[SECURITY] Fedora 8 Update: asterisk-1.4.21.2-1.fc8

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-6676
2008-07-24 00:48:22
--------------------------------------------------------------------------------

Name        : asterisk
Product     : Fedora 8
Version     : 1.4.21.2
Release     : 1.fc8
URL         : http://www.asterisk.org/
Summary     : The Open Source PBX
Description :
Asterisk is a complete PBX in software. It runs on Linux and provides
all of the features you would expect from a PBX and more. Asterisk
does voice over IP in three protocols, and can interoperate with
almost all standards-based telephony equipment using relatively
inexpensive hardware.

--------------------------------------------------------------------------------
Update Information:

Update to 1.4.21.2 to fix CVE-2008-3263 / AST-2008-010 and  CVE-2008-3264 /
AST-2008-011.    AST-2008-010: Asterisk IAX 'POKE' resource exhaustion  -
http://downloads.digium.com/pub/security/AST-2008-010.html    AST-2008-011:
Traffic amplification in IAX2 firmware provisioning system  -
http://downloads.digium.com/pub/security/AST-2008-011.html
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jul 22 2008 Jeffrey C. Ollie <jeff at ocjtech.us> - 1.4.21.2-1
- Update to 1.4.21.2 to fix CVE-2008-3263 / AST-2008-010 and CVE-2008-3264 / AST-2008-011
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update asterisk' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------