The Asterisk development team has released Asterisk-Addons version 1.2.7, 1.4.9, and 1.6.0-beta4 to address a major security vulnerability in the ooh323 channel driver. The releases may be downloaded from http://downloads.digium.com/. AST-2008-009 details a remote crash vulnerability in the ooh323 channel driver: * http://downloads.digium.com/pub/security/AST-2008-009.pdf * All users of chan_ooh323 in all versions of Asterisk-Addons are affected In addition to the security vulnerability, there are a number of bug fixes included in this release. Changelogs for the various releases may be found at the following addresses: * Asterisk-Addons 1.2.9: http://svn.digium.com/view/asterisk-addons/tags/1.2.9/ChangeLog?view=markup * Asterisk-Addons 1.4.7: http://svn.digium.com/view/asterisk-addons/tags/1.4.7/ChangeLog?view=markup * Asterisk-Addons 1.6.0-beta4: http://svn.digium.com/view/asterisk-addons/tags/1.6.0-beta4/ChangeLog?view=markup
|