[asterisk-security] Asterisk-Addons 1.2.9 and 1.4.7 released; Asterisk-Addons 1.6.0-beta4 now available
The Asterisk Development Team
asteriskteam at digium.com
Wed Jun 4 17:04:15 CDT 2008
The Asterisk development team has released Asterisk-Addons version 1.2.7, 1.4.9,
and 1.6.0-beta4 to address a major security vulnerability in the ooh323 channel
driver. The releases may be downloaded from http://downloads.digium.com/.
AST-2008-009 details a remote crash vulnerability in the ooh323 channel driver:
* http://downloads.digium.com/pub/security/AST-2008-009.pdf
* All users of chan_ooh323 in all versions of Asterisk-Addons are affected
In addition to the security vulnerability, there are a number of bug fixes
included in this release. Changelogs for the various releases may be found at
the following addresses:
* Asterisk-Addons 1.2.9:
http://svn.digium.com/view/asterisk-addons/tags/1.2.9/ChangeLog?view=markup
* Asterisk-Addons 1.4.7:
http://svn.digium.com/view/asterisk-addons/tags/1.4.7/ChangeLog?view=markup
* Asterisk-Addons 1.6.0-beta4:
http://svn.digium.com/view/asterisk-addons/tags/1.6.0-beta4/ChangeLog?view=markup
More information about the asterisk-security
mailing list