summaryrefslogtreecommitdiff
path: root/comms
AgeCommit message (Collapse)AuthorFilesLines
2010-03-08- take over maintainship as I handle most Asterisk stuffjnemeth1-5/+8
- mark as destdir ready XXX The Makefile has a comment saying that "this program" is licensed under GPL. There is a README file saying that the sounds are licensed under a BSD licence. Need to check for updates and/or contact upstream for clarification and a proper licence file. XXX The PLIST needs some serious TLC.
2010-03-07this doesn't work on NetBSD 5+ (not even sure it will work on NetBSD 4+)jnemeth1-2/+2
2010-03-01 Update to Asterisk 1.6.1.17. This fixes AST-2010-001 andjnemeth6-38/+37
AST-2010-003. AST-2010-002 was just a warning about dialplan scripting errors that could lead to security issues. Asterisk 1.6.1.13: general bug fixes Asterisk 1.6.1.14: fix AST-2010-001 Asterisk 1.6.1.15: not released, skipped for security releases Asterisk 1.6.1.16: fix AST-2010-002 Asterisk 1.6.1.17: fix AST-2010-003 Note that the only change in Asterisk 1.6.1.16 was the addtion of a README file. However, the package doesn't install random docs. That is planned for a future update seperate from the upstream updates. ----- Asterisk 1.6.1.13: The release of Asterisk 1.6.1.13 resolved several issues reported by the community, and would have not been possible without your participation. Thank you! * Restarts busydetector (if enabled) when DTMF is received after call is bridged (Closes issue #16389. Reported, Tested, Patched by alecdavis.) * Send parking lot announcement to the channel which parked the call, not the park-ee. (Closes issue #16234. Reported, Tested by yeshuawatso. Patched by tilghman.) * When the field is blank, don't warn about the field being unable to be coerced just skip the column. (Closes http://lists.digium.com/pipermail/asterisk-dev/2009-December/041362.html) Reported by Nic Colledge on the -dev list.) * Don't queue frames to channels that have no means to process them. (Closes issue #15609. Reported, Tested by aragon. Patched by tilghman.) * Fixes holdtime playback issue in app_queue. (Closes issue #16168. Reported, Patched by nickilo. Tested by wonderg, nickilo.) A summary of changes in this release can be found in the release summary: http://downloads.asterisk.org/pub/telephony/asterisk/asterisk-1.6.1.13-summary.t xt For a full list of changes in this releases, please see the ChangeLog: http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.6.1.13 ----- Asterisk 1.6.1.14: The releases of Asterisk 1.6.0.22, 1.6.1.14, and 1.6.2.2 include the fix described in security advisory AST-2010-001. The issue is that an attacker attempting to negotiate T.38 over SIP can remotely crash Asterisk by modifying the FaxMaxDatagram field of the SDP to contain either a negative or exceptionally large value. The same crash will occur when the FaxMaxDatagram field is omitted from the SDP, as well. For more information about the details of this vulnerability, please read the security advisory AST-2009-009, which was released at the same time as this announcement. For a full list of changes in the current releases, please see the ChangeLog: http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.6.1.14 Security advisory AST-2010-001 is available at: http://downloads.asterisk.org/pub/security/AST-2010-001.pdf ----- Asterisk 1.6.1.16: The releases of Asterisk 1.2.40, 1.4.29.1, 1.6.0.24, 1.6.1.16, and 1.6.2.4 include documention describing a possible dialplan string injection with common usage of the ${EXTEN} (and other expansion variables). The issue and resolution are described in the AST-2010-002 security advisory. If you have a channel technology which can accept characters other than numbers and letters (such as SIP) it may be possible to craft an INVITE which sends data such as 300&Zap/g1/4165551212 which would create an additional outgoing channel leg that was not originally intended by the dialplan programmer. Please note that this is not limited to an specific protocol or the Dial() application. The expansion of variables into programmatically-interpreted strings is a common behavior in many script or script-like languages, Asterisk included. The ability for a variable to directly replace components of a command is a feature, not a bug - that is the entire point of string expansion. However, it is often the case due to expediency or design misunderstanding that a developer will not examine and filter