openbsd-ports/telephony/asterisk/distinfo
sthen 42dfce2326 SECURITY update to asterisk 1.8.11.1, fixing:
* A permission escalation vulnerability in Asterisk Manager Interface.  This
   would potentially allow remote authenticated users the ability to execute
   commands on the system shell with the privileges of the user running the
   Asterisk application.

 * A heap overflow vulnerability in the Skinny Channel driver.  The keypad
   button message event failed to check the length of a fixed length buffer
   before appending a received digit to the end of that buffer.  A remote
   authenticated user could send sufficient keypad button message events that
   the buffer would be overrun.

 * A remote crash vulnerability in the SIP channel driver when processing UPDATE
   requests.  If a SIP UPDATE request was received indicating a connected line
   update after a channel was terminated but before the final destruction of the
   associated SIP dialog, Asterisk would attempt a connected line update on a
   non-existing channel, causing a crash.
2012-04-23 21:35:58 +00:00

36 lines
2.6 KiB
Plaintext

MD5 (asterisk-1.8.11.1.tar.gz) = /g6HhPyfAXyzYHC2Mc7l2g==
MD5 (asterisk-core-sounds-en-gsm-1.4.22.tar.gz) = KpmkXAZ1E1JVvGV5axL3xg==
MD5 (asterisk-core-sounds-en-gsm-1.4.22.tar.gz.sha1) = HYpcpyg7903kHE+wo2ECgw==
MD5 (asterisk-extra-sounds-en-gsm-1.4.11.tar.gz) = VHnLTLgdZ4ME2W815JM6EQ==
MD5 (asterisk-extra-sounds-en-gsm-1.4.11.tar.gz.sha1) = euKCSaScLc2s72YD1p39Zg==
MD5 (asterisk-moh-opsound-wav-2.03.tar.gz) = gnfixpP9BWdzscFeTVIHfQ==
MD5 (asterisk-moh-opsound-wav-2.03.tar.gz.sha1) = AR+k3J/jXcPTTtVXuwQmPw==
RMD160 (asterisk-1.8.11.1.tar.gz) = XxzJRJwkPla+TXeLwmLlzZMaop4=
RMD160 (asterisk-core-sounds-en-gsm-1.4.22.tar.gz) = AZMdzpG7rRgOiu/Do8ovCaBv4cg=
RMD160 (asterisk-core-sounds-en-gsm-1.4.22.tar.gz.sha1) = joofR4GGUm1IHe89S9oTI0Bq9Ww=
RMD160 (asterisk-extra-sounds-en-gsm-1.4.11.tar.gz) = aBcMdp1znWtbNbAPmZrWu/h2+fY=
RMD160 (asterisk-extra-sounds-en-gsm-1.4.11.tar.gz.sha1) = r2FBQo0Mel1qCQPV61rbSFUnkNY=
RMD160 (asterisk-moh-opsound-wav-2.03.tar.gz) = lWaXSoNgUeCPUUEt5QjZK/O+fgI=
RMD160 (asterisk-moh-opsound-wav-2.03.tar.gz.sha1) = D+hFjrIugSleLHkzLWEgvA7kjfM=
SHA1 (asterisk-1.8.11.1.tar.gz) = QBvn+ZZlvEI8uv2K5MDX12dps9s=
SHA1 (asterisk-core-sounds-en-gsm-1.4.22.tar.gz) = D5xlxz37KJGWcng50puO3TExsBw=
SHA1 (asterisk-core-sounds-en-gsm-1.4.22.tar.gz.sha1) = QV8/mpheMVHyXJYbazVk0OfC/rk=
SHA1 (asterisk-extra-sounds-en-gsm-1.4.11.tar.gz) = hpL6YUI7R2nci/p4+vntXveiWbk=
SHA1 (asterisk-extra-sounds-en-gsm-1.4.11.tar.gz.sha1) = 7mrmsEnCtwUNV0J+RJd/3sI3wYE=
SHA1 (asterisk-moh-opsound-wav-2.03.tar.gz) = 9A/W6gPf6Ncq2iVAsiiL/cAGOB0=
SHA1 (asterisk-moh-opsound-wav-2.03.tar.gz.sha1) = y7b1cl1V/jLKmqKzM+N9YSXQ9Ec=
SHA256 (asterisk-1.8.11.1.tar.gz) = LJ7Z8Tle92RryYdp3GlnWFJXJ23GG1hYD7HgKAw6mO4=
SHA256 (asterisk-core-sounds-en-gsm-1.4.22.tar.gz) = eRdRl6ZRwlu2KYjnIQI+m7cRx+7yisouy6KR1D7j5mc=
SHA256 (asterisk-core-sounds-en-gsm-1.4.22.tar.gz.sha1) = ye/FmyBQU27CFiXULLsvWqivxjKK8NIIvq0rWJ8rRzI=
SHA256 (asterisk-extra-sounds-en-gsm-1.4.11.tar.gz) = 1fAxzDHr6+yZzj/PRP+Ue9eye16VZaezphhcLRvaCUw=
SHA256 (asterisk-extra-sounds-en-gsm-1.4.11.tar.gz.sha1) = a0BErk9wQ3/hT5gPUVL6uk6iqitdhAKMAhOrL2XHSR8=
SHA256 (asterisk-moh-opsound-wav-2.03.tar.gz) = RJ+4ENFlAsMFL+3wL353s2IGrFoUXz2s9Bd4Q6L8tTg=
SHA256 (asterisk-moh-opsound-wav-2.03.tar.gz.sha1) = Y8VUFsoRQmGrGvT9EVIyLy7GnZGrw0vEzufTKByuDZc=
SIZE (asterisk-1.8.11.1.tar.gz) = 25243311
SIZE (asterisk-core-sounds-en-gsm-1.4.22.tar.gz) = 2042362
SIZE (asterisk-core-sounds-en-gsm-1.4.22.tar.gz.sha1) = 84
SIZE (asterisk-extra-sounds-en-gsm-1.4.11.tar.gz) = 3349898
SIZE (asterisk-extra-sounds-en-gsm-1.4.11.tar.gz.sha1) = 85
SIZE (asterisk-moh-opsound-wav-2.03.tar.gz) = 15359473
SIZE (asterisk-moh-opsound-wav-2.03.tar.gz.sha1) = 79