SECURITY update to 1.4.18.1, fixes AST-2008-002 (buffer overflows

in RTP codec payload type handling) and AST-2008-003 (SIP channel
can make a call into the context specified in the general section
of sip.conf).  Affects all Asterisk users with SIP enabled.

This is a security update only, no changes other than these fixes.
This commit is contained in:
sthen 2008-03-19 08:18:10 +00:00
parent 22b3679264
commit b78d620076
2 changed files with 8 additions and 9 deletions

View File

@ -1,9 +1,9 @@
# $OpenBSD: Makefile,v 1.33 2008/03/15 17:41:12 ajacoutot Exp $
# $OpenBSD: Makefile,v 1.34 2008/03/19 08:18:10 sthen Exp $
SHARED_ONLY= Yes
COMMENT-main= open source multi-protocol PBX and telephony toolkit
V= 1.4.18
V= 1.4.18.1
DISTNAME= asterisk-$V
FULLPKGNAME-main= ${DISTNAME}
@ -27,8 +27,7 @@ WANTLIB-main= c crypto m pthread ssl stdc++ termcap z
LIB_DEPENDS-main= popt::devel/popt
MASTER_SITES= http://downloads.digium.com/pub/telephony/asterisk/ \
http://downloads.digium.com/pub/telephony/asterisk/old-releases/
MASTER_SITES= http://downloads.digium.com/pub/telephony/asterisk/releases/
USE_GMAKE= Yes
USE_LIBTOOL= Yes

View File

@ -1,5 +1,5 @@
MD5 (asterisk-1.4.18.tar.gz) = PYsrLvTyApAXcWY7QPGcPQ==
RMD160 (asterisk-1.4.18.tar.gz) = ZRzyMoNWKLGE9HnbTA6AC0vtyA8=
SHA1 (asterisk-1.4.18.tar.gz) = OgJ0iDlVELbr5KCgw3LbM7IESwo=
SHA256 (asterisk-1.4.18.tar.gz) = QgnjzaW+JbWpg0WZCQxKK6R4rLZnChFYF2a0gNhWEI8=
SIZE (asterisk-1.4.18.tar.gz) = 11496828
MD5 (asterisk-1.4.18.1.tar.gz) = oNfuQFSgRSm3ReYN1OdQxA==
RMD160 (asterisk-1.4.18.1.tar.gz) = EAkURlIawc2/fiFCrtsqQV98xgI=
SHA1 (asterisk-1.4.18.1.tar.gz) = KZHpcvPC+MrDhJ+TWa+7DbfnIDo=
SHA256 (asterisk-1.4.18.1.tar.gz) = XtLotm/IrJblFrDd/qBlAS4571HI817WnG18104YDXg=
SIZE (asterisk-1.4.18.1.tar.gz) = 11488923