string data from external sources before passing it into potentially harmful areas of their dialplan. With the flexibility of the design of Asterisk come these risks if the dialplan designer is not suitably cautious as to how foreign data is allowed to enter the system unchecked. This security release is intended to raise awareness of how it is possible to insert malicious strings into dialplans, and to advise developers to read the best practices documents so that they may easily avoid these dangers. For more information about the details of this vulnerability, please read the security advisory AST-2010-002, which was released at the same time as this announcement. For a full list of changes in the current releases, please see the ChangeLog: http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.6.1.16 Security advisory AST-2010-002 is available at: http://downloads.asterisk.org/pub/security/AST-2010-002.pdf The README-SERIOUSLY.bestpractices.txt document is available in the top-level directory of your Asterisk sources, or available in all Asterisk branches from 1.2 and up. http://svn.asterisk.org/svn/asterisk/trunk/README-SERIOUSLY.bestpractices.txt ----- Asterisk 1.6.1.17: The releases of Asterisk 1.6.0.25, 1.6.1.17, and 1.6.2.5 resolve an issue with invalid parsing of ACL (Access Control List) rules leading to a possible compromise in security. The issue and resolution are described in the AST-2010-003 security advisory. For more information about the details of this vulnerability, please read the security advisory AST-2010-003, which was released at the same time as this announcement. For a full list of changes in the current releases, please see the ChangeLog: http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.6.1.17 Security advisory AST-2010-003 is available at: http://downloads.asterisk.org/pub/security/AST-2010-003.pdf -----
2010-02-10Bump revision for PYTHON_VERSION_DEFAULT change.joerg1-2/+2
2010-02-10Retire comms/plptools.joerg25-601/+1
2010-02-02Fixing DESTDIR support (upon joerg@'s request)sno3-5/+26
Adding license
2010-01-31update master_sites.zafer1-2/+2
2010-01-31update master_sites.zafer1-2/+2
2010-01-29DESTDIR supportjoerg7-24/+59
2010-01-29DESTDIR readyjoerg1-1/+3
2010-01-29DESTDIR supportjoerg3-2/+30
2010-01-29DESTDIR supportjoerg5-14/+19
2010-01-27DESTDIR support. Based on patch from Steven Drake.joerg1-8/+9
2010-01-18Second try at jpeg-8 recursive PKGREVISION bump.wiz8-15/+16
2010-01-17resuscitate, with a distfile instead of a files subdirspz4-0/+38
2010-01-17Remove this, as demanded by Joerg.dholland95-26182/+0
2010-01-17Recursive PKGREVISION bump for jpeg update to 8.wiz6-9/+12
2010-01-17Remove unused files that appear to be leftovers from some pre-NetBSDdholland4-17/+0
makefile scheme. It's clear nobody'd maintained tn3270 in base for a long, long time.
2010-01-17whoops, should use the curses bl3. no version bump, ride the import.dholland1-1/+2
2010-01-17+tn3270dholland1-1/+2
2010-01-17The package bits for tn3270. This is a bit rough and probably not going todholland3-0/+36
build except on netbsd-5 and -current, but we can take that as it comes.
2010-01-17Use our own map3270 file instead of hardwiring /usr/share/misc.dholland1-4/+4
2010-01-17support PKGMANDIRdholland1-3/+8
2010-01-17fix slipup in man page namesdholland1-2/+2
2010-01-17New makefiles for this that don't depend on being in the base source tree.dholland15-201/+285
2010-01-17Import tn3270 from base as of 20100114, just before its removal. Thisdholland96-0/+26073
is just the sources, and they're unchanged from base except that the rcsids have been preserved. The package will be along shortly.
2010-01-15fairly minor update to 1.4.13plunky4-101/+22
- obexapp does not now require GNU libiconv (this was in pkgsrc already) - compiler errors fixed - no longer tries to provide username/groupname in file listings (info not available in chroot)
2010-01-13PR/42612 - Dima Veselov -- build problem when no options specifiedjnemeth2-3/+3
2010-01-07Use new ${LP64PLATFORMS} variable to restrict platforms instead of manualwiz1-2/+2
hardcoding. Note: This effectively adds x86_64 to NOT_FOR_PLATFORM for some packages.
2010-01-05Add workaround for broken Makefile.PL that eats an important argument.joerg2-1/+32
From Daniel Horecki.
2010-01-02 Fix build problem when no options are selected. Thanks to wiz@ forjnemeth1-2/+7
noticing the problem and seb@ for help with the Makefile contortions.
