Bug#647252: CVE-2011-4063: Remote crash vulnerability in SIP channel driver

Tue Nov 22 21:19:00 UTC 2011

On Tue, Nov 22, 2011 at 09:15:16PM +0100, Moritz Mühlenhoff wrote:
> On Tue, Nov 01, 2011 at 08:31:00AM +0100, Moritz Muehlenhoff wrote:
> > Package: asterisk
> > Severity: grave
> > Tags: security
> > 
> > Please see http://downloads.asterisk.org/pub/security/AST-2011-012.html
> > 
> > Apparently stable/oldstable is not affected, please but double-check.
> 
> Asterisk maintainers, did you get confirmation from upstream?

Yes, as per the advisory. 1.6.2 is still supported for security issues
by upstream.

-- 
               Tzafrir Cohen
icq#16849755              jabber:tzafrir.cohen at xorcom.com
+972-50-7952406           mailto:tzafrir.cohen at xorcom.com
http://www.xorcom.com  iax:guest at local.xorcom.com/tzafrir