CVS commit: pkgsrc/comms/asterisk18

To: pkgsrc-changes%NetBSD.org@localhost
Subject: CVS commit: pkgsrc/comms/asterisk18
From: "John Nemeth" <jnemeth%netbsd.org@localhost>
Date: Mon, 19 May 2025 04:13:39 +0000

Module Name:    pkgsrc
Committed By:   jnemeth
Date:           Mon May 19 04:13:39 UTC 2025

Modified Files:
        pkgsrc/comms/asterisk18: Makefile PLIST distinfo
Removed Files:
        pkgsrc/comms/asterisk18/patches: patch-main_config.c

Log Message:
Update to Asterisk 18.26.1

## Change Log for Release asterisk-18.26.1

### Links:

 - [Full ChangeLog](https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-18.26.1.md)
 - [GitHub Diff](https://github.com/asterisk/asterisk/compare/18.26.0...18.26.1)

### Summary:

- Commits: 1
- Commit Authors: 1
- Issues Resolved: 0
- Security Advisories Resolved: 1
  - [GHSA-33x6-fj46-6rfh](https://github.com/asterisk/asterisk/security/advisories/GHSA-33x6-fj46-6rfh): Path traversal via AMI ListCategories allows access to outside files

### User Notes:

- #### manager.c: Restrict ListCategories to the configuration directory.
  The ListCategories AMI action now restricts files to the
  configured configuration directory.

### Commit List:

-  manager.c: Restrict ListCategories to the configuration directory.

### Commit Details:

#### manager.c: Restrict ListCategories to the configuration directory.
  Author: Ben Ford
  Date:   2024-12-17

  When using the ListCategories AMI action, it was possible to traverse
  upwards through the directories to files outside of the configured
  configuration directory. This action is now restricted to the configured
  directory and an error will now be returned if the specified file is
  outside of this limitation.

  Resolves: #GHSA-33x6-fj46-6rfh

  UserNote: The ListCategories AMI action now restricts files to the
  configured configuration directory.

## Change Log for Release asterisk-18.26.0

### Links:

 - [Full ChangeLog](https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-18.26.0.md)
 - [GitHub Diff](https://github.com/asterisk/asterisk/compare/18.25.0...18.26.0)

### Summary:

- Commits: 28
- Commit Authors: 7
- Issues Resolved: 13
- Security Advisories Resolved: 0

### User Notes:

- #### manager.c: Restrict ModuleLoad to the configured modules directory.
  The ModuleLoad AMI action now restricts modules to the
  configured modules directory.

- #### manager: Enhance event filtering for performance
  You can now perform more granular filtering on events
  in manager.conf using expressions like
  `eventfilter(name(Newchannel),header(Channel),method(starts_with)) = PJSIP/`
  This is much more efficient than
  `eventfilter = Event: Newchannel.*Channel: PJSIP/`
  Full syntax guide is in configs/samples/manager.conf.sample.

- #### db.c: Remove limit on family/key length
  The `ast_db_*()` APIs have had the 253 byte limit on
  "/family/key" removed and will now accept families and keys with a
  total length of up to SQLITE_MAX_LENGTH (currently 1e9!).  This
  affects the `DB*` dialplan applications, dialplan functions,
  manager actions and `databse` CLI commands.  Since the
  media_cache also uses the `ast_db_*()` APIs, you can now store
  resources with URIs longer than 253 bytes.

### Upgrade Notes:

## Issue and Commit Detail:

### Closed Issues:

  - 487: [bug]: Segfault possibly in ast_rtp_stop
  - 821: [bug]: app_dial:  The progress timeout doesn't cause Dial to exit
  - 881: [bug]: Long URLs are being rejected by the media cache because of an astdb key length limit
  - 882: [bug]: Value CHANNEL(userfield) is lost by BRIDGE_ENTER
  - 897: [improvement]: Restrict ModuleLoad AMI action to the modules directory
  - 900: [bug]: astfd.c: NULL pointer passed to fclose with nonnull attribute causes compilation failure
  - 902: [bug]: app_voicemail: Pager emails are ill-formatted when custom subject is used
  - 916: [bug]: Compilation errors on FreeBSD
  - 924: [bug]: dnsmgr.c: dnsmgr_refresh() should not flag change if IP address order changes
  - 928: [bug]: chan_dahdi: MWI while off-hook when hung up on after recall ring
  - 937: [bug]: Wrong format for sample config file 'geolocation.conf.sample'
  - 938: [bug]: memory leak - CBAnn leaks a small amount format_cap related memory for every confbridge

### Commit List:

-  app_dial: Fix progress timeout calculation with no answer timeout.
-  pjproject_bundled:  Tweaks to support out-of-tree development
-  chan_sip.c: Fix __sip_reliable_xmit build error
-  core_unreal.c: Fix memory leak in ast_unreal_new_channels()
-  dnsmgr.c: dnsmgr_refresh() incorrectly flags change with DNS round-robin
-  geolocation.sample.conf: Fix comment marker at end of file
-  func_base64.c: Ensure we set aside enough room for base64 encoded data.
-  app_dial: Fix progress timeout.
-  chan_dahdi: Never send MWI while off-hook.
-  manager.c: Add unit test for Originate app and appdata permissions
-  alembic: Drop redundant voicemail_messages index.
-  res_agi.c: Ensure SIGCHLD handler functions are properly balanced.
-  main, res, tests: Fix compilation errors on FreeBSD.
-  res_rtp_asterisk: Fix dtls timer issues causing FRACKs and SEGVs
-  manager.c: Restrict ModuleLoad to the configured modules directory.
-  res_agi.c: Prevent possible double free during `SPEECH RECOGNIZE`
-  cdr_custom: Allow absolute filenames.
-  astfd.c: Avoid calling fclose with NULL argument.
-  channel: Preserve CHANNEL(userfield) on masquerade.
-  cel_custom: Allow absolute filenames.
-  app_voicemail: Fix ill-formatted pager emails with custom subject.
-  res_pjsip_pubsub: Persist subscription 'generator_data' in sorcery
-  Fix application references to Background
-  manager.conf.sample: Fix mathcing typo
-  manager: Enhance event filtering for performance
-  manager.c: Split XML documentation to manager_doc.xml
-  db.c: Remove limit on family/key length


To generate a diff of this commit:
cvs rdiff -u -r1.169 -r1.170 pkgsrc/comms/asterisk18/Makefile
cvs rdiff -u -r1.32 -r1.33 pkgsrc/comms/asterisk18/PLIST
cvs rdiff -u -r1.77 -r1.78 pkgsrc/comms/asterisk18/distinfo
cvs rdiff -u -r1.2 -r0 pkgsrc/comms/asterisk18/patches/patch-main_config.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/comms/asterisk18/Makefile
diff -u pkgsrc/comms/asterisk18/Makefile:1.169 pkgsrc/comms/asterisk18/Makefile:1.170
--- pkgsrc/comms/asterisk18/Makefile:1.169      Thu Apr 24 14:13:23 2025
+++ pkgsrc/comms/asterisk18/Makefile    Mon May 19 04:13:38 2025
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.169 2025/04/24 14:13:23 wiz Exp $
+# $NetBSD: Makefile,v 1.170 2025/05/19 04:13:38 jnemeth Exp $
 #
 # NOTE: when updating this package, there are two places that sound
 #       tarballs need to be checked; look in ${WRKSRC}/sounds/Makefile
@@ -6,8 +6,7 @@
 #       Also look in ${WRKSRC}/third-party/versions.mak for pjproject
 #       and libjwt
 
