Commit Graph

113 Commits

Author SHA1 Message Date
ian
0bc7d2e694 Unbreak chan_unistim, bump. OK sthen@ (maintainer) 2011-04-09 19:16:51 +00:00
sthen
9abb8cd3fa use correct autoconf 2011-03-24 22:40:51 +00:00
ajacoutot
4f1d224b85 Make use of rcexec in rc_start().
ok sthen@ (maintainer)
2011-03-20 15:37:06 +00:00
sthen
6ddd29dca2 update to 1.8.3.2, rerelease due to a problem with one of the fixes in 1.8.3.1. 2011-03-17 21:38:09 +00:00
sthen
0cd58fd2e9 update to 1.8.3.1; fixes AST-2011-003 and AST-2011-004:
unchecked return codes (fdopen, fwrite) causing null pointer
deref / resource exhaustion.

http://downloads.asterisk.org/pub/security/AST-2011-003.html
http://downloads.asterisk.org/pub/security/AST-2011-004.html
2011-03-16 23:27:11 +00:00
ajacoutot
564c909458 Remove now uneeded redirection. 2011-03-09 18:51:48 +00:00
sthen
31288ac0e2 bugfix update to 1.8.3 2011-03-02 13:28:24 +00:00
sthen
a75f35b7f4 SECURITY update to 1.8.2.4 fixes AST-2011-002 buffer overflow
Workaround: add "t38pt_udptl = no" to the general section in sip.conf
(chan_ooh323 is also affected but we don't build that).
2011-03-02 12:53:11 +00:00
sthen
9613b75ab6 SECURITY update (for real this time) to 1.8.2.2; no other changes.
"Due to a failed merge, Asterisk 1.8.2.1 which should have included
the security fix did not. Asterisk 1.8.2.2 contains the the changes
which should have been included in Asterisk 1.8.2.1."  ok ajacoutot@
2011-01-20 21:44:54 +00:00
sthen
9412bacbc5 Cherrypicked diff from svn; fix the internal implementation of htonll/ntohll
which was incorrect and would cause IAX interoperation to break. ok jasper@
2011-01-20 16:26:26 +00:00
sthen
aef236cbb8 SECURITY update to asterisk 1.8.2.1, fixes AST-2011-001 "an issue
when forming an outgoing SIP request while in pedantic mode, which
can cause a stack buffer to be made to overflow if supplied with
carefully crafted caller ID information"

http://downloads.asterisk.org/pub/security/AST-2011-001.html

This is also a major version update to the long-term support
1.8 branch, previous versions of this diff have been tested by
various ports@ readers, thanks for testing.

Please review /usr/local/share/doc/asterisk/UPGRADE.txt
(also note that memory use has increased).

ok ajacoutot@ jasper@
2011-01-19 11:25:16 +00:00
fgsch
e1d81e418e Add rc script taken from the 1.8 update diff sent to ports@ by sthen@.
sthen@ ok.
2011-01-04 22:35:46 +00:00
espie
811d94d9d6 new depends 2010-11-20 19:56:47 +00:00
sthen
462a21e673 update Asterisk to 1.6.2.14 2010-11-16 21:58:52 +00:00
espie
709b054ab9 USE_GROFF=Yes 2010-10-19 07:43:00 +00:00
sthen
858dc57b21 - update Asterisk to 1.6.2.13
- upstream have prevented chan_h323 from building with pwlib>=1.19.0
as it segfaults at startup; disable the h323 flavour for now.
2010-09-19 21:14:05 +00:00
sthen
e8e4be4765 readd missing _ from user/group names in sample config. spotted by Brad. 2010-08-27 00:48:19 +00:00
sthen
6017df3bbb update asterisk to 1.6.2.11, loads of pretty safe bug fixes 2010-08-17 19:53:01 +00:00
sthen
c49f9f900f update to 1.6.2.10, switch to new LIB_DEPENDS etc. 2010-07-25 10:08:03 +00:00
sthen
e2d09616d7 adapt to our new SO_PEERCRED 2010-07-05 22:03:22 +00:00
sthen
e4fd3edfac update to 1.6.2.9; various crash fixes (including one with dtmf detection) 2010-06-18 22:10:44 +00:00
sthen
43c83759da Don't ulimit -n $MAXFILES if $MAXFILES is undefined. Spotted by fgsch@ 2010-06-07 20:03:55 +00:00
sthen
0551c55946 update to 1.6.2.8 2010-06-02 13:18:56 +00:00
sthen
832d7dc996 Update to 1.6.2.7; various bugs fixed including some DTMF problems,
potential crashes in chan_sip, and a chan_local deadlock.
2010-05-04 23:02:58 +00:00
sthen
c16616608b Add to UPGRADE-1.6.txt telling people that insecure=very (deprecated for
>3 years and triggering a warning in the logs) has been removed in this
version.
2010-05-04 14:41:48 +00:00
sthen
10f83ce23c - s/autoconf/gnu in CONFIGURE_STYLE to prevent running autoconf twice
- remove stray ' in pre-configure target, oops
2010-05-04 12:42:33 +00:00
sthen
8bb9d1d01a - patch icon paths in the html docs (it won't help unless you have latex2html
installed, which I won't add as a dependency just for this, but for people who
already have it, it makes the docs look nicer).

- install the sample features.conf which was @comment'ed.
2010-05-03 21:00:34 +00:00
sthen
725df891d8 Use -pthread when checking for pthread_rwlock_timedwrlock.
No change yet, but means that the function can be used when it's
added to pthread. From Brad.
2010-04-14 08:23:38 +00:00
sthen
d9010697e4 Improve the sample dialplan;
- use ${FILTER(...)} to only permit digits; dialplan injection is bad, mmmkay
- ConfBridge sample based on information from Diego Casati
2010-04-10 12:45:35 +00:00
sthen
82aee579ee fix issues with unitialized address family; one when outboundproxy
is used, reported by Alexey Suslikov, one with dnsmgr when the looked-up
IP address of a peer changes (bug 15827).
2010-04-09 11:05:55 +00:00
sthen
dd9ff6c628 Update Asterisk to 1.6.2.6, which will be the only of the 1.6.x branches
receiving most updates in the future; notably, compared to the in-tree
version, this adds a portable (pthread-based) clocking source rather
than relying on a non-portable zaptel timer.

Main functions tested and working well for myself and Diego Casati (thanks!)
Note that ConfBridge (added since 1.6.0) may need more work
2010-04-08 16:18:00 +00:00
sthen
acb7670ef8 use autoconf 2.63 2010-04-02 23:18:53 +00:00
sthen
622d335805 add a patch from upstream, fixing build with newer sqlite 2010-04-02 19:28:45 +00:00
sthen
796c7bf27e update to 1.6.0.26 + a patch from a ticket upstream. 2010-03-25 12:01:47 +00:00
ajacoutot
cd6c6dcd9c Move to using h323plus and ptlib. 2010-03-23 21:16:53 +00:00
espie
6fdae71967 simplify: we can set PKGNAME-main here (avoid future warning for FULLPKGPATH) 2010-02-26 18:42:12 +00:00
sthen
bb6fa8ee6c - SECURITY update to 1.6.0.25, fixing AST-2010-003. if you use ACL rules
with something like 'deny 0.0.0.0/0' then this affects you. workaround:
'deny 0.0.0.0/0.0.0.0'

- fix fullpkgpath's for the subpackages, they were including the flavour
and shouldn't have - fixes problems with dpb3 found by naddy. add @pkgpath
markers relating to this fix.

ok naddy@
(reminder, ports is not fully open, do not commit without specific permission)
2010-02-26 12:44:14 +00:00
sthen
86862f6681 SECURITY update to 1.6.0.22, fixing CVE-2010-0441, an unauthenticated
crash in SIP (and only this, thanks to Asterisk developers for pushing
security fixes separately from other changes).

Does not affect Asterisk 1.4 in -stable (it's in the T.38 support,
which was added in 1.6).

ok ajacoutot@
2010-02-03 00:18:44 +00:00
sthen
cd70bb9611 Update to 1.6.0.21, various bugs (including some crashes) fixed.
This also has a small change in CDR generation, it's been well tested
upstream but still this can be a touchy area to change, so it's
going in now so the first OpenBSD release with Asterisk 1.6
packages has the change already made.

ok ajacoutot@
2010-01-17 13:18:36 +00:00
fgsch
f8eda496b9 Allow asterisk to change the vm password by tweaking the perms. Bump.
sthen@ ok.
2009-12-21 00:19:02 +00:00
sthen
b848cd9381 update to 1.6.0.20 2009-12-19 00:09:37 +00:00
fgsch
056c7fbd6d install chan_h323.so and put h323 fragment after confdir is created.
remove extraunexec and bump. sthen@ ok.
2009-12-14 04:49:24 +00:00
sthen
5738d5ec6f missing an app_conference @conflict 2009-12-13 12:23:57 +00:00
sthen
16b6df18f8 Major version update to 1.6.0.19. For more information about the
upgrade, see /usr/local/share/doc/asterisk/UPGRADE-1.6.txt

Particular thanks to fgsch@, ian@ and Michiel van Baak for help and testing.
2009-12-13 12:11:29 +00:00
sthen
e61f39e54c SECURITY update to 1.4.27.1 for unauthenticated remote crash in RTP.
http://downloads.digium.com/pub/security/AST-2009-010.html
2009-11-30 22:51:39 +00:00
sthen
c103ca4da3 update to 1.4.27, I'll soon be committing a 1.6.0 version but first let's
have the latest 1.4 for people who don't want to move yet.
2009-11-19 16:17:04 +00:00
sthen
e6279a7a86 Switch to using supplied bootstrap.sh (plus a patch to stop it
from overriding supplied AUTOfoo_VERSION variables) instead of the
custom Makefile target to run autoconf.

No package change -> no bump. Discussed with fgsch in relation
to 1.6, but it makes sense here too.
2009-11-04 21:51:49 +00:00
sthen
95fdcebf42 SECURITY update to 1.4.26.3;
AST-2009-008: SIP responses expose valid usernames
AST-2009-009: Cross-site AJAX request (ajamdemo.html/prototype.js)
2009-11-04 21:49:42 +00:00
sthen
7737a925e8 Update to 1.4.26.2; mitigates IAX2 denial of service AST-2009-006.
This makes an non-backwards-compatible change to the IAX2 protocol.
It can be disabled with various options, but is on by default.

IAX2 users, read http://downloads.digium.com/pub/security/AST-2009-006.html
and the new /usr/local/share/doc/asterisk/IAX2-security.pdf (available
online in http://svn.digium.com/svn/asterisk/tags/1.4.26.2/doc/).
2009-09-04 00:46:35 +00:00
sthen
755a20c358 Distfiles rerolled with different music-on-hold files.
See http://blogs.digium.com/2009/08/18/asterisk-music-on-hold-changes/
2009-08-18 22:09:40 +00:00