Update to fix remote crash vulnerability (caused by unitialised variable) in SIP channel driver, remove vulnerable versions except last stable. Advisories CVE-2011-4063 & AST-2011-012.

Package-Manager: portage-2.1.10.27/cvs/Linux x86_64

3 files changed, 23 insertions, 5 deletions

diff --git a/net-misc/asterisk/ChangeLog b/net-misc/asterisk/ChangeLog
index e7bd4e1a0c61..4d7ad9d4b14b 100644
--- a/net-misc/asterisk/ChangeLog
+++ b/net-misc/asterisk/ChangeLog
@@ -1,6 +1,14 @@
 # ChangeLog for net-misc/asterisk
 # Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-misc/asterisk/ChangeLog,v 1.351 2011/10/13 22:10:48 chainsaw Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-misc/asterisk/ChangeLog,v 1.352 2011/10/18 10:00:46 chainsaw Exp $
+
+*asterisk-1.8.7.1 (18 Oct 2011)
+
+  18 Oct 2011; Tony Vroon <chainsaw@gentoo.org> -asterisk-1.8.7.0-r1.ebuild,
+  +asterisk-1.8.7.1.ebuild:
+  Update to fix remote crash vulnerability (caused by unitialised variable) in
+  SIP channel driver, remove vulnerable versions except last stable. Advisories
+  CVE-2011-4063 & AST-2011-012.
 
