-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-3390 2008-04-29 20:28:28 --------------------------------------------------------------------------------

Name : asterisk Product : Fedora 8 Version : 1.4.19.1 Release : 1.fc8 URL : http://www.asterisk.org/ Summary : The Open Source PBX Description : Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware.

-------------------------------------------------------------------------------- Update Information:

Fixes security bug found in IAX2: http://downloads.digium.com/pub/security/AST-2008-006.html -------------------------------------------------------------------------------- ChangeLog:

-------------------------------------------------------------------------------- References:

[ 1 ] Bug #443761 - CVE-2008-1897 asterisk: 3-way handshake in IAX2 incomplete https://bugzilla.redhat.com/show_bug.cgi?id=443761 --------------------------------------------------------------------------------

This update can be installed with the "yum" update program. Use su -c 'yum update asterisk' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------