Skip to Content.
Sympa Menu

sm-grimoire-bugs - [SM-Grimoire-Bugs] [Bug 13645] New: Security update for asterisk available

sm-grimoire-bugs AT lists.ibiblio.org

Subject: SourceMage Grimoire Bug List

List archive

Chronological Thread  
  • From: bugzilla-daemon AT bugs.sourcemage.org
  • To: sm-grimoire-bugs AT lists.ibiblio.org
  • Subject: [SM-Grimoire-Bugs] [Bug 13645] New: Security update for asterisk available
  • Date: 22 Mar 2007 14:29:53 -0000

http://bugs.sourcemage.org/show_bug.cgi?id=13645

Summary: Security update for asterisk available
Product: Codex
Version: test grimoire
Platform: All
URL: http://www.asterisk.org/node/48338
OS/Version: other
Status: NEW
Severity: normal
Priority: P2
Component: telephony
AssignedTo: sm-grimoire-bugs AT lists.ibiblio.org
ReportedBy: m.spitzbarth AT gmx.de


My newsticker told me about the update of asterisk that fixes DoS
vulnerabilities in the SIP channel drivers:
http://www.asterisk.org/node/48338

So I took the spell and updated it in my local grimoire from 1.2.13 to 1.4.2
(patch for grimoire is attached).

I didn't investigate if these vulnerabilites exist in 1.2.13, but I added a
SECURITY_PATH=1 into DETAILS. Another point I'm not quite sure about is if
1.4.2
is the official stable release. It isn't labeled as beta on it's download
server
while there are other packages that contain beta in their filename. But on the
other hand they still have asterisk 1.2.17 on their website for download, so
maybe a version bump from 1.2.13 to 1.2.17 would be an option, too.

The update from 1.2.13 to 1.2.17 worked for me by changing the version and
checksum in DETAILS, so I've not not attached a patch for this. I got an error
with installing using make with 3 jobs, but it works with a single job, so I
suggest creating INSTALL with "make -j 1 install".

There were quite some changes I had to make in order to have 1.4.2 compile for
me, please verify that I didn't make anything wrong.
I the noteable changes besides what's obvious from the diff are:
* I removed BUILD. Now ./configure and so on is executed before make. I
verified
that that the change to Makefile in PRE_BUILD is still there after configure
was
run.
* The install phase got me an error when compiling with make -j3, but it works
with -j1, so I added that to INSTALL

--
Configure bugmail: http://bugs.sourcemage.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



  • [SM-Grimoire-Bugs] [Bug 13645] New: Security update for asterisk available, bugzilla-daemon, 03/22/2007

Archive powered by MHonArc 2.6.24.

Top of Page