diff --git a/.version b/.version index 454db0eedc..0f4254e536 100644 --- a/.version +++ b/.version @@ -1 +1 @@ -18.26.3 +18.26.4 diff --git a/CHANGES.html b/CHANGES.html index 1496c8c925..44f22b3bad 120000 --- a/CHANGES.html +++ b/CHANGES.html @@ -1 +1 @@ -ChangeLogs/ChangeLog-18.26.3.html \ No newline at end of file +ChangeLogs/ChangeLog-18.26.4.html \ No newline at end of file diff --git a/CHANGES.md b/CHANGES.md index 98ffdaea4d..4faba49224 120000 --- a/CHANGES.md +++ b/CHANGES.md @@ -1 +1 @@ -ChangeLogs/ChangeLog-18.26.3.md \ No newline at end of file +ChangeLogs/ChangeLog-18.26.4.md \ No newline at end of file diff --git a/ChangeLogs/ChangeLog-18.26.4.html b/ChangeLogs/ChangeLog-18.26.4.html new file mode 100644 index 0000000000..4d2e012a43 --- /dev/null +++ b/ChangeLogs/ChangeLog-18.26.4.html @@ -0,0 +1,48 @@ +
Author: George Joseph + Date: 2025-08-25
+This resolves a security issue where RTP ports weren't being released + causing possible resource exhaustion issues.
+Resolves: #GHSA-557q-795j-wfx2
+ diff --git a/ChangeLogs/ChangeLog-18.26.4.md b/ChangeLogs/ChangeLog-18.26.4.md new file mode 100644 index 0000000000..9f6327091e --- /dev/null +++ b/ChangeLogs/ChangeLog-18.26.4.md @@ -0,0 +1,58 @@ + +## Change Log for Release asterisk-18.26.4 + +### Links: + + - [Full ChangeLog](https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-18.26.4.html) + - [GitHub Diff](https://github.com/asterisk/asterisk/compare/18.26.3...18.26.4) + - [Tarball](https://downloads.asterisk.org/pub/telephony/asterisk/asterisk-18.26.4.tar.gz) + - [Downloads](https://downloads.asterisk.org/pub/telephony/asterisk) + +### Summary: + +- Commits: 1 +- Commit Authors: 1 +- Issues Resolved: 0 +- Security Advisories Resolved: 1 + - [GHSA-557q-795j-wfx2](https://github.com/asterisk/asterisk/security/advisories/GHSA-557q-795j-wfx2): Resource exhaustion (DoS) vulnerability: remotely exploitable leak of RTP UDP ports and internal resources + +### User Notes: + + +### Upgrade Notes: + + +### Developer Notes: + + +### Commit Authors: + +- George Joseph: (1) + +## Issue and Commit Detail: + +### Closed Issues: + + - !GHSA-557q-795j-wfx2: Resource exhaustion (DoS) vulnerability: remotely exploitable leak of RTP UDP ports and internal resources + +### Commits By Author: + +- #### George Joseph (1): + - pjproject: Update bundled to 2.15.1. + + +### Commit List: + +- pjproject: Update bundled to 2.15.1. + +### Commit Details: + +#### pjproject: Update bundled to 2.15.1. + Author: George Joseph + Date: 2025-08-25 + + This resolves a security issue where RTP ports weren't being released + causing possible resource exhaustion issues. + + Resolves: #GHSA-557q-795j-wfx2 + diff --git a/README.html b/README.html index 6cbfeec8ea..be5b8e628e 100644 --- a/README.html +++ b/README.html @@ -1,4 +1,4 @@ - By Mark Spencer <markster@digium.com> and the Asterisk.org developer community.
Copyright (C) 2001-2021 Sangoma Technologies Corporation and other copyright holders.