SourceMage Grimoire Bug List

[bugzilla-daemon AT bugs.sourcemage.org]

http://bugs.sourcemage.org/show_bug.cgi?id=13739

           Summary: asterisk: Security fixes available
           Product: Codex
           Version: stable grimoire
          Platform: All
        OS/Version: other
            Status: NEW
          Severity: normal
          Priority: P2
         Component: telephony
        AssignedTo: sm-grimoire-bugs AT lists.ibiblio.org
        ReportedBy: m.spitzbarth AT gmx.de


There is a new security update for asterisk available which fixes two issues.
I will update it in test and report the commit id in order to request
integration to stable.

http://lists.digium.com/pipermail/asterisk-announce/2007-April/000059.html 
says
<snip>
>    
> |--------------------+---------------------------------------------------|
>    |      Summary       | Multiple problems in SIP channel parser handling  
> |
>    |                    | response codes                                    
> |
>    
> |--------------------+---------------------------------------------------|
>    | Nature of Advisory | Denial of Service                                 
> |
>    
> |--------------------+---------------------------------------------------|
>    |   Susceptibility   | Remote Unauthenticated Sessions                   
> |
>    
> |--------------------+---------------------------------------------------|
>    |      Severity      | Critical                                          
> |
>    
> |--------------------+---------------------------------------------------|
>    |   Exploits Known   | No                                                
> |
>    
> |--------------------+---------------------------------------------------|
<snip>

The second security issue is reported on
http://lists.digium.com/pipermail/asterisk-announce/2007-April/000060.html
and says:
<snip>
>    
> |---------------------+--------------------------------------------------|
>    |       Summary       | Remote Crash Vulnerability in Manager Interface  
> |
>    
> |---------------------+--------------------------------------------------|
>    | Nature of Advisory  | Denial of Service                                
> |
>    
> |---------------------+--------------------------------------------------|
>    |   Susceptibility    | Remote Unauthenticated Sessions                  
> |
>    
> |---------------------+--------------------------------------------------|
>    |      Severity       | Moderate                                         
> |
>    
> |---------------------+--------------------------------------------------|
>    |   Exploits Known    | Yes                                              
> |
>    
> |---------------------+--------------------------------------------------|
<snip>

-- 
Configure bugmail: http://bugs.sourcemage.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.