Top

Asterisk 1.6.1-beta4 released

December 19, 2008


The Asterisk.org development team has created the fourth
beta release for Asterisk 1.6.1. 1.6.1-beta4 is available for immediate
download from http://downloads.digium.com/.

 

This beta release contains fixes for multiple issues
since 1.6.1-beta3 including crashes and a problem in chan_sip that would cause
incorrect user and peer matching. For a full list of the changes in this
release, please see the ChangeLog:

 

http://svn.digium.com/view/asterisk/tags/1.6.1-beta4/ChangeLog?view=markup

 

Thank you for your continued support of Asterisk!

Visual Dialplan 2.2 is here

December 18, 2008

Now with support for Asterisk 1.6 and automatic dialplan upgrade functionality

Visual Dialplan for Asterisk is next generation development platform for Asterisk dial plan development.
It comes with drag-and-drop visual modeling environment and large component library, handy dial plan samples, powerful validation engine, single button deployment functionality and support for Free PBX, trixbox, PIAF and Elastix. It even learns about Asterisk server configuration, pre-populates library components with configuration data and validates the dial plan accordingly.

Starting from v2.2 Visual Dialplan supports the latest Asterisk 1.6 distribution and comes with easy to use dialplan upgrade functionality - never again bother with the new syntax or changes in the dialplan that usually comes with every major Asterisk release. Just decide what version you want to upgrade the dialplan to and Visual Dialplan will take care of the rest. Or if there is a component in your dialplan that requires manual upgrade, because it is deprecated or abandoned, Visual Dialplan will help you again by suggesting the new component you should use to replace the abandoned one.

Asterisk 1.4.23-rc3 Released

December 18, 2008

The Asterisk.org development team has created the third release candidate for Asterisk 1.4.23. 1.4.23-rc3 is available for immediate download from http://downloads.digium.com/.

This release candidate contains multiple fixes since 1.4.23-rc2 including issues with transfers and DTMF. For a full list of the changes in this release, please see the ChangeLog:

http://svn.digium.com/view/asterisk/tags/1.4.23-rc3/ChangeLog?view=markup

Thank you for your continued support of Asterisk!

Tell us about what you do with asterisk and VoIP

December 14, 2008

If you are on delicious.com (= del.icio.us) please send us links to anything you consider of interest to the VoIP Users Conference: blogs, articles, your services and products, images, phones, devices, tech alerts. There is a simple mechanism built in to Delicious.com. Once you bookmark a URL, just add the tag

for:voipusersconference

and we will receive the link in our inbox. This will help organize the URLs we read on the conference, but it also sends us to users sites like your blog, your project, your how-to guide, anything you have contributed to the community.

The Voip Users Conference Delicious page is here:
http://delicious.com/voipusersconference

Sending bookmarks over to Voip Users Conference will really be sharing the link with the entire community, including several Digium folks, a lot of bloggers, service providers, product manufacturers, and interested people.

If you really don't want to mess with Delicious and have a link or anything else you'd care to share (subjsct suggestions or any info) feel free to email it to me.

The VUC has been downloaded by over 41,000 unique IP addresses to date. There are 20 to 50 live callers each week, including guests from various equipment manufacturers, software companies, service providers and open source developers. A lot of these people may be able to help you in your commercial efforts.

Thanks to those of you who take part in this international community effort.

/r

Voipphreak Reviews! Voicemail Transcription made easy with MyCaption.com.

December 11, 2008

Recently we signed up for an account with MyCaption.com. We had heard about them from an associate and what they could offer to us. Basically speaking – they transcribe your voicemail messages to text, and email them to you. If you are using an IP or Hosted PBX, you are already able to receive your voicemail audio delivered to you as email attachment. Now you can receive it as transcribed (text) email, so you can read it quickly and silently.

You might be thinking to yourself “So, what’s so great about voicemail transcription? SpinVox and others have been offering this for a long time already”. Well, these guys (MyCaption) started their business with a cool BlackBerry application, which is touted as a "voice to data" plug-in for BlackBerry. Do a Google for "mycaption" and you will see it come up. So we wouldn't be surprised if this voicemail is a part of a larger business-focused strategy where they will integrate it with email and other business data systems. They also have a 1 week voicemail transcription free trial available, so why aren’t you already signed up?

In order to get it working, all we had to do was make a simple modification to our PBX system and forward the voicemail emails to their system, which would re-forwarded to us following transcription of the voicemail. We’re using Asterisk, but as long as you can modify the email settings of the user on your system there shouldn’t be a problem getting it ready to transcribe your voicemail. It’s a very simple setup. Instead of forwarding voicemail to your email address, you will forward it to a special Email-to-MyCaption address, which you will receive when you sign up.

So, what benefit does this offer? Simple, MyCaption boosts your productivity. You can read your voicemail quickly and silently. You can easily stay in touch with your colleagues. You can reply by email....and so on. Not to mention the free trial so you can test it without spending a dime!

How well does the transcription work? This depends on the person leaving the voicemail, if they are a low talker, or a mumbler you may get incorrect transcriptions. In our experience, we’ve had nothing but success with the transcriptions we’ve received when people leave voicemail messages. Even people with thick accents are transcribed for the most part fully intact. Some words will be off but the overall idea of the transcribed voicemail has been in our experience perfectly understandable.

What does it cost?
Professional - $9.95 a month (40 messages).
Power User - $24.95 a month (120 messages).

