Commit graph

1730 commits

Author SHA1 Message Date
joerg
3c044299df g_type_init is deprecated. 2013-05-25 23:41:24 +00:00
shattered
6426b6dbb2 Update to 1.8.0. Changes:
Added libgcrypt support
Added support for Calendar app
Export function for KeyRing data
Overhaul of Expense plugin
Overhaul VCARD export including adding IM, Birthday, Website fields
GUI changes: ToDo items due today are marked by a soft green color
GUI changes: new alarm clock and lock icons
GUI changes: radio buttons to select between timed and untimed events

Fixed Mac OS X bugs/crash
Resolve segmentation fault when editing Contacts with attached pictures
Resolve error where Contacts created on Palm could not be deleted with Jpilot
Resolve sync error with simultaneously modified Contacts
Fix Bug 1991 : Categories are lost during first sync
2013-05-25 16:28:05 +00:00
wiz
b96a5e5ce3 Bump PKGREVISION for libproxy shlib major bump. 2013-05-24 18:23:32 +00:00
joerg
b692c06798 Use real prototype for main. 2013-05-21 18:36:52 +00:00
jnemeth
b215c2dfa2 Update to Asterisk 11.4.0: this is a general bugfix release.
The Asterisk Development Team has announced the release of Asterisk 11.4.0.

The release of Asterisk 11.4.0 resolves several issues reported by the
community and would have not been possible without your participation.
Thank you!

The following is a sample of the issues resolved in this release:

* --- Fix Sorting Order For Parking Lots Stored In Static Realtime

* --- Fix StopMixMonitor Hanging Up When Unable To Stop MixMonitor On
      A Channel

* --- When a session timer expires during a T.38 call, re-invite with
      correct SDP

* --- Fix white noise on SRTP decryption

* --- Fix reload skinny with active devices.

For a full list of changes in this release, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.4.0

Thank you for your continued support of Asterisk!
2013-05-18 03:40:17 +00:00
jnemeth
3ceb68637a Update to Asterisk 1.8.22.0: this is a bug fix update.
The Asterisk Development Team has announced the release of Asterisk 1.8.22.0.

The release of Asterisk 1.8.22.0 resolves several issues reported by the
community and would have not been possible without your participation.
Thank you!

The following is a sample of the issues resolved in this release:

* --- Fix Sorting Order For Parking Lots Stored In Static Realtime

* --- Make ParkAndAnnounce return to priority + 1 when return context
      is not defined

* --- When a session timer expires during a T.38 call, re-invite with
      correct SDP

* --- Fix several unreleased mutex locks that cause problem with
      processing calls

* --- Fix crash when AMI redirect action redirects two channels out of
      a bridge.

For a full list of changes in this release, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.22.0

Thank you for your continued support of Asterisk!
2013-05-18 01:00:43 +00:00
jnemeth
184707bb03 Whoops missed updating sound tarball in 11.3.0 update. Fixed.
Thanks to joerg@ for pointing it out.
2013-05-12 18:14:21 +00:00
adam
1ab43a036f Massive revbump after updating graphics/ilmbase, graphics/openexr, textproc/icu. 2013-05-09 07:39:04 +00:00
jnemeth
c592fc7dfe Update to Asterisk 11.3.0: this is a bugfix release.
The Asterisk Development Team has announced the release of Asterisk 11.3.0.

The release of Asterisk 11.3.0 resolves several issues reported by the
community and would have not been possible without your participation.
Thank you!

The following is a sample of the issues resolved in this release:

* --- Fix issue where chan_mobile fails to bind to first available port

* --- Fix Queue Log Reporting Every Call COMPLETECALLER With "h"
      Extension Present

* --- Retain XMPP filters across reconnections so external modules
      continue to function as expected.

* --- Ensure that a declined media stream is terminated with a '\r\n'

* --- Fix pjproject compilation in certain circumstances

For a full list of changes in this release, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.3.0

Thank you for your continued support of Asterisk!
2013-05-05 01:32:34 +00:00
sbd
87b94069aa Revbump for all packages that have USE_TOOLS+=gs 2013-04-24 10:06:47 +00:00
jnemeth
2e5d50affe Update to Asterisk 1.8.21.0: this is a bug fix update
The Asterisk Development Team has announced the release of Asterisk 1.8.21.0.

The release of Asterisk 1.8.21.0 resolves several issues reported by the
community and would have not been possible without your participation.
Thank you!

The following is a sample of the issues resolved in this release:

* --- Fix issue where chan_mobile fails to bind to first available port

* --- Fix station ringback; trunk hangup issues in SLA

* --- Fix Queue Log Reporting Every Call COMPLETECALLER With "h"
      Extension Present

* --- Fix Record-Route parsing for large headers.

* --- Fix AMI redirect action with two channels failing to redirect
      both channels.

For a full list of changes in this release, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.21.0

Thank you for your continued support of Asterisk!
2013-04-18 16:55:22 +00:00
jnemeth
a5be729777 Update to Asterisk 11.2.2: this is a security update which fixes
AST-2013-001, AST-2013-002, and AST-2013-003.

The Asterisk Development Team has announced security releases for Certified
Asterisk 1.8.15 and Asterisk 1.8, 10, and 11. The available security releases
are released as versions 1.8.15-cert2, 1.8.20.2, 10.12.2, 10.12.2-digiumphones,
and 11.2.2.

The release of these versions resolve the following issues:

* A possible buffer overflow during H.264 format negotiation. The format
  attribute resource for H.264 video performs an unsafe read against a media
  attribute when parsing the SDP.

  This vulnerability only affected Asterisk 11.

* A denial of service exists in Asterisk's HTTP server. AST-2012-014, fixed
  in January of this year, contained a fix for Asterisk's HTTP server for a
  remotely-triggered crash. While the fix prevented the crash from being
  triggered, a denial of service vector still exists with that solution if an
  attacker sends one or more HTTP POST requests with very large Content-Length
  values.

  This vulnerability affects Certified Asterisk 1.8.15, Asterisk 1.8, 10, and 11

* A potential username disclosure exists in the SIP channel driver. When
  authenticating a SIP request with alwaysauthreject enabled, allowguest
  disabled, and autocreatepeer disabled, Asterisk discloses whether a user
  exists for INVITE, SUBSCRIBE, and REGISTER transactions in multiple ways.

  This vulnerability affects Certified Asterisk 1.8.15, Asterisk 1.8, 10, and 11

These issues and their resolutions are described in the security advisories.

For more information about the details of these vulnerabilities, please read
security advisories AST-2013-001, AST-2013-002, and AST-2013-003, which were
released at the same time as this announcement.

For a full list of changes in the current releases, please see the ChangeLogs:

http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.2.2

The security advisories are available at:

 * http://downloads.asterisk.org/pub/security/AST-2013-001.pdf
 * http://downloads.asterisk.org/pub/security/AST-2013-002.pdf
 * http://downloads.asterisk.org/pub/security/AST-2013-003.pdf

Thank you for your continued support of Asterisk!
2013-04-10 05:28:56 +00:00
jnemeth
d901a02946 Update to Asterisk 10.12.2: this is a security update which fixes
AST-2013-001, AST-2013-002, and AST-2013-003.

The Asterisk Development Team has announced security releases for Certified
Asterisk 1.8.15 and Asterisk 1.8, 10, and 11. The available security releases
are released as versions 1.8.15-cert2, 1.8.20.2, 10.12.2, 10.12.2-digiumphones,
and 11.2.2.

The release of these versions resolve the following issues:

* A denial of service exists in Asterisk's HTTP server. AST-2012-014, fixed
  in January of this year, contained a fix for Asterisk's HTTP server for a
  remotely-triggered crash. While the fix prevented the crash from being
  triggered, a denial of service vector still exists with that solution if an
  attacker sends one or more HTTP POST requests with very large Content-Length
  values.

  This vulnerability affects Certified Asterisk 1.8.15, Asterisk 1.8, 10, and 11

* A potential username disclosure exists in the SIP channel driver. When
  authenticating a SIP request with alwaysauthreject enabled, allowguest
  disabled, and autocreatepeer disabled, Asterisk discloses whether a user
  exists for INVITE, SUBSCRIBE, and REGISTER transactions in multiple ways.

  This vulnerability affects Certified Asterisk 1.8.15, Asterisk 1.8, 10, and 11

These issues and their resolutions are described in the security advisories.

For more information about the details of these vulnerabilities, please read
security advisories AST-2013-001, AST-2013-002, and AST-2013-003, which were
released at the same time as this announcement.

