diff options
author | 2009-10-26 23:50:29 +0000 | |
---|---|---|
committer | 2009-10-26 23:50:29 +0000 | |
commit | 6742e563af5b71aff71d291dca811c13c26ab25d (patch) | |
tree | 79a743ca0322cc5deb4b74b6b3ad5ad439291749 /net-misc | |
parent | Fix x264 dep for old snapshot. (diff) | |
download | historical-6742e563af5b71aff71d291dca811c13c26ab25d.tar.gz historical-6742e563af5b71aff71d291dca811c13c26ab25d.tar.bz2 historical-6742e563af5b71aff71d291dca811c13c26ab25d.zip |
Security version bump for AST-2009-007, ACLs were not respected on a SIP INVITE. Removed vulnerable versions from the tree (this concerns the 1.6.1 branch only).
Package-Manager: portage-2.2_rc46/cvs/Linux x86_64
Diffstat (limited to 'net-misc')
-rw-r--r-- | net-misc/asterisk/ChangeLog | 10 | ||||
-rw-r--r-- | net-misc/asterisk/Manifest | 17 | ||||
-rw-r--r-- | net-misc/asterisk/asterisk-1.6.1.6-r1.ebuild | 417 | ||||
-rw-r--r-- | net-misc/asterisk/asterisk-1.6.1.8.ebuild (renamed from net-misc/asterisk/asterisk-1.6.1.6-r2.ebuild) | 10 |
4 files changed, 27 insertions, 427 deletions
diff --git a/net-misc/asterisk/ChangeLog b/net-misc/asterisk/ChangeLog index 3d25ee4e2428..e645c788a75b 100644 --- a/net-misc/asterisk/ChangeLog +++ b/net-misc/asterisk/ChangeLog @@ -1,6 +1,14 @@ # ChangeLog for net-misc/asterisk # Copyright 1999-2009 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/net-misc/asterisk/ChangeLog,v 1.218 2009/10/26 13:34:21 chainsaw Exp $ +# $Header: /var/cvsroot/gentoo-x86/net-misc/asterisk/ChangeLog,v 1.219 2009/10/26 23:50:29 chainsaw Exp $ + +*asterisk-1.6.1.8 (26 Oct 2009) + + 26 Oct 2009; <chainsaw@gentoo.org> -asterisk-1.6.1.6-r1.ebuild, + -asterisk-1.6.1.6-r2.ebuild, +asterisk-1.6.1.8.ebuild: + Security version bump for AST-2009-007, ACLs were not respected on a SIP + INVITE. Removed vulnerable versions from the tree (this concerns the 1.6.1 + branch only). *asterisk-1.6.1.6-r2 (26 Oct 2009) diff --git a/net-misc/asterisk/Manifest b/net-misc/asterisk/Manifest index f3075cb69158..de4292bf1ec8 100644 --- a/net-misc/asterisk/Manifest +++ b/net-misc/asterisk/Manifest @@ -1,3 +1,6 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA1 + AUX 1.0.0/asterisk-1.0.5-uclibc-dns.diff 304 RMD160 6d58a0fdad04f5105c1b8f8bb3e2058b4f97f12f SHA1 5f7819a1e5f5b8f035146d5506bab83f4ecb6ae0 SHA256 e4de36e528b7d1a7941689d530d93f1ffd41a2f863a856e612e3637f78ea4890 AUX 1.2.0/asterisk-1.2.1-uclibc-getloadavg.diff 317 RMD160 f598d94a52cec83fefdafdce0694049c657e09e0 SHA1 fc0f4d990e386d39d43bac073f353421063186c9 SHA256 61daa70727418dbaf232fc5d1eaddd20a8505b943b8fb724a1b63170edfe88cc AUX 1.2.0/asterisk-1.2.21.1-h323-dumb-makefile.diff 1098 RMD160 c39cee5a6f420e6e63e30ac5e83aa9b78c1b12c8 SHA1 93087ecdcde11bd983d25acaac3723450abbc111 SHA256 86d0c8cd754754916c45d77d9c745d1688b3b7b54181ecb1d42a1934bdea7deb @@ -24,9 +27,15 @@ AUX 1.6.1/asterisk.initd 5897 RMD160 8a5d8ed9138a043008c0628985c74e6989bbbb62 SH AUX 1.6.1/asterisk.rc6 5896 RMD160 da94968d2dd315977a1ddfbac020ebe0ea2fbfeb SHA1 d65dd46e052066ea02bd613c8068b3a471ace157 SHA256 511da355d94afc6e81504f2f1a95f4c30346920d582ea9b00e27df8866c16515 