Alerts This Week
Warning Icon 1 684
Alerts This Week
Warning Icon 1 684

Fedora 27: FEDORA-2018-cf1dd2166b Critical: Asterisk Security Updates

fedora
Calendar Grey May 30, 2018
Dist Fedora Esm H88
Essential security patch for Asterisk targeting vulnerabilities AST-2018-001 and AST-2018-002 on Fedora 27.
Updates for security issues AST-2018-001 through AST-2018-002

Summary

Asterisk is a complete PBX in software. It runs on Linux and provides

all of the features you would expect from a PBX and more. Asterisk

does voice over IP in three protocols, and can interoperate with

almost all standards-based telephony equipment using relatively

inexpensive hardware.

Updates for security issues AST-2018-001 through AST-2018-002

* Sun May 6 2018 Jared K. Smith - 14.7.6-2

- Move res_pjproject to main package

* Fri Feb 23 2018 Jared Smith - 14.7.6-1

- Update to upstream 14.7.6 release for security updates

- This update addresses security alerts AST-2018-001 through AST-2018-006

* Sat Jan 6 2018 Brian J. Murrell - 14.7.5-2

- don't apply mysql->mariadb patch on epel

* Wed Dec 27 2017 Jared Smith - 14.7.5-1

- Update to upstream 14.7.5 release for AST-2017-014/CVE-2017-17850 security

issue

* Wed Dec 13 2017 Jared Smith - 14.7.4-1

- Update to upstream 14.7.4 release to address AST-2017-012 security issue

* Tue Dec 5 2017 Jared Smith - 14.7.3-1

- Update to upstream 14.7.3 release for security alert AST-2017-013

* Sat Nov 25 2017 Jared Smith - 14.7.2-1

- Update to upstream 14.7.2 release

* Thu Sep 21 2017 Jared Smith - 14.6.2-1

- Update to upstream 14.6.2 release

* Wed Sep 13 2017 Jared Smith - 14.6.1-6

- Re-enable corosync, see RHBZ#1478089

* Sun Sep 3 2017 Jared Smith - 14.6.1-5

- Add dependency on unbound-devel for res_resolver_unbound

* Fri Sep 1 2017 Jared Smith - 14.6.1-4

- Disable corosync modules until corosync works in ppc64le again

* Fri Sep 1 2017 Jared Smith - 14.6.1-3

- Fix MySQL header path (due to change in mariadb-devel patckage)

* Fri Sep 1 2017 Jared Smith - 14.6.1-1

- Update to upstream 14.6.1 release

- Solves AST-2017-005, AST-2017-006, and AST-2017-007 security issues

* Fri Sep 1 2017 Jared Smith - 14.6.0-2

- Add perl to BuildRequires

* Thu Aug 31 2017 Jared Smith - 14.6.0-1

- Update to upstream 14.6.0 release

- Re-enable radius sub-packages

[ 1 ] Bug #1511387 - CVE-2017-16671 CVE-2017-16672 asterisk: Multiple vulnerabilities [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1511387

su -c 'dnf upgrade --advisory FEDORA-2018-cf1dd2166b' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X2SXJNS3FSESIRJ73QMI3ZYHEME2UWR5/

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 27
Version: 14.7.6
Release: 2.fc27
Summary: The Open Source PBX

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here