Asterisk Project Security Advisory -
++
| Product |
Asterisk |
|+---|
The Asterisk development team has released Asterisk versions 1.2.23 and
1.4.9.
These releases contain bug fixes, including one for a security vulnerability.
The vulnerability is a potential Denial of Service attack when the Asterisk
IAX2 channel driver is configured to allow unauthenticated calls
Asterisk Project Security Advisory - ASA-2007-019
++
| Product | Asterisk |
The Asterisk development team has released Asterisk versions 1.2.24 and 1.4.10.
Version 1.2.24 is the final 1.2 release that contains normal bug fixes. The 1.2
branch will only be maintained with security fix releases from now until it is
completely deprecated.
Version 1.4.10 contains numerous
The Asterisk.org development team has announced the release of Zaptel
versions 1.2.20 and 1.4.5. These releases are maintenance releases that
fix various known issues. See the ChangeLog included in the releases for
a full list of changes. The ChangeLogs are also available separately on
the ftp
The Asterisk development team has released version 1.4.11.
This version contains numerous bug fixes. One of these is for a security issue
in chan_sip. The issue is that SIP dialog history was being stored in memory
regardless if the option for this was turned on or off. This could be abused
Asterisk Project Security Advisory - AST-2007-020
++
| Product | Asterisk |
The Asterisk.org development team has announced the release of Zaptel
versions 1.2.20.1 and 1.4.5.1. These releases are to correct an error in
the install target in the Makefile of the 1.4.5 and 1.2.20 Zaptel
releases, as well as a handful of other issues. See the respective
Changelogs for
Asterisk Project Security Advisory - AST-2007-021
++
| Product | Asterisk |
|+---|
The Asterisk Development Team has announced the releases of Asterisk 1.4.12 and
Asterisk-addons 1.4.3.
The Asterisk-addons release contains just a few fixes for the modules in that
package, but the Asterisk release contains a large number of bug fixes for all
parts of Asterisk.
There are many
Asterisk Project Security Advisory - AST-2007-022
++
| Product | Asterisk |
The Asterisk Development Team has released version 1.4.13.
This release fixes a couple of security issues in the implementation of IMAP
storage for voicemail. One of the issues is remotely exploitable. Any systems
that do not use IMAP storage for voicemail are not affected by these issues
The Asterisk.org development team has announced the release of Libpri
versions 1.2.6 and 1.4.2. These releases fix the 2 B-channel transfer
feature in both 1.2 and 1.4 on the NI2 and 5ESS switch types as well as
a handful of other fixes. See the respective Changelogs for more details.
Both
The Asterisk development team has released versions 1.2.8 and 1.4.4 of
Asterisk-addons.
This release contains a fix for a security vulnerability in the cdr_addon_mysql
module. This module is vulnerable to SQL injection. See the details on the
security issue in the published advisory:
http
Asterisk Project Security Advisory - AST-2007-023
++
| Product | Asterisk-Addons |
Asterisk Project Security Advisory - AST-2007-023
++
| Product | Asterisk-Addons |
The Asterisk.org development team has announced the release of Zaptel
versions 1.2.21 and 1.4.6. These releases contain many bug fixes as well
as performance enhancements (Too many to list here). A couple of major
changes: there is an update to the Octasic API version as well as a
of July, 2006.
Once the release is made, a branch will be created. This branch will
then receive maintenance for bug fixes only. At that point, the
development cycle will start over to prepare for the next major release
of Asterisk, scheduled for January of 2007.
The Asterisk Development Team
Asterisk 1.2.3 has been released and contains a number of bug fixes. One
of the fixes is for a critical bug introduced in version 1.2.2 that will
cause an Asterisk server to stop processing calls correctly when the
server's clock reaches January 25th, 2006 (today). It is vital to
upgrade all
modules from Digium. For further
information about all changes that have been made, consult the
appropriate ChangeLog in the tarball or on the ftp site.
Thank you!