-DISTNAME=      asterisk-18.25.0
-PKGREVISION=   7
+DISTNAME=      asterisk-18.26.1
 CATEGORIES=    comms net audio
 MASTER_SITES=  https://downloads.asterisk.org/pub/telephony/asterisk/
 MASTER_SITES+= https://downloads.asterisk.org/pub/telephony/asterisk/old-releases/
@@ -314,6 +313,8 @@ post-install:
        ${INSTALL_DATA} ${WRKSRC}/ChangeLogs/ChangeLog-18.24.2.md ${DESTDIR}${PREFIX}/share/doc/${PKGBASE}
        ${INSTALL_DATA} ${WRKSRC}/ChangeLogs/ChangeLog-18.24.3.md ${DESTDIR}${PREFIX}/share/doc/${PKGBASE}
        ${INSTALL_DATA} ${WRKSRC}/ChangeLogs/ChangeLog-18.25.0.md ${DESTDIR}${PREFIX}/share/doc/${PKGBASE}
+       ${INSTALL_DATA} ${WRKSRC}/ChangeLogs/ChangeLog-18.26.0.md ${DESTDIR}${PREFIX}/share/doc/${PKGBASE}
+       ${INSTALL_DATA} ${WRKSRC}/ChangeLogs/ChangeLog-18.26.1.md ${DESTDIR}${PREFIX}/share/doc/${PKGBASE}
        ${INSTALL_DATA} ${WRKSRC}/ChangeLogs/historical/CHANGES ${DESTDIR}${PREFIX}/share/doc/${PKGBASE}
        ${INSTALL_DATA} ${WRKSRC}/ChangeLogs/historical/ChangeLog ${DESTDIR}${PREFIX}/share/doc/${PKGBASE}
        ${INSTALL_DATA} ${WRKSRC}/doc/IAX2-security.pdf ${DESTDIR}${PREFIX}/share/doc/${PKGBASE}

Index: pkgsrc/comms/asterisk18/PLIST
diff -u pkgsrc/comms/asterisk18/PLIST:1.32 pkgsrc/comms/asterisk18/PLIST:1.33
--- pkgsrc/comms/asterisk18/PLIST:1.32  Mon Oct 21 04:53:15 2024
+++ pkgsrc/comms/asterisk18/PLIST       Mon May 19 04:13:38 2025
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.32 2024/10/21 04:53:15 jnemeth Exp $
+@comment $NetBSD: PLIST,v 1.33 2025/05/19 04:13:38 jnemeth Exp $
 lib/asterisk/libasteriskpj.so
 lib/asterisk/libasteriskpj.so.2
 lib/asterisk/modules/app_adsiprog.so
@@ -2341,6 +2341,8 @@ share/doc/asterisk/ChangeLog-18.24.1.md
 share/doc/asterisk/ChangeLog-18.24.2.md
 share/doc/asterisk/ChangeLog-18.24.3.md
 share/doc/asterisk/ChangeLog-18.25.0.md
+share/doc/asterisk/ChangeLog-18.26.0.md
+share/doc/asterisk/ChangeLog-18.26.1.md
 share/doc/asterisk/IAX2-security.pdf
 share/doc/asterisk/IAX2-security.txt
 share/doc/asterisk/LICENSE

Index: pkgsrc/comms/asterisk18/distinfo
diff -u pkgsrc/comms/asterisk18/distinfo:1.77 pkgsrc/comms/asterisk18/distinfo:1.78
--- pkgsrc/comms/asterisk18/distinfo:1.77       Mon Oct 21 04:53:15 2024
+++ pkgsrc/comms/asterisk18/distinfo    Mon May 19 04:13:38 2025
@@ -1,23 +1,23 @@
-$NetBSD: distinfo,v 1.77 2024/10/21 04:53:15 jnemeth Exp $
+$NetBSD: distinfo,v 1.78 2025/05/19 04:13:38 jnemeth Exp $
 
-BLAKE2s (asterisk-18.25.0/asterisk-18.25.0.tar.gz) = 2559caf3d4fef1220780c6fbfa2bab7829a09ec6f2d33e99f3ecbcda1a309b69
-SHA512 (asterisk-18.25.0/asterisk-18.25.0.tar.gz) = 8646f65cac366a674674558d4ca59166956bdc5258c16454aaeff28e445b256fe16c144d6e1dedcd401c7577bff1aac69aae735557ea0082c93ff5322f978f56
-Size (asterisk-18.25.0/asterisk-18.25.0.tar.gz) = 28546882 bytes
-BLAKE2s (asterisk-18.25.0/asterisk-extra-sounds-en-gsm-1.5.2.tar.gz) = 3f7e5fe212d7e7cdca14c52527a2552311ab7762c3f1464b09ddedc7c66aebde
-SHA512 (asterisk-18.25.0/asterisk-extra-sounds-en-gsm-1.5.2.tar.gz) = 3f2f7bf3d5bce3544bc013f913c352f0204a3ce96239987403eb9dce8bc87e64a61d437762323a422a87b2fad1f3bf3e7a5f3d0d340f912a1b1dbfea9479d41d
-Size (asterisk-18.25.0/asterisk-extra-sounds-en-gsm-1.5.2.tar.gz) = 4253587 bytes
-BLAKE2s (asterisk-18.25.0/libjwt-1.15.3.md5) = de87f03f88ad834e26bba2159f5d8ed14637377eba58c48ed0701f44994ae1a2
-SHA512 (asterisk-18.25.0/libjwt-1.15.3.md5) = d24818362ec5537c4db58421078c7dc0f8509b89a2802d1e2e6cef6d4c1e817f8304dda486e96187c375b7d1084a1400ac4647ea635f3c9703fa0fadb1c33b44
-Size (asterisk-18.25.0/libjwt-1.15.3.md5) = 55 bytes
-BLAKE2s (asterisk-18.25.0/libjwt-1.15.3.tar.gz) = 45de6898eeef8791e63469ea1a13157e425e6f9f47cb49d2bcd7e3f5c046ab68
-SHA512 (asterisk-18.25.0/libjwt-1.15.3.tar.gz) = 6a99c81258c5302f7dd908f639676d7cfbe09599812cd97ead871cd5962f15e5248b935e1ef643c4dd43bd1ee66d0e12be1b599a6d3b26d461c4b15216a93774
-Size (asterisk-18.25.0/libjwt-1.15.3.tar.gz) = 489246 bytes
-BLAKE2s (asterisk-18.25.0/pjproject-2.14.1.md5) = f384e59ad4f8227cd7131a5c07b68a83b75b319fa60c38d6f9d27af817a0f516
-SHA512 (asterisk-18.25.0/pjproject-2.14.1.md5) = 25ce388adcd7eaa2c21d95a58d9fc5e33a6cb96dd99c292574b8f11f6f1f985cf91f91ea252300bd1be192e396ac6c8a35a87b219864339798bf6195a7650c00
-Size (asterisk-18.25.0/pjproject-2.14.1.md5) = 172 bytes
-BLAKE2s (asterisk-18.25.0/pjproject-2.14.1.tar.bz2) = 4b22d553ddafc2d53d866b4936d465c161e2a095a6a75bd4b93be26e4803122c
-SHA512 (asterisk-18.25.0/pjproject-2.14.1.tar.bz2) = 996116df4a18fb28c8f68d122466f8664958226a38e432b6190b92fbf277b278d370a4b44fabeaf25691e3cdcde28a8879b2738ead5387d119229db01ce121d8
-Size (asterisk-18.25.0/pjproject-2.14.1.tar.bz2) = 8379251 bytes
+BLAKE2s (asterisk-18.26.1/asterisk-18.26.1.tar.gz) = f1763f5efd520a428a4bf7442108baadb67b95a11d873efff3b7ea824fc3e12f
+SHA512 (asterisk-18.26.1/asterisk-18.26.1.tar.gz) = 798d849d2518094ec9d11f351baba045c5a9ed39267dd3c62010103a8907a2fa0c35ab1edd234a12df575f716c1fdf5d23ee2ee86028863283160ff608f5db66
+Size (asterisk-18.26.1/asterisk-18.26.1.tar.gz) = 28565082 bytes
+BLAKE2s (asterisk-18.26.1/asterisk-extra-sounds-en-gsm-1.5.2.tar.gz) = 3f7e5fe212d7e7cdca14c52527a2552311ab7762c3f1464b09ddedc7c66aebde
+SHA512 (asterisk-18.26.1/asterisk-extra-sounds-en-gsm-1.5.2.tar.gz) = 3f2f7bf3d5bce3544bc013f913c352f0204a3ce96239987403eb9dce8bc87e64a61d437762323a422a87b2fad1f3bf3e7a5f3d0d340f912a1b1dbfea9479d41d
+Size (asterisk-18.26.1/asterisk-extra-sounds-en-gsm-1.5.2.tar.gz) = 4253587 bytes
+BLAKE2s (asterisk-18.26.1/libjwt-1.15.3.md5) = de87f03f88ad834e26bba2159f5d8ed14637377eba58c48ed0701f44994ae1a2
+SHA512 (asterisk-18.26.1/libjwt-1.15.3.md5) = d24818362ec5537c4db58421078c7dc0f8509b89a2802d1e2e6cef6d4c1e817f8304dda486e96187c375b7d1084a1400ac4647ea635f3c9703fa0fadb1c33b44
+Size (asterisk-18.26.1/libjwt-1.15.3.md5) = 55 bytes
+BLAKE2s (asterisk-18.26.1/libjwt-1.15.3.tar.gz) = 45de6898eeef8791e63469ea1a13157e425e6f9f47cb49d2bcd7e3f5c046ab68
+SHA512 (asterisk-18.26.1/libjwt-1.15.3.tar.gz) = 6a99c81258c5302f7dd908f639676d7cfbe09599812cd97ead871cd5962f15e5248b935e1ef643c4dd43bd1ee66d0e12be1b599a6d3b26d461c4b15216a93774
+Size (asterisk-18.26.1/libjwt-1.15.3.tar.gz) = 489246 bytes
+BLAKE2s (asterisk-18.26.1/pjproject-2.14.1.md5) = f384e59ad4f8227cd7131a5c07b68a83b75b319fa60c38d6f9d27af817a0f516
+SHA512 (asterisk-18.26.1/pjproject-2.14.1.md5) = 25ce388adcd7eaa2c21d95a58d9fc5e33a6cb96dd99c292574b8f11f6f1f985cf91f91ea252300bd1be192e396ac6c8a35a87b219864339798bf6195a7650c00
+Size (asterisk-18.26.1/pjproject-2.14.1.md5) = 172 bytes
+BLAKE2s (asterisk-18.26.1/pjproject-2.14.1.tar.bz2) = 4b22d553ddafc2d53d866b4936d465c161e2a095a6a75bd4b93be26e4803122c
+SHA512 (asterisk-18.26.1/pjproject-2.14.1.tar.bz2) = 996116df4a18fb28c8f68d122466f8664958226a38e432b6190b92fbf277b278d370a4b44fabeaf25691e3cdcde28a8879b2738ead5387d119229db01ce121d8
+Size (asterisk-18.26.1/pjproject-2.14.1.tar.bz2) = 8379251 bytes
 SHA1 (patch-Makefile) = 676687f298151dbe548ae26a4f6f3fe8bf1f174e
 SHA1 (patch-addons_chan__ooh323.c) = 1775da7ca2129a962ed460bd1e78ba3ce6afa62c
 SHA1 (patch-apps_app__adsiprog.c) = 031139e5cd1ef6bb2afb0a74fee3d752eded0a2c
@@ -64,7 +64,6 @@ SHA1 (patch-main_callerid.c) = 0ea1b3df8
 SHA1 (patch-main_cdr.c) = 540fbdb354aba100fa37392b879b92a85d1d8620
 SHA1 (patch-main_cel.c) = 22fa21db8e0afa0958d34014f52e2c4fe9c73ba2
 SHA1 (patch-main_cli.c) = ee72bcaac7dce397354cbc09af4ed7441dbb4650
-SHA1 (patch-main_config.c) = f4b5fd991a755d6b5429d1ecd33e3525b65d6a02
 SHA1 (patch-main_conversions.c) = a516ef4f706fabbd250f66a3159825a2a6085344
 SHA1 (patch-main_dns__naptr.c) = 4fa3fe5d2acf7bcd84ca2044280c644e4bd15d7f
 SHA1 (patch-main_enum.c) = c5f620297cf98f95ce74aa0d98eddc697946a77b

Prev by Date: CVS commit: pkgsrc/ham
Next by Date: CVS commit: pkgsrc/doc
Previous by Thread: CVS commit: pkgsrc/ham
Next by Thread: CVS commit: pkgsrc/doc
Indexes:

Home | Main Index | Thread Index | Old Index