VoIP Mailing List Archives

[mmichelson at digium.com]

The Asterisk development team has released Asterisk-Addons version 1.2.7, 1.4.9,
and 1.6.0-beta4 to address a major security vulnerability in the ooh323 channel
driver. The releases may be downloaded from http://downloads.digium.com/.

AST-2008-009 details a remote crash vulnerability in the ooh323 channel driver:
* http://downloads.digium.com/pub/security/AST-2008-009.pdf
* All users of chan_ooh323 in all versions of Asterisk-Addons are affected

In addition to the security vulnerability, there are a number of bug fixes
included in this release. Changelogs for the various releases may be found at
the following addresses:

* Asterisk-Addons 1.2.9:
http://svn.digium.com/view/asterisk-addons/tags/1.2.9/ChangeLog?view=markup

* Asterisk-Addons 1.4.7:
http://svn.digium.com/view/asterisk-addons/tags/1.4.7/ChangeLog?view=markup

* Asterisk-Addons 1.6.0-beta4:
http://svn.digium.com/view/asterisk-addons/tags/1.6.0-beta4/ChangeLog?view=markup