[asterisk-users] Asterisk 1.6.0.11-rc2, 1.6.1.2, 1.6.1.3-rc1, and 1.6.2.0-beta4 Release Announcement

[Alex Hermann]

On Monday 03 August 2009, Asterisk Team wrote:
> The release of 1.6.1.2 fixes a remote crash security vulnerability in the
> RTP stack.  The related security advisory AST-2009-004 has been released
> along with this announcement.  Please read that advisory for more
> information.
>
> For a full list of changes in these releases, please see the ChangeLogs:
> http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6
>.1.2

The chaneglog doesn't mention anything on fixing a security issue. Even worse, 
the changelog doesn't mention anyting at all besides the version increment. 
Is the fix really applied?
-- 
Met vriendelijke groet,


Alex Hermann
SpeakUp BV
T: 088-SPEAKUP (088-7732587)
F: 088-7732588