Asterisk 15.6.2 and 16.0.1 Now Available (Security)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



The Asterisk Development Team would like to announce security releases for
Asterisk 15 and 16. The available releases are released as versions 15.6.2 and
16.0.1.

These releases are available for immediate download at

https://downloads.asterisk.org/pub/telephony/asterisk/releases

The following security vulnerabilities were resolved in these versions:


There is a buffer overflow vulnerability in dns_srv and dns_naptr functions of
Asterisk that allows an attacker to crash Asterisk via a specially crafted DNS
SRV or NAPTR response. The attackerâ??s request causes Asterisk to segfault
and crash.

For a full list of changes in the current releases, please see the ChangeLogs:

ChangeLog-15.6.2
ChangeLog-16.0.1

The security advisory is available at:

AST-2018-010.pdf

Thank you for your continued support of Asterisk!
-- 
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

asterisk-announce mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-announce

[Index of Archives]     [Asterisk App Development]     [PJ SIP]     [Asterisk SS7]     [Gnu Gatekeeper]     [IETF Sipping]     [Info Cyrus]     [ALSA User]     [Fedora Linux Users]     [Linux SCTP]     [DCCP]     [Gimp]     [Yosemite News]     [Deep Creek Hot Springs]     [Yosemite Campsites]     [ISDN Cause Codes]     [Asterisk Books]

  Powered by Linux