<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#ffffff" text="#000000">
<pre>This message was generated by the Security Alerts service ( Free Trial 14th of August - 14th of September )
<a class="moz-txt-link-freetext" href="http://www.opensips.org/Resources/AlertsMain">http://www.opensips.org/Resources/AlertsMain</a>
<b>
SVN commit</b>:
<a class="moz-txt-link-freetext" href="http://opensips.svn.sourceforge.net/opensips/?rev=9166">http://opensips.svn.sourceforge.net/opensips/?rev=9166</a>
<b>Severity</b>: High
<b>Version</b> : all
<b>Affected modules</b> : Core (TCP layer)
<b>Effect</b> : TCP connection behind NAT are dropped
<b>Affected scenarios</b>: Having registrations via TCP (or TLS) from behind NAT. Due a broken update of the TCP connection
lifetime, TCP connections from NATed user are dropped by opensips before the registration expire.
<b>Description:</b> Connections originated from behind NAT, during a REGISTER event, will not be kept up by OpenSIPS
for the entire duration of the registration. Like if the REGISTER will have a 60 minutes lifetime, the TCP connection
(to reach back the UAC) will be terminated by OpenSIPS before those 60 minutes, so the UAC will become unreachable
(it will not be able to receive new calls, as it is impossible to open a new TCP connection behind the a NAT)
<b>Risks</b> : UAC behind NAT and using TCP will not be reachable during the entire duration of the registration.
<b>Update</b> :
- if you have an SVN checkout, 1.7, 1.8 and trunk were fixed; so
update to a revision later than 9166 (trunk), 9168 (1.8 branch) or
9167 (1.7 branch)
- if you have OpenSIPS from sources see the attached patch;
- if using tarballs, they were already regenerated (and include the fix). Available only for 1.8.
- If using the official Debian package (apt.opensips.org), they are also
re-generated including the fix (available for 1.8 and trunk).
</pre>
<br>
<pre class="moz-signature" cols="72">--
Bogdan-Andrei Iancu
OpenSIPS Founder and Developer
<a class="moz-txt-link-freetext" href="http://www.opensips-solutions.com">http://www.opensips-solutions.com</a></pre>
</body>
</html>