[asterisk-announce] Asterisk 15.7.2 and 16.2.1 Now Available (Security)
Asterisk Development Team
asteriskteam at digium.com
Thu Feb 28 14:29:49 CST 2019
The Asterisk Development Team would like to announce security releases for
Asterisk 15 and 16. The available releases are released as versions 15.7.2 and
16.2.1.
These releases are available for immediate download at
https://downloads.asterisk.org/pub/telephony/asterisk/releases
The following security vulnerabilities were resolved in these versions:
* AST-2019-001: Remote crash vulnerability with SDP protocol violation
When Asterisk makes an outgoing call, a very specific SDP protocol violation
by the remote party can cause Asterisk to crash.
For a full list of changes in the current releases, please see the ChangeLogs:
https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-15.7.2
https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-16.2.1
The security advisory is available at:
https://downloads.asterisk.org/pub/security/AST-2019-001.pdf
Thank you for your continued support of Asterisk!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-announce/attachments/20190228/a14415b6/attachment.html>
More information about the asterisk-announce
mailing list