[asterisk-dev] Asterisk 10.4.0-rc2 Now Available

Asterisk Development Team asteriskteam at digium.com
Tue Apr 24 14:25:43 CDT 2012


The Asterisk Development Team has announced the second release candidate of
Asterisk 10.4.0. This release candidate is available for immediate
download at http://downloads.asterisk.org/pub/telephony/asterisk

The release of Asterisk 10.4.0-rc2 resolves several issues reported by the
community and would have not been possible without your participation.
Thank you!

The following are the issues resolved in this release candidate:

* --- AST-2012-004: Fix an error that allows AMI users to run shell
      commands sans authorization.
  (Closes issue ASTERISK-17465. Reported by David Woolley)

* --- AST-2012-005: Fix remotely exploitable heap overflow in keypad
      button handling
  (Closes issue ASTERISK-19592. Reported by Russell Bryant)

* --- AST-2012-006: Fix crash in UPDATE handling when no channel owner
      exists
  (Closes issue ASTERISK-19770. Reported by Thomas Arimont)

For a full list of changes in this release candidate, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.4.0-rc2

Thank you for your continued support of Asterisk!



More information about the asterisk-dev mailing list