Next | Query returned 181 messages, browsing 131 to 140 | Previous

History of commit frequency

CVS Commit History:


   2012-08-19 20:41:10 by John Nemeth | Files touched by this commit (2)
Log message:
Fix the build issue where some people were seeing chan_mgcp.so
being built and others weren't by detecting the situation when it
would be built and adjusting the PLIST accordingly.
   2012-08-03 10:22:53 by John Nemeth | Files touched by this commit (4)
Log message:
Update to Asterisk 1.8.15.0; this is a general bug fix release:

The release of Asterisk 1.8.15.0 resolves several issues reported by the
community and would have not been possible without your participation.
Thank you!

The following is a sample of the issues resolved in this release:

* --- Fix deadlock potential with ast_set_hangupsource() calls.

* --- Fix request routing issue when outboundproxy is used.

* --- Make the address family filter specific to the transport.

* --- Fix NULL pointer segfault in ast_sockaddr_parse()

* --- Do not perform install on existing directories

For a full list of changes in this release, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.15.0

Thank you for your continued support of Asterisk!
   2012-07-17 02:29:33 by John Nemeth | Files touched by this commit (3)
Log message:
- revert previous
  - this package is marked OWNER= for a reason!
  - need to figure out why chan_mgcp is built only in some situations
    instead of adding gross hacks

- upgrade to Asterisk 1.8.14.1: this is a bugfix release

The release of Asterisk 1.8.14.1 resolves an issue reported by the
community and would have not been possible without your participation.
Thank you!

The following is the issue resolved in this release:

* --- Remove a superfluous and dangerous freeing of an SSL_CTX.

For a full list of changes in this release, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.14.1

Thank you for your continued support of Asterisk!
   2012-07-15 11:00:00 by John Marino | Files touched by this commit (2)
Log message:
comms/asterisk18: PLIST+= chan_mgcp.so (DragonFly Only)

Defined new PLIST.mgcp variable for new file:
lib/asterisks/modules/chan_mgcp.so
   2012-07-15 09:49:28 by John Nemeth | Files touched by this commit (3)
Log message:
Update to Asterisk 1.8.14.0:  this is a bugfix release

The Asterisk Development Team has announced the release of Asterisk 1.8.14.0.

The release of Asterisk 1.8.14.0 resolves several issues reported by the
community and would have not been possible without your participation.
Thank you!

The following is a sample of the issues resolved in this release:

* --- format_mp3: Fix a possible crash in mp3_read().

* --- Fix local channel chains optimizing themselves out of a call.

* --- Update a peer's LastMsgsSent when the peer is notified of
      waiting messages

* --- Prevent sip_pvt refleak when an ast_channel outlasts its
      corresponding sip_pvt.

* --- Send more accurate identification information in dialog-info SIP
      NOTIFYs.

For a full list of changes in this release, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.14.0

Thank you for your continued support of Asterisk!
   2012-07-06 21:51:58 by John Nemeth | Files touched by this commit (2)
Log message:
Upgrade to Asterisk 1.8.13.1 -- this fixes two security issues:
AST-2012-010 and AST-2012-011

The Asterisk Development Team has announced security releases for Certified
Asterisk 1.8.11 and Asterisk 1.8 and 10. The available security releases are
released as versions 1.8.11-cert4, 1.8.13.1, 10.5.2, and 10.5.2-digiumphones.

The release of Asterisk 1.8.11-cert4, 1.8.13.1, 10.5.2, and 10.5.2-digiumphones
resolve the following two issues:

* If Asterisk sends a re-invite and an endpoint responds to the re-invite with
  a provisional response but never sends a final response, then the SIP dialog
  structure is never freed and the RTP ports for the call are never released. If
  an attacker has the ability to place a call, they could create a denial of
  service by using all available RTP ports.

* If a single voicemail account is manipulated by two parties simultaneously,
  a condition can occur where memory is freed twice causing a crash.

