Re: List of all known Kamailio vulnerabilities

Hello James,

the latest security issues on this list were more on a generic or protocol level, e.g. the rtpengine topic published a few months ago. You probably saw it.

>From the opensource project there are usually a lot of issues fixed in each minor release, but the majority are functional topics, documentation extensions and the like.

Doing manual backports is certainly a substantial amount of work and will be not really feasible anymore after you got several major releases behind. If you want to concentrate only on a few bug fixes in a smaller area (e.g. certain modules), it works longer, of course.

Cheers,

Henning

-----Original Message-----
From: James Morrison via sr-users <[email protected]> 
Sent: Tuesday, October 7, 2025 9:42 AM
To: [email protected]
Cc: James Morrison <[email protected]>
Subject: [SR-Users] Re: List of all known Kamailio vulnerabilities

Thanks Henning

I stumbled across that list before, but I'm unable to find newer CVEs, I wonder if there is none or not published yet. We currently have no plan to upgrade, so back-porting fixes is the only option.
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions -- [email protected] To unsubscribe send an email to [email protected]
Important: keep the mailing list in the recipients, do not reply only to the sender!
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions -- [email protected]
To unsubscribe send an email to [email protected]
Important: keep the mailing list in the recipients, do not reply only to the sender!