pkgsrc/comms/asterisk10/distinfo

39 lines
2.8 KiB
Text
Raw Normal View History

Update to Asterisk 10.12.4: this is a security fix update that fixes AST-2013-006 and AST-2013-007. The Asterisk Development Team has announced security releases for Certified Asterisk 1.8.15, 11.2, and Asterisk 1.8, 10, and 11. The available security releases are released as versions 1.8.15-cert4, 11.2-cert3, 1.8.24.1, 10.12.4, 10.12.4-digiumphones, and 11.6.1. The release of these versions resolve the following issues: * A buffer overflow when receiving odd length 16 bit messages in app_sms. An infinite loop could occur which would overwrite memory when a message is received into the unpacksms16() function and the length of the message is an odd number of bytes. * Prevent permissions escalation in the Asterisk Manager Interface. Asterisk now marks certain individual dialplan functions as 'dangerous', which will inhibit their execution from external sources. A 'dangerous' function is one which results in a privilege escalation. For example, if one were to read the channel variable SHELL(rm -rf /) Bad Things(TM) could happen; even if the external source has only read permissions. Execution from external sources may be enabled by setting 'live_dangerously' to 'yes' in the [options] section of asterisk.conf. Although doing so is not recommended. These issues and their resolutions are described in the security advisories. For more information about the details of these vulnerabilities, please read security advisories AST-2013-006 and AST-2013-007, which were released at the same time as this announcement. For a full list of changes in the current releases, please see the ChangeLogs: http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.24.1 The security advisories are available at: * http://downloads.asterisk.org/pub/security/AST-2013-006.pdf * http://downloads.asterisk.org/pub/security/AST-2013-007.pdf Thank you for your continued support of Asterisk!
2013-12-17 06:37:10 +01:00
$NetBSD: distinfo,v 1.29 2013/12/17 05:37:10 jnemeth Exp $
Import Asterisk 10.0.0: The Asterisk Development Team is proud to announce the release of Asterisk 10.0.0. This release is available for immediate download at http://downloads.asterisk.org/pub/telephony/asterisk/ Asterisk 10 is the next major release series of Asterisk. It will be a Standard support release, similar to Asterisk 1.6.2. For more information about support time lines for Asterisk releases, see the Asterisk versions page: https://wiki.asterisk.org/wiki/display/AST/Asterisk+Versions With the release of the Asterisk 10 branch, the preceding '1.' has been removed from the version number per the blog post available at http://blogs.digium.com/2011/07/21/the-evolution-of-asterisk-or-how-we-arrived-at-asterisk-10/ The release of Asterisk 10 would not have been possible without the support and contributions of the community. You can find an overview of the work involved with the 10.0.0 release in the summary: http://svn.asterisk.org/svn/asterisk/tags/10.0.0/asterisk-10.0.0-summary.txt A short list of available features includes: * T.38 gateway functionality has been added to res_fax. * Protocol independent out-of-call messaging support. Text messages not associated with an active call can now be routed through the Asterisk dialplan. SIP and XMPP are supported so far. * New highly optimized and customizable ConfBridge application capable of mixing audio at sample rates ranging from 8kHz-192kHz * Addition of video_mode option in confbridge.conf to provide basic video conferencing in the ConfBridge() dialplan application. * Support for defining hints has been added to pbx_lua. * Replacement of Berkeley DB with SQLite for the Asterisk Database (AstDB). * Much, much more! A full list of new features can be found in the CHANGES file. http://svn.asterisk.org/svn/asterisk/branches/10/CHANGES Also, when upgrading a system between major versions, it is imperative that you read and understand the contents of the UPGRADE.txt file, which is located at: http://svn.asterisk.org/svn/asterisk/branches/10/UPGRADE.txt Thank you for your continued support of Asterisk!
