From owner-freebsd-ports-bugs@FreeBSD.ORG Wed Dec 19 21:10:06 2007 Return-Path: Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C051116A468 for ; Wed, 19 Dec 2007 21:10:06 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id AC90D13C45A for ; Wed, 19 Dec 2007 21:10:06 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.2/8.14.2) with ESMTP id lBJLA1Ru065787 for ; Wed, 19 Dec 2007 21:10:01 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.2/8.14.1/Submit) id lBJLA1ZF065779; Wed, 19 Dec 2007 21:10:01 GMT (envelope-from gnats) Resent-Date: Wed, 19 Dec 2007 21:10:01 GMT Resent-Message-Id: <200712192110.lBJLA1ZF065779@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, "Conall O'Brien" Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 567E416A502 for ; Wed, 19 Dec 2007 21:08:42 +0000 (UTC) (envelope-from conall@daedalus.asclepian.ie) Received: from daedalus.asclepian.ie (daedalus.ipv4.asclepian.ie [213.133.100.226]) by mx1.freebsd.org (Postfix) with ESMTP id 2A62813C442 for ; Wed, 19 Dec 2007 21:08:42 +0000 (UTC) (envelope-from conall@daedalus.asclepian.ie) Received: by daedalus.asclepian.ie (Postfix, from userid 1001) id 6D5C6B853; Wed, 19 Dec 2007 20:50:10 +0000 (GMT) Message-Id: <20071219205010.6D5C6B853@daedalus.asclepian.ie> Date: Wed, 19 Dec 2007 20:50:10 +0000 (GMT) From: "Conall O'Brien" To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Cc: Subject: ports/118870: [UPDATE] net/asterisk to 1.4.16 X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2007 21:10:06 -0000 >Number: 118870 >Category: ports >Synopsis: [UPDATE] net/asterisk to 1.4.16 >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: update >Submitter-Id: current-users >Arrival-Date: Wed Dec 19 21:10:01 UTC 2007 >Closed-Date: >Last-Modified: >Originator: Conall O'Brien >Release: FreeBSD 6.2-STABLE amd64 >Organization: >Environment: System: FreeBSD daedalus.asclepian.ie 6.2-STABLE FreeBSD 6.2-STABLE #0: Tue Jun 5 16:04:39 UTC 2007 conall@daedalus.asclepian.ie:/usr/obj/usr/src/sys/DAEDALUS amd64 >Description: http://www.asterisk.org/node/48438 The Asterisk.org development team has released Asterisk versions 1.4.16 and 1.2.26. Both releases contain a fix for a security vulnerability. The 1.4.16 release also contains a number of other bug fixes made over the past few weeks. The details of the security issue have been published in a security advisory: http://downloads.digium.com/pub/security/AST-2007-027.pdf The issue affects users of the dynamic realtime configuration method for IAX2 or SIP that use host based authentication. Systems that do not use host based authentication with realtime are not affected. A full list of changes is available in the ChangeLog, which is distributed with the release and is also available on the downloads page. http://downloads.digium.com/pub/telephony/asterisk/ChangeLog-1.4.16 The releases are available for immediate download from http://downloads.digium.com/. >How-To-Repeat: >Fix: Update net/asterisk port to the current upstream released version >Release-Note: >Audit-Trail: >Unformatted: