Automatic conversion of the NetBSD pkgsrc CVS module, use with care
Find a file
jnemeth 9d54e1f831 Upgrade to 1.6.2.18. This fixes several security issues including:
AST-2011-002, AST-2011-003, AST-2011-004, AST-2011-005, and AST-2011-006.

===========================================================================
1.6.2.18:

The Asterisk Development Team has announced the release of Asterisk 1.6.2.18.

The release of Asterisk 1.6.2.18 resolves several issues reported by the
community and would have not been possible without your participation.
Thank you!

The following is a sample of the issues resolved in this release:

 * Only offer codecs both sides support for directmedia.

 * Resolution of several DTMF based attended transfer issues.
   NOTE: Be sure to read the ChangeLog for more information about these changes.

 * Resolve deadlocks related to device states in chan_sip

 * Fix channel redirect out of MeetMe() and other issues with channel softhangup

 * Fix voicemail sequencing for file based storage.

 * Guard against retransmitting BYEs indefinitely during attended transfers with
   chan_sip.

In addition to the changes listed above, commits to resolve security issues
AST-2011-005 and AST-2011-006 have been merged into this release. More
information about AST-2011-005 and AST-2011-006 can be found at:

http://downloads.asterisk.org/pub/security/AST-2011-005.pdf
http://downloads.asterisk.org/pub/security/AST-2011-006.pdf

For a full list of changes in this release, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.6.2.18

===========================================================================
1.6.2.17.3

The Asterisk Development Team has announced security releases for Asterisk
branches 1.4, 1.6.1, 1.6.2, and 1.8. The available security releases are
released as versions 1.4.40.1, 1.6.1.25, 1.6.2.17.3, and 1.8.3.3.

The releases of Asterisk 1.4.40.1, 1.6.1.25, 1.6.2.17.3, and 1.8.3.3 resolve two
issues:

* File Descriptor Resource Exhaustion (AST-2011-005)
* Asterisk Manager User Shell Access (AST-2011-006)

The issues and resolutions are described in the AST-2011-005 and AST-2011-006
security advisories.

For more information about the details of these vulnerabilities, please read the
security advisories AST-2011-005 and AST-2011-006, which were released at the
same time as this announcement.

For a full list of changes in the current releases, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.17.3

Security advisory AST-2011-005 and AST-2011-006 are available at:

http://downloads.asterisk.org/pub/security/AST-2011-005.pdf
http://downloads.asterisk.org/pub/security/AST-2011-006.pdf

===========================================================================
1.6.2.17.2:

The Asterisk Development Team has announced security releases for Asterisk
branches 1.6.1, 1.6.2, and 1.8. The available security releases are
released as versions 1.6.1.24, 1.6.2.17.2, and 1.8.3.2.

** This is a re-release of Asterisk 1.6.1.23, 1.6.2.17.1 and 1.8.3.1 which
    contained a bug which caused duplicate manager entries (issue #18987).

The releases of Asterisk 1.6.1.24, 1.6.2.17.2, and 1.8.3.2 resolve two issues:

  * Resource exhaustion in Asterisk Manager Interface (AST-2011-003)
  * Remote crash vulnerability in TCP/TLS server (AST-2011-004)

The issues and resolutions are described in the AST-2011-003 and AST-2011-004
security advisories.

For more information about the details of these vulnerabilities, please read the
security advisories AST-2011-003 and AST-2011-004, which were released at the
same time as this announcement.

For a full list of changes in the current releases, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.17.2

Security advisory AST-2011-003 and AST-2011-004 are available at:

http://downloads.asterisk.org/pub/security/AST-2011-003.pdf
http://downloads.asterisk.org/pub/security/AST-2011-004.pdf

===========================================================================
1.6.2.17.1:

The Asterisk Development Team has announced security releases for Asterisk
branches 1.6.1, 1.6.2, and 1.8. The available security releases are
released as versions 1.6.1.23, 1.6.2.17.1, and 1.8.3.1.

