Skip to Content.
Sympa Menu

sm-grimoire-bugs - [SM-Grimoire-Bugs] [Bug 13739] New: asterisk: Security fixes available

sm-grimoire-bugs AT lists.ibiblio.org

Subject: SourceMage Grimoire Bug List

List archive

Chronological Thread  
  • From: bugzilla-daemon AT bugs.sourcemage.org
  • To: sm-grimoire-bugs AT lists.ibiblio.org
  • Subject: [SM-Grimoire-Bugs] [Bug 13739] New: asterisk: Security fixes available
  • Date: 25 Apr 2007 07:27:14 -0000

http://bugs.sourcemage.org/show_bug.cgi?id=13739

Summary: asterisk: Security fixes available
Product: Codex
Version: stable grimoire
Platform: All
OS/Version: other
Status: NEW
Severity: normal
Priority: P2
Component: telephony
AssignedTo: sm-grimoire-bugs AT lists.ibiblio.org
ReportedBy: m.spitzbarth AT gmx.de


There is a new security update for asterisk available which fixes two issues.
I will update it in test and report the commit id in order to request
integration to stable.

http://lists.digium.com/pipermail/asterisk-announce/2007-April/000059.html
says
<snip>
>
> |--------------------+---------------------------------------------------|
> | Summary | Multiple problems in SIP channel parser handling
> |
> | | response codes
> |
>
> |--------------------+---------------------------------------------------|
> | Nature of Advisory | Denial of Service
> |
>
> |--------------------+---------------------------------------------------|
> | Susceptibility | Remote Unauthenticated Sessions
> |
>
> |--------------------+---------------------------------------------------|
> | Severity | Critical
> |
>
> |--------------------+---------------------------------------------------|
> | Exploits Known | No
> |
>
> |--------------------+---------------------------------------------------|
<snip>

The second security issue is reported on
http://lists.digium.com/pipermail/asterisk-announce/2007-April/000060.html
and says:
<snip>
>
> |---------------------+--------------------------------------------------|
> | Summary | Remote Crash Vulnerability in Manager Interface
> |
>
> |---------------------+--------------------------------------------------|
> | Nature of Advisory | Denial of Service
> |
>
> |---------------------+--------------------------------------------------|
> | Susceptibility | Remote Unauthenticated Sessions
> |
>
> |---------------------+--------------------------------------------------|
> | Severity | Moderate
> |
>
> |---------------------+--------------------------------------------------|
> | Exploits Known | Yes
> |
>
> |---------------------+--------------------------------------------------|
<snip>

--
Configure bugmail: http://bugs.sourcemage.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



  • [SM-Grimoire-Bugs] [Bug 13739] New: asterisk: Security fixes available, bugzilla-daemon, 04/25/2007

Archive powered by MHonArc 2.6.24.

Top of Page