2012-01-15 19:36:18 +01:00
Update to Asterisk 10.12.4: this is a security fix update that fixes AST-2013-006 and AST-2013-007. The Asterisk Development Team has announced security releases for Certified Asterisk 1.8.15, 11.2, and Asterisk 1.8, 10, and 11. The available security releases are released as versions 1.8.15-cert4, 11.2-cert3, 1.8.24.1, 10.12.4, 10.12.4-digiumphones, and 11.6.1. The release of these versions resolve the following issues: * A buffer overflow when receiving odd length 16 bit messages in app_sms. An infinite loop could occur which would overwrite memory when a message is received into the unpacksms16() function and the length of the message is an odd number of bytes. * Prevent permissions escalation in the Asterisk Manager Interface. Asterisk now marks certain individual dialplan functions as 'dangerous', which will inhibit their execution from external sources. A 'dangerous' function is one which results in a privilege escalation. For example, if one were to read the channel variable SHELL(rm -rf /) Bad Things(TM) could happen; even if the external source has only read permissions. Execution from external sources may be enabled by setting 'live_dangerously' to 'yes' in the [options] section of asterisk.conf. Although doing so is not recommended. These issues and their resolutions are described in the security advisories. For more information about the details of these vulnerabilities, please read security advisories AST-2013-006 and AST-2013-007, which were released at the same time as this announcement. For a full list of changes in the current releases, please see the ChangeLogs: http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.24.1 The security advisories are available at: * http://downloads.asterisk.org/pub/security/AST-2013-006.pdf * http://downloads.asterisk.org/pub/security/AST-2013-007.pdf Thank you for your continued support of Asterisk!
2013-12-17 06:37:10 +01:00
SHA1 (asterisk-10.12.4/asterisk-10.12.4.tar.gz) = 960742b18694cee94c24d258eb547398082c8bd1
RMD160 (asterisk-10.12.4/asterisk-10.12.4.tar.gz) = 548ac7f2e3aa9ce847d1e9de6920907f2b2eea0a
Size (asterisk-10.12.4/asterisk-10.12.4.tar.gz) = 25120413 bytes
SHA1 (asterisk-10.12.4/asterisk-extra-sounds-en-gsm-1.4.11.tar.gz) = 8692fa61423b4769dc8bfa78faf9ed5ef7a259b9
RMD160 (asterisk-10.12.4/asterisk-extra-sounds-en-gsm-1.4.11.tar.gz) = 68170c769d739d6b5b35b00f999ad6bbf876f9f6
Size (asterisk-10.12.4/asterisk-extra-sounds-en-gsm-1.4.11.tar.gz) = 3349898 bytes
SHA1 (patch-Makefile) = ab740f84f9883980cb5d8e8d5ca301f172c76231
SHA1 (patch-apps_app__dial.c) = e6c9f559310acdb6574d0e034dcb55df7c2ba31f
SHA1 (patch-apps_app__followme.c) = cd34774a11b96269003d9f1b6fbdfddf5d9b9d4b
SHA1 (patch-apps_app__queue.c) = 6fc4edbf9386e2ff39a63a1c3a3d9fe2ea27d187
SHA1 (patch-apps_app__sms.c) = d89b27a9df04d4da98d562241c07d25d182baefc
Import Asterisk 10.0.0: The Asterisk Development Team is proud to announce the release of Asterisk 10.0.0. This release is available for immediate download at http://downloads.asterisk.org/pub/telephony/asterisk/ Asterisk 10 is the next major release series of Asterisk. It will be a Standard support release, similar to Asterisk 1.6.2. For more information about support time lines for Asterisk releases, see the Asterisk versions page: https://wiki.asterisk.org/wiki/display/AST/Asterisk+Versions With the release of the Asterisk 10 branch, the preceding '1.' has been removed from the version number per the blog post available at http://blogs.digium.com/2011/07/21/the-evolution-of-asterisk-or-how-we-arrived-at-asterisk-10/ The release of Asterisk 10 would not have been possible without the support and contributions of the community. You can find an overview of the work involved with the 10.0.0 release in the summary: http://svn.asterisk.org/svn/asterisk/tags/10.0.0/asterisk-10.0.0-summary.txt A short list of available features includes: * T.38 gateway functionality has been added to res_fax. * Protocol independent out-of-call messaging support. Text messages not associated with an active call can now be routed through the Asterisk dialplan. SIP and XMPP are supported so far. * New highly optimized and customizable ConfBridge application capable of mixing audio at sample rates ranging from 8kHz-192kHz * Addition of video_mode option in confbridge.conf to provide basic video conferencing in the ConfBridge() dialplan application. * Support for defining hints has been added to pbx_lua. * Replacement of Berkeley DB with SQLite for the Asterisk Database (AstDB). * Much, much more! A full list of new features can be found in the CHANGES file. http://svn.asterisk.org/svn/asterisk/branches/10/CHANGES Also, when upgrading a system between major versions, it is imperative that you read and understand the contents of the UPGRADE.txt file, which is located at: http://svn.asterisk.org/svn/asterisk/branches/10/UPGRADE.txt Thank you for your continued support of Asterisk!
