Upgrade to 1.2.22 to fix several remote exploits, from Stuart, tested by me

This commit is contained in:
ian 2007-07-19 01:31:27 +00:00
parent 21157cc553
commit fab7c3a824
4 changed files with 13 additions and 25 deletions

View File

@ -1,7 +1,7 @@
# $OpenBSD: Makefile,v 1.20 2007/07/02 14:03:34 jolan Exp $
# $OpenBSD: Makefile,v 1.21 2007/07/19 01:31:27 ian Exp $
COMMENT= "open source multi-protocol PBX and telephony toolkit"
DISTNAME= asterisk-1.2.19
COMMENT= open source multi-protocol PBX and telephony toolkit
DISTNAME= asterisk-1.2.22
CATEGORIES= telephony
MASTER_SITES= http://ftp.digium.com/pub/asterisk/releases/

View File

@ -1,5 +1,5 @@
MD5 (asterisk-1.2.19.tar.gz) = V/zwTrOzRp4WCRMVa7DoHw==
RMD160 (asterisk-1.2.19.tar.gz) = lB3sceSsX5mz8FnwINw7da8CFjs=
SHA1 (asterisk-1.2.19.tar.gz) = MKldiKfH24YFimw9Rw/2eIa8Q4E=
SHA256 (asterisk-1.2.19.tar.gz) = GGogbhexUgYlwqLG906NcC2z9aLkuj0vvp0DJlMKTnc=
SIZE (asterisk-1.2.19.tar.gz) = 10634282
MD5 (asterisk-1.2.22.tar.gz) = Hg8lqZFMH8jJM5oaQUEZvg==
RMD160 (asterisk-1.2.22.tar.gz) = HrHak+y2FMStQHdcIvqTeE7dZeg=
SHA1 (asterisk-1.2.22.tar.gz) = A/hY2AX4JbGfUbmgnKmMoS9xPIM=
SHA256 (asterisk-1.2.22.tar.gz) = r3Tj1ArOJPbI0sqrU/9C+0cFbPR0QmXvE3I4lgIcFxY=
SIZE (asterisk-1.2.22.tar.gz) = 10642597

View File

@ -1,6 +1,6 @@
$OpenBSD: patch-asterisk_c,v 1.9 2007/05/02 17:29:25 jolan Exp $
--- asterisk.c.orig Mon Apr 9 03:49:06 2007
+++ asterisk.c Wed Apr 25 09:17:17 2007
$OpenBSD: patch-asterisk_c,v 1.10 2007/07/19 01:31:28 ian Exp $
--- asterisk.c.orig Thu Jun 28 00:22:13 2007
+++ asterisk.c Wed Jul 18 00:40:27 2007
@@ -454,7 +454,7 @@ int ast_safe_system(const char *s)
/* Close file descriptors and launch system command */
for (x = STDERR_FILENO + 1; x < 4096; x++)
@ -10,7 +10,7 @@ $OpenBSD: patch-asterisk_c,v 1.9 2007/05/02 17:29:25 jolan Exp $
_exit(1);
} else if (pid > 0) {
for(;;) {
@@ -2043,7 +2043,7 @@ int main(int argc, char *argv[])
@@ -2046,7 +2046,7 @@ int main(int argc, char *argv[])
int num;
int is_child_of_nonroot=0;
char *buf;
@ -19,7 +19,7 @@ $OpenBSD: patch-asterisk_c,v 1.9 2007/05/02 17:29:25 jolan Exp $
/* Remember original args for restart */
if (argc > sizeof(_argv) / sizeof(_argv[0]) - 1) {
@@ -2171,6 +2171,8 @@ int main(int argc, char *argv[])
@@ -2174,6 +2174,8 @@ int main(int argc, char *argv[])
argv[x] = argv[0] + 10;
}
}

View File

@ -1,12 +0,0 @@
$OpenBSD: patch-contrib_scripts_safe_asterisk,v 1.1 2007/07/02 14:03:34 jolan Exp $
--- contrib/scripts/safe_asterisk.orig Fri May 11 11:31:03 2007
+++ contrib/scripts/safe_asterisk Mon Jul 2 08:55:05 2007
@@ -39,7 +39,7 @@ ulimit -c unlimited
#
# Don't die if stdout/stderr can't be written to
#
-trap '' SIGPIPE
+trap '' PIPE
#
# Run scripts to set any environment variables or do any other system-specific setup needed