Sat Sep 20 19:12:16 2014 UTC ()
Update to Asterisk 11.12.1: this is mainly a security fix for AST-2014-010.

The Asterisk Development Team has announced security releases for Certified
Asterisk 11.6 and Asterisk 11 and 12. The available security releases are
released as versions 11.6-cert6, 11.12.1, and 12.5.1.

Please note that the release of these versions resolves the following security
vulnerability:

* AST-2014-010: Remote Crash when Handling Out of Call Message in Certain
                Dialplan Configurations

Note that the crash described in AST-2014-010 can be worked around through
dialplan configuration. Given the likelihood of the issue, an advisory was
deemed to be warranted.

For more information about the details of these vulnerabilities, please read
security advisories AST-2014-009 and AST-2014-010, which were released at the
same time as this announcement.

For a full list of changes in the current releases, please see the ChangeLogs:

http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.12.1

The security advisories are available at:

 * http://downloads.asterisk.org/pub/security/AST-2014-010.pdf

Thank you for your continued support of Asterisk!


(jnemeth)
diff -r1.110 -r1.111 pkgsrc/comms/asterisk/Makefile
diff -r1.65 -r1.66 pkgsrc/comms/asterisk/distinfo

cvs diff -r1.110 -r1.111 pkgsrc/comms/asterisk/Attic/Makefile (expand / switch to unified diff)

--- pkgsrc/comms/asterisk/Attic/Makefile 2014/08/28 01:19:12 1.110
+++ pkgsrc/comms/asterisk/Attic/Makefile 2014/09/20 19:12:16 1.111
@@ -1,19 +1,19 @@ @@ -1,19 +1,19 @@
1# $NetBSD: Makefile,v 1.110 2014/08/28 01:19:12 jnemeth Exp $ 1# $NetBSD: Makefile,v 1.111 2014/09/20 19:12:16 jnemeth Exp $
2# 2#
3# NOTE: when updating this package, there are two places that sound 3# NOTE: when updating this package, there are two places that sound
4# tarballs need to be checked 4# tarballs need to be checked
5 5
6DISTNAME= asterisk-11.12.0 6DISTNAME= asterisk-11.12.1
7DIST_SUBDIR= ${PKGNAME_NOREV} 7DIST_SUBDIR= ${PKGNAME_NOREV}
8DISTFILES= ${DEFAULT_DISTFILES} 8DISTFILES= ${DEFAULT_DISTFILES}
9EXTRACT_ONLY= ${DISTNAME}.tar.gz 9EXTRACT_ONLY= ${DISTNAME}.tar.gz
10CATEGORIES= comms net audio 10CATEGORIES= comms net audio
11MASTER_SITES= http://downloads.asterisk.org/pub/telephony/asterisk/ \ 11MASTER_SITES= http://downloads.asterisk.org/pub/telephony/asterisk/ \
12 http://downloads.asterisk.org/pub/telephony/asterisk/old-releases/ \ 12 http://downloads.asterisk.org/pub/telephony/asterisk/old-releases/ \
13 http://downloads.asterisk.org/pub/telephony/sounds/releases/ 13 http://downloads.asterisk.org/pub/telephony/sounds/releases/
14 14
15OWNER= jnemeth@NetBSD.org 15OWNER= jnemeth@NetBSD.org
16HOMEPAGE= http://www.asterisk.org/ 16HOMEPAGE= http://www.asterisk.org/
17COMMENT= The Asterisk Software PBX 17COMMENT= The Asterisk Software PBX
18LICENSE= gnu-gpl-v2 18LICENSE= gnu-gpl-v2
19MAKE_JOBS_SAFE= NO 19MAKE_JOBS_SAFE= NO

cvs diff -r1.65 -r1.66 pkgsrc/comms/asterisk/Attic/distinfo (expand / switch to unified diff)

