Ubuntu
asterisk package

  1. Bug #345217
  2. Comment #8

Comment 8 for bug 345217

Revision history for this message
Brian Thomason (brian-thomason) wrote :

Added fixes for:

CVE-2008-1390 (http://downloads.asterisk.org/pub/security/AST-2008-005.html)
CVE-2008-3903 (http://downloads.asterisk.org/pub/security/AST-2009-003.html)

I tested that it built properly but have not done any thorough testing yet. Any help in the way of testing would be greatly appreciated as the chan_sip.c file was modified.