-- The Asterisk Development Team
___
--Bandwidth and Colocation provided by Easynews.com
In an effort to ensure that every licensing issue brought to our
attention is handled fully and openly, we have created a new issue
tracker for this purpose. It is located at:
http://licensing.digium.com
The tracker is open to the public, and we encourage all interested
parties to post their
The Asterisk/Zaptel development team is pleased to announce the release
of Zaptel 1.2.4.
This release contains a number of bug fixes, along some with new
functionality:
* The driver for the Xorcom Astribank has been incorporated into this
distribution. Xorcom will provide primary support and
The Asterisk/Zaptel development team is pleased to announce the release
of Zaptel 1.2.4.
This release contains a number of bug fixes, along some with new
functionality:
* The driver for the Xorcom Astribank has been incorporated into this
distribution. Xorcom will provide primary support and
of both [EMAIL PROTECTED] and [EMAIL PROTECTED] Both
are available on the keyserver, pgp.mit.edu.
Thank you for your continued support of Asterisk!
-- The Asterisk Development Team
___
--Bandwidth and Colocation provided by Easynews.com --
Asterisk-Users
-addons-1.2.2.tar.gz
Thanks!
-- The Asterisk Development Team
___
--Bandwidth and Colocation provided by Easynews.com --
Asterisk-Users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users
Greetings,
The software G.729 codec module from Digium has been updated for all platforms.
There are x86_32 and x86_64 versions optimized for specific processors
available for both Asterisk 1.6 and 1.4 for the following platforms.
* Linux
* Solaris 10
* FreeBSD 7.0
* FreeBSD 6.1
Greetings,
The Asterisk.org development team has released Asterisk 1.4.19-rc1. This is a
test release for 1.4.19. The official 1.4.19 release will be made after a
1.4.19 release candidate goes through a few days of testing without finding any
major regressions.
This release is available for
Greetings,
The Asterisk.org development team has released Asterisk 1.6.0-beta5. As of this
beta of 1.6.0, 1.6.0 is now feature frozen. In addition to a number of bug
fixes, the following new features have been added since beta4:
* The SMDI interface in Asterisk has been reworked to fix a
The Asterisk.org development team has released Asterisk 1.4.19-rc2. This is a
test release for 1.4.19. The official 1.4.19 release will be made after a
1.4.19 release candidate goes through a few days of testing without finding any
major regressions. This release contains one crash regression
The Asterisk.org development team has released four new versions of Asterisk to
address critical security vulnerabilities.
AST-2008-002 details two buffer overflows that were discovered in RTP codec
payload type handling.
* http://downloads.digium.com/pub/security/AST-2008-002.pdf
* All users
The Asterisk.org development team has released Asterisk versions 1.4.19-rc4 and
1.6.0-beta7.
These releases contain significant bug fixes over the previous pre-releases of
1.4.19 and 1.6.0. We would like to thank everyone for all of the help with
pre-release testing. Unless anything new comes up,
The Asterisk development team has released version 1.4.19 of Asterisk and
1.6.0-beta3 of Asterisk-addons.
The new Asterisk-addons release contains a few bug fixes over the previous
version.
http://svn.digium.com/view/asterisk-addons/tags/1.6.0-beta3/ChangeLog?view=markup
Asterisk 1.4.19
The Asterisk.org development team has announced the release of Zaptel
versions 1.2.25 and 1.4.10. These releases contain many bug fixes as
well as performance enhancements.
A couple of the more major changes include: modifications to the
wctdm24xxp and wcte12xp drivers to increase interrupt
The Asterisk development team has released versions 1.2.28, 1.4.19.1, and
1.6.0-beta8.
All of these releases contain a security patch for the vulnerability described
in the AST-2008-006 security advisory. 1.6.0-beta8 is also a regular update to
the 1.6.0 series with a number of bug fixes over
The Asterisk.org development team has announced the release of Zaptel
version 1.4.10.1. This release is a bug fix release for a regression in
which the Zaptel udev rules were not installed correctly, as well as a
few minor fixes in the xpp drivers.