2012-01-15 19:36:18 +01:00
SHA1 (patch-build__tools_mkpkgconfig) = 2bd3c0e24bc6d721cc234feb19b64a57106fcbe4
SHA1 (patch-channels_chan__oss.c) = fccfa6fca010294ed2d3ab87fc31f436d67f49fa
SHA1 (patch-configure) = 49b17e4661cf1ef98342774ad4f2bb377326dee5
SHA1 (patch-configure.ac) = a68fce7769679a8f40fc266711b80dcccdc15cad
Import Asterisk 10.0.0: The Asterisk Development Team is proud to announce the release of Asterisk 10.0.0. This release is available for immediate download at http://downloads.asterisk.org/pub/telephony/asterisk/ Asterisk 10 is the next major release series of Asterisk. It will be a Standard support release, similar to Asterisk 1.6.2. For more information about support time lines for Asterisk releases, see the Asterisk versions page: https://wiki.asterisk.org/wiki/display/AST/Asterisk+Versions With the release of the Asterisk 10 branch, the preceding '1.' has been removed from the version number per the blog post available at http://blogs.digium.com/2011/07/21/the-evolution-of-asterisk-or-how-we-arrived-at-asterisk-10/ The release of Asterisk 10 would not have been possible without the support and contributions of the community. You can find an overview of the work involved with the 10.0.0 release in the summary: http://svn.asterisk.org/svn/asterisk/tags/10.0.0/asterisk-10.0.0-summary.txt A short list of available features includes: * T.38 gateway functionality has been added to res_fax. * Protocol independent out-of-call messaging support. Text messages not associated with an active call can now be routed through the Asterisk dialplan. SIP and XMPP are supported so far. * New highly optimized and customizable ConfBridge application capable of mixing audio at sample rates ranging from 8kHz-192kHz * Addition of video_mode option in confbridge.conf to provide basic video conferencing in the ConfBridge() dialplan application. * Support for defining hints has been added to pbx_lua. * Replacement of Berkeley DB with SQLite for the Asterisk Database (AstDB). * Much, much more! A full list of new features can be found in the CHANGES file. http://svn.asterisk.org/svn/asterisk/branches/10/CHANGES Also, when upgrading a system between major versions, it is imperative that you read and understand the contents of the UPGRADE.txt file, which is located at: http://svn.asterisk.org/svn/asterisk/branches/10/UPGRADE.txt Thank you for your continued support of Asterisk!
2012-01-15 19:36:18 +01:00
SHA1 (patch-contrib_scripts_vmail.cgi) = 650b9bbf3e322d1ad351932cfe6f747baa8f35e4
SHA1 (patch-include_asterisk_autoconfig.h.in) = 90f8688b17f181775319e0c92e353a969b09c93f
Import Asterisk 10.0.0: The Asterisk Development Team is proud to announce the release of Asterisk 10.0.0. This release is available for immediate download at http://downloads.asterisk.org/pub/telephony/asterisk/ Asterisk 10 is the next major release series of Asterisk. It will be a Standard support release, similar to Asterisk 1.6.2. For more information about support time lines for Asterisk releases, see the Asterisk versions page: https://wiki.asterisk.org/wiki/display/AST/Asterisk+Versions With the release of the Asterisk 10 branch, the preceding '1.' has been removed from the version number per the blog post available at http://blogs.digium.com/2011/07/21/the-evolution-of-asterisk-or-how-we-arrived-at-asterisk-10/ The release of Asterisk 10 would not have been possible without the support and contributions of the community. You can find an overview of the work involved with the 10.0.0 release in the summary: http://svn.asterisk.org/svn/asterisk/tags/10.0.0/asterisk-10.0.0-summary.txt A short list of available features includes: * T.38 gateway functionality has been added to res_fax. * Protocol independent out-of-call messaging support. Text messages not associated with an active call can now be routed through the Asterisk dialplan. SIP and XMPP are supported so far. * New highly optimized and customizable ConfBridge application capable of mixing audio at sample rates ranging from 8kHz-192kHz * Addition of video_mode option in confbridge.conf to provide basic video conferencing in the ConfBridge() dialplan application. * Support for defining hints has been added to pbx_lua. * Replacement of Berkeley DB with SQLite for the Asterisk Database (AstDB). * Much, much more! A full list of new features can be found in the CHANGES file. http://svn.asterisk.org/svn/asterisk/branches/10/CHANGES Also, when upgrading a system between major versions, it is imperative that you read and understand the contents of the UPGRADE.txt file, which is located at: http://svn.asterisk.org/svn/asterisk/branches/10/UPGRADE.txt Thank you for your continued support of Asterisk!