For a full list of changes in the current releases, please see the ChangeLogs:

http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.12.2

The security advisories are available at:

 * http://downloads.asterisk.org/pub/security/AST-2013-001.pdf
 * http://downloads.asterisk.org/pub/security/AST-2013-002.pdf
 * http://downloads.asterisk.org/pub/security/AST-2013-003.pdf

Thank you for your continued support of Asterisk!
2013-04-10 05:27:08 +00:00
jnemeth
51313bcf6a Update to Asterisk 1.2.20.2: this is a security update which fixes
AST-2013-001, AST-2013-002, and AST-2013-003.

The Asterisk Development Team has announced security releases for Certified
Asterisk 1.8.15 and Asterisk 1.8, 10, and 11. The available security releases
are released as versions 1.8.15-cert2, 1.8.20.2, 10.12.2, 10.12.2-digiumphones,
and 11.2.2.


The release of these versions resolve the following issues:

* A denial of service exists in Asterisk's HTTP server. AST-2012-014, fixed
  in January of this year, contained a fix for Asterisk's HTTP server for a
  remotely-triggered crash. While the fix prevented the crash from being
  triggered, a denial of service vector still exists with that solution if an
  attacker sends one or more HTTP POST requests with very large Content-Length
  values.

  This vulnerability affects Certified Asterisk 1.8.15, Asterisk 1.8, 10, and 11

* A potential username disclosure exists in the SIP channel driver. When
  authenticating a SIP request with alwaysauthreject enabled, allowguest
  disabled, and autocreatepeer disabled, Asterisk discloses whether a user
  exists for INVITE, SUBSCRIBE, and REGISTER transactions in multiple ways.

  This vulnerability affects Certified Asterisk 1.8.15, Asterisk 1.8, 10, and 11

These issues and their resolutions are described in the security advisories.

For more information about the details of these vulnerabilities, please read
security advisories AST-2013-001, AST-2013-002, and AST-2013-003, which were
released at the same time as this announcement.

For a full list of changes in the current releases, please see the ChangeLogs:

http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.20.2

The security advisories are available at:

 * http://downloads.asterisk.org/pub/security/AST-2013-001.pdf
 * http://downloads.asterisk.org/pub/security/AST-2013-002.pdf
 * http://downloads.asterisk.org/pub/security/AST-2013-003.pdf

Thank you for your continued support of Asterisk!
2013-04-10 05:24:38 +00:00
rodent
6b46c62d2e Edited DESCR in the case of:
File too long (should be no more than 24 lines).
 Line too long (should be no more than 80 characters).
 Trailing empty lines.
 Trailing white-space.
Trucated the long files as best as possible while preserving the most info
contained in them.
2013-04-07 20:49:31 +00:00
jnemeth
2fbf6a387a Revert: these packages are marked OWNER= for a reason!
pkglint warnings aren't gospel!  They need to be verified in an
intelligent manner.  After variable substitution, the lines will
be shorter then 80 characters, thus there was no need to shorten
them.
2013-04-07 18:22:10 +00:00
rodent
47b0a5f90d "Line too long (should be no more than 80 characters)." 2013-04-06 12:14:30 +00:00
rodent
a0a1f2e57c Fixes:
COMMENT should not be longer than 70 characters.
 COMMENT should not begin with 'A'.
 COMMENT should not begin with 'An'.
 COMMENT should not begin with 'a'.
 COMMENT should not end with a period.
 COMMENT should start with a capital letter.

pkglint warnings. Some files also got minor formatting, spelling, and style
corrections.
2013-04-06 03:45:05 +00:00
dsainty
5c0e6afc2b The printer port support is experimental, and only supported on some
platforms.  Disable it for consistency, using a patch since
--disable-PRINTER only works on Linux.
2013-03-29 12:40:24 +00:00
joerg
410fe85920 At least on the BSDs, the parallel port support is always included. 2013-03-28 21:18:32 +00:00
joerg
7052e7aa43 utmpx.h is no longer included by util.h, adjust. Fix inline use. 2013-03-28 21:17:56 +00:00
sbd
08a8f91997 Linux fixes:
1) Install udev 60-openobex.rules config file.
  2) Add Linux plist entries.
2013-03-21 06:53:36 +00:00
sbd
2f780b85e3 Make sure that bt_addr_t is defined. 2013-03-21 06:49:12 +00:00
sbd
f7b6b536eb Add doxygen build depends 2013-03-21 06:46:42 +00:00
plunky
e120072f86 bump PKGREVISION for openobex update
while here, add LICENCE
2013-03-15 08:25:56 +00:00
plunky
694d39cfb2 bump PKGREVISION for openobex update
fix build for openobex 1.7
add LICENCE
update MASTER_SITE (=sourceforge)
2013-03-15 08:25:15 +00:00
plunky
640b7bf5c6 bump PKGREVISION for openobex update 2013-03-15 08:23:05 +00:00
plunky
180266428f Update to ObexFTP 0.24
There is a new maintainer, Hendrik Sattler and the sources are held
at gitorius.org. Build is changed to CMake and although it does not appear
in the ChangeLog below, I forwarded all the NetBSD related patches that
pkgsrc had (and more in fact, to get it working) although I would still say
that obexapp is the better program.


From the ChangeLog:

ObexFTP 0.24 (released 2013-03-05)
----------------------------------

	* Maintainer changed from Christian to Hendrik
	* change build system to using CMake
	* integrate obexfs-0.12
	* fix build for OpenOBEX-1.7


ObexFTP 0.23 (released 2009-02-17)
----------------------------------

	* allow win32 to use hci src names
	* adding a simpler connect wrapper
	* show OBEX_HandleInput errors
	* catch errors and let the user know
	* print timeout stats if available
	* sdp unregister more verbose
	* upgrading btkit
	* fix for win32 without bt
	* replacing deprecated automake vars
	* sizeof() fixes
	* removing bdaddr_t reference from obexftpd.c
	* adding bootstrap helper
	* concurrency bug in extconf.rb generated Makefile (fix by Alin Năstac)
	* switching from POD to asciidoc
	* clearing gnu-style implicit rules


ObexFTP 0.22 (released 2008-06-15)
----------------------------------

	* added proper unicode support
	* added support for transparent OBEX-over-AT mode
	* rewritten at-command function
	* added specific error messages
	* refactored to flexible bt_kit layer
	* fixed cache root duplicates
	* fixed off-by-one and unfreed mem in cache layer
	* added pkg-config file
	* added example code
	* switched to doxygen
	* added python binding callbacks
	* portable packed structs
	* enabled linux hci dev names for source selection
	* Python binding uses distutils now, tested by Adam Williamson
	* removed exit from bt discovery
	* Better autodetection for possible language bindings
	* reworked win32 support
	* Motorola SLVR L2 cobex fix by Andrey Rahmatullin
	* now using AC_HELP_STRING for compat with autoconf <=2.57
	* added hci selection support, drafted by Manuel Naranjo
	* switched obexftp cli to new discovery api
	* prefer PCSUITE over FTP, req. by Martin Storsjö for Series 60 2nd Ed.
	* fixed compile error with >=swig-1.3.28
	* renamed sdp browse function
	* fixed month/day swapping in atotime, spotted by Dr. Johannes Zellner
	* added BFC compatibility for newer Siemens phones
	* added PCSOFTWARE uuid support for SHARP phones
	* added motorola support
	* end bfb mode properly
	* added CPROT=0 support from 3GPP 27.007
	* fixed ericsson init
	* fixed invalid conn_id in disconnect rep. by Alan J. McFarlane
	* better create flag handling in setpath
	* Changed LDADD to LIBADD sug. by Sergey Vlasov <vsu@altlinux.ru>
	* obexftpd clean up by Hendrik Sattler
	* 64-bit fixes by Hendrik Sattler
	* Removed all (dangerous) obex_headerdata_t casts
	* Reorganized all swig-dependant Makefiles
	* Applied cobex write patch from Simon Ruggier <Simon80@gmail.com>
	* Applied   from Frode Isaksen <fisaksen@bewan.com>


ObexFTP 0.21 (released 2006-06-27)
----------------------------------

2006-05-26  Christian W. Zuckschwerdt  <zany@triq.net>

	* Fixes to obexftpd suggested by Hendrik Sattler

2006-05-24  Christian W. Zuckschwerdt  <zany@triq.net>

	* Added ruby binding
	* Added preliminary discovery function
2013-03-15 08:18:43 +00:00
plunky
e63cdfd7a9 Update to OpenOBEX 1.7. The maintainer has changed, to Hendrik Sattler
and the sources are now stored at gitorius.org. The build system is changed
to CMake

