[asterisk-security] Asterisk 1.4.16 and 1.2.26 released

The Asterisk Development Team asteriskteam at digium.com
Tue Dec 18 13:50:10 CST 2007


The Asterisk.org development team has released Asterisk versions 1.4.16 and
1.2.26.  Both releases contain a fix for a security vulnerability.  The 1.4.16
release also contains a number of other bug fixes made over the past few weeks.

The details of the security issue have been published in a security advisory:

http://downloads.digium.com/pub/security/AST-2007-027.pdf

The issue affects users of the dynamic realtime configuration method for IAX2 or
SIP that use host based authentication.  Systems that do not use host based
authentication with realtime are not affected.

A full list of changes is available in the ChangeLog, which is distributed with
the release and is also available on the downloads page.

http://downloads.digium.com/pub/telephony/asterisk/ChangeLog-1.4.16

The releases are available for immediate download from http://downloads.digium.com/.

Thank you for your support!



More information about the asterisk-security mailing list