From owner-svn-ports-all@FreeBSD.ORG Fri Mar 29 10:04:45 2013 Return-Path: Delivered-To: svn-ports-all@freebsd.org Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id 3C3D1606; Fri, 29 Mar 2013 10:04:45 +0000 (UTC) (envelope-from flo@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) by mx1.freebsd.org (Postfix) with ESMTP id 1ED1580F; Fri, 29 Mar 2013 10:04:45 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.6/8.14.6) with ESMTP id r2TA4iYg038993; Fri, 29 Mar 2013 10:04:45 GMT (envelope-from flo@svn.freebsd.org) Received: (from flo@localhost) by svn.freebsd.org (8.14.6/8.14.5/Submit) id r2TA4hBH038983; Fri, 29 Mar 2013 10:04:43 GMT (envelope-from flo@svn.freebsd.org) Message-Id: <201303291004.r2TA4hBH038983@svn.freebsd.org> From: Florian Smeets Date: Fri, 29 Mar 2013 10:04:43 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r315534 - in head: net/asterisk net/asterisk10 net/asterisk11 security/vuxml X-SVN-Group: ports-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-all@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Mar 2013 10:04:45 -0000 Author: flo Date: Fri Mar 29 10:04:43 2013 New Revision: 315534 URL: http://svnweb.freebsd.org/changeset/ports/315534 Log: Update asterisk ports to: net/asterisk 1.8.20.2 net/asterisk10 10.12.2 net/asterisk11 11.2.2 Security: daf0a339-9850-11e2-879e-d43d7e0c7c02 Modified: head/net/asterisk/Makefile head/net/asterisk/distinfo head/net/asterisk10/Makefile head/net/asterisk10/distinfo head/net/asterisk11/Makefile head/net/asterisk11/distinfo head/security/vuxml/vuln.xml Modified: head/net/asterisk/Makefile ============================================================================== --- head/net/asterisk/Makefile Fri Mar 29 10:03:58 2013 (r315533) +++ head/net/asterisk/Makefile Fri Mar 29 10:04:43 2013 (r315534) @@ -2,7 +2,7 @@ # $FreeBSD$ PORTNAME= asterisk -PORTVERSION= 1.8.20.1 +PORTVERSION= 1.8.20.2 CATEGORIES= net MASTER_SITES= http://downloads.asterisk.org/pub/telephony/asterisk/ \ http://downloads.asterisk.org/pub/telephony/asterisk/old-releases/ Modified: head/net/asterisk/distinfo ============================================================================== --- head/net/asterisk/distinfo Fri Mar 29 10:03:58 2013 (r315533) +++ head/net/asterisk/distinfo Fri Mar 29 10:04:43 2013 (r315534) @@ -1,2 +1,2 @@ -SHA256 (asterisk-1.8.20.1.tar.gz) = da36c54a865303388fffc4f8b9636c22eedf8f9dc2ebf26d3cce0679a2354ef8 -SIZE (asterisk-1.8.20.1.tar.gz) = 25176713 +SHA256 (asterisk-1.8.20.2.tar.gz) = 67d9cb7f569d49bfdbd94f6d81b13bac690abadaff79d68c242ed4e55426b59e +SIZE (asterisk-1.8.20.2.tar.gz) = 25180212 Modified: head/net/asterisk10/Makefile ============================================================================== --- head/net/asterisk10/Makefile Fri Mar 29 10:03:58 2013 (r315533) +++ head/net/asterisk10/Makefile Fri Mar 29 10:04:43 2013 (r315534) @@ -2,7 +2,7 @@ # $FreeBSD$ PORTNAME= asterisk -PORTVERSION= 10.12.1 +PORTVERSION= 10.12.2 CATEGORIES= net MASTER_SITES= http://downloads.asterisk.org/pub/telephony/asterisk/ \ http://downloads.asterisk.org/pub/telephony/asterisk/old-releases/ Modified: head/net/asterisk10/distinfo ============================================================================== --- head/net/asterisk10/distinfo Fri Mar 29 10:03:58 2013 (r315533) +++ head/net/asterisk10/distinfo Fri Mar 29 10:04:43 2013 (r315534) @@ -1,2 +1,2 @@ -SHA256 (asterisk-10.12.1.tar.gz) = a8a9f6f4d6f28177b1fccbed94c2f49fdcfa215e954dfd594bf6afdea1b6d6f2 -SIZE (asterisk-10.12.1.tar.gz) = 25114264 +SHA256 (asterisk-10.12.2.tar.gz) = fc892e986ba281e6aa193e3edbf515875407a76599e0da52883de8e386793288 +SIZE (asterisk-10.12.2.tar.gz) = 25117561 Modified: head/net/asterisk11/Makefile ============================================================================== --- head/net/asterisk11/Makefile Fri Mar 29 10:03:58 2013 (r315533) +++ head/net/asterisk11/Makefile Fri Mar 29 10:04:43 2013 (r315534) @@ -1,7 +1,7 @@ # $FreeBSD$ PORTNAME= asterisk -PORTVERSION= 11.2.1 +PORTVERSION= 11.2.2 CATEGORIES= net MASTER_SITES= http://downloads.asterisk.org/pub/telephony/asterisk/ \ http://downloads.asterisk.org/pub/telephony/asterisk/old-releases/ Modified: head/net/asterisk11/distinfo ============================================================================== --- head/net/asterisk11/distinfo Fri Mar 29 10:03:58 2013 (r315533) +++ head/net/asterisk11/distinfo Fri Mar 29 10:04:43 2013 (r315534) @@ -1,2 +1,2 @@ -SHA256 (asterisk-11.2.1.tar.gz) = 239f42037f8eb43d6cd69b286a4de3da5d9491806ef29211e0f074f63b130825 -SIZE (asterisk-11.2.1.tar.gz) = 30465933 +SHA256 (asterisk-11.2.2.tar.gz) = b470a27745735a49e83dc9842ec892c9b4ab186e5d44db68ea1db66e6c684c7b +SIZE (asterisk-11.2.2.tar.gz) = 30468125 Modified: head/security/vuxml/vuln.xml ============================================================================== --- head/security/vuxml/vuln.xml Fri Mar 29 10:03:58 2013 (r315533) +++ head/security/vuxml/vuln.xml Fri Mar 29 10:04:43 2013 (r315534) @@ -51,6 +51,47 @@ Note: Please add new entries to the beg --> + + asterisk -- multiple vulnerabilities + + + asterisk11 + 11.*11.2.2 + + + asterisk10 + 10.*10.12.2 + + + asterisk18 + 1.8.*1.8.20.2 + + + + +

Asterisk project reports:

+
+

Buffer Overflow Exploit Through SIP SDP Header

+

Username disclosure in SIP channel driver

+

Denial of Service in HTTP server

+
+ + + + CVE-2013-2685 + CVE-2013-2686 + CVE-2013-2264 + http://downloads.asterisk.org/pub/security/AST-2013-001.html + http://downloads.asterisk.org/pub/security/AST-2013-002.html + http://downloads.asterisk.org/pub/security/AST-2013-003.html + https://www.asterisk.org/security + + + 2013-03-27 + 2013-03-29 + + + dns/bind9* -- Malicious Regex Can Cause Memory Exhaustion