The Asterisk Development Team would like to announce the release
of Asterisk 18. 9.0.
The release of Asterisk 18.9.0 resolves several issues reported by
the community and would have not been possible without your
participation.
Thank you!
The following issues are resolved in this release:
New Features made in this release:
-----------------------------------
* ASTERISK-29720 - res_tonedetect: Add call progress tone detection
(Reported by N A)
* ASTERISK-18069 - [patch] app_queue Add Login Time and Last
Paused Times to Queue Members
(Reported by Jamuel Starkey)
Bugs fixed in this release:
-----------------------------------
* ASTERISK-29779 - progdocs: Hidden code sections with syntax errors.
(Reported by Alexander Traud)
* ASTERISK-29732 - progdocs: Fix grouping for latest Doxygen
(Reported by Alexander Traud)
* ASTERISK-29771 - Crash occurs when 2 realtime sippeers mysql
connections are configured and we have a schema warning
(Reported by Mario Ban)
* ASTERISK-29776 - stir/shaken: Requires GNU designator
(Reported by Alexander Traud)
* ASTERISK-29764 - chan_misdn: Fix for Doxygen
(Reported by Alexander Traud)
* ASTERISK-29773 - progdocs: doxyref.h outdated
(Reported by Alexander Traud)
* ASTERISK-29765 - xmldoc: Fix for Doxygen
(Reported by Alexander Traud)
* ASTERISK-29730 - Segfault in __ao2_ref if refdebug = yes
(Reported by Alexei Gradinari)
* ASTERISK-29762 - channels: Fix for Doxygen
(Reported by Alexander Traud)
* ASTERISK-29748 - bridging: Infinite loop when both Local
channel halves in same bridge
(Reported by Joshua C. Colp)
* ASTERISK-29754 - odbc: Fix for Doxygen
(Reported by Alexander Traud)
* ASTERISK-29753 - parking: Fix for Doxygen
(Reported by Alexander Traud)
* ASTERISK-29755 - frame: Fix for Doxygen
(Reported by Alexander Traud)
* ASTERISK-29756 - res_ari: Fix for Doxygen
(Reported by Alexander Traud)
* ASTERISK-29751 - channel: Fix for Doxygen
(Reported by Alexander Traud)
* ASTERISK-29750 - stasis: Fix for Doxygen
(Reported by Alexander Traud)
* ASTERISK-29752 - app: Fix for Doxygen
(Reported by Alexander Traud)
* ASTERISK-29749 - res_xmpp: Fix for Doxygen
(Reported by Alexander Traud)
* ASTERISK-29742 - addons: Fix for Doxygen.
(Reported by Alexander Traud)
* ASTERISK-29747 - res_pjsip: Fix for Doxygen
(Reported by Alexander Traud)
* ASTERISK-29737 - chan_iax2: Fix for Doxygen
(Reported by Alexander Traud)
* ASTERISK-29743 - bridges: Fix for Doxygen
(Reported by Alexander Traud)
* ASTERISK-29741 - tests: Fix for Doxygen
(Reported by Alexander Traud)
* ASTERISK-29740 - apps: Fix for Doxygen
(Reported by Alexander Traud)
* ASTERISK-29733 - progdocs: Avoid name with Doxygen \file
(Reported by Alexander Traud)
* ASTERISK-29736 - bridge_channel: Fix for Doxygen
(Reported by Alexander Traud)
* ASTERISK-29735 - progdocs: Avoid multiple use of section labels
(Reported by Alexander Traud)
* ASTERISK-29734 - progdocs: Use Doxygen \example correctly
(Reported by Alexander Traud)
* ASTERISK-29744 - app_morsecode: Fix deadlock
(Reported by N A)
* ASTERISK-29703 - res_pjsip_callerid: Fix OLI parsing
(Reported by N A)
* ASTERISK-29705 - app_read: Fix custom terminator
functionality regression
(Reported by N A)
* ASTERISK-29724 - BuildSystem: In POSIX sh, == in place of = is undefined.
(Reported by Alexander Traud)
* ASTERISK-29702 - sig_analog: Fix truncated buffer copy
(Reported by N A)
* ASTERISK-28040 - pbx: "dialplan reload" is removing minus
symbol from dynamic hints
(Reported by Daniel Zanutti)
* ASTERISK-29391 - VoiceMail does not cancel recording on rerecord hangup
(Reported by N A)
* ASTERISK-29709 - res_snmp: Not build on recent Debian
distributions.
