diff options
| author | jnemeth <jnemeth@pkgsrc.org> | 2012-06-15 06:05:47 +0000 |
|---|---|---|
| committer | jnemeth <jnemeth@pkgsrc.org> | 2012-06-15 06:05:47 +0000 |
| commit | ef4bcafe4a2718a2ef3feafde60fd70cc58ab2a8 (patch) | |
| tree | d084a2109b252315704187f6598a47e1bc8c29b5 /comms | |
| parent | a43daa8b156389b28ca2b7e14c9ecb0737e06a7d (diff) | |
| download | pkgsrc-ef4bcafe4a2718a2ef3feafde60fd70cc58ab2a8.tar.gz | |
Update to Asterisk 10.5.1: this fixes AST-2012-009.
The Asterisk Development Team has announced a security release for
Asterisk 10. This security release is released as version 10.5.1.
The release is available for immediate download at
http://downloads.asterisk.org/pub/telephony/asterisk/releases
The release of Asterisk 10.5.1 resolves the following issue:
* A remotely exploitable crash vulnerability was found in the Skinny
(SCCP) Channel driver. When an SCCP client sends an Off Hook
message, followed by a Key Pad Button Message, a structure that
was previously set to NULL is dereferenced. This allows remote
authenticated connections the ability to cause a crash in the
server, denying services to legitimate users.
This issue and its resolution is described in the security advisory.
For more information about the details of this vulnerability, please
read security advisory AST-2012-009, which was released at the same
time as this announcement.
For a full list of changes in the current releases, please see the
ChangeLog:
http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.5.1
The security advisory is available at:
* http://downloads.asterisk.org/pub/security/AST-2012-009.pdf
Thank you for your continued support of Asterisk!
Diffstat (limited to 'comms')
| -rw-r--r-- | comms/asterisk10/Makefile | 5 | ||||
| -rw-r--r-- | comms/asterisk10/distinfo | 14 |
2 files changed, 9 insertions, 10 deletions
diff --git a/comms/asterisk10/Makefile b/comms/asterisk10/Makefile index 1bac5b73da0..9b5b7a46eda 100644 --- a/comms/asterisk10/Makefile +++ b/comms/asterisk10/Makefile @@ -1,13 +1,12 @@ -# $NetBSD: Makefile,v 1.18 2012/06/14 07:45:31 sbd Exp $ +# $NetBSD: Makefile,v 1.19 2012/06/15 06:05:47 jnemeth Exp $ # # NOTE: when updating this package, there are two places that sound # tarballs need to be checked -DISTNAME= asterisk-10.5.0 +DISTNAME= asterisk-10.5.1 DIST_SUBDIR= ${PKGNAME_NOREV} DISTFILES= ${DEFAULT_DISTFILES} EXTRACT_ONLY= ${DISTNAME}.tar.gz -PKGREVISION= 1 CATEGORIES= comms net audio MASTER_SITES= http://downloads.asterisk.org/pub/telephony/asterisk/ \ http://downloads.asterisk.org/pub/telephony/asterisk/old-releases/ \ diff --git a/comms/asterisk10/distinfo b/comms/asterisk10/distinfo index 6bd4f6bcdad..cb9a67c6c78 100644 --- a/comms/asterisk10/distinfo +++ b/comms/asterisk10/distinfo @@ -1,11 +1,11 @@ -$NetBSD: distinfo,v 1.13 2012/06/05 01:39:44 jnemeth Exp $ +$NetBSD: distinfo,v 1.14 2012/06/15 06:05:47 jnemeth Exp $ -SHA1 (asterisk-10.5.0/asterisk-10.5.0.tar.gz) = 8f44a57c67f8c8e01098b0de61dfd82cdf837c25 -RMD160 (asterisk-10.5.0/asterisk-10.5.0.tar.gz) = cde557a9e2041881e364061bb4f59a165b929acd -Size (asterisk-10.5.0/asterisk-10.5.0.tar.gz) = 24980521 bytes -SHA1 (asterisk-10.5.0/asterisk-extra-sounds-en-gsm-1.4.11.tar.gz) = 8692fa61423b4769dc8bfa78faf9ed5ef7a259b9 -RMD160 (asterisk-10.5.0/asterisk-extra-sounds-en-gsm-1.4.11.tar.gz) = 68170c769d739d6b5b35b00f999ad6bbf876f9f6 -Size (asterisk-10.5.0/asterisk-extra-sounds-en-gsm-1.4.11.tar.gz) = 3349898 bytes +SHA1 (asterisk-10.5.1/asterisk-10.5.1.tar.gz) = f927384456aaadc6990730927644f162b7e50536 +RMD160 (asterisk-10.5.1/asterisk-10.5.1.tar.gz) = 3e4e371a7bd533242c806bf683f0d1ad9afdeb70 +Size (asterisk-10.5.1/asterisk-10.5.1.tar.gz) = 24970486 bytes +SHA1 (asterisk-10.5.1/asterisk-extra-sounds-en-gsm-1.4.11.tar.gz) = 8692fa61423b4769dc8bfa78faf9ed5ef7a259b9 +RMD160 (asterisk-10.5.1/asterisk-extra-sounds-en-gsm-1.4.11.tar.gz) = 68170c769d739d6b5b35b00f999ad6bbf876f9f6 +Size (asterisk-10.5.1/asterisk-extra-sounds-en-gsm-1.4.11.tar.gz) = 3349898 bytes SHA1 (patch-Makefile) = 1f351f6b3de49ee32be69cd8b8f88571b7ae9e03 SHA1 (patch-apps_app__dial.c) = 2109ed50406dedc90a300981a3a7500b1397ff3a SHA1 (patch-apps_app__followme.c) = a0a507986ec9722337d46fdaaac0a79d23a634e4 |