Asterisk PBX 1.4.16 and 1.2.26 Released
The details of the security issue have been published in a security advisory:
The issue affects users of the dynamic realtime configuration method for IAX2 or SIP that use host based authentication. Systems that do not use host based authentication with realtime are not affected.
A full list of changes is available in the ChangeLog, which is distributed with the release and is also available on the downloads page.
The releases are available for immediate download from: http://downloads.digium.com/
Thank you for your support!