May 7, 2008

Asterisk 1.4.20-rc2 Released

The Asterisk development team has released Asterisk version 1.4.20-rc2. This release is a release candidate for the upcoming official release of 1.4.20. It includes a fix for a SIP channel driver regression introduced in 1.4.20-rc1, among a number of other changes. For a full list of changes since the last release candidate, view the contents of the ChangeLog that is distributed with the release. The release candidate is available on the download site.

May 5, 2008

IAX2 Performance

As a part of the latest Asterisk security release, the IAX2 channel driver in Asterisk got various changes to make it more difficult to abuse IAX2 in Asterisk in a traffic amplification attack. IAX2 uses call numbers to specify which packets are associated with which call. One of the changes that I made for the security issue was to have Asterisk randomly choose call numbers where it previously chose the lowest one that it could.

May 1, 2008

Asterisk 1.4.20-rc1 Now Available

The Asterisk development team has released Asterisk version 1.4.20-rc1. This release is a release candidate for the upcoming official release of 1.4.20. It contains a large number of bug fixes over the previous release, 1.4.19. We would like to encourage the community to assist us in testing before we release 1.4.20. The release candidate is available on the download site. http://downloads.digium.com/pub/telephony/asterisk Please provide release candidate testing feedback to the asterisk-dev mailing list, or the issue tracker, http://bugs.

April 22, 2008

Asterisk 1.2.28, 1.4.19.1, and 1.6.0-beta8 Released

The Asterisk development team has released versions 1.2.28, 1.4.19.1, and 1.6.0-beta8. All of these releases contain a security patch for the vulnerability described in the AST-2008-006 security advisory. 1.6.0-beta8 is also a regular update to the 1.6.0 series with a number of bug fixes over the previous beta release. Early last year, we made some modifications to the IAX2 channel driver to combat potential usage of IAX2 in traffic amplification attacks.

April 22, 2008

Asterisk 1.6, Now with Multiple Parking Lots

While Asterisk 1.6.0 is currently being stabilized for release, we are also actively developing new features for Asterisk 1.6.1. One feature that has been merged into Asterisk trunk, which will be released in Asterisk 1.6.1, is support for multiple parking lots. This functionality has been available for quite some time from 3rd party modules. So, it’s about time that we got it implemented natively in Asterisk. The code that has been committed was originally written by oej.

April 2, 2008

Asterisk 1.4.19 and Asterisk-addons 1.6.0-beta3 Released

The Asterisk development team has released version 1.4.19 of Asterisk and 1.6.0-beta3 of Asterisk-addons. The new Asterisk-addons release contains a few bug fixes over the previous version. http://svn.digium.com/view/asterisk-addons/tags/1.6.0-beta3/ChangeLog?view=markup Asterisk 1.4.19 contains a large number of fixes over the previous release,1.4.18. For a full list of changes, see the ChangeLog that is included in the release. http://svn.digium.com/view/asterisk/tags/1.4.19/ChangeLog?view=markup One change that requires specific attention is a change to iLBC support. Due to problems with the licensing of the iLBC source code, the implementation of the codec has been removed from the Asterisk source tree.

March 28, 2008

Asterisk 1.4.19-rc4 and 1.6.0-beta7 Now Available

The Asterisk.org development team has released Asterisk versions 1.4.19-rc4 and 1.6.0-beta7. These releases contain significant bug fixes over the previous pre-releases of 1.4.19 and 1.6.0. We would like to thank everyone for all of the help with pre-release testing. Unless anything new comes up, 1.4.19 will be released at the beginning of next week. Both releases are available for download from http://downloads.digium.com/. Thank you for your support!

March 26, 2008

Open Source Roundtable with Mark Spencer

I found this article very interesting. It is a roundtable discussion with Mark Spencer and 10 others with varying views on the state of the open source world. The group includes Bruce Perens, Eric Raymond, Chris DiBona, and others. Check out the article here.

March 19, 2008

(Critical Updates) Asterisk 1.2.27, 1.4.18.1, 1.4.19-rc3, 1.6.0-beta6 Released

The Asterisk.org development team has released four new versions of Asterisk to address critical security vulnerabilities. AST-2008-002 details two buffer overflows that were discovered in RTP codec payload type handling. http://downloads.digium.com/pub/security/AST-2008-002.pdf All users of SIP in Asterisk 1.4 and 1.6 are affected. AST-2008-003 details a vulnerability which allows an attacker to bypass SIP authentication and to make a call into the context specified in the general section of sip.conf. http://downloads.digium.com/pub/security/AST-2008-003.pdf All users of SIP in Asterisk 1.

March 11, 2008

Asterisk 1.4.19-rc2 Now Available

The Asterisk.org development team has released Asterisk 1.4.19-rc2. This is a test release for 1.4.19. The official 1.4.19 release will be made after a 1.4.19 release candidate goes through a few days of testing without finding any major regressions. This release contains one crash regression that was found during testing of 1.4.19-rc1. It also includes a number of other bug fixes, as well. This release is available for download as a tarball, as well as from svn.