DIST asterisk-1.2.27-patches-1.0.tar.bz2 6653 RMD160 18f1d7fc4497466050ed4f517ff5732eb448ff2e SHA1 2aecd3e91cde38dbb0fd591e8a49db221f44b94e SHA256 a4da0570fca2df3c508f072be62722879956fe8c454027fbb8dafb7a6095384c DIST asterisk-1.2.35.tar.gz 29894811 RMD160 7f63b2700d0dbc7f09ca71e83cb178cf7443bfb4 SHA1 6f6981612d95786dbb668381c34cd80ac3fb524b SHA256 2bfa3b342b13f02a123ded088e77110af154a59f0c0f1ff914217f3c5e80dadb -DIST asterisk-1.6.1.6.tar.gz 23420613 RMD160 adbf359540099930c9694c5c6003c1ffbe424847 SHA1 79a9a3635fdf2e8422dadabd9f05da3329e60dc1 SHA256 ce56be843b85946bebbb89af06819585f45dd50ac544c21ca81acab994036c22 +DIST asterisk-1.6.1.8.tar.gz 23414454 RMD160 a03def09ecdac6dea48e89397bafbb3915127c29 SHA1 26a4e7ab04861b5b7022f02e66249c28ddc4aef0 SHA256 8f9c41f3fe4c5e59ba7731841fb2b5c3cd41e069c3334dda855c0c51091b5ca7 EBUILD asterisk-1.2.35.ebuild 11073 RMD160 e163ec785969b85eee609c42c6127cfc5c6ab554 SHA1 7b15ea163f6435b83bef0121fa6817cdf64115ac SHA256 cef9d93af44b9662d225c6e02685b99a52efa09541f7211aefba7ad851962099 -EBUILD asterisk-1.6.1.6-r1.ebuild 10725 RMD160 db32614511aba45229b737f676334e4502c7ef91 SHA1 c0f31fffc06e51312a95270cf3779e9379e9b318 SHA256 b1f5a3a1c1533712a5828c1bcc54da412586d7fdb53455882c43a5dc580cef71 -EBUILD asterisk-1.6.1.6-r2.ebuild 10978 RMD160 ff1f2237eca9cb2ce225497604598de5d3637995 SHA1 3f18392cef67388d6eecf3a77c79f2cfd2257161 SHA256 97f958b6d254fa28788d3bef65690fd259f8df44f18c00866f3b580f15e8390f -MISC ChangeLog 47277 RMD160 b91ca53c498ad2d3a8c9394fc6e44e54de1d7fdc SHA1 fcadfbffc3847e16701cdea38ac7735779fee2a5 SHA256 594925aeb93478ce9f5020064c0dc6ab790b6e86f7e388acf924e6cb6770d5dd +EBUILD asterisk-1.6.1.8.ebuild 11010 RMD160 acf8c58faeeec86b8479c6ff6e59299317eec51b SHA1 4e53b883c79d14a236d1c5f6a102d483cf99e378 SHA256 51170427de6995c81b3edd1ad085d00c769e022d07e207c75cf2f36d9cf9cd55 +MISC ChangeLog 47602 RMD160 cf0aab74ef505c3de53fbcc55052cdfddc03842b SHA1 d289e46f7b2818168b4b5b75a0375a24fa771d26 SHA256 b687c684a36287b537bea85f8950da7c20ec1c5712d3b714d6519f2ae5098d07 MISC metadata.xml 1185 RMD160 eb12d6782abb8afd1c4eced97537a3528f960839 SHA1 80f58a977e41229cf37ee2cb5820e1cc29e517bc SHA256 4f1f9a977fac87bc22bc782cb30e4e7952e9772685d3424c69a514de3be5d0d3 +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v2.0.11 (GNU/Linux) + +iEYEARECAAYFAkrmNc0ACgkQp5vW4rUFj5qc3gCfTgrDZ65D8EHheBZiyMCU6yWn +3DoAnRz5lSFuXF9E6UAwUjdRYzy3s488 +=yyq9 +-----END PGP SIGNATURE----- diff --git a/net-misc/asterisk/asterisk-1.6.1.6-r1.ebuild b/net-misc/asterisk/asterisk-1.6.1.6-r1.ebuild deleted file mode 100644 index 65501dbe7980..000000000000 --- a/net-misc/asterisk/asterisk-1.6.1.6-r1.ebuild +++ /dev/null @@ -1,417 +0,0 @@ -# Copyright 1999-2009 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Header: /var/cvsroot/gentoo-x86/net-misc/asterisk/asterisk-1.6.1.6-r1.ebuild,v 1.1 2009/10/22 14:47:54 chainsaw Exp $ - -EAPI=1 -inherit eutils autotools - -MY_P="${PN}-${PV/_/-}" - -DESCRIPTION="Asterisk: A Modular Open Source PBX System" -HOMEPAGE="http://www.asterisk.org/" -SRC_URI="http://downloads.digium.com/pub/asterisk/releases/${MY_P}.tar.gz" -LICENSE="GPL-2" -SLOT="0" -KEYWORDS="~amd64 ~x86" - -IUSE="alsa +caps curl dahdi debug freetds iconv jabber ldap keepsrc misdn newt nosamples odbc oss postgres radius snmp span speex ssl sqlite static vorbis" - -RDEPEND="sys-libs/ncurses - dev-libs/popt - sys-libs/zlib - alsa? ( media-libs/alsa-lib ) - caps? ( sys-libs/libcap ) - curl? ( net-misc/curl ) - dahdi? ( >=net-libs/libpri-1.4.7 - net-misc/dahdi-tools ) - freetds? ( dev-db/freetds ) - iconv? ( virtual/libiconv ) - jabber? ( dev-libs/iksemel ) - ldap? ( net-nds/openldap ) - misdn? ( net-dialup/misdnuser ) - newt? ( dev-libs/newt ) - odbc? ( dev-db/unixODBC ) - postgres? ( virtual/postgresql-base ) - radius? ( net-dialup/radiusclient-ng ) - snmp? ( net-analyzer/net-snmp ) - span? ( media-libs/spandsp ) - speex? ( media-libs/speex ) - sqlite? ( dev-db/sqlite ) - ssl? ( dev-libs/openssl ) - vorbis? ( media-libs/libvorbis )" - -DEPEND="${RDEPEND} - !<net-misc/asterisk-addons-1.6" - -S="${WORKDIR}/${MY_P}" - -# -# shortcuts -# - -# update from asterisk-1.0.x -is_ast10update() { - return $(has_version "=net-misc/asterisk-1.0*") -} - -# update from asterisk-1.2.x -is_ast12update() { - return $(has_version "=net-misc/asterisk-1.2*") -} - -# update from asterisk 1.4.x -is_ast14update() { - return $(has_version "=net-misc/asterisk-1.4*") -} - -# update in the asterisk-1.6.x line -is_astupdate() { - if ! is_ast10update && ! is_ast12update && !is_ast14update; then - return $(has_version "<net-misc/asterisk-${PV}") - fi - return 0 -} - -get_available_modules() { - local modules mod x - - # build list of available modules... - for x in app cdr codec format func pbx res; do - - for mod in $(find "${S}" -type f -name "${x}_*.c*" -print) - do - modules="${modules} $(basename ${mod/%.c*})" - done - done - - echo "${modules}" -} - -pkg_setup() { - local checkfailed=0 waitaftermsg=0 - - if is_ast10update || is_ast12update || is_ast14update ; then - ewarn " Asterisk UPGRADE Warning" - ewarn "" - ewarn "- Please read "${ROOT}"usr/share/doc/${PF}/UPGRADE.txt.bz2 after the installation!" - ewarn "" - ewarn " Asterisk UPGRADE Warning" - echo - waitaftermsg=1 - fi - - if [[ $waitaftermsg -eq 1 ]]; then - einfo "Press Ctrl+C to abort" - echo - ebeep 10 - fi - - # - # Regular checks - # - einfo "Running some pre-flight checks..." - echo - - if [[ -n "${ASTERISK_MODULES}" ]] ; then - ewarn "You are overriding ASTERISK_MODULES. We will assume you know what you are doing. There is no support for this option, try without if you see breakage." - fi -} - -src_unpack() { - unpack ${A} - cd "${S}" - - # - # put pid file(s) into /var/run/asterisk - # - epatch "${FILESDIR}"/1.6.1/${PN}-1.6.1-var_rundir.patch || die "patch failed" - - # - # fix gsm codec cflags (e.g. i586 core epias) and disable - # assembler optimizations - # - epatch "${FILESDIR}"/1.6.1/${PN}-1.6.1-gsm-pic.patch || die "patch failed" - - # - # add missing LIBS for uclibc - # - epatch "${FILESDIR}"/1.6.1/${PN}-1.6.1-uclibc.patch || die "patch failed" - - # - # compensate for non-standard LUA header paths in Gentoo - # - epatch "${FILESDIR}"/1.6.1/asterisk-1.6.1.6-lua-includes.patch || die "patch failed" - - # - # make sure FXO ports are usable immediately, without requiring an inbound call first - # https://issues.asterisk.org/view.php?id=14577 - # - epatch "${FILESDIR}"/1.6.1/asterisk-1.6.1.6-fxsks-hookstate.patch || die "patch failed" - - # - # avoid segmentation fault when transferring a queue call - # https://issues.asterisk.org/view.php?id=15848 - # - epatch "${FILESDIR}"/1.6.1/asterisk-1.6.1.6-transfer-segfault.patch || die "patch failed" - - AT_M4DIR=autoconf eautoreconf - - # parse modules list - if [[ -n "${ASTERISK_MODULES}" ]]; then - local x modules="$(get_available_modules)" - - einfo "Custom list of modules specified, checking..." - - use debug && { - einfo "Available modules: ${modules}" - einfo " Selected modules: ${ASTERISK_MODULES}" - } - - for x in ${ASTERISK_MODULES}; do - if [[ "${x}" = "-*" ]]; then - MODULES_LIST="" - else - if has ${x} ${modules} - then - MODULES_LIST="${MODULES_LIST} ${x}" - else - eerror "Unknown module: ${x}" - fi - fi - done - - export MODULES_LIST - fi -} - -src_compile() { - # - # start with configure - # - econf \ - --libdir="/usr/$(get_libdir)" \ - --localstatedir="/var" \ - --with-gsm=internal \ - --with-popt \ - --with-z \ - $(use_with alsa asound) \ - $(use_with caps cap) \ - $(use_with curl) \ - $(use_with dahdi pri) \ - $(use_with dahdi tonezone) \ - $(use_with dahdi) \ - $(use_with freetds tds) \ - $(use_with iconv) \ - $(use_with jabber iksemel) \ - $(use_with misdn isdnnet) \ - $(use_with misdn suppserv) \ - $(use_with misdn) \ - $(use_with newt) \ - $(use_with odbc) \ - $(use_with oss) \ - $(use_with postgres) \ - $(use_with radius) \ - $(use_with snmp netsnmp) \ - $(use_with span spandsp) \ - $(use_with speex) \ - $(use_with speex speexdsp) \ - $(use_with sqlite sqlite3) \ - $(use_with ssl crypto) \ - $(use_with ssl) \ - $(use_with vorbis ogg) \ - $(use_with vorbis) || die "econf failed" - - # - # custom module filter - # run menuselect to evaluate the list of modules - # and rewrite the list afterwards - # - if [[ -n "${MODULES_LIST}" ]] - then - local mod category tmp_list failed_list - - ### - # run menuselect - - emake menuselect.makeopts || die "emake menuselect.makeopts failed" - - ### - # get list of modules with failed dependencies - - failed_list="$(awk -F= '/^MENUSELECT_DEPSFAILED=/{ print $3 }' menuselect.makeopts)" - - ### - # traverse our list of modules - - for category in app cdr codec format func pbx res; do - tmp_list="" - - # search list of modules for matching ones first... - for mod in ${MODULES_LIST}; do - # module is from current category? - if [[ "${mod/%_*}" = "${category}" ]] - then - # check menuselect thinks the dependencies are met - if has ${mod} ${failed_list} - then - eerror "${mod}: dependencies required to build this module are not met, NOT BUILDING!" - else - tmp_list="${tmp_list} ${mod}" - fi - fi - done - - use debug && echo "${category} tmp: ${tmp_list}" - - # replace the module list for $category with our custom one - if [[ -n "${tmp_list}" ]] - then - category="$(echo ${category} | tr '[:lower:]' '[:upper:]')" - sed -i -e "s:^\(MENUSELECT_${category}S?