Hello James,

the latest security issues on this list were more on a generic or protocol 
level, e.g. the rtpengine topic published a few months ago. You probably saw it.

>From the opensource project there are usually a lot of issues fixed in each 
>minor release, but the majority are functional topics, documentation 
>extensions and the like.

Doing manual backports is certainly a substantial amount of work and will be 
not really feasible anymore after you got several major releases behind. If you 
want to concentrate only on a few bug fixes in a smaller area (e.g. certain 
modules), it works longer, of course.

Cheers,

Henning

-----Original Message-----
From: James Morrison via sr-users <[email protected]> 
Sent: Tuesday, October 7, 2025 9:42 AM
To: [email protected]
Cc: James Morrison <[email protected]>
Subject: [SR-Users] Re: List of all known Kamailio vulnerabilities

Thanks Henning

I stumbled across that list before, but I'm unable to find newer CVEs, I wonder 
if there is none or not published yet. We currently have no plan to upgrade, so 
back-porting fixes is the only option.
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions -- 
[email protected] To unsubscribe send an email to 
[email protected]
Important: keep the mailing list in the recipients, do not reply only to the 
sender!
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions -- 
[email protected]
To unsubscribe send an email to [email protected]
Important: keep the mailing list in the recipients, do not reply only to the 
sender!

Reply via email to