These issues and their resolution are described in the security advisories.

For more information about the details of these vulnerabilities, please read
security advisories AST-2012-010 and AST-2012-011, which were released at the
same time as this announcement.

For a full list of changes in the current releases, please see the ChangeLogs:

http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.13.1

The security advisories are available at:

 * http://downloads.asterisk.org/pub/security/AST-2012-010.pdf
 * http://downloads.asterisk.org/pub/security/pST-2012-011.pdf

Thank you for your continued support of Asterisk!
   2012-06-14 09:45:42 by Steven Drake | Files touched by this commit (1202)
Log message:
Recursive PKGREVISION bump for libxml2 buildlink addition.
   2012-06-05 08:15:52 by John Nemeth | Files touched by this commit (1)
Log message:
regen for patch-ap
   2012-06-05 02:15:35 by John Nemeth | Files touched by this commit (7)
Log message:
Update to 1.8.13.0:

The Asterisk Development Team has announced the release of Asterisk
1.8.13.0.

The release of Asterisk 1.8.13.0 resolves several issues reported
by the community and would have not been possible without your
participation.  Thank you!

The following is a sample of the issues resolved in this release:

* --- Turn off warning message when bind address is set to any.

* --- Prevent overflow in calculation in ast_tvdiff_ms on 32-bit
      machines

* --- Make DAHDISendCallreroutingFacility wait 5 seconds for a reply
      before disconnecting the call.

* --- Fix recalled party B feature flags for a failed DTMF atxfer.

* --- Fix DTMF atxfer running h exten after the wrong bridge ends.

For a full list of changes in this release, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.13.0

Thank you for your continued support of Asterisk!
   2012-06-04 00:58:51 by John Nemeth | Files touched by this commit (2) | Package updated
Log message:
Update to Asterisk 1.8.12.2:  this update fixes fixes AST-2012-007
and AST-2012-008 along with some general bug fixes.

----- 1.8.12.1 -----

The Asterisk Development Team has announced security releases for
Certified Asterisk 1.8.11 and Asterisk 1.8 and 10. The available
security releases are released as versions 1.8.11-cert2, 1.8.12.1,
and 10.4.1.

The release of Asterisk 1.8.11-cert2, 1.8.12.1, and 10.4.1 resolve
the following two issues:

* A remotely exploitable crash vulnerability exists in the IAX2
  channel driver if an established call is placed on hold without
  a suggested music class. Asterisk will attempt to use an invalid
  pointer to the music on hold class name, potentially causing a
  crash.

* A remotely exploitable crash vulnerability was found in the Skinny
  (SCCP) Channel driver. When an SCCP client closes its connection
  to the server, a pointer in a structure is set to NULL.  If the
  client was not in the on-hook state at the time the connection
  was closed, this pointer is later dereferenced. This allows remote
  authenticated connections the ability to cause a crash in the
  server, denying services to legitimate users.

These issues and their resolution are described in the security
advisories.

For more information about the details of these vulnerabilities,
please read security advisories AST-2012-007 and AST-2012-008,
which were released at the same time as this announcement.

For a full list of changes in the current releases, please see the
ChangeLogs:

http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.12.1
http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.4.1

The security advisories are available at:

 * http://downloads.asterisk.org/pub/security/AST-2012-007.pdf
 * http://downloads.asterisk.org/pub/security/AST-2012-008.pdf

Thank you for your continued support of Asterisk!

----- 1.8.12.2 -----

The Asterisk Development Team has announced the release of Asterisk
1.8.12.2.

The release of Asterisk 1.8.12.2 resolves an issue reported by the
community and would have not been possible without your participation.
Thank you!

The following is the issue resolved in this release:

* --- Resolve crash in subscribing for MWI notifications
  (Closes issue ASTERISK-19827. Reported by B. R)

For a full list of changes in this release, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.12.2

Thank you for your continued support of Asterisk!

Next | Query returned 181 messages, browsing 131 to 140 | Previous