[AsteriskBrasil] Fwd: [asterisk-dev] Asterisk 1.4.11 released
Denis Galvão
denisgalvao em gmail.com
Quarta Agosto 22 08:43:45 BRT 2007
Para conhecimento.
--
Denis Galvão
AsteriskBrasil.org
Ajude a comunidade AsteriskBrasil.org, compre uma camiseta!
http://www.voipmania.com.br
Begin forwarded message:
> From: The Asterisk Development Team <asteriskteam em digium.com>
> Date: 21 de agosto de 2007 17h15min13s GMT-03:00
> To: undisclosed-recipients:;
> Subject: [asterisk-dev] Asterisk 1.4.11 released
> Reply-To: Asterisk Developers Mailing List <asterisk-
> dev em lists.digium.com>
>
> The Asterisk development team has released version 1.4.11.
>
> This version contains numerous bug fixes. One of these is for a
> security issue
> in chan_sip. The issue is that SIP dialog history was being stored
> in memory
> regardless if the option for this was turned on or off. This could
> be abused to
> cause a system using chan_sip to run out of memory.
>
> The security issue is documented in AST-2007-020. Affected systems
> include any
> that are using chan_sip. Also, only Asterisk 1.4 is affected.
> Asterisk 1.2 is
> not vulnerable to this issue.
> * http://downloads.digium.com/pub/asa/AST-2007-020.pdf
>
> The name prefix for our security advisories has been changed from
> ASA to AST.
> The ASA scheme was already in use by another company before we
> started using it.
>
> This release is available for download from
> http://downloads.digium.com/pub/telephony/asterisk/.
>
> Thank you for your support!
>
> _______________________________________________
> --Bandwidth and Colocation Provided by http://www.api-digital.com--
>
> asterisk-dev mailing list
> To UNSUBSCRIBE or update options visit:
> http://lists.digium.com/mailman/listinfo/asterisk-dev
Mais detalhes sobre a lista de discussão AsteriskBrasil