--- pkgsrc/comms/asterisk/Attic/distinfo 2014/08/28 01:19:12 1.65
+++ pkgsrc/comms/asterisk/Attic/distinfo 2014/09/20 19:12:16 1.66
@@ -1,21 +1,21 @@ @@ -1,21 +1,21 @@
1$NetBSD: distinfo,v 1.65 2014/08/28 01:19:12 jnemeth Exp $ 1$NetBSD: distinfo,v 1.66 2014/09/20 19:12:16 jnemeth Exp $
2 2
3SHA1 (asterisk-11.12.0/asterisk-11.12.0.tar.gz) = 7250958d790d3cd59f85164a53bc224332b59118 3SHA1 (asterisk-11.12.1/asterisk-11.12.1.tar.gz) = b5df9ede712446fdc061b87ae7559a94456d45d0
4RMD160 (asterisk-11.12.0/asterisk-11.12.0.tar.gz) = eab987aefa8fa6ea71c2c551f0de586610cb2317 4RMD160 (asterisk-11.12.1/asterisk-11.12.1.tar.gz) = fa7ddd678926c062716fab8931e741e4a7ae4d9b
5Size (asterisk-11.12.0/asterisk-11.12.0.tar.gz) = 34870073 bytes 5Size (asterisk-11.12.1/asterisk-11.12.1.tar.gz) = 34862194 bytes
6SHA1 (asterisk-11.12.0/asterisk-extra-sounds-en-gsm-1.4.14.tar.gz) = 14403cd023e812565085c8232210b8b439274ecf 6SHA1 (asterisk-11.12.1/asterisk-extra-sounds-en-gsm-1.4.14.tar.gz) = 14403cd023e812565085c8232210b8b439274ecf
7RMD160 (asterisk-11.12.0/asterisk-extra-sounds-en-gsm-1.4.14.tar.gz) = 675fc1f3cedd0e17b62a8285f9f0527783cfb1d3 7RMD160 (asterisk-11.12.1/asterisk-extra-sounds-en-gsm-1.4.14.tar.gz) = 675fc1f3cedd0e17b62a8285f9f0527783cfb1d3
8Size (asterisk-11.12.0/asterisk-extra-sounds-en-gsm-1.4.14.tar.gz) = 4386590 bytes 8Size (asterisk-11.12.1/asterisk-extra-sounds-en-gsm-1.4.14.tar.gz) = 4386590 bytes
9SHA1 (patch-Makefile) = ed581d46026e8e89ed8be374c7085efca19911d2 9SHA1 (patch-Makefile) = ed581d46026e8e89ed8be374c7085efca19911d2
10SHA1 (patch-apps_app__confbridge.c) = c815905994355a19c32e8e3e2eb5dc9f1679eb29 10SHA1 (patch-apps_app__confbridge.c) = c815905994355a19c32e8e3e2eb5dc9f1679eb29
11SHA1 (patch-apps_app__dial.c) = 0f78d2571af88384a2d472ece08bf4b06f9ad211 11SHA1 (patch-apps_app__dial.c) = 0f78d2571af88384a2d472ece08bf4b06f9ad211
12SHA1 (patch-apps_app__followme.c) = a54e08d0dd0b6ff12281d4b7b8447707c1cbe20a 12SHA1 (patch-apps_app__followme.c) = a54e08d0dd0b6ff12281d4b7b8447707c1cbe20a
13SHA1 (patch-apps_app__meetme.c) = 73485931d63b6482aa549ee73ed6a72ec0e5f9a0 13SHA1 (patch-apps_app__meetme.c) = 73485931d63b6482aa549ee73ed6a72ec0e5f9a0
14SHA1 (patch-apps_app__queue.c) = d13a54ba203f182b5d61cf0c2a22f00055e1f358 14SHA1 (patch-apps_app__queue.c) = d13a54ba203f182b5d61cf0c2a22f00055e1f358
15SHA1 (patch-apps_app__skel.c) = e661a53b61d36343c54be7ad9ea6cde6cb10f180 15SHA1 (patch-apps_app__skel.c) = e661a53b61d36343c54be7ad9ea6cde6cb10f180
16SHA1 (patch-apps_app__sms.c) = d89b27a9df04d4da98d562241c07d25d182baefc 16SHA1 (patch-apps_app__sms.c) = d89b27a9df04d4da98d562241c07d25d182baefc
17SHA1 (patch-apps_confbridge_conf__config__parser.c) = 42d5a6e2ce837111d06fa9154c7f66403cb83553 17SHA1 (patch-apps_confbridge_conf__config__parser.c) = 42d5a6e2ce837111d06fa9154c7f66403cb83553
18SHA1 (patch-build__tools_mkpkgconfig) = 2bd3c0e24bc6d721cc234feb19b64a57106fcbe4 18SHA1 (patch-build__tools_mkpkgconfig) = 2bd3c0e24bc6d721cc234feb19b64a57106fcbe4
19SHA1 (patch-channels_chan__motif.c) = db6c97ba02a441633338d492032d78cd86f094f5 19SHA1 (patch-channels_chan__motif.c) = db6c97ba02a441633338d492032d78cd86f094f5
20SHA1 (patch-channels_chan__oss.c) = 0be259a83c4425d08b693a54c43896da039df721 20SHA1 (patch-channels_chan__oss.c) = 0be259a83c4425d08b693a54c43896da039df721
21SHA1 (patch-channels_chan__sip.c) = 61c67e6d7e0a6e27e98614f6d4de15b64c73e7e1 21SHA1 (patch-channels_chan__sip.c) = 61c67e6d7e0a6e27e98614f6d4de15b64c73e7e1