(Reported by Alexander Traud)
* ASTERISK-29710 - stasis: Clang 13 warns about the unused but
set variable dispatched.
(Reported by Alexander Traud)
* ASTERISK-29711 - aelparse: GCC 11.2 found two maybe uninitialized
(Reported by Alexander Traud)
* ASTERISK-29713 - GCC 11.2: two stringop-overread
(Reported by Alexander Traud)
* ASTERISK-29682 - Squash compiler issues generated by gcc 11
(Reported by George Joseph)
* ASTERISK-29693 - Using --with-crypto and --with-ssl fails on a recompile
(Reported by George Joseph)
* ASTERISK-27816 - func_talkdetect's logic is completely broken
(Reported by Moritz Fain)
* ASTERISK-29691 - stun: Not all users provide a dst to ast_stun_request
(Reported by Dennis Haney)
* ASTERISK-26497 - make install downloads x86_32 variants of
external modules on non Intel architectures
(Reported by Corey Farrell)
Improvements made in this release:
-----------------------------------
* ASTERISK-29777 - documentation: Standardize example syntax
(Reported by N A)
* ASTERISK-29715 - app_voicemail: Refactor email generation functions
(Reported by N A)
* ASTERISK-29727 - Add type for JSON stasis message RTCP Report
Received/Sent
(Reported by Boris P. Korzun)
* ASTERISK-29714 - Spelling errors
(Reported by Josh Soref)
* ASTERISK-29707 - chan_iax2: Allow both key and secret to be
specified at dial time
(Reported by N A)
* ASTERISK-29662 - Add mix option to Playback application for
say and filename
(Reported by Shloime Rosenblum)
For a full list of changes in this release, please see the ChangeLog:
https://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-18.9.0
The Asterisk Development Team would like to announce the release
of Asterisk 18.8.0.
The release of Asterisk 18.8.0 resolves several issues reported by the
community and would have not been possible without your participation.
Thank you!
The following issues are resolved in this release:
New Features made in this release:
-----------------------------------
* ASTERISK-29656 - Add CHANNEL_EXISTS function
(Reported by N A)
Bugs fixed in this release:
-----------------------------------
* ASTERISK-20219 - [patch] - IAX2 Call Encryption Fails with
RSA authentication
(Reported by Michael Munger)
* ASTERISK-29402 - res_pjsip_t38: Socket is bound to IPv4/IPv6
but platform does not support it
(Reported by Matthew Kern)
* ASTERISK-29673 - app_read: Fix null pointer crash regression
(Reported by N A)
* ASTERISK-29671 - res_rtp_asterisk: memory leak
(Reported by Jean Aunis - Prescom)
* ASTERISK-29668 - ari: Listing bridges fails when dialing
bridge exists
(Reported by Joshua C. Colp)
* ASTERISK-29663 - messaging: AMI MessageSend does not support
same parameters as dialplan application
(Reported by Brian J. Murrell)
* ASTERISK-29578 - app_queue: Custom device state using
included hints do not update
(Reported by N A)
* ASTERISK-29660 - Build failure when disabling PJSIP support
(Reported by Guido Falsi)
Improvements made in this release:
-----------------------------------
* ASTERISK-29637 - Add support for future dates in Say.c
(Reported by Shloime Rosenblum)
* ASTERISK-29525 - PJSIP remove_existing unavailable contacts
(Reported by Joseph Nadiv)
* ASTERISK-29661 - func_vmcount: Add support for multiple
mailboxes
(Reported by N A)
* ASTERISK-29275 - Support of MIME-type for wav16
(Reported by Boris P. Korzun)
* ASTERISK-29529 - Add custom logging level
(Reported by N A)
For a full list of changes in this release, please see the ChangeLog:
https://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-18.8.0
Thank you for your continued support of Asterisk!
The Asterisk Development Team would like to announce the release
of Asterisk 18.7.1.
The release of Asterisk 18.7.1 resolves an issue reported by the
community and would have not been possible without your participation.
Thank you!
The following issue is resolved in this release:
Bugs fixed in this release:
-----------------------------------
* ASTERISK-29685 - pbx_ael: Infinite loop on reload
(Reported by Joshua C. Colp)
For a full list of changes in this release, please see the ChangeLog:
https://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-18.7.1
Thank you for your continued support of Asterisk!
The Asterisk Development Team would like to announce the release
of Asterisk 18.7.0.