From the ChangeLog:

ver 1.7:
	Add support for CMake config files
	Internal code reorganisation and rewrite
	Add new function set for better control than OBEX_HandleInput():
	  * OBEX_SetTimeout(),
	  * OBEX_Work() and
	  * OBEX_GetDataDirection()

ver 1.6:
	Change ABI from 1 to 2 because:
	  * Redo the USB changes from version 1.4
	  * Remove InOBEX_* function, use the TcpOBEX_* functions instead
	  * Remove the simple Unicode<->ASCII functions
	Add support for Single Response Mode
	Add manpages for all example applications
	Add udev support
	Add new example app to find IrDA and USB OBEX devices
	Add fixes for FreeBSD
	Add support for libusb-1.x
	Add support for close-on-exec
2013-03-15 08:10:04 +00:00
dsainty
6c50403dc4 Not as MAKE_JOBS_SAFE as you'd like. 2013-03-06 08:30:40 +00:00
shattered
088e18038c Update homepage URLs. 2013-02-22 19:59:05 +00:00
dsainty
22dce0a589 Fix package build for MACHINE_ARCH == x86_64 2013-02-19 23:35:48 +00:00
wiz
d1b820f37b Recursive bump for png-1.6. 2013-02-16 11:18:58 +00:00
wiz
0602d449ce Recursive bump for png-1.6. 2013-02-16 11:17:56 +00:00
dsainty
366670ee0a SUBDIR+=java-rxtx 2013-02-11 01:14:41 +00:00
dsainty
1da346fb7a Add RXTX version 2.1-7r2.
RXTX is a Java library, using a native implementation (via JNI), providing
serial and parallel communication for the Java Development Toolkit (JDK).

It is based on the specification for Sun's Java Communications API, though
while many of the class descriptions are the same the package used it not,
since gnu.io is used instead. A certain amount of compatibility is intended
with API, though this project should be considered as a fork and therefore
compatible in spirit, but not in implementation.
2013-02-11 01:13:19 +00:00
jnemeth
cb11a96e99 Update to Asterisk 11.2.1: this is a minor bug fix release.
----- 11.2.1:

The Asterisk Development Team has announced the release of Asterisk 11.2.1.

The release of Asterisk 11.2.1 resolves several issues reported by the
community and would have not been possible without your participation.
Thank you!

The following are the issues resolved in this release:

* --- Fix astcanary startup problem due to wrong pid value from before
      daemon call

* --- Update init.d scripts to handle stderr; readd splash screen for
      remote consoles

* --- Reset RTP timestamp; sequence number on SSRC change

For a full list of changes in this release, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.2.1

Thank you for your continued support of Asterisk!

----- 11.2.0:

The Asterisk Development Team has announced the release of Asterisk 11.2.0.

The release of Asterisk 11.2.0 resolves several issues reported by the
community and would have not been possible without your participation.
Thank you!

The following is a sample of the issues resolved in this release:

* --- app_meetme: Fix channels lingering when hung up under certain
      conditions

* --- Fix stuck DTMF when bridge is broken.

* --- Add missing support for "who hung up" to chan_motif.

* --- Remove a fixed size limitation for producing SDP and change how
      ICE support is disabled by default.

* --- Fix chan_sip websocket payload handling

* --- Fix pjproject compilation in certain circumstances

For a full list of changes in this release, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.2.0

Thank you for your continued support of Asterisk!
2013-02-10 20:18:50 +00:00
jnemeth
32a59f543f Update to Asterisk 10.12.1: this is a minor bug fix release.
----- 10.12.1

The Asterisk Development Team has announced the release of Asterisk 10.12.1.

The release of Asterisk 10.12.1 resolves several issues reported by the
community and would have not been possible without your participation.
Thank you!

The following are the issues resolved in this release:

* --- Fix astcanary startup problem due to wrong pid value from before
      daemon call

* --- Update init.d scripts to handle stderr; readd splash screen for
      remote consoles

* --- Reset RTP timestamp; sequence number on SSRC change

For a full list of changes in this release, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.12.1

Thank you for your continued support of Asterisk!

----- 10.12.0

The Asterisk Development Team has announced the release of Asterisk 10.12.0.

The release of Asterisk 10.12.0 resolves several issues reported by the
community and would have not been possible without your participation.
Thank you!

