I am looking at Asterisk Security Advisory AST-2016-003. It says that Asterisk 1.8.x all versions are affected. The corrected in does not mention a 1.8 version but the patch section has a diff for 1.8.28 and 1.8. Does this mean that if I apply the changes shown in the diff they will address this issue? Thank you for any help.
Yes. No new release of 1.8 was made as it is no longer supported.
That’s what I thought I just wanted to confirm. Thank you for the quick response.