These releases are available for immediate download at
http://downloads.asterisk.org/pub/telephony/asterisk/releases

The releases of Asterisk 1.6.1.23, 1.6.2.17.1, and 1.8.3.1 resolve two issues:

  * Resource exhaustion in Asterisk Manager Interface (AST-2011-003)
  * Remote crash vulnerability in TCP/TLS server (AST-2011-004)

The issues and resolutions are described in the AST-2011-003 and AST-2011-004
security advisories.

For more information about the details of these vulnerabilities, please read the
security advisories AST-2011-003 and AST-2011-004, which were released at the
same time as this announcement.

For a full list of changes in the current releases, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.17.1

Security advisory AST-2011-003 and AST-2011-004 are available at:

http://downloads.asterisk.org/pub/security/AST-2011-003.pdf
http://downloads.asterisk.org/pub/security/AST-2011-004.pdf

===========================================================================
1.6.2.17:

The Asterisk Development Team has announced the release of Asterisk 1.6.2.17.

The release of Asterisk 1.6.2.17 resolves several issues reported by the
community and would have not been possible without your participation.

The following is a sample of the issues resolved in this release:

* Resolve duplicated data in the AstDB when using DIALGROUP()

* Correct issue where res_config_odbc could populate fields with invalid data.

* When using cdr_pgsql the billsec field was not populated correctly on
   unanswered calls.

* Resolve issue where re-transmissions of SUBSCRIBE could break presence.

* Fix regression causing forwarding voicemails to not work with file storage.

* This version of Asterisk includes the new Compiler Flags option
   BETTER_BACKTRACES which uses libbfd to search for better symbol information
   within both the Asterisk binary, as well as loaded modules, to assist when
   using inline backtraces to track down problems.

* Resolve several issues with DTMF based attended transfers.
   NOTE: Be sure to read the ChangeLog for more information about these changes.

* Resolve issue where no Music On Hold may be triggered when using
   res_timing_dahdi.

* Fix regression that changed behavior of queues when ringing a queue member.

Additionally, this release has the changes related to security bulletin
AST-2011-002 which can be found at
http://downloads.asterisk.org/pub/security/AST-2011-002.pdf

For a full list of changes in this release, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.6.2.17

===========================================================================
1.6.2.16.2:

The Asterisk Development Team has announced security releases for Asterisk
branches 1.4, 1.6.1, 1.6.2, and 1.8. The available security releases are
released as versions 1.4.39.2, 1.6.1.22, 1.6.2.16.2, and 1.8.2.4.

The releases of Asterisk 1.4.39.2, 1.6.1.22, 1.6.2.16.2, and 1.8.2.4 resolve an
issue that when decoding UDPTL packets, multiple stack and heap based arrays can
be made to overflow by specially crafted packets. Systems configured for
T.38 pass through or termination are vulnerable. The issue and resolution are
described in the AST-2011-002 security advisory.

For more information about the details of this vulnerability, please read the
security advisory AST-2011-002, which was released at the same time as this
announcement.

For a full list of changes in the current release, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.16.2

Security advisory AST-2011-002 is available at:

http://downloads.asterisk.org/pub/security/AST-2011-002.pdf
=============================================================================
2011-06-06 06:25:05 +00:00
archivers DESCR_SRC now contains full paths to DESCR files 2011-05-28 10:15:14 +00:00
audio Fix build on Linux (enable native audio output driver). 2011-06-03 19:29:53 +00:00
benchmarks Add trivial patch to makefile, now passes MAKE_JOBS=4. 2011-05-28 23:02:33 +00:00
biology recursive bump from gettext-lib shlib bump. 2011-04-22 13:41:54 +00:00
bootstrap Disable USE_DESTDIR for bootstrap. 2011-04-15 09:02:00 +00:00
cad Update to gwave-20090213 2011-05-19 03:28:34 +00:00
chat Change MAINTAINER to adam, since he has done all the recent updates. 2011-06-02 15:35:58 +00:00
comms Upgrade to 1.6.2.18. This fixes several security issues including: 2011-06-06 06:25:05 +00:00
converters add missing dependency on p5-gdbm 2011-05-26 10:12:23 +00:00
cross * set LICENSE (gnu-gpl-v2 AND gnu-lgpl-v2). 2011-04-16 07:47:00 +00:00
databases buildlink icu when used as an option 2011-06-01 11:07:24 +00:00
devel Someone forgot to update devel/libgsf-gnome when updating devel/libgsf. 2011-06-05 00:43:24 +00:00
distfiles
doc Updated pkgtools/port2pkg to 1.11nb8 2011-06-06 01:40:11 +00:00
editors Update emacs-snapshot to 24.0.50.20110526. 2011-05-27 21:41:14 +00:00
emulators Changes 1.3.21: 2011-06-02 09:09:09 +00:00
filesystems perfuse update. We are now able to run an unprivilegied build.sh on a 2011-06-01 16:04:32 +00:00
finance Update to 1.0.5. Notable changes: 2011-05-16 21:29:04 +00:00
fonts Replace NO_SRC_ON* with NO_BIN_ON*. 2011-05-28 12:05:22 +00:00
games DESTDIRify nethack. Merge patches and distinfo. Some other improvements. 2011-06-01 11:20:29 +00:00
geography Update to 1.1. Notable changes: 2011-05-03 00:41:30 +00:00
graphics Add user-destdir installation support. 2011-06-05 06:06:10 +00:00
ham recursive bump from gettext-lib shlib bump. 2011-04-22 13:41:54 +00:00
inputmethod Update scim-tables to 0.5.10. 2011-06-02 10:09:37 +00:00
lang Update python25 to 2.5.6. 2011-06-04 05:08:19 +00:00
licenses Add nethack license. 2011-06-01 11:21:52 +00:00
mail Changes 0.5.3: 2011-06-03 07:21:01 +00:00
math DESCR_SRC now contains full paths to DESCR files 2011-05-28 10:15:14 +00:00
mbone Remove patch hunks that disable --recheck in GNU configure scripts. 2011-01-25 22:22:13 +00:00
meta-pkgs + modular-xorg. 2011-05-26 23:27:44 +00:00
misc +send-pr, oked by wiz@ 2011-05-29 13:53:00 +00:00
mk Add support undo-replace with USE_DESTDIR. 2011-06-04 10:05:00 +00:00
multimedia reset PKGREV for base pkg update 2011-05-18 09:48:59 +00:00
net Fixes PR pkg/44996 2011-06-05 23:10:12 +00:00
news DESCR_SRC now contains full paths to DESCR files 2011-05-28 10:15:14 +00:00
packages
parallel +parallel, oked by sponsors 2011-05-23 21:40:03 +00:00
pkgtools replace shebang for perl. 2011-06-06 01:39:59 +00:00
print Add user-destdir installation support. 2011-05-28 11:32:03 +00:00
regress Reset maintainer, developer lost his commit bit. 2010-03-21 16:29:38 +00:00
security Changes 1.6.1: 2011-06-01 10:05:57 +00:00
shells Update HOMEPAGE url. 2011-05-31 11:08:09 +00:00
sysutils Use REPLACE_PYTHON in the appropriate places - bump pkgrevision 2011-06-05 23:05:58 +00:00
templates
textproc Update textproc/lua-expat to 1.2.0. 2011-06-04 23:13:40 +00:00
time DESCR_SRC now contains full paths to DESCR files 2011-05-28 10:15:14 +00:00
wm * set LICENSE=mit 2011-05-25 13:17:36 +00:00
www Update to 3.20110431. From the changelog: 2011-06-04 15:23:35 +00:00
x11 Rename immodule related variable names, and not to conflict with gtk2 immodules. 2011-06-05 12:13:47 +00:00
Makefile
pkglocate Fix PR 39648: 2010-11-11 19:56:34 +00:00
README

$NetBSD: README,v 1.18 2005/05/07 22:18:28 wiz Exp $

Please see doc/pkgsrc.txt for information.