The release of Asterisk 18.7.0 resolves several issues reported by the
community and would have not been possible without your participation.
Thank you!
The following issues are resolved in this release:
Deprecations made in this release:
-----------------------------------
* ASTERISK-29548 - app_meetme: Deprecated in 19, to be removed in 21
(Reported by Joshua C. Colp)
* ASTERISK-29549 - app_osploop: Deprecated in 19, to be removed in 21
(Reported by Joshua C. Colp)
* ASTERISK-29550 - chan_alsa: Deprecated in 19, to be removed in 21
(Reported by Joshua C. Colp)
* ASTERISK-29551 - chan_mgcp: Deprecated in 19, to be removed in 21
(Reported by Joshua C. Colp)
* ASTERISK-29552 - chan_skinny: Deprecated in 19, to be removed in 21
(Reported by Joshua C. Colp)
* ASTERISK-29553 - res_pktccops: Deprecated in 19, to be removed in 21
(Reported by Joshua C. Colp)
* ASTERISK-29554 - cdr_mysql: Deprecated in 1.8, to be removed in 19
(Reported by Joshua C. Colp)
* ASTERISK-29555 - app_mysql: Deprecated in 1.8, to be removed in 19
(Reported by Joshua C. Colp)
* ASTERISK-29557 - app_ices: Deprecated in 16, to be removed in 19
(Reported by Joshua C. Colp)
* ASTERISK-29558 - app_macro: Deprecated in 16, to be removed in 21
(Reported by Joshua C. Colp)
* ASTERISK-29559 - app_fax: Deprecated in 16, to be removed in 19
(Reported by Joshua C. Colp)
* ASTERISK-29560 - app_url: Deprecated in 16, to be removed in 19
(Reported by Joshua C. Colp)
* ASTERISK-29561 - app_image: Deprecated in 16, to be removed in 19
(Reported by Joshua C. Colp)
* ASTERISK-29562 - app_nbscat: Deprecated in 16, to be removed in 19
(Reported by Joshua C. Colp)
* ASTERISK-29563 - app_dahdiras: Deprecated in 16, to be removed in 19
(Reported by Joshua C. Colp)
* ASTERISK-29564 - cdr_syslog: Deprecated in 16, to be removed in 19
(Reported by Joshua C. Colp)
* ASTERISK-29565 - chan_oss: Deprecated in 16, to be removed in 19
(Reported by Joshua C. Colp)
* ASTERISK-29566 - chan_phone: Deprecated in 16, to be removed in 19
(Reported by Joshua C. Colp)
* ASTERISK-29567 - chan_sip: Deprecated in 17, to be removed in 21
(Reported by Joshua C. Colp)
* ASTERISK-29568 - chan_nbs: Deprecated in 16, to be removed in 19
(Reported by Joshua C. Colp)
* ASTERISK-29569 - chan_misdn: Deprecated in 16, to be removed in 19
(Reported by Joshua C. Colp)
* ASTERISK-29570 - chan_vpb: Deprecated in 16, to be removed in 19
(Reported by Joshua C. Colp)
* ASTERISK-29571 - res_config_sqlite: Deprecated in 16, to be removed in 19
(Reported by Joshua C. Colp)
* ASTERISK-29572 - res_monitor: Deprecated in 16, to be removed in 21
(Reported by Joshua C. Colp)
* ASTERISK-29573 - conf2ael: Deprecated in 16, to be removed in 19
(Reported by Joshua C. Colp)
* ASTERISK-29574 - muted: Deprecated in 16, to be removed in 19
(Reported by Joshua C. Colp)
New Features made in this release:
-----------------------------------
* ASTERISK-29496 - Add SendMF application
(Reported by N A)
* ASTERISK-29627 - Add STRBETWEEN function
(Reported by N A)
* ASTERISK-29628 - Add file and directory functions
(Reported by N A)
* ASTERISK-29531 - Add SAYFILES function
(Reported by N A)
* ASTERISK-29546 - Add tone detection module
(Reported by N A)
* ASTERISK-18454 - Option for Read to be able to accept #
(Reported by Sta Retji)
* ASTERISK-29542 - Add audio scrambler
(Reported by N A)
* ASTERISK-29478 - Function to drop frames in the TX or RX
directions
(Reported by N A)
Bugs fixed in this release:
-----------------------------------
* ASTERISK-29673 - app_read: Fix null pointer crash regression
(Reported by N A)
* ASTERISK-29660 - Build failure when disabling PJSIP support
