[SM-Grimoire-Bugs] [Bug 13899] New: asterisk: New release fixes four critical security vulnerabilities
bugzilla-daemon at bugs.sourcemage.org
bugzilla-daemon at bugs.sourcemage.org
Mon Jul 23 13:13:44 EDT 2007
http://bugs.sourcemage.org/show_bug.cgi?id=13899
Summary: asterisk: New release fixes four critical security
vulnerabilities
Product: Codex
Version: stable grimoire
Platform: Other
URL: http://www.asterisk.org/node/48367
OS/Version: other
Status: NEW
Severity: critical
Priority: P2
Component: telephony
AssignedTo: sm-grimoire-bugs at lists.ibiblio.org
ReportedBy: m.spitzbarth at gmx.de
The asterisk security mailinglist has announced several vunerabilites. They are
fixed in version 1.4.8.
The announcements are available as pdfs from http://www.asterisk.org/node/48367
In short:
* Buffer overflow in the iax2 channel driver
* Another buffer overflow in the iax2 channel driver
* remotely exploitable crash vulnerability in the skinny channel driver (segfault)
* remotely exploitable crash vulnerability in the STUN implementation in the RTP
stack
I'm currently working on the update and I'll request integration to stable as
soon as the changes are pushed to git.
--
Configure bugmail: http://bugs.sourcemage.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
More information about the SM-Grimoire-Bugs
mailing list