The following is a sample of the issues resolved in this release:

* --- app_meetme: Fix channels lingering when hung up under certain
      conditions

* --- Fix stuck DTMF when bridge is broken.

* --- Improve Code Readability And Fix Setting natdetected Flag

* --- Fix extension matching with the '-' char.

* --- Fix call files when astspooldir is relative.

For a full list of changes in this release, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.12.0

Thank you for your continued support of Asterisk!
2013-02-10 07:55:31 +00:00
ryoon
9bef86f5fd Bump PKGREVISION from audio/jack. 2013-02-09 22:11:28 +00:00
jnemeth
6cbf272baf Update to Asterisk 1.8.20.1: this is a minor bugfix release
----- 1.8.20.1

The Asterisk Development Team has announced the release of Asterisk 1.8.20.1.

The release of Asterisk 1.8.20.1 resolves several issues reported by the
community and would have not been possible without your participation.
Thank you!

The following are the issues resolved in this release:

* --- Fix astcanary startup problem due to wrong pid value from before
      daemon call

* --- Update init.d scripts to handle stderr; readd splash screen for
      remote consoles

* --- Reset RTP timestamp; sequence number on SSRC change

For a full list of changes in this release, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.20.1

Thank you for your continued support of Asterisk!

----- 1.8.20.0

The Asterisk Development Team has announced the release of Asterisk 1.8.20.0.

The release of Asterisk 1.8.20.0 resolves several issues reported by the
community and would have not been possible without your participation.
Thank you!

The following is a sample of the issues resolved in this release:

* --- app_meetme: Fix channels lingering when hung up under certain
      conditions

* --- Fix stuck DTMF when bridge is broken.

* --- Improve Code Readability And Fix Setting natdetected Flag

* --- Fix extension matching with the '-' char.

* --- Fix call files when astspooldir is relative.

For a full list of changes in this release, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.20.0

Thank you for your continued support of Asterisk!
2013-02-07 02:24:31 +00:00
jperkin
becd113253 PKGREVISION bumps for the security/openssl 1.0.1d update. 2013-02-06 23:20:50 +00:00
is
bdf2a443a7 Fix the VARBASE propagation to all utilities. Without this, we tried
to log to /spool/fax/Faxlog.
2013-01-29 16:56:39 +00:00
adam
f4c3b89da7 Revbump after graphics/jpeg and textproc/icu 2013-01-26 21:36:13 +00:00
jnemeth
4b739a8368 Update to Asterisk 11.1.2: this is a security update for AST-2012-014
and AST-2012-015.  Apparently the last update didn't completely
fix the issues.

The Asterisk Development Team has announced a security release for
Asterisk 11, Asterisk 11.1.2. This release addresses the security
vulnerabilities reported in AST-2012-014 and AST-2012-015, and
replaces the previous version of Asterisk 11 released for these
security vulnerabilities. The prior release left open a vulnerability
in res_xmpp that exists only in Asterisk 11; as such, other versions
of Asterisk were resolved correctly by the previous releases.

The release of these versions resolve the following two issues:

* Stack overflows that occur in some portions of Asterisk that manage a TCP
  connection. In SIP, this is exploitable via a remote unauthenticated session;
  in XMPP and HTTP connections, this is exploitable via remote authenticated
  sessions. The vulnerabilities in SIP and HTTP were corrected in a prior
  release of Asterisk; the vulnerability in XMPP is resolved in this release.

* A denial of service vulnerability through exploitation of the device state
  cache. Anonymous calls had the capability to create devices in Asterisk that
  would never be disposed of. Handling the cachability of device states
  aggregated via XMPP is handled in this release.

These issues and their resolutions are described in the security advisories.

For more information about the details of these vulnerabilities, please read
security advisories AST-2012-014 and AST-2012-015.

For a full list of changes in the current release, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.1.2

The security advisories are available at:

 * http://downloads.asterisk.org/pub/security/AST-2012-014.pdf
 * http://downloads.asterisk.org/pub/security/AST-2012-015.pdf

Thank you for your continued support of Asterisk - and we apologize for having
to do this twice!
2013-01-04 03:09:56 +00:00
jnemeth
02ac0e0e6a de to Asterisk 1.8.19.1; this is a security fix to fix AST-2012-14
and AST-2012-015.