(Reported by Guido Falsi)
* ASTERISK-29635 - MP3Player don't work with actual mpg123 versions
(Reported by Carlos Oliva)
* ASTERISK-29654 - pjproject includes trailing whitespace in
sdp format attributes
(Reported by George Joseph)
* ASTERISK-29629 - ARI external media channel creation doesn't
set option data
(Reported by sungtae kim)
* ASTERISK-27176 - test_abstract_jb: frames leak
(Reported by Corey Farrell)
* ASTERISK-29634 - res_snmp: gcc 11 needs -fPIC to compile correctly
(Reported by George Joseph)
* ASTERISK-29630 - Asterisk is unable to read extended number
format terminfo files
(Reported by Sean Bright)
* ASTERISK-28004 - dns: Core ast_dns_get_nameservers does not
support configured IPv6 servers
(Reported by Isaac McDonald)
* ASTERISK-29618 - ConfBridge errors on creation conference room
(Reported by Alexander Zharov)
* ASTERISK-29622 - ARI: external media create doesn't use body parameter
(Reported by sungtae kim)
* ASTERISK-29614 - app_agent_pool: XML Doc: unterminated entity reference
(Reported by Alexander Traud)
* ASTERISK-29609 - Subsequent 'ael reload' will cause a lock up
(Reported by Mark Murawski)
* ASTERISK-28701 - app_queue: Core reload resets queue stats,
even when keepstats=yes
(Reported by Luke Escude)
* ASTERISK-29616 - res_rtp_asterisk: sqrt(.) requires the header math.h.
(Reported by Alexander Traud)
* ASTERISK-29518 - sig_analog: FCG_CAMA fails to signal ANI
spill when using MF signaling
(Reported by Sarah Autumn)
* ASTERISK-29582 - res_pjproject: Can't map pjproject log
messages to Asterisk TRACE
(Reported by George Joseph)
* ASTERISK-29575 - app_milliwatt: Milliwatt application doesn't
use the proper timings
(Reported by N A)
* ASTERISK-20339 - chan_mgcp, res_pktccops ast_debug support
(Reported by Tomas Maldonado)
* ASTERISK-29540 - aelparse: include of context with timings fails
(Reported by Alexander Traud)
* ASTERISK-29539 - Segmentation fault at ast_writestream() when
write handler not defined (happens with OGG/Speex)
(Reported by Ernani Jos?? Camargo Azevedo)
Improvements made in this release:
-----------------------------------
* ASTERISK-29472 - res_pjsip: OLI/ANI2 support missing
(Reported by N A)
* ASTERISK-29626 - app_stack: Include calling location if
attempting to branch to nonexistent location
(Reported by N A)
* ASTERISK-29632 - Add option to Application_VoiceMail to
suppress instructions only when a custom greeting is present
(Reported by Charlie Smurthwaite)
* ASTERISK-29605 - chan_iax2: Add ANI2
(Reported by N A)
* ASTERISK-29508 - STUN server address refresh
(Reported by S??bastien Duthil)
* ASTERISK-29612 - bridge_basic: Don't throw warning if
attended transfer is cancelled
(Reported by N A)
* ASTERISK-29544 - Media Cache - Delayed remote sound file
retrieve delays all playbacks
(Reported by Andre Barbosa)
* ASTERISK-29495 - Return integer instead of float if response
is a whole number
(Reported by N A)
* ASTERISK-29541 - app_morsecode: Add American Morse code
(Reported by N A)
* ASTERISK-29543 - app_originate: Allow specifying codec(s) to use
(Reported by N A)
For a full list of changes in this release, please see the ChangeLog:
https://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-18.7.0
Thank you for your continued support of Asterisk!
The Asterisk Development Team would like to announce the release
of Asterisk 18.6.0.
This release is available for immediate download at
https://downloads.asterisk.org/pub/telephony/asterisk
The release of Asterisk 18.6.0 resolves several issues reported by the
community and would have not been possible without your participation.
Thank you!
