Dear community,
shortly after 1.29.0 I have to publish version 1.29.1 due to a large
number of security issues that came up. Some of those bugs could
possibly used for remote code execution, even so that has not been
demonstrated, yet.
Please update urgently if you use the endpoint classes of H323plus. For
GnuGk it won't hurt to update, but it is not as urgent.
I would like to thank Chng Ming Shin who sent in a number of bug
reports along with code demostrating the issues. I would also like to
thank Tristan for his reports on security bugs (which have been fixed in
1.29.0).
Download from https://www.h323plus.org/source/
Regards,
Jan
--
Jan Willamowius, Founder of the GNU Gatekeeper Project
EMail : jan(a)willamowius.de
Website: https://www.gnugk.org
Support: https://www.willamowius.com/gnugk-support.html
Relaxed Communications GmbH
c/o Jan Willamowius, Buchsbaumweg 4, 22299 Hamburg, Germany
Geschäftsführer: Jan Willamowius
HRB 125261 (Amtsgericht Hamburg)
USt-IdNr: DE286003584