
<html><head></head><body>The Asterisk Development Team would like to announce security releases for<br>Asterisk 15 and 16. The available releases are released as versions 15.7.2 and<br>16.2.1.<br><br>These releases are available for immediate download at<br><br><a href='https://downloads.asterisk.org/pub/telephony/asterisk/releases'>https://downloads.asterisk.org/pub/telephony/asterisk/releases</a><br><br>The following security vulnerabilities were resolved in these versions:<br><br><ul><li> AST-2019-001: Remote crash vulnerability with SDP protocol violation<br>When Asterisk makes an outgoing call, a very specific SDP protocol violation<br>by the remote party can cause Asterisk to crash.<br></li></ul><br>For a full list of changes in the current releases, please see the ChangeLogs:<br><br><a href='https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-15.7.2'>ChangeLog-15.7.2</a><br><a href='https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-16.2.1'>ChangeLog-16.2.1</a><br><br>The security advisory is available at:<br><br><a href='https://downloads.asterisk.org/pub/security/AST-2019-001.pdf'>AST-2019-001.pdf</a><br><br>Thank you for your continued support of Asterisk!</body></html>