The following issues are resolved in this release:
Security bugs fixed in this release:
-----------------------------------
* ASTERISK-29415 - Crash in PJSIP TLS transport
(Reported by Andrew Yager)
* ASTERISK-29381 - chan_pjsip: Remote denial of service by an
authenticated user
(Reported by Ivan Poddubny)
New Features made in this release:
-----------------------------------
* ASTERISK-29389 - Add PJSIP_HEADERS() and ability to read
header by pattern
(Reported by Igor Goncharovsky)
* ASTERISK-29477 - Function to asynchronously store digits dialed
(Reported by N A)
* ASTERISK-29454 - New application to reload modules
(Reported by N A)
* ASTERISK-29444 - Add application to wait for condition
(Reported by N A)
* ASTERISK-29442 - app_dial: Expand A option to allow
announcement playback to caller
(Reported by N A)
Bugs fixed in this release:
-----------------------------------
* ASTERISK-29494 - cdr_adaptive_odbc: Prevent throwing warnings
if CDR filtering is used
(Reported by N A)
* ASTERISK-29513 - statsd: Remove non-standard metric type Meter
(Reported by Rijnhard Hessel)
* ASTERISK-29526 - G729 audio gets corrupted by Asterisk due to smoother
(Reported by under)
* ASTERISK-29392 - chan_iax2: Asterisk crashes when queueing
video with format
(Reported by Michael Welk)
* ASTERISK-29507 - STUN timeout is silently delaying calls
(Reported by S??bastien Duthil)
* ASTERISK-27871 - Remote URL in playback must end with file extension
(Reported by Caesar)
* ASTERISK-29514 - ari: Audiosocket segfault when no data specified
(Reported by Igor Goncharovsky)
* ASTERISK-29503 - Updated identify/match syntax not supported
by config wizard
(Reported by Sean Bright)
* ASTERISK-29480 - fixedjitterbuffer contains an un-wrappered
assert that triggers on a negative time slew
(Reported by Dan Cropp)
* ASTERISK-29485 - core: Inband generation of tones for Busy()
and Congestion() may not occur
(Reported by Joshua C. Colp)
* ASTERISK-29479 - [patch] Channels are not put on hold for
Session Progress with inactive audio
(Reported by Bernd Zobl)
Improvements made in this release:
-----------------------------------
* ASTERISK-29528 - Add support for multiple files for agent announcements
(Reported by N A)
* ASTERISK-29501 - ARI - Stasis Playback doesn't hangup call
when processing a list of invalid files
(Reported by Andre Barbosa)
* ASTERISK-29464 - ARI - PlaybackFinish skip error events
(Reported by Andre Barbosa)
For a full list of changes in this release, please see the ChangeLog:
https://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-18.6.0
Thank you for your continued support of Asterisk!
The Asterisk Development Team would like to announce security releases for
Asterisk 13, 16, 17 and 18, and Certified Asterisk 16.8. The available releases
are released as versions 13.38.3, 16.19.1, 17.9.4, 18.5.1 and 16.8-cert10.
These releases are available for immediate download at
https://downloads.asterisk.org/pub/telephony/asterisk/releases
The following security vulnerabilities were resolved in these versions:
* AST-2021-007: Remote Crash Vulnerability in PJSIP channel driver
When Asterisk receives a re-INVITE without SDP after having sent
a BYE request a crash will occur. This occurs due to the Asterisk
channel no longer being present while code assumes it is.
* AST-2021-008: Remote crash when using IAX2 channel driver
If the IAX2 channel driver receives a packet that contains an
* AST-2021-009: pjproject/pjsip: crash when SSL socket destroyed during
handshake
Depending on the timing, it's possible for Asterisk to crash when
using a TLS connection if the underlying socket parent/listener
gets destroyed during the handshake.
For a full list of changes in the current releases, please see the ChangeLogs:
https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-18.5.1
The security advisories are available at:
https://downloads.asterisk.org/pub/security/AST-2021-007.pdfhttps://downloads.asterisk.org/pub/security/AST-2021-008.pdfhttps://downloads.asterisk.org/pub/security/AST-2021-009.pdf
Thank you for your continued support of Asterisk!
pkgsrc change: Fix segfault under aarch64 from ryoon for comms/asterisk16.
-----
The Asterisk Development Team would like to announce the release
of Asterisk 18.5.0.
The release of Asterisk 18.5.0 resolves several issues reported by the
community and would have not been possible without your participation.
Thank you!
