[pkgsrc/trunk]: pkgsrc/comms/asterisk Update to asterisk 1.2.13

[mjl <mjl%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/cb7c2c693363
branches:  trunk
changeset: 520334:cb7c2c693363
user:      mjl <mjl%pkgsrc.org@localhost>
date:      Thu Oct 19 14:02:07 2006 +0000

description:
Update to asterisk 1.2.13

This release contains a fix for a security vulnerability recently
found in the chan_skinny channel driver (for Cisco SCCP phones).
This vulnerability would enable an attacker to remotely execute
code as the system user running Asterisk (frequently 'root').
The exploit does not require that the skinny.conf contain any
valid phone entries, only that chan_skinny is loaded and operational.

This release also contains a number of bug fixes, and some improvements
to the chan_sip channel driver (for SIP devices) to mitigate the impacts
of a certain class of denial-of-service attacks that have recently been
published.

All Asterisk 1.2 users are urged to update to this release if they use
the chan_skinny channel driver, or to stop loading it if it is not
needed ('noload=>chan_skinny.so' in modules.conf will cause this behavior).

diffstat:

 comms/asterisk/Makefile |  4 ++--
 comms/asterisk/distinfo |  8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diffs (28 lines):

diff -r ac96e09d8623 -r cb7c2c693363 comms/asterisk/Makefile
--- a/comms/asterisk/Makefile   Thu Oct 19 14:01:46 2006 +0000
+++ b/comms/asterisk/Makefile   Thu Oct 19 14:02:07 2006 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.32 2006/09/13 09:28:35 mjl Exp $
+# $NetBSD: Makefile,v 1.33 2006/10/19 14:02:07 mjl Exp $
 
-DISTNAME=      asterisk-1.2.12.1
+DISTNAME=      asterisk-1.2.13
 CATEGORIES=    comms net audio
 MASTER_SITES=  http://ftp.digium.com/pub/asterisk/ \
                http://ftp.digium.com/pub/asterisk/old-releases/
diff -r ac96e09d8623 -r cb7c2c693363 comms/asterisk/distinfo
--- a/comms/asterisk/distinfo   Thu Oct 19 14:01:46 2006 +0000
+++ b/comms/asterisk/distinfo   Thu Oct 19 14:02:07 2006 +0000
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.20 2006/09/16 15:29:35 hira Exp $
+$NetBSD: distinfo,v 1.21 2006/10/19 14:02:07 mjl Exp $
 
-SHA1 (asterisk-1.2.12.1.tar.gz) = 6352ca330b8fa0ae9eb0816272070a1bce58c93b
-RMD160 (asterisk-1.2.12.1.tar.gz) = 9950eea63e03ffd5845f6a34f46680eec5a0a53b
-Size (asterisk-1.2.12.1.tar.gz) = 10576676 bytes
+SHA1 (asterisk-1.2.13.tar.gz) = d2ec77e08f512a3fa11fd8639a7fe629a46ed242
+RMD160 (asterisk-1.2.13.tar.gz) = 7cf9e00a0697b16891b463345c64a615c30015a3
+Size (asterisk-1.2.13.tar.gz) = 10584113 bytes
 SHA1 (patch-aa) = e457617cb3fbec6a67971258af145cc25f0ca03e
 SHA1 (patch-ab) = 1bdae0ff206b63fe63373a307ecd23859c10cb79
 SHA1 (patch-ac) = 4f783699c7d701030788646f8b961fa9245dc127