2009-12-30 Update to 1.6.1.12. 1.6.1.10 and 1.6.1.12 are general bugjnemeth6-64/+76
fix releases. For more information see: http://downloads.asterisk.org/pub/telephony/asterisk/old-releases/asterisk-1.6.1.10-summary.html or http://tinyurl.com/yzyr9tt and http://downloads.asterisk.org/pub/telephony/asterisk/old-releases/asterisk-1.6.1.12-summary.html or http://tinyurl.com/yfxlyjp . 1.6.1.11 fixes AST-2009-010 which allows people to remotely crash the server. The description of the issue is: An attacker sending a valid RTP comfort noise payload containing a data length of 24 bytes or greater can remotely crash Asterisk. Commit during freeze approved by wiz@.
2009-12-18 Update to 1.2.37. This update is to fix two security issues.jnemeth2-6/+6
1.2.36 fixed AST-2009-008, and 1.2.37 fixed AST-2009-010. The problem in AST-2009-008 is: ----- It is possible to determine if a peer with a specific name is configured in Asterisk by sending a specially crafted REGISTER message twice. The username that is to be checked is put in the user portion of the URI in the To header. A bogus non-matching value is put into the username portion of the Digest in the Authorization header. If the peer does exist the second REGISTER will receive a response of "403 Authentication user name does not match account name". If the peer does not exist the response will be "404 Not Found" if alwaysauthreject is disabled and "401 Unauthorized" if alwaysauthreject is enabled. ----- And, the problem in AST-2009-010 is: ----- An attacker sending a valid RTP comfort noise payload containing a data length of 24 bytes or greater can remotely crash Asterisk. -----
2009-12-18You are in a maze of twisty little Makefiles, all with short install targetsabs47-120/+496
Somewhat more than 11 rooms later... PKG_DESTDIR_SUPPORT
2009-12-17PKG_DESTDIR_SUPPORTabs1-9/+10
2009-12-17Updated comms/xisp to 2.7p4abs5-27/+29
Updated from 2.7p1 to 2.7p4 as original distfile no longer available No changelog available added PKG_DESTDIR_SUPPORT
2009-12-17PKG_DESTDIR_SUPPORTabs5-12/+30
2009-12-15Recursive bump for libltdljoerg1-1/+2
2009-12-01Make this work with BSD native iconv(3).drochner3-7/+75
This was tested by sending vcards with non-ASCII names; the result was identical as before with GNU libiconv. bump PKGREVISION approved by plunky
2009-11-24update HOMEPAGE and MASTER_SITES as geocities is goneplunky1-3/+3
2009-11-20 Fix three security advisories by updating to Asterisk 1.6.1.9jnemeth3-16/+16
and update PLIST for new Music On Hold files. 1.6.1.8 fixes AST-2009-007. ----- A missing ACL check for handling SIP INVITEs allows a device to make calls on networks intended to be prohibited as defined by the "deny" and "permit" lines in sip.conf. The ACL check for handling SIP registrations was not affected. ----- 1.6.1.9 fixes AST-2009-008 and AST-2009-009. ----- It is possible to determine if a peer with a specific name is configured in Asterisk by sending a specially crafted REGISTER message twice. The username that is to be checked is put in the user portion of the URI in the To header. A bogus non-matching value is put into the username portion of the Digest in the Authorization header. If the peer does exist the second REGISTER will receive a response of 403 Authentication user name does not match account name. If the peer does not exist the response will be 404 Not Found if alwaysauthreject is disabled and 401 Unauthorized if alwaysauthreject is enabled. ----- Asterisk includes a demonstration AJAX based manager interface, ajamdemo.html which uses the prototype.js framework. An issue was uncovered in this framework which could allow someone to execute a cross-site AJAX request exploit.
2009-11-16sortobache1-2/+2
2009-10-03Actually, the security patch was missing from my last commit. PKGREVISIONis3-5/+37
increased to distinguish.
2009-10-02Update mgetty to 1.1.36, at the same time patching faxspool to useis9-91/+51
mktemp(1) to avoid symlink vulnerabilities in tmp file/directory creation/removal (mitre.org CVE-2008-4936). Named 1.1.36nb1 to emphasize difference from upstream. Commit ok'd by agc@.
2009-09-20Updating comms/p5-Device-Gsm from 1.52 to 1.54sno2-6/+8
pkgsrc changes: - Adjusting dependencies - Adding license definition Upstream changes: 1.54 Sun Sep 6 10:44:53 CEST 2009 - Fixed RT #31565, incorrect decoding of outgoing messages due to incorrect removal of zero-length octet in PDU. Thanks to Svami Dhyan Nataraj. 1.53 Fri Aug 14 21:43:37 CEST 2009 - Fixed RT #48700, deleting SMS message with index 0 didn't work. Thanks to Vytas M. for reporting the bug.
