[asterisk-dev] Asterisk 1.4.43,, and Now Available (Security Release)

Asterisk Development Team asteriskteam at digium.com
Thu Dec 8 17:34:32 CST 2011

The Asterisk Development Team has announced security releases for 
Asterisk 1.4,
1.6.2 and 1.8. The available security releases are released as versions 
1.4.43, and

These releases are available for immediate download at

The release of Asterisk versions 1.4.43,, and resolves 
an issue
with possible remote enumeration of SIP endpoints with differing NAT 

The release of Asterisk versions and resolves a remote 
possibility with SIP when the "automon" feature is enabled.

The issues and resolutions are described in the AST-2011-013 and 
security advisories.

For more information about the details of these vulnerabilities, please 
read the
security advisories AST-2011-013 and AST-2011-014, which were released 
at the
same time as this announcement.

For a full list of changes in the current releases, please see the 


Security advisory AST-2011-013 is available at:

  * http://downloads.asterisk.org/pub/security/AST-2011-013.pdf

Security advisory AST-2011-014 is available at:

  * http://downloads.asterisk.org/pub/security/AST-2011-013.pdf

Thank you for your continued support of Asterisk!

More information about the asterisk-dev mailing list