[asterisk-announce] Asterisk 18.104.22.168, 22.214.171.124, 126.96.36.199.2, and 188.8.131.52 Now Available
Asterisk Development Team
asteriskteam at digium.com
Tue Feb 22 07:02:06 CST 2011
The Asterisk Development Team has announced security releases for Asterisk
branches 1.4, 1.6.1, 1.6.2, and 1.8. The available security releases are
released as versions 184.108.40.206, 220.127.116.11, 18.104.22.168.2, and 22.214.171.124.
These releases are available for immediate download at
The releases of Asterisk 126.96.36.199, 188.8.131.52, 184.108.40.206.2, and 220.127.116.11 resolve an
issue that when decoding UDPTL packets, multiple stack and heap based arrays can
be made to overflow by specially crafted packets. Systems configured for
T.38 pass through or termination are vulnerable. The issue and resolution are
described in the AST-2011-002 security advisory.
For more information about the details of this vulnerability, please read the
security advisory AST-2011-002, which was released at the same time as this
For a full list of changes in the current release, please see the ChangeLog:
Security advisory AST-2011-002 is available at:
Thank you for your continued support of Asterisk!
More information about the asterisk-announce