2009-09-14 Update to Asterisk 1.6.1.6jnemeth6-70/+69
- 1.6.1.6 fixes AST-2009-006 which is an IAX2 DOS vulnerability - 1.6.1.5 contains a variety of bug fixes: Category: Applications/app_chanspy #15660: ChanSpy "whisper" is broken in 1.4.26 Category: Applications/app_fax #15606: app_fax.c is not compiling under OpenBSD #15610: T.38 re-INVITE received after T.38 already negotiated fails Category: Applications/app_milliwatt #15386: [patch] Milliwatt() is off by -11dbm Category: Applications/app_mixmonitor #15699: [patch] using ast_free instead of mixmonitor_free Category: Applications/app_queue #14536: [patch] After a caller is processed by app_queue the queue_log logs the hangup as TRANSFER #15664: [patch] QUEUE_MEMBER_LIST() returns member names instead of Category: Applications/app_stack #15557: [patch] Gosub() dequotes once more than Macro() #15617: [patch] crash in LOCAL() if Gosub stack is allocated but empty Category: Applications/app_voicemail #15717: MWI is not sent to a SIP phone upon registration, but is after the mailbox is updated/checked #15720: opendir() return code is not checked in last_message_index() Category: Applications/app_voicemail/IMAP #14496: [patch] IMAP crash multiple callers / callers hangup at beep #14597: greetings can not be retrieved from IMAP #14950: [patch] Greetings are stored as IMAP messages even when imapgreetings=no #15729: IMAP greetings not stored in dovecot Category: CDR/General #15751: [patch] Core dump in ast_bridge_call features.c line 2772 Category: Channels/chan_agent #15668: AGENTACCEPTDTMF is incorrectly spelled as AGENTACCEPTDMTF in code to recognize channel variables. Category: Channels/chan_dahdi #15655: [patch] Dialplan starts execution before call is accepted #15727: [patch] Message Waiting Indication(MWI) is randomly generated when FXO is set to DTMF Caller ID Category: Channels/chan_misdn #12113: [patch] asterisk crash at reload chan_misdn.so Category: Channels/chan_sip/General #12869: [patch] 'context' doesn't change when 'sip reload' issued when driven from realtime #15362: [patch] log message output is truncated #15596: [patch] all codecs allowed, but textsupport=no crashes on T140RED enabled call Category: Channels/chan_sip/Registration #14366: [patch] Registration expiry not compatible with some ITSP #15539: [patch] Register request line contains wrong address when domain and registrar host differ Category: Channels/chan_sip/T.38 #15182: [patch] T.38 invite does not always comply with RFC 2327 Category: Channels/chan_sip/Video #15121: [patch] Video support in SIP channel driver appears to be totally broken Category: Core/BuildSystem #15697: most cleaner alaw don't compile #15698: [patch] If enable DEBUG_FD_LEAKS - h323 can't start. #15714: [patch] Asterisk won't build with curl unless curl_config is present Category: Core/General #14730: [patch] Fix runlevels in Debian rc files #15273: [patch] german time (20:01:00 oh clock) is announced wrong #15649: T38 Faxing failing on 1.6.1 svn #15667: LOGGER WARNING : error executing after rotate Category: Core/ManagerInterface #15397: [patch] segfault in action_coreshowchannels() at manager.c #15730: [patch] manager keeps creating /tmp/ast-ami-XXXXXX files (without deleting) when a single manager client remains logged in Category: Core/PBX #15242: [patch] log does not indicate which function is missing closing parenthesis Category: Documentation #15755: Description in queues.conf on call recording is slightly misleading Category: Functions/func_iconv #15169: When building with uClibc, configure script mistakenly assumes iconv is always available Category: General #15571: [patch] 'received' typos in trunk, in 6 files #15595: [patch] fix spelling for typos, mainly in comments. Category: PBX/pbx_dundi #15322: [patch] DUNDILOOKUP() does not accept comma as argument separator Category: Resources/General #15624: res_ais, communication ok, but wrong state send and receive. Category: Resources/res_config_ldap #13725: [patch] ERROR[7387]: res_config_ldap.c:1292 update_ldap: Couldn't modify dn:cn=1001,dc=xxx,dc=xxx because Invalid syntax #15710: Typo in LDAP schema files on line 598 Category: Resources/res_musiconhold #15051: [patch] Moh class set in the dialplan is ignored with realtime moh ---------------------------------------------------------------------- Commits Not Associated with an Issue [Back to Top] This is a list of all changes that went into this release that did not directly close an issue from the issue tracker. The commits may have been marked as being related to an issue. If that is the case, the issue numbers are listed here, as