Bug#732355: asterisk: Two Asterisk security issues

[Tzafrir Cohen]

On Tue, Dec 17, 2013 at 07:33:53AM +0100, Moritz Muehlenhoff wrote:
> Package: asterisk
> Severity: grave
> Tags: security
> 
> Hi,
> please see
> http://downloads.asterisk.org/pub/security/AST-2013-006.html and
> http://downloads.asterisk.org/pub/security/AST-2013-007.html

Looking at them. At first glance: both of them also affect 1.6.2 from
old-stable. AST-2013-007 introduces a new configuration item and we have
to see what the sane default for it should be.

-- 
               Tzafrir Cohen
icq#16849755              jabber:tzafrir.cohen at xorcom.com
+972-50-7952406           mailto:tzafrir.cohen at xorcom.com
http://www.xorcom.com