From mboxrd@z Thu Jan 1 00:00:00 1970 From: Thomas Petazzoni Date: Mon, 8 Jan 2018 20:59:26 +0100 Subject: [Buildroot] [PATCH] asterisk: security bump to version 14.7.5 In-Reply-To: <20180108100815.16770-1-peter@korsgaard.com> References: <20180108100815.16770-1-peter@korsgaard.com> Message-ID: <20180108205926.39961fa0@windsurf> List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: buildroot@busybox.net Hello, On Mon, 8 Jan 2018 11:08:15 +0100, Peter Korsgaard wrote: > Fixes the following security issues: > > * AST-2017-014: Crash in PJSIP resource when missing a contact header A > select set of SIP messages create a dialog in Asterisk. Those SIP > messages must contain a contact header. For those messages, if the header > was not present and using the PJSIP channel driver, it would cause > Asterisk to crash. The severity of this vulnerability is somewhat > mitigated if authentication is enabled. If authentication is enabled a > user would have to first be authorized before reaching the crash point. > > For more details, see the announcement: > https://www.asterisk.org/downloads/asterisk-news/asterisk-13185-1475-1515-and-1318-cert2-now-available-security > > Signed-off-by: Peter Korsgaard > --- > package/asterisk/asterisk.hash | 2 +- > package/asterisk/asterisk.mk | 2 +- > 2 files changed, 2 insertions(+), 2 deletions(-) Applied to master, thanks. Thomas -- Thomas Petazzoni, CTO, Free Electrons Embedded Linux, Kernel and Android engineering http://free-electrons.com