-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Wed, 19 Mar 2008 00:58:25 +0200 Source: asterisk Binary: asterisk-h323 asterisk-web-vmail asterisk asterisk-classic asterisk-dev asterisk-doc asterisk-sounds-main asterisk-bristuff asterisk-config Architecture: sparc Version: 1:1.2.13~dfsg-2etch3 Distribution: stable-security Urgency: high Maintainer: Debian Build Daemon Changed-By: Faidon Liambotis Description: asterisk-bristuff - Open Source Private Branch Exchange (PBX) - BRIstuff-enabled vers asterisk-classic - Open Source Private Branch Exchange (PBX) - original Digium versi asterisk-h323 - asterisk H.323 VoIP channel Changes: asterisk (1:1.2.13~dfsg-2etch3) stable-security; urgency=high . * Fix an authentication bypass vulnerability that could be exploited when using passwordless host-based authentication with realtime on SIP and IAX channels (AST-2007-027, CVE-2007-6430). * Fix a critical vulnerability that could be exploited to bypass SIP authentication (AST-2008-003, CVE-2008-1332). * Fix a potential DoS vulnerability in the Manager interface (AST-2008-004, CVE-2008-1333). Files: 1da9759f3886d77eeb4ba92925615b99 1632430 comm optional asterisk-classic_1.2.13~dfsg-2etch3_sparc.deb b9e4bd5bbd945746bd81d97fda6bc0b1 1664434 comm optional asterisk-bristuff_1.2.13~dfsg-2etch3_sparc.deb 5b0a8c4385fdb3098158bb8b5dc17602 132302 comm optional asterisk-h323_1.2.13~dfsg-2etch3_sparc.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFH4knJXm3vHE4uyloRAoXEAJ9sOTp1Dwa6X1x5hvuRLQbqRnv8JwCaA3g5 HAHQ+3jjwPOTG20dAO8OuPQ= =1W4X -----END PGP SIGNATURE-----