--------------------------------------------------------------------------------Fedora Update Notification
FEDORA-2017-41242dfe10
2018-01-09 23:48:23.442981
--------------------------------------------------------------------------------Name        : asterisk
Product     : Fedora 27
Version     : 14.7.5
Release     : 1.fc27
URL         : https://www.asterisk.org/
Summary     : The Open Source PBX
Description :
Asterisk is a complete PBX in software. It runs on Linux and provides
all of the features you would expect from a PBX and more. Asterisk
does voice over IP in three protocols, and can interoperate with
almost all standards-based telephony equipment using relatively
inexpensive hardware.

--------------------------------------------------------------------------------Update Information:

Update to upstream 14.7.5 release for AST-2017-014/CVE-2017-17850 security issue
--------------------------------------------------------------------------------References:

  [ 1 ] Bug #1529150 - CVE-2017-17850 asterisk: Authenticated remote DOS via SIP contact header in PJSIP driver
        https://bugzilla.redhat.com/show_bug.cgi?id=1529150
--------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade asterisk' at the command line.
For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora 27: asterisk Security Update

January 10, 2018
Update to upstream 14.7.5 release for AST-2017-014/CVE-2017-17850 security issue

Summary

Asterisk is a complete PBX in software. It runs on Linux and provides

all of the features you would expect from a PBX and more. Asterisk

does voice over IP in three protocols, and can interoperate with

almost all standards-based telephony equipment using relatively

inexpensive hardware.

Update to upstream 14.7.5 release for AST-2017-014/CVE-2017-17850 security issue

[ 1 ] Bug #1529150 - CVE-2017-17850 asterisk: Authenticated remote DOS via SIP contact header in PJSIP driver

https://bugzilla.redhat.com/show_bug.cgi?id=1529150

su -c 'dnf upgrade asterisk' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

FEDORA-2017-41242dfe10 2018-01-09 23:48:23.442981 Product : Fedora 27 Version : 14.7.5 Release : 1.fc27 URL : https://www.asterisk.org/ Summary : The Open Source PBX Description : Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware. Update to upstream 14.7.5 release for AST-2017-014/CVE-2017-17850 security issue [ 1 ] Bug #1529150 - CVE-2017-17850 asterisk: Authenticated remote DOS via SIP contact header in PJSIP driver https://bugzilla.redhat.com/show_bug.cgi?id=1529150 su -c 'dnf upgrade asterisk' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Change Log

References

Update Instructions

Severity
Product : Fedora 27
Version : 14.7.5
Release : 1.fc27
URL : https://www.asterisk.org/
Summary : The Open Source PBX

Related News