[asterisk-announce] Asterisk 16.16.2, 17.9.3, 18.2.2 and 16.8-cert7 Now Available (Security)
Asterisk Development Team
asteriskteam at digium.com
Thu Mar 4 12:19:51 CST 2021
The Asterisk Development Team would like to announce security releases for
Asterisk 16, 17 and 18, and Certified Asterisk 16.8. The available releases are
released as versions 16.16.2, 17.9.3, 18.2.2 and 16.8-cert7.
These releases are available for immediate download at
https://downloads.asterisk.org/pub/telephony/asterisk/releases
https://downloads.asterisk.org/pub/telephony/certified-asterisk/releases
The following security vulnerabilities were resolved in these versions:
* AST-2021-006: Crash when negotiating T.38 with a zero port
When Asterisk sends a re-invite initiating T.38 faxing and the endpoint
responds with a m=image line and zero port, a crash will occur in Asterisk.
This is a reoccurrence of AST-2019-004.
For a full list of changes in the current releases, please see the ChangeLogs:
https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-16.16.2
https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-17.9.3
https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-18.2.2
https://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-certified-16.8-cert7
The security advisory is available at:
https://downloads.asterisk.org/pub/security/AST-2021-006.pdf
Thank you for your continued support of Asterisk!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-announce/attachments/20210304/dc379078/attachment.html>
More information about the asterisk-announce
mailing list