Update to 1.6.2.23:

This is a security fix update.  It fixes AST-2012-002.

NOTE NOTE NOTE

This is likely to be the last update to this package.  This version
of Asterisk will be EOLed on April 21st, 2012.  It will probably
be removed from pkgsrc not long after that.  If you are still using
this package, you should consider switching to comms/asterisk18,
the Long Term Support version, or comms/asterisk10 in the near
future.

NOTE NOTE NOTE

The Asterisk Development Team has announced security releases for
Asterisk 1.4, 1.6.2, 1.8, and 10. The available security releases
are released as versions 1.4.44, 1.6.2.23, 1.8.10.1, and 10.2.1.

The release of Asterisk 1.4.44 and 1.6.2.23 resolve an issue wherein
app_milliwatt can potentially overrun a buffer on the stack, causing
Asterisk to crash.  This does not have the potential for remote
code execution.

These issues and their resolution are described in the security
advisory.

For more information about the details of these vulnerabilities,
please read the security advisories AST-2012-002 and AST-2012-003,
which were released at the same time as this announcement.

For a full list of changes in the current releases, please see the ChangeLogs:

http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.23

The security advisories are available at:

 * http://downloads.asterisk.org/pub/security/AST-2012-002.pdf

Thank you for your continued support of Asterisk!
This commit is contained in:
jnemeth 2012-03-25 02:59:53 +00:00
parent 60aa645625
commit 08d53e3071
2 changed files with 15 additions and 16 deletions

View file

@ -1,10 +1,9 @@
# $NetBSD: Makefile,v 1.38 2012/02/16 16:30:03 hans Exp $
# $NetBSD: Makefile,v 1.39 2012/03/25 02:59:53 jnemeth Exp $
#
# NOTE: when updating this package, there are two places that sound
# tarballs need to be checked
DISTNAME= asterisk-1.6.2.22
PKGREVISION= 1
DISTNAME= asterisk-1.6.2.23
DIST_SUBDIR= ${PKGNAME_NOREV}
DISTFILES= ${DEFAULT_DISTFILES}
EXTRACT_ONLY= ${DISTNAME}.tar.gz

View file

@ -1,17 +1,17 @@
$NetBSD: distinfo,v 1.25 2012/02/16 16:30:03 hans Exp $
$NetBSD: distinfo,v 1.26 2012/03/25 02:59:53 jnemeth Exp $
SHA1 (asterisk-1.6.2.22/asterisk-1.6.2.22.tar.gz) = 63b24f20b8301f8039548d2871c4b6d6e175499b
RMD160 (asterisk-1.6.2.22/asterisk-1.6.2.22.tar.gz) = b56095629c4b00ab3551caf5a931315c79494017
Size (asterisk-1.6.2.22/asterisk-1.6.2.22.tar.gz) = 23807865 bytes
SHA1 (asterisk-1.6.2.22/asterisk-extra-sounds-en-gsm-1.4.11.tar.gz) = 8692fa61423b4769dc8bfa78faf9ed5ef7a259b9
RMD160 (asterisk-1.6.2.22/asterisk-extra-sounds-en-gsm-1.4.11.tar.gz) = 68170c769d739d6b5b35b00f999ad6bbf876f9f6
Size (asterisk-1.6.2.22/asterisk-extra-sounds-en-gsm-1.4.11.tar.gz) = 3349898 bytes
SHA1 (asterisk-1.6.2.22/extract-cfile.txt) = b22874814c83a53bcd1a8d96b5911304f304971e
RMD160 (asterisk-1.6.2.22/extract-cfile.txt) = e7205fe7e95793f3ca6e384edeef1ad5713485e0
Size (asterisk-1.6.2.22/extract-cfile.txt) = 643 bytes
SHA1 (asterisk-1.6.2.22/rfc3951.txt) = 1a6c769be750fb02456d60db2470909254496017
RMD160 (asterisk-1.6.2.22/rfc3951.txt) = 15f7ec61653ec9953172f8f2150e7d8f6f620926
Size (asterisk-1.6.2.22/rfc3951.txt) = 373442 bytes
SHA1 (asterisk-1.6.2.23/asterisk-1.6.2.23.tar.gz) = 50b9f624e3fb70f0e3d61c30247b45cf78059d09
RMD160 (asterisk-1.6.2.23/asterisk-1.6.2.23.tar.gz) = 718fcec6a205c328cb29cf911c0a1b06c1d744b2
Size (asterisk-1.6.2.23/asterisk-1.6.2.23.tar.gz) = 23808171 bytes
SHA1 (asterisk-1.6.2.23/asterisk-extra-sounds-en-gsm-1.4.11.tar.gz) = 8692fa61423b4769dc8bfa78faf9ed5ef7a259b9
RMD160 (asterisk-1.6.2.23/asterisk-extra-sounds-en-gsm-1.4.11.tar.gz) = 68170c769d739d6b5b35b00f999ad6bbf876f9f6
Size (asterisk-1.6.2.23/asterisk-extra-sounds-en-gsm-1.4.11.tar.gz) = 3349898 bytes
SHA1 (asterisk-1.6.2.23/extract-cfile.txt) = b22874814c83a53bcd1a8d96b5911304f304971e
RMD160 (asterisk-1.6.2.23/extract-cfile.txt) = e7205fe7e95793f3ca6e384edeef1ad5713485e0
Size (asterisk-1.6.2.23/extract-cfile.txt) = 643 bytes
SHA1 (asterisk-1.6.2.23/rfc3951.txt) = 1a6c769be750fb02456d60db2470909254496017
RMD160 (asterisk-1.6.2.23/rfc3951.txt) = 15f7ec61653ec9953172f8f2150e7d8f6f620926
Size (asterisk-1.6.2.23/rfc3951.txt) = 373442 bytes
SHA1 (patch-aa) = 8c2a3c75adff34474c8f416bcea5842e771e4631
SHA1 (patch-af) = 09860d714281cb4c65d1a087cf5b16647a16e2fa
SHA1 (patch-ag) = c71c61350cefbbe53eefa99245ca7712753f22d5