[asterisk-users] Archive of security advisories?

[Kyle Kienapfel]

On Thu, Sep 9, 2010 at 10:25 AM, Carlos Chavez <cursor at telecomabmex.com>wrote:

>        Is there an archive of security advisories for Asterisk?  We
> recently
> upgraded a customer from 1.2 to 1.4 and now they are asking for
> documentation of all security and bug related fixes.  I know the
> advisories get published on this list but is there an easier way to find
> them than trying to search the list.
>
> --
> Telecomunicaciones Abiertas de México S.A. de C.V.
> Carlos Chávez Prats
> Director de Tecnología
> +52-55-91169161 ext 2001
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>               http://www.asterisk.org/hello
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-users
>

The archive is here:
http://downloads.asterisk.org/pub/security/

http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.4.35 and
search for "ASA-"

example entry:

2007-08-07 18:25 +0000 [r78375]  Jason Parker <jparker at digium.com>

	* channels/chan_skinny.c: Properly check the capabilities count to
	  avoid a segfault. (ASA-2007-019)


http://downloads.asterisk.org/pub/telephony/asterisk/old-releases/ has
change logs from 1.2

Looks like 1.4 was started before Asterisk 1.2.13, hopefully they're
not asking for a refactored changelog from asterisk 1.2.19 to 1.4.32
;)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20100909/1618d1d2/attachment.htm