From 548c160f867e3f732c7b91540cf9605f5e66b26a Mon Sep 17 00:00:00 2001 From: sthen Date: Wed, 2 Jan 2013 22:33:43 +0000 Subject: [PATCH] update to Asterisk 10.11.1, fixing: AST-2012-014: crashes due to large stack allocations in TCP; affects remote unauthenticated SIP *over TCP* and remote authenticated XMPP/HTTP connections. AST-2012-015: DoS through resource consumption by exploiting device state caching; exploitable if anonymous calls are permitted. --- telephony/asterisk/Makefile | 4 ++-- telephony/asterisk/distinfo | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/telephony/asterisk/Makefile b/telephony/asterisk/Makefile index b883c47d32d..f1383d0bbf8 100644 --- a/telephony/asterisk/Makefile +++ b/telephony/asterisk/Makefile @@ -1,9 +1,9 @@ -# $OpenBSD: Makefile,v 1.166 2012/12/11 14:46:41 sthen Exp $ +# $OpenBSD: Makefile,v 1.167 2013/01/02 22:33:43 sthen Exp $ SHARED_ONLY= Yes COMMENT-main= open source multi-protocol PBX and telephony toolkit -VER= 10.11.0 +VER= 10.11.1 DISTNAME= asterisk-${VER:S/beta/-beta/:S/rc/-rc/} PKGNAME-main= asterisk-${VER} diff --git a/telephony/asterisk/distinfo b/telephony/asterisk/distinfo index cde7cd5fe7c..03d8ebfbd18 100644 --- a/telephony/asterisk/distinfo +++ b/telephony/asterisk/distinfo @@ -1,2 +1,2 @@ -SHA256 (asterisk-10.11.0.tar.gz) = 9YC0o0H37vWh0lu1/OQquez/44isGxigXBmOmUUjcTE= -SIZE (asterisk-10.11.0.tar.gz) = 25095528 +SHA256 (asterisk-10.11.1.tar.gz) = yaZjdkNP1BDriynqxdeWoxw4hgxPMQBZsjqcnQ5ATwc= +SIZE (asterisk-10.11.1.tar.gz) = 25090000