SourceMage Grimoire Bug List

[bugzilla-daemon AT bugs.sourcemage.org]

http://bugs.sourcemage.org/show_bug.cgi?id=13645

           Summary: Security update for asterisk available
           Product: Codex
           Version: test grimoire
          Platform: All
               URL: http://www.asterisk.org/node/48338
        OS/Version: other
            Status: NEW
          Severity: normal
          Priority: P2
         Component: telephony
        AssignedTo: sm-grimoire-bugs AT lists.ibiblio.org
        ReportedBy: m.spitzbarth AT gmx.de


My newsticker told me about the update of asterisk that fixes DoS
vulnerabilities in the SIP channel drivers:
http://www.asterisk.org/node/48338

So I took the spell and updated it in my local grimoire from 1.2.13 to 1.4.2
(patch for grimoire is attached).

I didn't investigate if these vulnerabilites exist in 1.2.13, but I added a
SECURITY_PATH=1 into DETAILS. Another point I'm not quite sure about is if 
1.4.2
is the official stable release. It isn't labeled as beta on it's download 
server
while there are other packages that contain beta in their filename. But on the
other hand they still have asterisk 1.2.17 on their website for download, so
maybe a version bump from 1.2.13 to 1.2.17 would be an option, too.

The update from 1.2.13 to 1.2.17 worked for me by changing the version and
checksum in DETAILS, so I've not not attached a patch for this. I got an error
with installing using make with 3 jobs, but it works with a single job, so I
suggest creating INSTALL with "make -j 1 install".

There were quite some changes I had to make in order to have 1.4.2 compile for
me, please verify that I didn't make anything wrong.
I the noteable changes besides what's obvious from the diff are:
* I removed BUILD. Now ./configure and so on is executed before make. I 
verified
that that the change to Makefile in PRE_BUILD is still there after configure 
was
run.
* The install phase got me an error when compiling with make -j3, but it works
with -j1, so I added that to INSTALL

-- 
Configure bugmail: http://bugs.sourcemage.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.