Commit Graph

128 Commits

Author SHA1 Message Date
sthen
62883bdc32 Minor security update to 1.4.24.1 for AST-2009-003 "SIP responses
expose valid usernames". This update changes "alwaysauthreject" to
return the same response for invalid username as it does for invalid
password.
2009-04-02 19:37:25 +00:00
sthen
a1454f43c3 maintenance update to spandsp-0.0.6pre7, from Brad 2009-04-01 16:01:49 +00:00
sthen
7f827346dd maintenance update to 1.4.24 2009-03-29 22:23:35 +00:00
sthen
8504e3d898 SECURITY; patch AST-2009-002, remote *unauthenticated* crash in SIP
where the "pedantic" option is enabled (disabled by default).

Backported rather than updated until I sort out the H323 autoconf
breakage in newer versions.
2009-03-10 21:12:37 +00:00
sthen
c4f4ac6629 update to 0.0.6pre4, from Brad (maintainer) 2009-03-06 17:02:15 +00:00
sthen
cdf0161dd3 tidy MASTER_SITES for some distfiles I mirror. no bump. 2009-02-18 14:06:45 +00:00
bluhm
17e6b521ad update to p5-Net-SIP 0.53 2009-01-27 21:43:11 +00:00
sthen
ca074f9466 SECURITY update to 1.4.22.2; updated fix for CVE-2009-0041 in IAX 2009-01-24 11:22:26 +00:00
ajacoutot
4edab7438d - sync WANTLIB+PLIST after latest pwlib changes 2009-01-17 14:14:14 +00:00
sthen
3fc682ab7e better license marker; asterisk-core-sounds is now available under
CC-BY-SA. bump not necessary.
2009-01-10 00:58:15 +00:00
sthen
baaf3b97ba SECURITY update to 1.4.22.1, fixing CVE-2009-0041: remote unauthenticated
users with access to the IAX port can use it to verify validity of usernames.
No other code changes in this version.

While there, remove spurious @user from PLIST.
2009-01-08 21:04:02 +00:00
bluhm
22df7c0f3c update to p5-Net-SIP 0.52
ok bernd@
2009-01-07 17:27:19 +00:00
bernd
12c085e70e Update to p5-Net-SIP-0.50.
ok bluhm@ (MAINTAINER)
2008-12-10 09:35:45 +00:00
naddy
a57993cf08 Change "${SYSCONFDIR}" to "/etc" for files that are *always* in the
latter location.
2008-10-28 15:21:48 +00:00
jasper
8e2ff73adc - update for "Trial of the BSD Knights"
ok ian@ (MAINTAINER)
2008-10-24 15:49:40 +00:00
sthen
f43d1b86cc Update for Asterisk 1.4.22, noticed by naddy and sturm. 2008-10-13 13:02:40 +00:00
sthen
7dadcbac78 maintenance update to 1.4.22; many fixes. 2008-10-07 09:57:52 +00:00
bluhm
accf0a6cec - update to p5-Net-SIP 0.49
ok sturm
2008-10-02 23:00:41 +00:00
ajacoutot
71d81e2e51 - sanitize STDCCFLAGS/CFLAGS
- add -fPIC unconditionally (requested by naddy@) by adding it to
unix.mak (in pwlib) which get sourced by the other ports

feedback from and ok naddy@, thanks!
2008-09-08 17:17:10 +00:00
sthen
2861b10c40 SECURITY update fixing several problems in IAX, both remotely
exploitable without authentication.

AST-2008-010: Asterisk IAX 'POKE' resource exhaustion (DoS)
AST-2008-011: Traffic amplification in IAX2, 40->1040 bytes
2008-07-23 08:57:10 +00:00
bluhm
f60d9dcb07 update to 0.46
ok sturm
2008-07-18 16:57:57 +00:00
brad
d8dab635b1 Update to SpanDSP 0.0.5pre4.
"it looks ok" jdixon@
2008-07-12 05:26:04 +00:00
sthen
cb6bf906d5 - bugfix update to 1.4.21.1, fixing a fairly major problem
introduced in 1.4.21 by correcting the order of lock and unlock
in a deadlock avoidance macro... No other changes. Not security,
but if you're running 1.4.21, you definitely want this.

- regen PLIST to remove @bin from a symlink.
2008-06-30 20:03:49 +00:00
todd
a5639e1a3e bump pkgname after the last commit, reminded by Pierre Riteau 2008-06-18 21:41:42 +00:00
todd
e757d71ff3 initialize the semaphore prior to code that might terminate early considering
pjsua destroys the semaphore unconditionally
found through exercising new codepaths on macppc
ok deanna@
2008-06-18 21:16:39 +00:00
sthen
d57b2a9a52 Update Asterisk to 1.4.21, lots of quality-control fixes
ok ian
2008-06-14 16:00:10 +00:00
brad
dc528b7d0f remove MAINTAINER.
ok MAINTAINER
2008-06-13 19:28:55 +00:00
brad
affbcb281c upgrade to libosip2 2.2.2
ok markus@
2008-06-13 03:33:06 +00:00
ajacoutot
2d07ff2c0c - fix PKGNAME
"looks good" espie@
2008-06-04 13:05:13 +00:00
sthen
fdf610d6d7 - speex needs to be at least 1.2beta3 since the library was
split in two: add pkgspec, bump -speex package version

- adjust FULLPKGNAME handling so overrides can be shown clearly
at the top of the Makefile

- add space before assignment operator "FULLPKGNAME$i=" to avoid
potential ambiguity with bad values of $i

speex problem reported by jolan@, thanks!
2008-06-02 23:33:51 +00:00
sthen
e1ead9579e update to 1.4.20.1; thanks to Pedro la Peu for additional testing. 2008-05-27 22:14:34 +00:00
sthen
f400d3023f clean whitespace (spaces->tabs); "cvs di -w" shows no change 2008-05-27 20:56:12 +00:00
sthen
ecd760054c upgrade to new version and update license markers (LGPLv2/GPLv2). from Brad. 2008-05-27 20:46:54 +00:00
ajacoutot
9b89accee8 - fix WANTLIB after pwlib FLAVORs merge
- bump
2008-05-22 19:27:04 +00:00
sthen
0074d5ea7d Update to 1.4.19.2, fixing an IAX performance problem introduced
by the security fix in the previous update. No change to other code.
Non-IAX users are unaffected.
2008-05-13 23:49:57 +00:00
sthen
f950962e0a update for 4.3; ok ian a while ago. 2008-05-01 08:18:35 +00:00
sthen
4cef9166f0 +spandsp 2008-04-29 11:56:19 +00:00
sthen
1059d440dc Import SpanDSP:
SpanDSP is a library of DSP functions for telephony, in the 8000 sample
per second world of E1s, T1s, and higher order PCM channels. It contains
low level functions, such as basic filters. It also contains higher
level functions, such as cadenced supervisory tone detection, and a
complete software FAX machine.  The software has been designed to avoid
intellectual property issues, using mature techniques where all relevant
patents have expired. See the file DueDiligence for important
information about these intellectual property issues.

from Brad; tested with his work-in-progress CallWeaver.
2008-04-29 11:55:18 +00:00
sthen
03a107191f SECURITY update, fixes remote amplification attack in IAX.
http://downloads.digium.com/pub/security/AST-2008-006.html

ok ian@
2008-04-23 07:04:09 +00:00
todd
7b15f2f4b8 +iaxmodem 2008-04-21 03:50:30 +00:00
todd
1d9e28be19 iaxmodem 1.1.0
IAXmodem is a software modem written in C that uses an IAX channel
(commonly provided by an Asterisk PBX system) instead of a traditional
phone line and uses a DSP library instead of DSP hardware chipsets.

IAXmodem was originally conceived to function as a fax modem usable
with HylaFAX, and it does that well. However IAXmodem also has been
known to function with mgetty+sendfax and efax.

.. much cleanup from my earlier verisions, thanks brad@
2008-04-21 03:49:22 +00:00
ian
949f36cd49 Add asterisk-openbsd-moh 2008-04-10 22:44:49 +00:00
ian
1de6238ec6 Play OpenBSD songs for Asterisk Music-On-Hold; idea indirectly from
mbalmer, DESCR wording vetted & improved by deraadt@, OK sthen@
2008-04-10 22:41:41 +00:00
sthen
7c7f03755a update to 1.4.19
ok ian@
2008-04-02 23:18:11 +00:00
ian
b38df514fa += gsutil 2008-03-20 19:01:41 +00:00
ian
9ea200f654 dump/restore Grandstream device configurations, ok sthen@ 2008-03-20 18:59:15 +00:00
sthen
b78d620076 SECURITY update to 1.4.18.1, fixes AST-2008-002 (buffer overflows
in RTP codec payload type handling) and AST-2008-003 (SIP channel
can make a call into the context specified in the general section
of sip.conf).  Affects all Asterisk users with SIP enabled.

This is a security update only, no changes other than these fixes.
2008-03-19 08:18:10 +00:00
ajacoutot
4bebb7f3ca - make the h323 FLAVOR build correctly with new pwlib/h323
- add a pre-build target so that we can remove IS_INTERACTIVE
(from sthen@)

ok sthen@
2008-03-15 17:41:12 +00:00
ajacoutot
2791facafa - upgrade from 1.4.14 to 1.4.5v0 (!)
- make it compile with new pwlib
- add some documentation
2008-03-15 17:40:38 +00:00
simon
d91361239f fix category and bump, found with pkg_mgr
ok landry@
2008-02-09 00:31:52 +00:00