CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2013/12/16 16:16:01
Modified files:
telephony/asterisk: Makefile distinfo
telephony/asterisk/patches: patch-configs_asterisk_conf_sample
Log message:
SECURITY update to Asterisk 11.6.1
AST-2013-006: A buffer overflow when receiving odd length 16 bit
messages in app_sms. An infinite loop could occur which would overwrite
memory when a message is received into the unpacksms16() function and
the length of the message is an odd number of bytes.
http://downloads.asterisk.org/pub/security/AST-2013-006-10.diff
http://downloads.digium.com/pub/security/AST-2013-006.html
AST-2013-007: Adds an option to disable certain dangerous dialplan
functions from external sources (e.g. Asterisk management interface):
shell exec and file writes. N.B. to enable this protection, set
"live_dangerously=no" in asterisk.conf if upgrading. (Sample config
file is patched to set this, but upgraders should add it in most
cases).
http://downloads.asterisk.org/pub/security/AST-2013-007-10.diff
http://downloads.digium.com/pub/security/AST-2013-007.html
