Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora: 2009-9374 Moderate: Asterisk Remote Crash Issue

fedora
Calendar Grey September 25, 2009
Dist Fedora Esm H88
The recent patch for Asterisk on Fedora 10 tackles critical vulnerabilities that could be exploited from a distance, enhancing overall security and resolving various bugs.
Update to 1.6.0.15 to fix many bugs...

Summary

Asterisk is a complete PBX in software. It runs on Linux and provides

all of the features you would expect from a PBX and more. Asterisk

does voice over IP in three protocols, and can interoperate with

almost all standards-based telephony equipment using relatively

inexpensive hardware.

Update Information:

Update to 1.6.0.15 to fix many bugs...

Topics%20covered

Topics Covered

security advisory Fedora bug fix remote crash asterisk

Change Log

* Thu Sep 3 2009 Jeffrey C. Ollie - 1.6.0.15-1 - Drop chan_mobile, too difficult to maintain as a patch - Update to 1.6.0.15 and drop unneeded patches * Fri Jan 23 2009 Jeffrey C. Ollie - 1.6.0.5-2 - Add a patch to fix a problem with the manager interface. * Fri Jan 23 2009 Jeffrey C. Ollie - 1.6.0.5-1 - Update to 1.6.0.5 to fix regressions caused by fixes for AST-2009-001/CVE-2009-0041 (Asterisk 1.6.0.4 was never released). * Thu Jan 8 2009 Jeffrey C. Ollie - 1.6.0.3-1 - Update to 1.6.0.3 to fix AST-2009-001/CVE-2009-0041 - http://downloads.asterisk.org/pub/security/ * Sun Jan 4 2009 Jeffrey C. Ollie - 1.6.0.2-4 - Fedora Directory Server compatibility patch/subpackage. BZ#452176 * Sun Jan 4 2009 Jeffrey C. Ollie - 1.6.0.2-3 - Don't package func_curl in the main package. BZ#475910 - Fix up paths. BZ#477238 * Sun Jan 4 2009 Jeffrey C. Ollie - 1.6.0.2-2 - Add patch to fix compilation on PPC * Sun Jan 4 2009 Jeffrey C. Ollie - 1.6.0.2-1 - Update to 1.6.0.2 * Wed Nov 5 2008 Jeffrey C. Ollie - 1.6.0.1-3 - Fix issue with init script giving wrong path to config file.

References


[ 1 ] Bug #516990 - CVE-2009-2726 asterisk: Remote Crash Vulnerability in SIP channel driver (AST-2009-005) https://bugzilla.redhat.com/show_bug.cgi?id=516990 [ 2 ] Bug #489725 - CVE-2009-0871 asterisk: remote crash in SIP channel driver https://bugzilla.redhat.com/show_bug.cgi?id=489725 [ 3 ] Bug #521164 - CVE-2009-2346 asterisk: IAX2 DoS vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=521164

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update asterisk' at the command line. For more information, refer to "Managing Software with yum", available at .

Name: asterisk
Product: Fedora 10
Version: 1.6.0.15
Release: 1.fc10
URL: https://www.asterisk.org/
Summary: The Open Source PBX

Topics%20covered

Topics Covered

security advisory Fedora bug fix remote crash asterisk

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here