Re: Asterisk security
On Sat, 22 Nov 2014, Rob van der Putten wrote:
> A lot of bugs [1] but no Debian updates. Should I be concerned?
See:
https://security-tracker.debian.org/tracker/source-package/asterisk
> [1] For instance;
> http://downloads.asterisk.org/pub/security/AST-2014-012.html
AFAICT, this whole fleet of bugs was released two days ago, so it's not
surprising that there isn't yet a fixed version in Debian or a DSA. [I'm
not sure if these were released on the vendorsec list, so there might
not have been any pre-release patch time.]
That said, I'm certain that the maintenance team behind the Debian
asterisk packages would love additional help in preparing tested patches
which fix these issues in squeeze, wheezy, jessie, and unstable.
--
Don Armstrong http://www.donarmstrong.com
Il semble que la perfection soit atteinte non quand il n'y a plus rien
a ajouter, mais quand il n'y a plus rien a retrancher.
(Perfection is apparently not achieved when nothing more can be added,
but when nothing else can be removed.)
-- Antoine de Saint-Exupe'ry, Terres des Hommes
Reply to: