[no description] https://git.osdyson.ru/mirror/pkgsrc/atom?h=pkgsrc_2012Q2 2012-06-18T01:51:41Z 2012-06-18T01:51:41Z dholland dholland 2012-06-18T01:51:41Z urn:sha1:933b79e286c4a3bbac69261d96a8e8ceccd7c824 2012-06-16T19:28:19Z plunky plunky 2012-06-16T19:28:19Z urn:sha1:861157d0e2aca55330974808c07b5e0e10fb907f /etc/rc.d/bluetooth we should try to REQUIRE the correct script. 2012-06-15T06:05:47Z jnemeth jnemeth 2012-06-15T06:05:47Z urn:sha1:1aa50d2e3362f15727bb73fd280378a2e4b0e2d0 The Asterisk Development Team has announced a security release for Asterisk 10. This security release is released as version 10.5.1. The release is available for immediate download at http://downloads.asterisk.org/pub/telephony/asterisk/releases The release of Asterisk 10.5.1 resolves the following issue: * A remotely exploitable crash vulnerability was found in the Skinny (SCCP) Channel driver. When an SCCP client sends an Off Hook message, followed by a Key Pad Button Message, a structure that was previously set to NULL is dereferenced. This allows remote authenticated connections the ability to cause a crash in the server, denying services to legitimate users. This issue and its resolution is described in the security advisory. For more information about the details of this vulnerability, please read security advisory AST-2012-009, which was released at the same time as this announcement. For a full list of changes in the current releases, please see the ChangeLog: http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.5.1 The security advisory is available at: * http://downloads.asterisk.org/pub/security/AST-2012-009.pdf Thank you for your continued support of Asterisk! 2012-06-14T07:43:06Z sbd sbd 2012-06-14T07:43:06Z urn:sha1:f63fd44255464d2ccaa0165fd0b4869a5458e409 2012-06-09T18:44:51Z dholland dholland 2012-06-09T18:44:51Z urn:sha1:aa18ac5087f6a55569cb239088e99e2184cd6741 2012-06-09T08:29:41Z dholland dholland 2012-06-09T08:29:41Z urn:sha1:d285088735ff0744b24fab7d4ff7a55beafd002b hex digits, so patching the makefile to compare it as decimal will not work. Just patch out the test entirely, as pkgsrc guarantees curl will always be present and the packaging is not equipped to deal with this check failing anyhow. 2012-06-05T06:15:51Z jnemeth jnemeth 2012-06-05T06:15:51Z urn:sha1:a9521818707bfb22eec9ba2ab36fd119a64c37d6 2012-06-05T01:39:44Z jnemeth jnemeth 2012-06-05T01:39:44Z urn:sha1:d90a1e111cf3aa6b956d18a95c84893344bc9ecb The Asterisk Development Team has announced the release of Asterisk 10.5.0. The release of Asterisk 10.5.0 resolves several issues reported by the community and would have not been possible without your participation. Thank you! The following is a sample of the issues resolved in this release: * --- Turn off warning message when bind address is set to any. * --- Prevent overflow in calculation in ast_tvdiff_ms on 32-bit machines * --- Make DAHDISendCallreroutingFacility wait 5 seconds for a reply before disconnecting the call. * --- Fix recalled party B feature flags for a failed DTMF atxfer. * --- Fix DTMF atxfer running h exten after the wrong bridge ends. For a full list of changes in this release, please see the ChangeLog: http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.5.0 Thank you for your continued support of Asterisk! 2012-06-05T00:15:34Z jnemeth jnemeth 2012-06-05T00:15:34Z urn:sha1:480028d9127cbe0e92ab216706cc68efae263452 The Asterisk Development Team has announced the release of Asterisk 1.8.13.0. The release of Asterisk 1.8.13.0 resolves several issues reported by the community and would have not been possible without your participation. Thank you! The following is a sample of the issues resolved in this release: * --- Turn off warning message when bind address is set to any. * --- Prevent overflow in calculation in ast_tvdiff_ms on 32-bit machines * --- Make DAHDISendCallreroutingFacility wait 5 seconds for a reply before disconnecting the call. * --- Fix recalled party B feature flags for a failed DTMF atxfer. * --- Fix DTMF atxfer running h exten after the wrong bridge ends. For a full list of changes in this release, please see the ChangeLog: http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.13.0 Thank you for your continued support of Asterisk! 2012-06-03T23:34:45Z jnemeth jnemeth 2012-06-03T23:34:45Z urn:sha1:e529c93a9b034cb625362ed1ce699fc6d1cea23c AST-2012-008 along with some general bug fixes. ----- 10.4.1 ----- The Asterisk Development Team has announced security releases for Certified Asterisk 1.8.11 and Asterisk 1.8 and 10. The available security releases are released as versions 1.8.11-cert2, 1.8.12.1, and 10.4.1. The release of Asterisk 1.8.11-cert2, 1.8.12.1, and 10.4.1 resolve the following two issues: * A remotely exploitable crash vulnerability exists in the IAX2 channel driver if an established call is placed on hold without a suggested music class. Asterisk will attempt to use an invalid pointer to the music on hold class name, potentially causing a crash. * A remotely exploitable crash vulnerability was found in the Skinny (SCCP) Channel driver. When an SCCP client closes its connection to the server, a pointer in a structure is set to NULL. If the client was not in the on-hook state at the time the connection was closed, this pointer is later dereferenced. This allows remote authenticated connections the ability to cause a crash in the server, denying services to legitimate users. These issues and their resolution are described in the security advisories. For more information about the details of these vulnerabilities, please read security advisories AST-2012-007 and AST-2012-008, which were released at the same time as this announcement. For a full list of changes in the current releases, please see the ChangeLogs: http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.12.1 http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.4.1 The security advisories are available at: * http://downloads.asterisk.org/pub/security/AST-2012-007.pdf * http://downloads.asterisk.org/pub/security/AST-2012-008.pdf Thank you for your continued support of Asterisk! ----- 10.4.2 ----- The Asterisk Development Team has announced the release of Asterisk 10.4.2. The release of Asterisk 10.4.2 resolves several issues reported by the community and would have not been possible without your participation. Thank you! The following are the issues resolved in this release: * --- Resolve crash in subscribing for MWI notifications (Closes issue ASTERISK-19827. Reported by B. R) * --- Fix crash in ConfBridge when user announcement is played for more than 2 users (Closes issue ASTERISK-19899. Reported by Florian Gilcher) For a full list of changes in this release, please see the ChangeLog: http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.4.2 Thank you for your continued support of Asterisk!