The following issues are resolved in this release:
New Features made in this release:
-----------------------------------
* ASTERISK-29446 - app_confbridge: New ConfKick application
(Reported by N A)
* ASTERISK-29440 - app_confbridge: Allow ConfBridge answer to
be suppressed
(Reported by N A)
* ASTERISK-29431 - Minimum and maximum dialplan functions
(Reported by N A)
* ASTERISK-29439 - func_volume: Volume function can't be read
(Reported by N A)
Bugs fixed in this release:
-----------------------------------
* ASTERISK-29475 - SayNumber triggers WARNING if caller hangs
up during application execution
(Reported by N A)
* ASTERISK-29404 - Consolidate res_pjsip_messaging fixes for
domain name
(Reported by George Joseph)
* ASTERISK-29441 - Core reload making TCP endpoints go offline
(Reported by Luke Escude)
* ASTERISK-28237 - "FRACK!, Failed assertion bad magic number"
happens when unsubscribe an application from an event source
(Reported by Lucas Tardioli Silveira)
* ASTERISK-28393 - Multidomain support issue
(Reported by Andrea Sannucci)
* ASTERISK-29433 - res_rtp_asterisk: Server reflexive
candidates use incorrect raddr for RTCP
(Reported by Chris)
* ASTERISK-29397 - pjsip: Asterisk isn't tolerant of RFC8760 UASs
(Reported by George Joseph)
* ASTERISK-24601 - [patch]Missing RFC4235 tags and attributes
in PJSIP NOTIFY event: dialog XML body
(Reported by Marco Paland)
* ASTERISK-29370 - chan_sip does not recognize
application/hook-flash
(Reported by N A)
* ASTERISK-29377 - cpool_release_pool "double free or
corruption (out)"
(Reported by Robert Sutton)
* ASTERISK-29372 - file.c switch does not account for flash
events
(Reported by N A)
* ASTERISK-29358 - chan_pjsip: Trace message for progress is
output even if frame is not queued
(Reported by Michael Maier)
* ASTERISK-29407 - chan_local: Filtering audio formats should
not occur on removed streams
(Reported by Joshua C. Colp)
* ASTERISK-29030 - res_rtp_asterisk: Additional RTP-frame (with
wrong SSRC) gets inserted when switching from progress to
established
(Reported by Matthias Hensler)
Improvements made in this release:
-----------------------------------
* ASTERISK-29450 - Allow setting channel variables using
Originate application
(Reported by N A)
* ASTERISK-29459 - Missing configuration from PJSIP to SIP
conversion script
(Reported by N A)
* ASTERISK-29460 - Recognize application/hook-flash in PJSIP
(Reported by N A)
* ASTERISK-29434 - Asterisk reveals pjproject version in STUN packets
(Reported by Jeremy Lain??)
* ASTERISK-29349 - Silent voicemail option is not completely silent
(Reported by N A)
* ASTERISK-29380 - Add Flash AMI event to handle flash events
(Reported by N A)
For a full list of changes in this release, please see the ChangeLog:
https://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-18.5.0
Thank you for your continued support of Asterisk!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-announce/attachments/20210624/fe9defa9/attachment.html>
Previous message (by thread): [asterisk-announce] Asterisk 16.19.0 Now Available
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
More information about the asterisk-announce mailing list
pkgsrc-users@ a few weeks ago. This package is ancient and has
been EOL for a couple of years. It likely has numerous security
issues. Also, the PKGNAME will conflict with the upcoming Asterisk
18.* in a couple of years times. There were no objections.
MASTER_SITES= site1 \
site2
style continuation lines to be simple repeated
MASTER_SITES+= site1
MASTER_SITES+= site2
lines. As previewed on tech-pkg. With thanks to rillig for fixing pkglint
accordingly.
The Asterisk Development Team has announced security releases for
Certified Asterisk 1.8.28, 11.6, and 13.1 and Asterisk 1.8, 11,
12, and 13. The available security releases are released as versions
1.8.28.cert-5, 1.8.32.3, 11.6-cert11, 11.17.1, 12.8.2, 13.1-cert2,
and 13.3.2.
The release of these versions resolves the following security vulnerability:
* AST-2015-003: TLS Certificate Common name NULL byte exploit
When Asterisk registers to a SIP TLS device and verifies the
server, Asterisk will accept signed certificates that match a
common name other than the one Asterisk is expecting if the signed
certificate has a common name containing a null byte after the
portion of the common name that Asterisk expected. This potentially
allows for a man in the middle attack.
For more information about the details of this vulnerability, please read
security advisory AST-2015-003, which was released at the same time as this
announcement.
For a full list of changes in the current releases, please see the Change Logs:
http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.32.3
The security advisory is available at:
* http://downloads.asterisk.org/pub/security/AST-2015-003.pdf
Thank you for your continued support of Asterisk!