\):\1=${tmp_list}:" \ - menuselect.makeopts || die "failed to set list of ${category} applications" - fi - done - fi - - emake || die "emake failed" -} - -src_install() { - # setup directory structure - # - mkdir -p "${D}"usr/lib/pkgconfig - - emake DESTDIR="${D}" install || die "emake install failed" - emake DESTDIR="${D}" samples || die "emake samples failed" - - # remove installed sample files if nosamples flag is set - if use nosamples; then - einfo "Skipping installation of sample files..." - rm -f "${D}"var/lib/asterisk/mohmp3/* - rm -f "${D}"var/lib/asterisk/sounds/demo-* - rm -f "${D}"var/lib/asterisk/agi-bin/* - else - einfo "Sample files have been installed" - fi - rm -rf "${D}"var/spool/asterisk/voicemail/default - - # move sample configuration files to doc directory - if is_ast10update || is_ast12update || is_ast14update; then - einfo "Updating from old (pre-1.6) asterisk version, new configuration files have been installed" - einfo "into "${ROOT}"etc/asterisk, use etc-update or dispatch-conf to update them" - fi - - einfo "Configuration samples have been moved to: "${ROOT}"/usr/share/doc/${PF}/conf" - insinto /usr/share/doc/${PF}/conf - doins "${D}"etc/asterisk/*.conf* - - # keep directories - diropts -m 0770 -o asterisk -g asterisk - keepdir /etc/asterisk - keepdir /var/lib/asterisk - keepdir /var/run/asterisk - keepdir /var/spool/asterisk - keepdir /var/spool/asterisk/{system,tmp,meetme,monitor,dictate,voicemail} - diropts -m 0750 -o asterisk -g asterisk - keepdir /var/log/asterisk/{cdr-csv,cdr-custom} - - newinitd "${FILESDIR}"/1.6.1/asterisk.initd asterisk - newconfd "${FILESDIR}"/1.6.0/asterisk.confd asterisk - - # some people like to keep the sources around for custom patching - # copy the whole source tree to /usr/src/asterisk-${PVF} and run make clean there - if use keepsrc - then - einfo "keepsrc useflag enabled, copying source..." - dodir /usr/src - - cp -dPR "${S}" "${D}"/usr/src/${PF} || die "copying source tree failed" - - ebegin "running make clean..." - emake -C "${D}"/usr/src/${PF} clean >/dev/null || die "make clean failed" - eend $? - - einfo "Source files have been saved to "${ROOT}"usr/src/${PF}" - fi - - # install the upgrade documentation - # - dodoc README UPGRADE* BUGS CREDITS - - # install snmp mib files - # - if use snmp - then - insinto /usr/share/snmp/mibs/ - doins doc/digium-mib.txt doc/asterisk-mib.txt - fi -} - -pkg_preinst() { - enewgroup asterisk - enewuser asterisk -1 -1 /var/lib/asterisk "asterisk,dialout" -} - -pkg_postinst() { - ebegin "Fixing up permissions" - chown -R asterisk:asterisk "${ROOT}"var/log/asterisk - chmod -R u=rwX,g=rX,o= "${ROOT}"var/log/asterisk - - chown asterisk:asterisk "${ROOT}"etc/asterisk/ - chown asterisk:asterisk "${ROOT}"etc/asterisk/*.adsi - chown asterisk:asterisk "${ROOT}"etc/asterisk/extensions.ael - chmod u=rwX,g=rwX,o= "${ROOT}"etc/asterisk/ - chmod u=rwX,g=rwX,o= "${ROOT}"etc/asterisk/*.adsi - chmod u=rwX,g=rwX,o= "${ROOT}"etc/asterisk/extensions.ael - eend $? - - # - # Announcements, warnings, reminders... - # - einfo "Asterisk has been installed" - echo - elog "If you want to know more about asterisk, visit these sites:" - elog "http://www.asteriskdocs.org/" - elog "http://www.voip-info.org/wiki-Asterisk" - echo - elog "http://www.automated.it/guidetoasterisk.htm" - echo - elog "Gentoo VoIP IRC Channel:" - elog "#gentoo-voip @ irc.freenode.net" - echo - echo - - # - # Warning about 1.x -> 1.6 changes... - # - if is_ast10update || is_ast12update || is_ast14update; then - ewarn "" - ewarn "- Please read "${ROOT}"usr/share/doc/${PF}/UPGRADE.txt.bz2 before continuing" - ewarn "" - fi -} - -pkg_config() { - einfo "Do you want to reset file permissions and ownerships (y/N)?" - - read tmp - tmp="$(echo $tmp | tr '[:upper:]' '[:lower:]')" - - if [[ "$tmp" = "y" ]] ||\ - [[ "$tmp" = "yes" ]] - then - einfo "Resetting permissions to defaults..." - - for x in spool run lib log; do - chown -R asterisk:asterisk "${ROOT}"var/${x}/asterisk - chmod -R u=rwX,g=rwX,o= "${ROOT}"var/${x}/asterisk - done - - chown -R root:asterisk "${ROOT}"etc/asterisk - chmod -R u=rwX,g=rwX,o= "${ROOT}"etc/asterisk - - einfo "done" - else - einfo "skipping" - fi -} diff --git a/net-misc/asterisk/asterisk-1.6.1.6-r2.ebuild b/net-misc/asterisk/asterisk-1.6.1.8.ebuild index 01b7e2e221da..1c6566c6ca99 100644 --- a/net-misc/asterisk/asterisk-1.6.1.6-r2.ebuild +++ b/net-misc/asterisk/asterisk-1.6.1.8.ebuild @@ -1,6 +1,6 @@ # Copyright 1999-2009 Gentoo Foundation # Distributed under the terms of the GNU General Public License v2 -# $Header: /var/cvsroot/gentoo-x86/net-misc/asterisk/asterisk-1.6.1.6-r2.ebuild,v 1.2 2009/10/26 20:02:51 mr_bones_ Exp $ +# $Header: /var/cvsroot/gentoo-x86/net-misc/asterisk/asterisk-1.6.1.8.ebuild,v 1.1 2009/10/26 23:50:29 chainsaw Exp $ EAPI=1 inherit eutils autotools @@ -140,26 +140,26 @@ src_unpack() { # # compensate for non-standard LUA header paths in Gentoo # - epatch "${FILESDIR}"/1.6.1/${P}-lua-includes.patch || die "patch failed" + epatch "${FILESDIR}"/1.6.1/${PN}-1.6.1.6-lua-includes.patch || die "patch failed" # # make sure FXO ports are usable immediately, without requiring an inbound call first # https://issues.asterisk.org/view.php?id=14577 # - epatch "${FILESDIR}"/1.6.1/${P}-fxsks-hookstate.patch || die "patch failed" + epatch "${FILESDIR}"/1.6.1/${PN}-1.6.1.6-fxsks-hookstate.patch || die "patch failed" # # avoid segmentation fault when transferring a queue call # https://issues.asterisk.org/view.php?id=15848 # - epatch "${FILESDIR}"/1.6.1/${P}-transfer-segfault.patch || die "patch failed" + epatch "${FILESDIR}"/1.6.1/${PN}-1.6.1.6-transfer-segfault.patch || die "patch failed" # # do not ignore alarm-cleared event while V23 caller ID detection is in progress # otherwise automated British Telecom line test causes permanent red alarm # https://issues.asterisk.org/view.php?id=14163 # - epatch "${FILESDIR}"/1.6.1/${P}-bt-line-test.patch || die "patch failed" + epatch "${FILESDIR}"/1.6.1/${PN}-1.6.1.6-bt-line-test.patch || die "patch failed" AT_M4DIR=autoconf eautoreconf |