Il giorno 19 gennaio, il Team di Sviluppo di Asterisk ha annunciato il rilascio delle versioni Asterisk 184.108.40.206 e 10.0.1
Dal post originale:
These releases are available for immediate download at
The release of Asterisk versions 220.127.116.11 and 10.0.1 resolves an issue
wherein an attacker attempting to negotiate a secure video stream can crash
Asterisk if video support has not been enabled and the res_srtp Asterisk
module is loaded.
The issue and its resolution is described in the security advisory.
For more information about the details of these vulnerabilities, please read the
security advisory AST-2012-001, which were released at the same time as this
For a full list of changes in the current releases, please see the ChangeLogs:
Security advisory AST-2012-001 is available at: