pkgsrc-Bugs archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
PR/58978 CVS commit: pkgsrc/comms/asterisk21
The following reply was made to PR pkg/58978; it has been noted by GNATS.
From: "John Nemeth" <jnemeth%netbsd.org@localhost>
To: gnats-bugs%gnats.NetBSD.org@localhost
Cc:
Subject: PR/58978 CVS commit: pkgsrc/comms/asterisk21
Date: Mon, 2 Jun 2025 04:37:03 +0000
Module Name: pkgsrc
Committed By: jnemeth
Date: Mon Jun 2 04:37:03 UTC 2025
Modified Files:
pkgsrc/comms/asterisk21: Makefile PLIST distinfo
pkgsrc/comms/asterisk21/patches: patch-configure patch-configure.ac
Log Message:
Upgrade to Asterisk 21.9.1:
pkgsrc changes:
- add gsed to USE_TOOLS
- appease pkglint somewhat
- PR/58978 -- comms/asterisk build fails if prefix is not /usr/pkg
## Change Log for Release asterisk-21.9.1
### Links:
- [Full ChangeLog](https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-21.9.1.html)
- [GitHub Diff](https://github.com/asterisk/asterisk/compare/21.9.0...21.9.1)
### Summary:
- Commits: 2
- Commit Authors: 1
- Issues Resolved: 0
- Security Advisories Resolved: 2
- [GHSA-2grh-7mhv-fcfw](https://github.com/asterisk/asterisk/security/advisories/GHSA-2grh-7mhv-fcfw): Using malformed From header can forge identity with ";" or NULL in name portion
- [GHSA-c7p6-7mvq-8jq2](https://github.com/asterisk/asterisk/security/advisories/GHSA-c7p6-7mvq-8jq2): cli_permissions.conf: deny option does not work for disallowing shell commands
### User Notes:
- #### asterisk.c: Add option to restrict shell access from remote consoles.
A new asterisk.conf option 'disable_remote_console_shell' has
been added that, when set, will prevent remote consoles from executing
shell commands using the '!' prefix.
Resolves: #GHSA-c7p6-7mvq-8jq2
### Commit Authors:
- George Joseph: (2)
## Issue and Commit Detail:
### Closed Issues:
- !GHSA-2grh-7mhv-fcfw: Using malformed From header can forge identity with ";" or NULL in name portion
- !GHSA-c7p6-7mvq-8jq2: cli_permissions.conf: deny option does not work for disallowing shell commands
### Commits By Author:
- #### George Joseph (2):
- res_pjsip_messaging.c: Mask control characters in received From display name
- asterisk.c: Add option to restrict shell access from remote consoles.
To generate a diff of this commit:
cvs rdiff -u -r1.14 -r1.15 pkgsrc/comms/asterisk21/Makefile
cvs rdiff -u -r1.4 -r1.5 pkgsrc/comms/asterisk21/PLIST
cvs rdiff -u -r1.5 -r1.6 pkgsrc/comms/asterisk21/distinfo
cvs rdiff -u -r1.2 -r1.3 pkgsrc/comms/asterisk21/patches/patch-configure
cvs rdiff -u -r1.1 -r1.2 pkgsrc/comms/asterisk21/patches/patch-configure.ac
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Home |
Main Index |
Thread Index |
Old Index