   13 Oct 2011; Tony Vroon <chainsaw@gentoo.org> -asterisk-1.8.5.0-r3.ebuild,
   asterisk-1.8.6.0.ebuild, -asterisk-1.8.7.0.ebuild:
diff --git a/net-misc/asterisk/Manifest b/net-misc/asterisk/Manifest
index ac53fe26de11..d2f1e5b03815 100644
--- a/net-misc/asterisk/Manifest
+++ b/net-misc/asterisk/Manifest
@@ -1,3 +1,6 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA1
+
 AUX 1.6.0/asterisk.confd 2204 RMD160 31bceebfa535e97cb2634e313678cc42186d4750 SHA1 748c623cea238cd9b322672d5ebcfe214a4f0463 SHA256 daec84c58e0ef6cbd71a6fc62cb83129b1bcffdfdd619ebbd62a642f0cd1eee7
 AUX 1.6.2/asterisk.initd2 6658 RMD160 b694da109e746e9a9e642ffa7f1d278f03543cea SHA1 63443d3066d4c47228fe1d852420d571ae6f8800 SHA256 f6fd2c229e61c12360b1d289a631f6a0a6f8638e7c6f6add6040ad988170bf70
 AUX 1.6.2/asterisk.initd3 6658 RMD160 adabbacaff55cc49077a919fb23eb6f8e3a2c076 SHA1 a256b7af478a4d83c19a89b23d79a4f832f1fb5a SHA256 ba737b5eadd4a5ff8653e30b54959c1d25a8a68699b8ce9adc9afe09da8b4110
@@ -9,10 +12,17 @@ AUX 1.6.2/sip_calc_auth 493 RMD160 1813bd5aecbb60b38c20752050e6be44cca10f47 SHA1
 AUX 1.8.0/asterisk.confd 2203 RMD160 00d92671d00ff495d1651ec064fec8c790f94f6c SHA1 3da25f263e8bdeda7130ed03f9aced379591875f SHA256 32f60bc5ff42edb1ecda236f6e87d67fd723533658bd1efb6085e87736536969
 AUX 1.8.0/asterisk.initd 6511 RMD160 183128f493953a1dc9241e2966398c6e5f3e1365 SHA1 13ff4c28dc86d5bd534b43b2b08763f8ec19baa1 SHA256 88028e2c8cf78414725697c2121bbb861a18869f7675d4b814fcb8fecfe71586
 DIST asterisk-1.8.6.0.tar.gz 27753713 RMD160 687a3668f2fd6e1005d32b85ab33250832049a21 SHA1 65f1a43b0ed7b3df4536cc63e5e79f631f302eff SHA256 dd6a489a8d89a147a18e5b7ee74eb44835459a7bd14786b8a114f3052066636b
-DIST asterisk-1.8.7.0.tar.gz 27828568 RMD160 84b7e2f49e1dc78c32649cc0786e6fea1bd2c9b5 SHA1 e28ad2f52a227acc7ec6d6952f3fd41baecd6292 SHA256 645e0f53982bef36ded2108e11fbd508fc6beb2704e5c6c434f7ba8369ec8ce8
+DIST asterisk-1.8.7.1.tar.gz 28557326 RMD160 e69d6f6c555f52b8c6bd16428c9e64a22988e736 SHA1 c29671daaca5725b4f4257a972c2fe88effbc16e SHA256 46a713113705f9c747f19b5c5bfd31ee2ebd7db221eb9aa4ca8c817d531f95f3
 DIST gentoo-asterisk-patchset-1.2.tar.bz2 10624 RMD160 749a14b673d9df07f36f4aebcf9fdd85ff69b579 SHA1 607d28d62f77d5b4b17c0cc436b45b7a1aa196e1 SHA256 591618545dc20f08faf57bacca9457c18cc845bd38e3e6cfe403b2802efeeb44
 DIST gentoo-asterisk-patchset-1.4.tar.bz2 31078 RMD160 3e24de735eb1754951708cd23e73ad125b9f626b SHA1 ed725bceb74ca1cf961a2e97fe12e89eb66b1719 SHA256 315a3878d3c591030b73d9796e0264f924ef5bde51ee682dc011974bf91b6630
 EBUILD asterisk-1.8.6.0.ebuild 14330 RMD160 5057c6a4244f6f73a40930f3aec66a05b3886fa6 SHA1 6f6fd90c1cbb7a719bc8ecac1851a7242a38daf6 SHA256 6c99342b88b44b382d0cfeda706a2f65d4771da6703a0d62dc1223ce3e79eaaf
-EBUILD asterisk-1.8.7.0-r1.ebuild 14426 RMD160 96587424396f425ef8b693864eb2d00509b4104e SHA1 db6cf12809b180f94ca1aa84e76f308df121a7d0 SHA256 5728247d05b9f9944a595684cc9b62c7069c26699038d045131f3b8d7c201b41
-MISC ChangeLog 88805 RMD160 2c34e016704d5d74cb7e3c72160e25e3c359961b SHA1 02bd06326a7fa1e251ef40e96f851ec96e559378 SHA256 49165d4e6a508f71d97d1e8723897bfd72d37f1360ff74bf7ec4873f7e750cc4
+EBUILD asterisk-1.8.7.1.ebuild 14423 RMD160 4a1645e7002e18131eb0f00723933dddfc6030d9 SHA1 281722ae79a1608ef12a7a69f4a569dc99f8508f SHA256 3deeef31d4fc1a0725d1582e4e93f7a684e6ee806c667b79a096d973dc5f2ccd
+MISC ChangeLog 89135 RMD160 7385be5639dec2efd6aa1df9659cab011f4e6f8f SHA1 a8ddcea20eaf9f0b9281127295fa4c1d1817d2a4 SHA256 4353ecb12ca24d73c75dec03ed243bd7732fccf99ac1172fc3a3df8979c531de
 MISC metadata.xml 1028 RMD160 5b59e20d3efbe652abf786d05a7b9744105a088b SHA1 e718c3ce0210047b34a05c92ff8a7b4707316e17 SHA256 63267079fefbcc798d902e6b9822609df79c756a9934c3ad3abdabfbad357de5
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2.0.18 (GNU/Linux)
+
+iEYEARECAAYFAk6dTl8ACgkQp5vW4rUFj5qn+ACgoLk/XT4u/TZ1Un3TbamuIBUN
+bB4An2E0TLlNO3zUCmFLv3uzdDh4/Rdq
+=TueU
+-----END PGP SIGNATURE-----
diff --git a/net-misc/asterisk/asterisk-1.8.7.0-r1.ebuild b/net-misc/asterisk/asterisk-1.8.7.1.ebuild
index 55599a1f433e..35edce68b3fe 100644
--- a/net-misc/asterisk/asterisk-1.8.7.0-r1.ebuild
+++ b/net-misc/asterisk/asterisk-1.8.7.1.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2011 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-misc/asterisk/asterisk-1.8.7.0-r1.ebuild,v 1.1 2011/10/12 09:25:53 chainsaw Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-misc/asterisk/asterisk-1.8.7.1.ebuild,v 1.1 2011/10/18 10:00:46 chainsaw Exp $
 
 EAPI=4
 inherit autotools base eutils linux-info multilib