[AsteriskBrasil] Fwd: [asterisk-dev] Asterisk 1.4.41.2, 1.6.2.18.2, and 1.8.4.4 Now Available (Security Releases)

Denis Galvão - Gmail denisgalvao em gmail.com
Terça Junho 28 22:45:33 BRT 2011



Begin forwarded message:

> From: Asterisk Development Team <asteriskteam em digium.com>
> Date: 28 de junho de 2011 17:54:57 BRT
> To: asteriskteam em digium.com
> Subject: [asterisk-dev] Asterisk 1.4.41.2, 1.6.2.18.2, and 1.8.4.4 Now Available (Security Releases)
> Reply-To: Asterisk Developers Mailing List <asterisk-dev em lists.digium.com>
> 
> The Asterisk Development Team has announced the release of Asterisk versions
> 1.4.41.2, 1.6.2.18.2, and 1.8.4.4, which are security releases.
> 
> These releases are available for immediate download at
> http://downloads.asterisk.org/pub/telephony/asterisk/releases
> 
> The release of Asterisk 1.4.41.2, 1.6.2.18.2, and 1.8.4.4 resolves the
> following issue:
> 
> AST-2011-011: Asterisk may respond differently to SIP requests from an
> invalid SIP user than it does to a user configured on the system, even when the
> alwaysauthreject option is set in the configuration. This can leak information
> about what SIP users are valid on the Asterisk system.
> 
> For more information about the details of this vulnerability, please read
> the security advisory AST-2011-011, which was released at the same time as this
> announcement.
> 
> For a full list of changes in the current releases, please see the ChangeLog:
> 
> http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.4.41.2
> http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.18.2
> http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.4.4
> 
> Security advisory AST-2011-011 is available at:
> 
> http://downloads.asterisk.org/pub/security/AST-2011-011.pdf
> 
> Thank you for your continued support of Asterisk!
> 
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> 
> asterisk-dev mailing list
> To UNSUBSCRIBE or update options visit:
>  http://lists.digium.com/mailman/listinfo/asterisk-dev

-------------- Próxima Parte ----------
Um anexo em HTML foi limpo...
URL: http://listas.asteriskbrasil.org/pipermail/asteriskbrasil/attachments/20110628/74a7c586/attachment.htm 


Mais detalhes sobre a lista de discussão AsteriskBrasil