Received: by mail.netbsd.org (Postfix, from userid 605) id E549A84E55; Sun, 1 Aug 2021 02:41:59 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 2987E84DBD for ; Sun, 1 Aug 2021 02:41:59 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.netbsd.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id beBDjmOJVj8W for ; Sun, 1 Aug 2021 02:41:58 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197]) by mail.netbsd.org (Postfix) with ESMTP id 461B284D39 for ; Sun, 1 Aug 2021 02:41:58 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id 369FAFA97; Sun, 1 Aug 2021 02:41:58 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1627785718205950" MIME-Version: 1.0 Date: Sun, 1 Aug 2021 02:41:58 +0000 From: "John Nemeth" Subject: CVS commit: pkgsrc/comms/asterisk18 To: pkgsrc-changes@NetBSD.org Reply-To: jnemeth@netbsd.org X-Mailer: log_accum Message-Id: <20210801024158.369FAFA97@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_1627785718205950 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: jnemeth Date: Sun Aug 1 02:41:58 UTC 2021 Modified Files: pkgsrc/comms/asterisk18: Makefile distinfo Log Message: asterisk18: Update to 18.5.1 The Asterisk Development Team would like to announce security releases for Asterisk 13, 16, 17 and 18, and Certified Asterisk 16.8. The available releases are released as versions 13.38.3, 16.19.1, 17.9.4, 18.5.1 and 16.8-cert10. These releases are available for immediate download at https://downloads.asterisk.org/pub/telephony/asterisk/releases The following security vulnerabilities were resolved in these versions: * AST-2021-007: Remote Crash Vulnerability in PJSIP channel driver When Asterisk receives a re-INVITE without SDP after having sent a BYE request a crash will occur. This occurs due to the Asterisk channel no longer being present while code assumes it is. * AST-2021-008: Remote crash when using IAX2 channel driver If the IAX2 channel driver receives a packet that contains an * AST-2021-009: pjproject/pjsip: crash when SSL socket destroyed during handshake Depending on the timing, it's possible for Asterisk to crash when using a TLS connection if the underlying socket parent/listener gets destroyed during the handshake. For a full list of changes in the current releases, please see the ChangeLogs: https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-18.5.1 The security advisories are available at: https://downloads.asterisk.org/pub/security/AST-2021-007.pdf https://downloads.asterisk.org/pub/security/AST-2021-008.pdf https://downloads.asterisk.org/pub/security/AST-2021-009.pdf Thank you for your continued support of Asterisk! To generate a diff of this commit: cvs rdiff -u -r1.127 -r1.128 pkgsrc/comms/asterisk18/Makefile cvs rdiff -u -r1.65 -r1.66 pkgsrc/comms/asterisk18/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1627785718205950 Content-Disposition: inline Content-Length: 4989 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/comms/asterisk18/Makefile diff -u pkgsrc/comms/asterisk18/Makefile:1.127 pkgsrc/comms/asterisk18/Makefile:1.128 --- pkgsrc/comms/asterisk18/Makefile:1.127 Sun Jun 27 21:39:27 2021 +++ pkgsrc/comms/asterisk18/Makefile Sun Aug 1 02:41:58 2021 @@ -1,11 +1,11 @@ -# $NetBSD: Makefile,v 1.127 2021/06/27 21:39:27 jnemeth Exp $ +# $NetBSD: Makefile,v 1.128 2021/08/01 02:41:58 jnemeth Exp $ # # NOTE: when updating this package, there are two places that sound # tarballs need to be checked; look in ${WRKSRC}/sounds/Makefile # to find out the current sound file versions # Also look in ${WRKSRC}/third-party/versions.mak for pjproject -DISTNAME= asterisk-18.5.0 +DISTNAME= asterisk-18.5.1 #PKGREVISION= 24 CATEGORIES= comms net audio MASTER_SITES= http://downloads.asterisk.org/pub/telephony/asterisk/ Index: pkgsrc/comms/asterisk18/distinfo diff -u pkgsrc/comms/asterisk18/distinfo:1.65 pkgsrc/comms/asterisk18/distinfo:1.66 --- pkgsrc/comms/asterisk18/distinfo:1.65 Sun Jun 27 21:39:27 2021 +++ pkgsrc/comms/asterisk18/distinfo Sun Aug 1 02:41:58 2021 @@ -1,21 +1,21 @@ -$NetBSD: distinfo,v 1.65 2021/06/27 21:39:27 jnemeth Exp $ +$NetBSD: distinfo,v 1.66 2021/08/01 02:41:58 jnemeth Exp $ -SHA1 (asterisk-18.5.0/asterisk-18.5.0.tar.gz) = 408ebb5ac2417bc91449645e9c3caa51814951d6 -RMD160 (asterisk-18.5.0/asterisk-18.5.0.tar.gz) = 8b18ae8dc8f013d92d161d6598a628881f88c87d -SHA512 (asterisk-18.5.0/asterisk-18.5.0.tar.gz) = f31ac2ccd4b9af3ee4ad1c1368519e889d2e3e5b6b22e6f1b6dc020ffbdc8caccf0c03ba620f4a8b6346403abffde23d93fa8c06a6d7d993074edfaa0cf256df -Size (asterisk-18.5.0/asterisk-18.5.0.tar.gz) = 27956264 bytes -SHA1 (asterisk-18.5.0/asterisk-extra-sounds-en-gsm-1.5.2.tar.gz) = 0207e289404704c42941759db9660269599044f9 -RMD160 (asterisk-18.5.0/asterisk-extra-sounds-en-gsm-1.5.2.tar.gz) = 5d660e7664a56086bd60ad49196e1b622a60f106 -SHA512 (asterisk-18.5.0/asterisk-extra-sounds-en-gsm-1.5.2.tar.gz) = 3f2f7bf3d5bce3544bc013f913c352f0204a3ce96239987403eb9dce8bc87e64a61d437762323a422a87b2fad1f3bf3e7a5f3d0d340f912a1b1dbfea9479d41d -Size (asterisk-18.5.0/asterisk-extra-sounds-en-gsm-1.5.2.tar.gz) = 4253587 bytes -SHA1 (asterisk-18.5.0/pjproject-2.10.md5) = 1f91cf11ef1df14344817905e165cc1908668d18 -RMD160 (asterisk-18.5.0/pjproject-2.10.md5) = c33bbef404923860a41e34520871c0fa7533a01d -SHA512 (asterisk-18.5.0/pjproject-2.10.md5) = bd24048c9c2fdaf06468e44bceca92bd02848d759ef98285d20b50174f865b1aec2928f1ce6c092862397ba83dd1a74da4a7e479eca881df1e9f9d1c211a7054 -Size (asterisk-18.5.0/pjproject-2.10.md5) = 110 bytes -SHA1 (asterisk-18.5.0/pjproject-2.10.tar.bz2) = 0c691fa3562d4daad4b4374df61e8325ac15cc55 -RMD160 (asterisk-18.5.0/pjproject-2.10.tar.bz2) = 9ffe871976a67e4d29d45fdb2c1fc26b2925ef86 -SHA512 (asterisk-18.5.0/pjproject-2.10.tar.bz2) = fe29edccc63a8e72323e1b6f955a8c3475e26aba9cb8f5125546da4409fecc19a09a7950eee6b8e4a3c908943bc043d95130f878ad52958c5eccc617e3bcfb4e -Size (asterisk-18.5.0/pjproject-2.10.tar.bz2) = 7339188 bytes +SHA1 (asterisk-18.5.1/asterisk-18.5.1.tar.gz) = 8c8b7da582c82df48710fed6069aeb04d2267313 +RMD160 (asterisk-18.5.1/asterisk-18.5.1.tar.gz) = 45726fa5dfa09dce967904c589730932e30f0b1c +SHA512 (asterisk-18.5.1/asterisk-18.5.1.tar.gz) = 95f30c14602587827c7d7bc4652639163f4fe6338fade35d533525aa8825d7a5082c9d6fa4671a5f4f89bd90a0d657ce7e51fd4216558bd367abcb10b25aeb23 +Size (asterisk-18.5.1/asterisk-18.5.1.tar.gz) = 27953748 bytes +SHA1 (asterisk-18.5.1/asterisk-extra-sounds-en-gsm-1.5.2.tar.gz) = 0207e289404704c42941759db9660269599044f9 +RMD160 (asterisk-18.5.1/asterisk-extra-sounds-en-gsm-1.5.2.tar.gz) = 5d660e7664a56086bd60ad49196e1b622a60f106 +SHA512 (asterisk-18.5.1/asterisk-extra-sounds-en-gsm-1.5.2.tar.gz) = 3f2f7bf3d5bce3544bc013f913c352f0204a3ce96239987403eb9dce8bc87e64a61d437762323a422a87b2fad1f3bf3e7a5f3d0d340f912a1b1dbfea9479d41d +Size (asterisk-18.5.1/asterisk-extra-sounds-en-gsm-1.5.2.tar.gz) = 4253587 bytes +SHA1 (asterisk-18.5.1/pjproject-2.10.md5) = 1f91cf11ef1df14344817905e165cc1908668d18 +RMD160 (asterisk-18.5.1/pjproject-2.10.md5) = c33bbef404923860a41e34520871c0fa7533a01d +SHA512 (asterisk-18.5.1/pjproject-2.10.md5) = bd24048c9c2fdaf06468e44bceca92bd02848d759ef98285d20b50174f865b1aec2928f1ce6c092862397ba83dd1a74da4a7e479eca881df1e9f9d1c211a7054 +Size (asterisk-18.5.1/pjproject-2.10.md5) = 110 bytes +SHA1 (asterisk-18.5.1/pjproject-2.10.tar.bz2) = 0c691fa3562d4daad4b4374df61e8325ac15cc55 +RMD160 (asterisk-18.5.1/pjproject-2.10.tar.bz2) = 9ffe871976a67e4d29d45fdb2c1fc26b2925ef86 +SHA512 (asterisk-18.5.1/pjproject-2.10.tar.bz2) = fe29edccc63a8e72323e1b6f955a8c3475e26aba9cb8f5125546da4409fecc19a09a7950eee6b8e4a3c908943bc043d95130f878ad52958c5eccc617e3bcfb4e +Size (asterisk-18.5.1/pjproject-2.10.tar.bz2) = 7339188 bytes SHA1 (patch-Makefile) = 73471d36b475fa8990e8acb69839dca32d866d25 SHA1 (patch-addons_chan__ooh323.c) = 1775da7ca2129a962ed460bd1e78ba3ce6afa62c SHA1 (patch-apps_app__adsiprog.c) = 031139e5cd1ef6bb2afb0a74fee3d752eded0a2c --_----------=_1627785718205950--