They have a one-week free trial available on their website. So hurry up and sign up!

What are you waiting for? You should stop reading this article and go sign up for the free trial over at MyCaption.com so you can see how this service will benefit your business or even your personal life. The first time you receive that transcribed voicemail email during an important meeting and you don’t have to duck out to check your voicemail you’ll be sold too! We guarantee it.

Asterisk 1.2.30.4 released, fixing iax2 security bug.

December 10, 2008

The Asterisk.org development team has released Asterisk version 1.2.30.4.
This release is available for immediate download from http://downloads.digium.com/.

This update for Asterisk includes a security fix for chan_iax2. Please see the associated security advisory for more details:
http://downloads.digium.com/pub/security/AST-2008-012.pdf .

This security issue affects only the 1.2 series.

Thank you for your continued support of Asterisk!

Asterisk Project Security Advisory – AST-2008-012

December 10, 2008

+------------------------------------------------------------------------+
| Product | Asterisk |
|----------------------+-------------------------------------------------|
| Summary | Remote crash vulnerability in IAX2 |
|----------------------+-------------------------------------------------|
| Nature of Advisory | Remote Crash |
|----------------------+-------------------------------------------------|
| Susceptibility | Remote Unauthenticated Sessions |
|----------------------+-------------------------------------------------|
| Severity | Major |
|----------------------+-------------------------------------------------|
| Exploits Known | No |
|----------------------+-------------------------------------------------|
| Reported On | November 22, 2008 |
|----------------------+-------------------------------------------------|
| Reported By |Jon Leren Scho/pzinsky |
|----------------------+-------------------------------------------------|
| Posted On | |
|----------------------+-------------------------------------------------|
| Last Updated On | December 9, 2008 |
|----------------------+-------------------------------------------------|
| Advisory Contact | Mark Michelson |
|----------------------+-------------------------------------------------|
| CVE Name | |
+------------------------------------------------------------------------+

+------------------------------------------------------------------------+
| Description | There is a possibility to remotely crash an Asterisk |
| | server if the server is configured to use realtime IAX2 |
| | users. The issue occurs if either an unknown user |
| | attempts to authenticate or if a user that uses hostname |
| | matching attempts to authenticate. |
| | |
| | The problem was due to a broken function call to |
| | Asterisk's realtime configuration API. |
+------------------------------------------------------------------------+

+------------------------------------------------------------------------+
| Resolution | The function calls in question have been fixed. |
+------------------------------------------------------------------------+

+------------------------------------------------------------------------+
| Affected Versions |
|------------------------------------------------------------------------|
| Product | Release Series | |
|---------------------------------+----------------+---------------------|
| Asterisk Open Source | 1.2.x | 1.2.26-1.2.30.3 |
|---------------------------------+----------------+---------------------|
| Asterisk Open Source | 1.4.x | Unaffected |
|---------------------------------+----------------+---------------------|
| Asterisk Open Source | 1.6.x | Unaffected |
|---------------------------------+----------------+---------------------|
| Asterisk Addons | 1.2.x | Unaffected |
|---------------------------------+----------------+---------------------|
| Asterisk Addons | 1.4.x | Unaffected |
|---------------------------------+----------------+---------------------|
| Asterisk Addons | 1.6.x | Unaffected |
|---------------------------------+----------------+---------------------|
| Asterisk Business Edition | A.x.x | Unaffected |
|---------------------------------+----------------+---------------------|
| Asterisk Business Edition | B.x.x | B.2.3.5-B.2.5.5 |
|---------------------------------+----------------+---------------------|
| Asterisk Business Edition | C.x.x | Unaffected |
|---------------------------------+----------------+---------------------|
| AsteriskNOW | 1.5 | Unaffected |
|---------------------------------+----------------+---------------------|
| s800i (Asterisk Appliance) | 1.2.x | Unaffected |
+------------------------------------------------------------------------+

+------------------------------------------------------------------------+
| Corrected In |
|------------------------------------------------------------------------|
| Product | Release |
|--------------------------------------------+---------------------------|
| Asterisk Open Source | 1.2.30.4 |
|--------------------------------------------+---------------------------|
| Asterisk Business Edition | B.2.5.6 |
|--------------------------------------------+---------------------------|
+------------------------------------------------------------------------+

+------------------------------------------------------------------------+
| Links | |
+------------------------------------------------------------------------+

+------------------------------------------------------------------------+
| Asterisk Project Security Advisories are posted at |
| http://www.asterisk.org/security |
| |
| This document may be superseded by later versions; if so, the latest |
| version will be posted at |
| http://downloads.digium.com/pub/security/AST-2008-012.pdf and |
| http://downloads.digium.com/pub/security/AST-2008-012.html |
+------------------------------------------------------------------------+

+------------------------------------------------------------------------+
| Revision History |
|------------------------------------------------------------------------|
| Date | Editor | Revisions Made |
|--------------------+-----------------+---------------------------------|
| November 23, 2008 | Mark Michelson | Initial draft |
|--------------------+-----------------+---------------------------------|
| December 9, 2008 | Mark Michelson | Added "Corrected In" versions |
+------------------------------------------------------------------------+

Asterisk Project Security Advisory - AST-2008-012
Copyright (c) 2008 Digium, Inc. All Rights Reserved.
Permission is hereby granted to distribute and publish this advisory in its
original, unaltered form.

« Previous PageNext Page »

Bottom