digium.com/pipermail/asterisk-users/attachments/20100909/c3e74c98/attachment.pgp
On Thu, Sep 9, 2010 at 10:25 AM, Carlos Chavez <cursor at telecomabmex.com>wrote:> Is there an archive of security advisories for Asterisk? We > recently > upgraded a customer from 1.2 to 1.4 and now they are asking for > documentation of all security and bug related fixes. I know the > advisories get published on this list but is there an easier way to find > them than trying to search the list. > > -- > Telecomunicaciones Abiertas de M?xico S.A. de C.V. > Carlos Ch?vez Prats > Director de Tecnolog?a > +52-55-91169161 ext 2001 > > -- > _____________________________________________________________________ > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > New to Asterisk? Join us for a live introductory webinar every Thurs: > http://www.asterisk.org/hello > > asterisk-users mailing list > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users >The archive is here: http://downloads.asterisk.org/pub/security/ http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.4.35 and search for "ASA-" example entry: 2007-08-07 18:25 +0000 [r78375] Jason Parker <jparker at digium.com> * channels/chan_skinny.c: Properly check the capabilities count to avoid a segfault. (ASA-2007-019) http://downloads.asterisk.org/pub/telephony/asterisk/old-releases/ has change logs from 1.2 Looks like 1.4 was started before Asterisk 1.2.13, hopefully they're not asking for a refactored changelog from asterisk 1.2.19 to 1.4.32 ;) -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20100909/1618d1d2/attachment.htm
-----Original Message----- From: asterisk-users-bounces at lists.digium.com [mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of Carlos Chavez Subject: [asterisk-users] Archive of security advisories?> Is there an archive of security advisories for Asterisk? Werecently upgraded a customer from 1.2 to 1.4 and now they are asking for documentation of all security and bug related fixes. I know the advisories get published on this list but is there an easier way to find them than trying to search the list. IMO you should be able to get this from the CHANGELOG with the version you install.
On Thu, Sep 09, 2010 at 12:25:03PM -0500, Carlos Chavez wrote:> Is there an archive of security advisories for Asterisk? We recently > upgraded a customer from 1.2 to 1.4 and now they are asking for > documentation of all security and bug related fixes. I know the > advisories get published on this list but is there an easier way to find > them than trying to search the list.Recent ones: http://www.asterisk.org/security Back to 2007: http://downloads.asterisk.org/pub/security/ -- Barry