<br><br><div class="gmail_quote">On Thu, Sep 9, 2010 at 10:25 AM, Carlos Chavez <span dir="ltr"><<a href="mailto:cursor@telecomabmex.com">cursor@telecomabmex.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Is there an archive of security advisories for Asterisk? We recently<br>
upgraded a customer from 1.2 to 1.4 and now they are asking for<br>
documentation of all security and bug related fixes. I know the<br>
advisories get published on this list but is there an easier way to find<br>
them than trying to search the list.<br>
<font color="#888888"><br>
--<br>
Telecomunicaciones Abiertas de México S.A. de C.V.<br>
Carlos Chávez Prats<br>
Director de Tecnología<br>
+52-55-91169161 ext 2001<br>
</font><br>--<br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>
New to Asterisk? Join us for a live introductory webinar every Thurs:<br>
<a href="http://www.asterisk.org/hello" target="_blank">http://www.asterisk.org/hello</a><br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br></blockquote></div><br><div>The archive is here:</div><div><a href="http://downloads.asterisk.org/pub/security/">http://downloads.asterisk.org/pub/security/</a></div>
<div><br></div><div><a href="http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.4.35">http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.4.35</a> and search for "ASA-"</div><div><br></div>
<div>example entry:</div><div><span class="Apple-style-span" style="font-family: 'Times New Roman'; font-size: medium; "><pre style="word-wrap: break-word; white-space: pre-wrap; ">2007-08-07 18:25 +0000 [r78375] Jason Parker <<a href="mailto:jparker@digium.com">jparker@digium.com</a>>
* channels/chan_skinny.c: Properly check the capabilities count to
avoid a segfault. (ASA-2007-019)</pre><pre style="word-wrap: break-word; white-space: pre-wrap; "><br></pre><pre style="word-wrap: break-word; white-space: pre-wrap; "><a href="http://downloads.asterisk.org/pub/telephony/asterisk/old-releases/">http://downloads.asterisk.org/pub/telephony/asterisk/old-releases/</a> has change logs from 1.2</pre>
<pre style="word-wrap: break-word; white-space: pre-wrap; ">Looks like 1.4 was started before Asterisk 1.2.13, hopefully they're not asking for a refactored changelog from asterisk 1.2.19 to 1.4.32 ;)</pre></span></div>