2012-01-15 19:36:18 +01:00
SHA1 (patch-include_asterisk_endian.h) = 41c1a9a9e02fe394bc9261f5559e931b1378ea28
SHA1 (patch-include_asterisk_inline__api.h) = ff43d14e2608dd08d7d03799dfe9847f9f7f5666
Import Asterisk 10.0.0: The Asterisk Development Team is proud to announce the release of Asterisk 10.0.0. This release is available for immediate download at http://downloads.asterisk.org/pub/telephony/asterisk/ Asterisk 10 is the next major release series of Asterisk. It will be a Standard support release, similar to Asterisk 1.6.2. For more information about support time lines for Asterisk releases, see the Asterisk versions page: https://wiki.asterisk.org/wiki/display/AST/Asterisk+Versions With the release of the Asterisk 10 branch, the preceding '1.' has been removed from the version number per the blog post available at http://blogs.digium.com/2011/07/21/the-evolution-of-asterisk-or-how-we-arrived-at-asterisk-10/ The release of Asterisk 10 would not have been possible without the support and contributions of the community. You can find an overview of the work involved with the 10.0.0 release in the summary: http://svn.asterisk.org/svn/asterisk/tags/10.0.0/asterisk-10.0.0-summary.txt A short list of available features includes: * T.38 gateway functionality has been added to res_fax. * Protocol independent out-of-call messaging support. Text messages not associated with an active call can now be routed through the Asterisk dialplan. SIP and XMPP are supported so far. * New highly optimized and customizable ConfBridge application capable of mixing audio at sample rates ranging from 8kHz-192kHz * Addition of video_mode option in confbridge.conf to provide basic video conferencing in the ConfBridge() dialplan application. * Support for defining hints has been added to pbx_lua. * Replacement of Berkeley DB with SQLite for the Asterisk Database (AstDB). * Much, much more! A full list of new features can be found in the CHANGES file. http://svn.asterisk.org/svn/asterisk/branches/10/CHANGES Also, when upgrading a system between major versions, it is imperative that you read and understand the contents of the UPGRADE.txt file, which is located at: http://svn.asterisk.org/svn/asterisk/branches/10/UPGRADE.txt Thank you for your continued support of Asterisk!
2012-01-15 19:36:18 +01:00
SHA1 (patch-include_asterisk_lock.h) = fc7b4934e5f53a09066802daa054300895cf7bcf
SHA1 (patch-main_Makefile) = cc8ab49ca045aff935125d1905f311ea557130eb
SHA1 (patch-main_acl.c) = 1eac532a15127c25981d2db9462a8ccce2c58620
SHA1 (patch-main_asterisk.c) = df7bcdaeb2fc90f9fdc1b16388fbb5cf7eba141c
SHA1 (patch-main_features.c) = 1932f46e435f38b0f03b25ce98767fccd4f83ec7
SHA1 (patch-main_manager.c) = 05e65a5d3d06a674c55a5b2d5779fd62aff26b7d
SHA1 (patch-main_netsock.c) = 92542984c6f35fab53d1d107880a51743e3419c6
SHA1 (patch-main_sched.c) = 3a1ef5a384a7fa7329abf2babdacf3dd1d57a041
SHA1 (patch-main_stdtime_localtime.c) = f2234055c370854b43a7a3a6b06226aeeb1dbe96
SHA1 (patch-main_utils.c) = 6d0fd44963149b0561ae179771b7e9fd80fa00b9
SHA1 (patch-pbx_pbx__dundi.c) = 0645ee88c18f94b90ed051cfe100414300f2763f
SHA1 (patch-sounds_Makefile) = 579c38e483bb0631fa1c4ea67fca24462caac41e
Import Asterisk 10.0.0: The Asterisk Development Team is proud to announce the release of Asterisk 10.0.0. This release is available for immediate download at http://downloads.asterisk.org/pub/telephony/asterisk/ Asterisk 10 is the next major release series of Asterisk. It will be a Standard support release, similar to Asterisk 1.6.2. For more information about support time lines for Asterisk releases, see the Asterisk versions page: https://wiki.asterisk.org/wiki/display/AST/Asterisk+Versions With the release of the Asterisk 10 branch, the preceding '1.' has been removed from the version number per the blog post available at http://blogs.digium.com/2011/07/21/the-evolution-of-asterisk-or-how-we-arrived-at-asterisk-10/ The release of Asterisk 10 would not have been possible without the support and contributions of the community. You can find an overview of the work involved with the 10.0.0 release in the summary: http://svn.asterisk.org/svn/asterisk/tags/10.0.0/asterisk-10.0.0-summary.txt A short list of available features includes: * T.38 gateway functionality has been added to res_fax. * Protocol independent out-of-call messaging support. Text messages not associated with an active call can now be routed through the Asterisk dialplan. SIP and XMPP are supported so far. * New highly optimized and customizable ConfBridge application capable of mixing audio at sample rates ranging from 8kHz-192kHz * Addition of video_mode option in confbridge.conf to provide basic video conferencing in the ConfBridge() dialplan application. * Support for defining hints has been added to pbx_lua. * Replacement of Berkeley DB with SQLite for the Asterisk Database (AstDB). * Much, much more! A full list of new features can be found in the CHANGES file. http://svn.asterisk.org/svn/asterisk/branches/10/CHANGES Also, when upgrading a system between major versions, it is imperative that you read and understand the contents of the UPGRADE.txt file, which is located at: http://svn.asterisk.org/svn/asterisk/branches/10/UPGRADE.txt Thank you for your continued support of Asterisk!
2012-01-15 19:36:18 +01:00
SHA1 (patch-tests_test__locale.c) = 37ba5fbf7cd3b0c4db4bf1872eb098aef440eeb9
SHA1 (patch-utils_Makefile) = 0d8c38b1a9450f4f0e364fc0213b9a8e56afce55
SHA1 (patch-utils_db1-ast_include_db.h) = 94ec413fe6a6154d65c43bdde2b26644d8bb5dac
SHA1 (patch-utils_extconf.c) = 9df5ebd9ad1dd669d9a2db5d7da455e8caae3811
Import Asterisk 10.0.0: The Asterisk Development Team is proud to announce the release of Asterisk 10.0.0. This release is available for immediate download at http://downloads.asterisk.org/pub/telephony/asterisk/ Asterisk 10 is the next major release series of Asterisk. It will be a Standard support release, similar to Asterisk 1.6.2. For more information about support time lines for Asterisk releases, see the Asterisk versions page: https://wiki.asterisk.org/wiki/display/AST/Asterisk+Versions With the release of the Asterisk 10 branch, the preceding '1.' has been removed from the version number per the blog post available at http://blogs.digium.com/2011/07/21/the-evolution-of-asterisk-or-how-we-arrived-at-asterisk-10/ The release of Asterisk 10 would not have been possible without the support and contributions of the community. You can find an overview of the work involved with the 10.0.0 release in the summary: http://svn.asterisk.org/svn/asterisk/tags/10.0.0/asterisk-10.0.0-summary.txt A short list of available features includes: * T.38 gateway functionality has been added to res_fax. * Protocol independent out-of-call messaging support. Text messages not associated with an active call can now be routed through the Asterisk dialplan. SIP and XMPP are supported so far. * New highly optimized and customizable ConfBridge application capable of mixing audio at sample rates ranging from 8kHz-192kHz * Addition of video_mode option in confbridge.conf to provide basic video conferencing in the ConfBridge() dialplan application. * Support for defining hints has been added to pbx_lua. * Replacement of Berkeley DB with SQLite for the Asterisk Database (AstDB). * Much, much more! A full list of new features can be found in the CHANGES file. http://svn.asterisk.org/svn/asterisk/branches/10/CHANGES Also, when upgrading a system between major versions, it is imperative that you read and understand the contents of the UPGRADE.txt file, which is located at: http://svn.asterisk.org/svn/asterisk/branches/10/UPGRADE.txt Thank you for your continued support of Asterisk!
2012-01-15 19:36:18 +01:00
SHA1 (patch-utils_streamplayer.c) = fd83c3063f19405fdac3fb4640e42d62f55c7593