[asterisk-commits] lmadsen: tag 1.6.2.2 r244382 - /tags/1.6.2.2/

[SVN commits to the Asterisk project]

Author: lmadsen
Date: Tue Feb  2 13:40:45 2010
New Revision: 244382

URL: http://svnview.digium.com/svn/asterisk?view=rev&rev=244382
Log:
ChangeLog and .version file updates.

Removed:
    tags/1.6.2.2/asterisk-1.6.2.1-summary.html
    tags/1.6.2.2/asterisk-1.6.2.1-summary.txt
Modified:
    tags/1.6.2.2/.version
    tags/1.6.2.2/ChangeLog

Modified: tags/1.6.2.2/.version
URL: http://svnview.digium.com/svn/asterisk/tags/1.6.2.2/.version?view=diff&rev=244382&r1=244381&r2=244382
==============================================================================
--- tags/1.6.2.2/.version (original)
+++ tags/1.6.2.2/.version Tue Feb  2 13:40:45 2010
@@ -1,1 +1,1 @@
-1.6.2.1
+1.6.2.2

Modified: tags/1.6.2.2/ChangeLog
URL: http://svnview.digium.com/svn/asterisk/tags/1.6.2.2/ChangeLog?view=diff&rev=244382&r1=244381&r2=244382
==============================================================================
--- tags/1.6.2.2/ChangeLog (original)
+++ tags/1.6.2.2/ChangeLog Tue Feb  2 13:40:45 2010
@@ -1,3 +1,13 @@
+2010-02-02  Leif Madsen <lmadsen at digium.com>
+
+	* Release Asterisk 1.6.2.2
+
+	* AST-2010-001: An attacker attempting to negotiate T.38 over SIP can 
+	  remotely crash Asterisk by modifying the FaxMaxDatagram field of 
+	  the SDP to contain either a negative or exceptionally large value.
+	  The same crash occurs when the FaxMaxDatagram field is omitted from 
+	  the SDP as well.
+
 2010-01-14  Leif Madsen <lmadsen at digium.com>
 
 	* Release Asterisk 1.6.2.1