This release is available as a tarball as
The Asterisk development team has released Asterisk version 1.4.20-rc1.
This release is a release candidate for the upcoming official release of 1.4.20.
It contains a large number of bug fixes over the previous release, 1.4.19. We
would like to encourage the community to assist us in testing
The Asterisk development team has released Asterisk version 1.4.20-rc2.
This release is a release candidate for the upcoming official release of 1.4.20.
It includes a fix for a SIP channel driver regression introduced in 1.4.20-rc1,
among a number of other changes. For a full list of changes
The Asterisk.org development team has released Asterisk version 1.4.19.2.
This release includes some IAX2 channel driver updates. Asterisk 1.4.19.1 was
released to address an IAX2 security vulnerability. Unfortunately, the changes
to address the security issue had an unfortunate negative
The Asterisk.org development team has released Asterisk versions 1.4.20-rc3 and
1.6.0-beta9.
These releases are intended to encourage community testing to improve the
quality of the upcoming 1.4.20 and 1.6.0 releases. The testing process has
proven extremely useful and we would like to thank
The Asterisk.org development team has released Asterisk version 1.4.20.
This release contains a large number of bug fixes over the previous release.
For a full list of changes, see the ChangeLog included in the release.
http://svn.digium.com/view/asterisk/tags/1.4.20/ChangeLog?view=markup
The Asterisk development team has released Asterisk version 1.4.21-rc2.
This release is a release candidate for the upcoming official release of
1.4.21. A few bugs have been fixed since 1.4.21-rc2. Please continue
to assist in testing before we release 1.4.21!
The release candidate
The Asterisk.org development team has released Asterisk version 1.4.21.
This release is a regular bug fix release for the 1.4 series of
Asterisk. For a full list of changes, see the ChangeLog included in the
release.
* http://svn.digium.com/view/asterisk/tags/1.4.20/ChangeLog?view=markup
The Asterisk.org development team has released Asterisk version 1.4.21.1.
This release includes a critical bug fix for 1.4.21. All users that
experienced lockups when upgrading to 1.4.21 should have their issues
resolved with this update.
Asterisk 1.4.21.1 is available for download from the
The Asterisk development team has released version 1.4.5 of libpri. This
release was made solely to correct a problem introduced in version 1.4.4.
In February of 2008, a change was made in libpri to support inband audio
(progress) when the far end of a PRI circuit issues a RELEASE message
2008 and will be low-key and open only to serious
developers and contributors. We are expecting to keep the attendance to
50 people or less, including many members of the Digium Asterisk
development team (currently around 15 people).
If you wish to participate, please contact Kevin P. Fleming so he
The Asterisk.org development team has released Asterisk versions
1.4.21.2 and 1.2.30.
Both of these releases include fixes for two security issues. Both of
these issues affect users of the IAX2 channel driver. For more details
on these vulnerabilities, see the published security advisories,
The Asterisk development team is pleased to announce new releases of
Asterisk and DAHDI.
For more information on the reasoning behind the transition to DAHDI,
please see the following post:
http://blogs.digium.com/2008/05/19/zaptel-project-being-renamed-to-dahdi/
The list of packages released
The Asterisk.org development team has released Asterisk versions
1.4.22-rc5 and 1.6.0-rc6, as well as Zaptel version 1.4.12.1. These
releases are available for immediate download from
http://downloads.digium.com/.
This update for Zaptel includes a fix for an issue that would cause the
build to
The Asterisk development team is pleased to announce the first offical release
of
the Digium Asterisk Hardware Device Interface (DAHDI).
The list of packages released today includes:
dahdi-linux 2.0.0
dahdi-tools 2.0.0
dahdi-linux-complete 2.0.0+2.0.0
Both dahdi-linux and dahdi-tools
of
large changes is minimized in a single point release. Even as 1.6.0 is
being released, the Asterisk development team is already working on what
new things will be in 1.6.1 and beyond. To take a look ahead to see
what features have been added for releases that have not yet been made,
take a look
The Asterisk.org development team has released Asterisk 1.6.1-beta1.
