[asterisk-dev] Asterisk,, and Now Available (Security Releases)

Asterisk Development Team asteriskteam at digium.com
Tue Jun 28 15:54:57 CDT 2011

The Asterisk Development Team has announced the release of Asterisk versions,, and, which are security releases.

These releases are available for immediate download at

The release of Asterisk,, and resolves the
following issue:

AST-2011-011: Asterisk may respond differently to SIP requests from an
invalid SIP user than it does to a user configured on the system, even 
when the
alwaysauthreject option is set in the configuration. This can leak 
about what SIP users are valid on the Asterisk system.

For more information about the details of this vulnerability, please read
the security advisory AST-2011-011, which was released at the same time 
as this

For a full list of changes in the current releases, please see the 


Security advisory AST-2011-011 is available at:


Thank you for your continued support of Asterisk!

More information about the asterisk-dev mailing list