Approved for commit during freeze by: agc

The Asterisk Development Team has announced security releases for Certified
Asterisk 1.8.11 and Asterisk 1.8, 10, and 11. The available security releases
are released as versions 1.8.11-cert10, 1.8.19.1, 10.11.1, 10.11.1-digiumphones,
and 11.1.1.

The release of these versions resolve the following two issues:

* Stack overflows that occur in some portions of Asterisk that manage a TCP
  connection. In SIP, this is exploitable via a remote unauthenticated session;
  in XMPP and HTTP connections, this is exploitable via remote authenticated
  sessions.

* A denial of service vulnerability through exploitation of the device state
  cache. Anonymous calls had the capability to create devices in Asterisk that
  would never be disposed of.

These issues and their resolutions are described in the security advisories.

For more information about the details of these vulnerabilities, please read
security advisories AST-2012-014 and AST-2012-015, which were released at the
same time as this announcement.

For a full list of changes in the current releases, please see the ChangeLogs:

http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.1.1

The security advisories are available at:

 * http://downloads.asterisk.org/pub/security/AST-2012-014.pdf
 * http://downloads.asterisk.org/pub/security/AST-2012-015.pdf

Thank you for your continued support of Asterisk!
2013-01-03 02:16:17 +00:00
jnemeth
fbda522e8a Upgrade to Asterisk 10.11.1; this is a security fix to fix AST-2012-14
and AST-2012-015.

Approved for commit during freeze by: agc

The Asterisk Development Team has announced security releases for Certified
Asterisk 1.8.11 and Asterisk 1.8, 10, and 11. The available security releases
are released as versions 1.8.11-cert10, 1.8.19.1, 10.11.1, 10.11.1-digiumphones,
and 11.1.1.

The release of these versions resolve the following two issues:

* Stack overflows that occur in some portions of Asterisk that manage a TCP
  connection. In SIP, this is exploitable via a remote unauthenticated session;
  in XMPP and HTTP connections, this is exploitable via remote authenticated
  sessions.

* A denial of service vulnerability through exploitation of the device state
  cache. Anonymous calls had the capability to create devices in Asterisk that
  would never be disposed of.

These issues and their resolutions are described in the security advisories.

For more information about the details of these vulnerabilities, please read
security advisories AST-2012-014 and AST-2012-015, which were released at the
same time as this announcement.

For a full list of changes in the current releases, please see the ChangeLogs:

http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.1.1

The security advisories are available at:

 * http://downloads.asterisk.org/pub/security/AST-2012-014.pdf
 * http://downloads.asterisk.org/pub/security/AST-2012-015.pdf

Thank you for your continued support of Asterisk!
2013-01-03 02:14:28 +00:00
jnemeth
bf4b089985 Upgrade to Asterisk 11.1.1; this is a security fix to fix AST-2012-14
and AST-2012-015.

Approved for commit during freeze by: agc

The Asterisk Development Team has announced security releases for Certified
Asterisk 1.8.11 and Asterisk 1.8, 10, and 11. The available security releases
are released as versions 1.8.11-cert10, 1.8.19.1, 10.11.1, 10.11.1-digiumphones,
and 11.1.1.

The release of these versions resolve the following two issues:

* Stack overflows that occur in some portions of Asterisk that manage a TCP
  connection. In SIP, this is exploitable via a remote unauthenticated session;
  in XMPP and HTTP connections, this is exploitable via remote authenticated
  sessions.

* A denial of service vulnerability through exploitation of the device state
  cache. Anonymous calls had the capability to create devices in Asterisk that
  would never be disposed of.

These issues and their resolutions are described in the security advisories.

For more information about the details of these vulnerabilities, please read
security advisories AST-2012-014 and AST-2012-015, which were released at the
same time as this announcement.

For a full list of changes in the current releases, please see the ChangeLogs:

http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.1.1

The security advisories are available at:

 * http://downloads.asterisk.org/pub/security/AST-2012-014.pdf
 * http://downloads.asterisk.org/pub/security/AST-2012-015.pdf

Thank you for your continued support of Asterisk!
2013-01-03 02:11:19 +00:00
joerg
e86efd75b2 Use correct enum. 2012-12-25 21:13:18 +00:00
cheusov
0a0bc4e2de Fix build failure on some Linuxes if CHECK_INTERPRETER=yes 2012-12-25 11:41:25 +00:00
khorben
686e827b55 Added comms/deforaos-phone (version 0.3.11) 2012-12-17 01:17:28 +00:00