Re: [asterisk-users] AST-2008-006 - 3-way handshake in IAX2 incomplete

2008-04-24 Thread Brian J. Murrell
On Thu, 2008-04-24 at 09:13 -0500, Tilghman Lesher wrote: Check the archives. Indeed, you are correct. My apologies. I forgot that I temporarily unsubbed from the -users list for a period of time where I was just getting too much volume of e-mail and asterisk-users had to be one of the ones

Re: [asterisk-users] AST-2008-006 - 3-way handshake in IAX2 incomplete

2008-04-23 Thread Brian J. Murrell
On Wed, 2008-04-23 at 01:06 -0400, Matt Watson wrote: I can;t imagine what headaches you'd have going from 1.4.11 to 1.4.19.1... that is a minor version upgrade... no real change in functionality Yeah, that's the theory anyway. :-) thats basically 8 versions of bug fixes... And what

Re: [asterisk-users] AST-2008-006 - 3-way handshake in IAX2 incomplete

2008-04-23 Thread Tilghman Lesher
On Tuesday 22 April 2008 19:34, Brian J. Murrell wrote: On Tue, 2008-04-22 at 17:58 -0500, Security Officer wrote: Asterisk Project Security Advisory - AST-2008-006 So given that I'm new to asterisk's svn and bug tracking tool, is it sufficient then to apply the two patches

Re: [asterisk-users] AST-2008-006 - 3-way handshake in IAX2 incomplete

2008-04-23 Thread Brian J. Murrell
On Wed, 2008-04-23 at 08:52 -0500, Tilghman Lesher wrote: Please understand that that's NOT the only security fix that has gone in during that time. If this is the only thing that you fix, you're likely to be vulnerable on several other levels. See our full list of security disclosures at

[asterisk-users] AST-2008-006 - 3-way handshake in IAX2 incomplete

2008-04-22 Thread Security Officer
Asterisk Project Security Advisory - AST-2008-006 ++ | Product | Asterisk |

Re: [asterisk-users] AST-2008-006 - 3-way handshake in IAX2 incomplete

2008-04-22 Thread Brian J. Murrell
On Tue, 2008-04-22 at 17:58 -0500, Security Officer wrote: Asterisk Project Security Advisory - AST-2008-006 So given that I'm new to asterisk's svn and bug tracking tool, is it sufficient then to apply the two patches (iax_dcallno_check-1.2.rev3.txt and iax_dcallno_check.rev9.txt) listed in

Re: [asterisk-users] AST-2008-006 - 3-way handshake in IAX2 incomplete

2008-04-22 Thread Brian J. Murrell
On Tue, 2008-04-22 at 20:34 -0400, Brian J. Murrell wrote: So given that I'm new to asterisk's svn and bug tracking tool, is it sufficient then to apply the two patches (iax_dcallno_check-1.2.rev3.txt and iax_dcallno_check.rev9.txt) Ahhh. I see. These must be two versions of the same

Re: [asterisk-users] AST-2008-006 - 3-way handshake in IAX2 incomplete

2008-04-22 Thread Matt Watson
: [EMAIL PROTECTED] [EMAIL PROTECTED] On Behalf Of Brian J. Murrell [EMAIL PROTECTED] Sent: Tuesday, April 22, 2008 8:34 PM To: Asterisk Users Mailing List - Non-Commercial Discussion Subject: Re: [asterisk-users] AST-2008-006 - 3-way handshake in IAX2 incomplete On Tue, 2008-04-22 at 17:58 -0500