SECURITY: update to 1.2.19, from maintainer stuart henderson

ASA-2007-013: chan_iax2.c assumes strings are null-terminated without
validating them, potential buffer overrun/information disclosure
This commit is contained in:
jolan 2007-07-02 14:03:34 +00:00
parent f4f8e197e6
commit 994a77a545
3 changed files with 19 additions and 7 deletions

View File

@ -1,7 +1,7 @@
# $OpenBSD: Makefile,v 1.19 2007/05/02 17:29:25 jolan Exp $
# $OpenBSD: Makefile,v 1.20 2007/07/02 14:03:34 jolan Exp $
COMMENT= "open source multi-protocol PBX and telephony toolkit"
DISTNAME= asterisk-1.2.18
DISTNAME= asterisk-1.2.19
CATEGORIES= telephony
MASTER_SITES= http://ftp.digium.com/pub/asterisk/releases/

View File

@ -1,5 +1,5 @@
MD5 (asterisk-1.2.18.tar.gz) = hNFusKlKPaiDy5vWy4o/yg==
RMD160 (asterisk-1.2.18.tar.gz) = Xh5hVtdAmgHcI73L8LGKxuG2xxU=
SHA1 (asterisk-1.2.18.tar.gz) = s1vrY8VNiHftVZpk68qrQDBuHEw=
SHA256 (asterisk-1.2.18.tar.gz) = 8bZGS7rsBHFDVbYUs8esVEz0q39e0FMDrbrpSqUTBAM=
SIZE (asterisk-1.2.18.tar.gz) = 10621790
MD5 (asterisk-1.2.19.tar.gz) = V/zwTrOzRp4WCRMVa7DoHw==
RMD160 (asterisk-1.2.19.tar.gz) = lB3sceSsX5mz8FnwINw7da8CFjs=
SHA1 (asterisk-1.2.19.tar.gz) = MKldiKfH24YFimw9Rw/2eIa8Q4E=
SHA256 (asterisk-1.2.19.tar.gz) = GGogbhexUgYlwqLG906NcC2z9aLkuj0vvp0DJlMKTnc=
SIZE (asterisk-1.2.19.tar.gz) = 10634282

View File

@ -0,0 +1,12 @@
$OpenBSD: patch-contrib_scripts_safe_asterisk,v 1.1 2007/07/02 14:03:34 jolan Exp $
--- contrib/scripts/safe_asterisk.orig Fri May 11 11:31:03 2007
+++ contrib/scripts/safe_asterisk Mon Jul 2 08:55:05 2007
@@ -39,7 +39,7 @@ ulimit -c unlimited
#
# Don't die if stdout/stderr can't be written to
#
-trap '' SIGPIPE
+trap '' PIPE
#
# Run scripts to set any environment variables or do any other system-specific setup needed