While Asterisk 1.6.0 was in the beta and release candidate stage, the
development team was also working on merging new things for Asterisk
1.6.1. Now that 1.6.0 has been released, the testing cycle for Asterisk
1.6.1 has begun.
Asterisk Project Security Advisory - ASA-2007-010
++
| Product | Asterisk |
Asterisk Project Security Advisory - ASA-2007-011
++
| Product | Asterisk |
Asterisk Project Security Advisory - ASA-2007-012
++
| Product | Asterisk |
The Asterisk.org development team has released Asterisk version 1.2.18.
This release contains a large number of fixes, including:
- A recently published security vulnerability in the manager interface
(ASA-2007-012)
- Another recently published security vulnerability in the SIP channel
The Asterisk.org development team has released Asterisk version 1.4.3.
This release contains a large number of fixes, including:
- A recently published security vulnerability in the manager interface
(ASA-2007-012)
- Two recently published security vulnerabilities in the SIP channel
The Asterisk.org development team has released Asterisk-addons version
1.2.6.
This release contains a large number of fixes, including:
- Fix some memory leaks in res_config_mysql
- Fix various issues in the OOH323 channel driver
A full list of changes is available in the ChangeLog.
Thank
The Asterisk.org development team has released Asterisk-addons version
1.4.1.
This release contains a large number of fixes, including:
- Fix some memory leaks in res_config_mysql
- Fix various issues in the OOH323 channel driver
- Module updates to be compatible with the latest version of
The Asterisk.org development team has released Zaptel version 1.2.17.1.
This release was made shortly after 1.2.17 to fix a bug in that build.
This release contains a number of fixes and enhancements, including:
- Added the ability to monitor pre-echo cancellation audio with ztmonitor
-
The Asterisk.org development team has released Zaptel version 1.4.2.1.
This release was made shortly after 1.4.2 to fix a bug in that build.
This release contains a number of fixes and enhancements, including:
- Added the ability to monitor pre-echo cancellation audio with ztmonitor
- Fixed
The Asterisk.org development team has released Asterisk version 1.4.4.
A good number of significant bugs have been fixed in the past few days,
so a new release was made to get these fixes to the community as soon as
possible. Some of the fixes include:
- Fix a crash in chan_zap
- Fix some
Greetings Asterisk Enthusiasts,
Last week, about 50 developers gathered in Atlanta, GA, USA at the
Georgia Tech University's Information Security Center (GTISC) for a week
of discussion about the future of Asterisk. One of the topics that came
up was the future of the existing Asterisk release
The Asterisk development team is proud to release Asterisk versions
1.2.19 and 1.4.5.
There has been a very large number of bugs fixed since the last release,
including crashes and other critical issues. There were 244 commits to
the 1.4 source tree and 74 commits to the 1.2 source tree since
The Asterisk development team has announced the releases of
Asterisk-addons 1.2.7 and 1.4.2.
Version 1.2.7 contains some minor updates to the H323 channel driver
that is in this package. Version 1.4.2 contains some additional bug
fixes which include compatibility updates for Asterisk 1.4.5
The Asterisk development team is proud to announce the releases of
versions 1.2.20 and 1.4.6!
These releases are regular maintenance releases. They have been made
just a couple of weeks after the previous set of releases because the
development team has been working especially hard on fixing
The Asterisk development team is proud to announce a new batch of
releases. There are new releases of Asterisk and Libpri for both the
1.2 and 1.4 series.
The development team has been working especially hard on fixing bugs in
our existing release branches. These releases are regular
The Asterisk development team has released Asterisk version 1.2.21.1 and
1.4.7.1. These releases are minor updates to the releases that were
made yesterday to fix a couple of introduced issues. One issue was
related to the ODBC realtime driver. Another was related to music on hold.
Thank you
The Asterisk.org development team has announced the release of Zaptel
versions 1.2.18 and 1.4.4. These releases are maintenance releases that
fix various known issues. See the ChangeLog included in the releases
for a full list of changes. The ChangeLogs are also available
separately on the ftp
The Asterisk development team has released Asterisk versions 1.2.22 and
1.4.8.
These releases contain fixes for four critical security vulnerabilities.
One of these vulnerabilities is a remotely exploitable stack buffer
overflow, which could allow an attacker to execute arbitrary code
Asterisk Project Security Advisory - ASA-2007-014
++
| Product| Asterisk|
Asterisk Project Security Advisory - ASA-2007-015
++
| Product | Asterisk |
Asterisk Project Security Advisory - ASA-2007-016
++
| Product | Asterisk |
Asterisk Project Security Advisory - ASA-2007-017
++
| Product | Asterisk |
The Asterisk development team is pleased to announce the release of
Zaptel 1.2.13.
This release contains a large number of bug fixes, an important
performance improvement for most Digium cards, and support for new
Digium hardware and some significant improvements in the XPP driver for
Xorcom's
The Asterisk development team is pleased to announce the release of
Asterisk 1.2.15.
This release contains a large number of bug fixes, and some significant
improvements:
* Support for Zaptel-based transcoder hardware, initially the Digium
TC400B 92/96 channel transcoder.
* Handling
The Asterisk and Zaptel development team has released version 1.2.14 of
Zaptel.
This release contains only minor changes, the most important of which
relates to single-port module support on Digium's TDM800P analog
interface card (previously these modules were not properly recognized by
the
The Asterisk and Zaptel development teams have released Zaptel 1.2.15.
This release contains a significant Astribank (XPP) driver update,
support for Digium's TE120P card, and various bug fixes.
Thanks for your support of Asterisk and Zaptel!
___
The Asterisk and Zaptel development teams have released Asterisk 1.2.16.
This release contains a number of bug fixes, including a fix for a
recently discovered security vulnerability. All Asterisk 1.2 users are
urged to update to this release as soon as possible.
Thanks for your support of
The Asterisk and Zaptel development teams have released Asterisk 1.4.1.
This release contains a very large number of bug fixes, including a fix
for the recently discovered security vulnerability.
It also contains a complete rewrite of the Shared Line Appearance (SLA)
support that was first
The Asterisk and Zaptel development teams have released Zaptel version
1.2.16.
In addition to minor bug fixes, this release fixes a build-time problem
on systems where the default language is not English, and also corrects
a regression in the driver for the Digium dual- and quad-span cards with
The Asterisk and Zaptel development teams have released Asterisk version
1.2.17.
Along with minor bug fixes, this release incorporates a fix for the SIP
DoS vulnerability recently discovered by INRIA Lorraine
(http://voipsa.org/pipermail/voipsec_voipsa.org/2007-March/002275.html).
All users of
The Asterisk and Zaptel development teams have released Asterisk 1.4.2.
In addition to minor bug fixes, this release includes:
- improved SLA support, sample configurations and documentation
- fixes for incoming DTMF handling in the IAX2 channel driver
There are also two security-related
The Asterisk and Zaptel development teams have released Zaptel version
1.4.1.
This release contains a number of new features, along with some minor
updates required for compatibility with Asterisk 1.4.2. The new features
include:
- Support for the Digium Wildcard TE120P T1/E1/J1 card
- Support
The Asterisk.org development team has created the third release
candidate for Asterisk 1.4.23. 1.4.23-rc3 is available for immediate
download from http://downloads.digium.com/.
This release candidate contains multiple fixes since 1.4.23-rc2
including issues with transfers and DTMF. For a full
The Asterisk.org development team has created the fourth beta release
for Asterisk 1.6.1. 1.6.1-beta4 is available for immediate
download from http://downloads.digium.com/.
This beta release contains fixes for multiple issues since 1.6.1-beta3
including crashes and a problem in chan_sip that
The Asterisk.org development team has announced the release of Asterisk
1.2.31, 1.4.22.1, and 1.6.0.3. These releases are available for
immediate download from http://downloads.digium.com/.