well. +------------------------------------------------------------------------+ | Revision | Author | Summary | Issues | | | | | Referenced | |----------+------------+-----------------------------------+------------| | | | Restore explicit export of | | | 209058 | kpfleming | ASTCFLAGS/ASTLDFLAGS and | | | | | underscore-variants to sub-makes. | | |----------+------------+-----------------------------------+------------| | 209237 | mmichelson | Gracefully handle malformed RTP | | | | | text packets. | | |----------+------------+-----------------------------------+------------| | 209262 | kpfleming | Make T.38 switchover in | | | | | ReceiveFAX synchronous. | | |----------+------------+-----------------------------------+------------| | 209281 | kpfleming | Cleanup T.38 negotiation changes. | | |----------+------------+-----------------------------------+------------| | 209327 | tilghman | Publish French extra sounds | | |----------+------------+-----------------------------------+------------| | | | Fix some places where | | | 209714 | russell | ast_event_type was used instead | | | | | of ast_event_ie_type. | | |----------+------------+-----------------------------------+------------| | 209781 | kpfleming | Minor changes inspired by testing | | | | | with latest GCC. | | |----------+------------+-----------------------------------+------------| | 209900 | russell | Resolve a valgrind warning about | #15396 | | | | a read from uninitialized memory. | | |----------+------------+-----------------------------------+------------| | 211115 | russell | Resolve a deadlock involving | | | | | app_chanspy and masquerades. | | |----------+------------+-----------------------------------+------------| | 211277 | tilghman | Small oops. Clear the flags which | | | | | have been checked. | | |----------+------------+-----------------------------------+------------| | 211569 | tilghman | AST-2009-005 | | |----------+------------+-----------------------------------+------------| | 211586 | tilghman | Conversion specifiers, not format | | | | | specifiers | | |----------+------------+-----------------------------------+------------| | | | Check an actual populated | | | 212069 | file | variable when seeing if we need | | | | | to do video or not. | | |----------+------------+-----------------------------------+------------| | | | Ensure that T38FaxVersion is put | | | 212115 | kpfleming | into outgoing SDP in the proper | | | | | case. | | |----------+------------+-----------------------------------+------------| | 212386 | seanbright | Handle slin16 for extra sounds as | | | | | well. | | |----------+------------+-----------------------------------+------------| | 212768 | rmudgett | Removed some deadwood and added | | | | | some doxygen comments. | | |----------+------------+-----------------------------------+------------| | | | Make the default extconfig.conf | | | 212862 | tilghman | match entries with the sample | | | | | res_mysql.conf. | | |----------+------------+-----------------------------------+------------| | 212928 | kpfleming | Convert this branch to Opsound | | | | | music-on-hold. | | |----------+------------+-----------------------------------+------------| | | | Remove some | | | 212942 | kpfleming | accidentally-committed | | | | | properties. | | |----------+------------+-----------------------------------+------------| | 213449 | twilson | Make LOAD_ORDER actually work | | |----------+------------+-----------------------------------+------------| | 213452 | twilson | Oops, committed this first. Make | | | | | the merged property happy | | |----------+------------+-----------------------------------+------------| | | | Make autoheader descriptions | | | 214365 | tilghman | render correctly in our | #14906 | | | | autoconfig.h file. | | |----------+------------+-----------------------------------+------------| | | | One more build system change, to | | | 214496 | tilghman | make the descriptions look | | | | | better, if we have better | | | | | information. | | +------------------------------------------------------------------------+
2009-09-09Update to 1.26.1:wiz2-6/+6
This release fixes few bugs in the AT driver.
2009-09-05update to asterisk 1.2.35 which fixes AST-2009-006 -- IAX2 DOS vulnerabilityjnemeth3-7/+8
2009-09-04Update gammu and py-gammu to 1.26.0.wiz11-462/+13
Memory usage was reduced. Tons of bugs were fixed. Support for reading messages from Motorola phones was improved. Also BlueTooth support was improved.
2009-08-29Convert to user-destdir.wiz3-2/+30
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-30 23:05:26 +0000