Asterisk 18.26.4: Restoring Peace to Your RTP Ports, One Bug Fix at a Time!
The Asterisk Development Team has released Asterisk 18.26.4, fixing a resource exhaustion vulnerability that could lead to RTP port leaks. Download the update faster than you can say “asterisk security release 18.26.4” to ensure your system’s safety and keep those ports in check.
Hot Take:
In the thrilling world of telephony software, Asterisk 18.26.4 has taken a page from a magician’s playbook and pulled a disappearing act on a resource exhaustion vulnerability. As long as your phone system isn’t trying to become a black hole of RTP ports, this update should have you breathing a little easier. So, hats off to George Joseph, the lone ranger of this development cycle, for patching up the system with a mere flick of a commit!
Key Points:
- Asterisk 18.26.4 is a security release addressing a resource exhaustion (DoS) vulnerability.
- The vulnerability involved the leak of RTP UDP ports and internal resources.
- George Joseph is the sole commit author for this release.
- pjproject was updated to version 2.15.1 to resolve this issue.
- The fix is identified under security advisory GHSA-557q-795j-wfx2.
Already a member? Log in here