This update for Asterisk includes a security fix for chan_iax2. Please
see the associated security
Grey Man wrote:
A single CDR should not be able to cover several Dial attempts or even
multiple destinations within the same Dial attempts. If you think of
Dial as just another application and of CDRs being designed to reflect
the lifetime of a channel then things are simplified. If a Dial or
The Asterisk.org development team has published Asterisk 1.4.23-rc4.
This release candidate is available for download from
http://downloads.digium.com/.
A number of critical issues have been resolved since the last release
candidate for 1.4.23. We hope to have this be the final release
The Asterisk.org development team is proud to announce the release of
Asterisk 1.4.23. This release is available for download from
http://downloads.digium.com/.
This release is a significant bug fix update for the 1.4 release series.
The following list of bugs were resolved with the
The Asterisk Development Team is pleased to announce the first release candidate
of Asterisk 1.6.0.4, tagged as version 1.6.0.4-rc1. Release candidate
1.6.0.4-rc1 is available for immediate download at http://downloads.digium.com/.
This release candidate includes fixes for OS build compatibility
The Asterisk.org development team has announced the release of Asterisk
1.2.31.1, 1.4.22.2, 1.4.23.1, and 1.6.0.5. These releases are available for
immediate download from http://downloads.digium.com/.
This update for Asterisk includes a security fix for chan_iax2. Please see the
associated
The Asterisk Development Team is pleased to announce the first release candidate
of Asterisk 1.6.1, tagged as version 1.6.1-rc1. Release candidate 1.6.1-rc1 is
available for immediate download at http://downloads.digium.com/.
This release candidate includes a fix to SIP registrations when using
The Asterisk Development Team is pleased to announce the first release candidate
of Asterisk 1.6.0.6, tagged as version 1.6.0.6-rc1. Release candidate
1.6.0.6-rc1 is available for immediate download at http://downloads.digium.com/.
This release of Asterisk fixes several issues related to overall
The Asterisk.org development team is proud to announce the release of
Asterisk 1.6.0.6. This release is available for download from
http://downloads.digium.com/.
This release is a significant bug fix update for the 1.6.0 release series.
In addition, this release is recommended for all users of
The Asterisk Development Team is pleased to announce the first release
candidate of Asterisk 1.4.24, tagged as version 1.4.24-rc1. Release candidate
1.4.24-rc1 is available for immediate download at http://downloads.digium.com/
In addition to other bug fixes, this release candidate fixes several
The Asterisk Development Team is pleased to announce the first release
candidate of Asterisk 1.6.0.7, tagged as version 1.6.0.7-rc1. Release candidate
1.6.0.7-rc1 is available for immediate download at http://downloads.digium.com/
In addition to other bug fixes, this release candidate resolves
The Asterisk Development Team is pleased to announce the second release
candidate of Asterisk 1.6.1, tagged as version 1.6.1.0-rc2. Release candidate
1.6.1.0-rc2 is available for immediate download at http://downloads.digium.com/
In addition to other bug fixes, this release candidate adds
The Asterisk Development Team is proud to announce release of Asterisk 1.4.24,
and is available for immediate download at http://downloads.digium.com/
In addition to other bug fixes, this release candidate fixes several crash
issues, and resolved some remaining issues related to call pickup
The Asterisk.org development team is pleased to announced the release of
Asterisk release candidates 1.6.0.7-rc2, 1.6.1.0-rc3, and beta release
1.6.2.0-beta1. Additionally, new release candidates of Asterisk-Addons
1.6.0.2-rc1 and 1.6.1.0-rc3 have been created. Note that the 1.6.1 series of
The Asterisk development team is pleased to announce the release of Asterisk
Core Sounds version 1.4.15, Extra Sounds 1.4.8, and Freeplay Music On Hold
sound files. These sound files are available at
http://downloads.digium.com/pub/telephony/sounds/. Future versions of
Asterisk will do
1 - 100 of 734 matches
Mail list logo
