Compare commits

...

3 Commits

Author SHA1 Message Date
Asterisk Development Team
70ab513553 Update for certified/16.8-cert13 2022-03-04 14:07:57 -05:00
Asterisk Development Team
a444be3417 Merge branch 'certified/16.8' of ssh://gerrit.asterisk.org:29418/asterisk into certified/16.8 2022-03-04 13:07:40 -06:00
Asterisk Development Team
b531968dd5 Update for certified/16.8-cert13 2022-03-04 14:05:34 -05:00
6 changed files with 313 additions and 94 deletions

View File

@@ -1 +1 @@
certified/16.8-cert9
certified/16.8-cert13

157
ChangeLog
View File

@@ -1,3 +1,160 @@
2022-03-04 19:07 +0000 Asterisk Development Team <asteriskteam@digium.com>
* asterisk certified/16.8-cert13 Released.
2022-03-03 16:42 +0000 [e6ecaf292d] Kevin Harwell <kharwell@sangoma.com>
* AST-2022-005: pjproject - undefined behavior after freeing a dialog set
ASTERISK-29945 #close
Change-Id: Ia8ce6d82b115c82c1138747c72a0adcaa42b718c
(cherry picked from commit 7f76dce133412a8a3ce53e73921c43d5b5d2dd18)
2022-03-04 13:05 +0000 [b531968dd5] Asterisk Development Team <asteriskteam@digium.com>
* Update for certified/16.8-cert13
2022-03-03 16:44 +0000 [aaba516fb6] Kevin Harwell <kharwell@sangoma.com>
* AST-2022-006: pjproject - unconstrained malformed multipart SIP message
ASTERISK-29945 #close
Change-Id: Ic58957afc453195d53c2bd25c905df3d91d1abe6
2022-03-03 16:41 +0000 [2be8154ca1] Kevin Harwell <kharwell@sangoma.com>
* AST-2022-004: pjproject - possible integer underflow on STUN message
ASTERISK-29945 #close
Change-Id: I721cd254e4f8aa6d3a97a37529cca53519694c54
2021-11-08 09:01 +0000 [7420644f6d] Sean Bright <sean.bright@gmail.com>
* pbx.c: Don't remove dashes from hints on reload.
When reloading dialplan, hints created dynamically would lose any dash
characters. Now we ignore those dashes if we are dealing with a hint
during a reload.
ASTERISK-28040 #close
Change-Id: I95e48f5a268efa3c6840ab69798525d3dce91636
2021-10-21 12:54 +0000 Asterisk Development Team <asteriskteam@digium.com>
* asterisk certified/16.8-cert12 Released.
2021-10-19 11:35 +0000 [b433fcc58c] George Joseph <gjoseph@digium.com>
* BuildSystem: Check for alternate openssl packages
OpenSSL is one of those packages that often have alternatives
with later versions. For instance, CentOS/EL 7 has an
openssl package at version 1.0.2 but there's an openssl11
package from the epel repository that has 1.1.1. This gets
installed to /usr/include/openssl11 and /usr/lib64/openssl11.
Unfortunately, the existing --with-ssl and --with-crypto
./configure options expect to point to a source tree and
don't work in this situation. Also unfortunately, the
checks in ./configure don't use pkg-config.
In order to make this work with the existing situation, you'd
have to run...
./configure --with-ssl=/usr/lib64/openssl11 \
--with-crypto=/usr/lib64/openssl11 \
CFLAGS=-I/usr/include/openssl11
BUT... those options don't get passed down to bundled pjproject
so when you run make, you have to include the CFLAGS again
which is a big pain.
Oh... To make matters worse, although you can specify
PJPROJECT_CONFIGURE_OPTS on the ./configure command line,
they don't get saved so if you do a make clean, which will
force a re-configure of bundled pjproject, those options
don't get used.
So...
* In configure.ac... Since pkg-config is installed by install_prereq
anyway, we now use it to check for the system openssl >= 1.1.0.
If that works, great. If not, we check for the openssl11
package. If that works, great. If not, we fall back to just
checking for any openssl. If pkg-config isn't installed for some
reason, or --with-ssl=<dir> or --with-crypto=<dir> were specified
on the ./configure command line, we fall back to the existing
logic that uses AST_EXT_LIB_CHECK().
* The whole OpenSSL check process has been moved up before
THIRD_PARTY_CONFIGURE(), which does the initial pjproject
bundled configure, is run. This way the results of the above
checks, which may result in new include or library directories,
is included.
* Although not strictly needed for openssl, We now save the value of
PJPROJECT_CONFIGURE_OPTS in the makeopts file so it can be used
again if a re-configure is triggered.
ASTERISK-29693
Change-Id: I341ab7603e6b156aa15a66f43675ac5029d5fbde
2021-08-12 16:43 +0000 Asterisk Development Team <asteriskteam@digium.com>
* asterisk certified/16.8-cert11 Released.
2021-02-24 07:04 +0000 [7b43f9f3e9] Joshua C. Colp <jcolp@sangoma.com>
* res_pjsip_nat: Don't rewrite Contact on REGISTER responses.
When sending a SIP response to an incoming REGISTER request
we don't want to change the Contact header as it will
contain the Contacts registered to the AOR and not our own
Contact URI.
ASTERISK-29235
Change-Id: I35a0723545281dd01fcd5cae497baab58720478c
(cherry picked from commit d65041ebea0d54b5306419866a08e6e171fb444d)
2021-07-22 22:12 +0000 Asterisk Development Team <asteriskteam@digium.com>
* asterisk certified/16.8-cert10 Released.
2021-07-22 17:00 +0000 [0964440c7d] Asterisk Development Team <asteriskteam@digium.com>
* Update CHANGES and UPGRADE.txt for certified/16.8-cert10
2021-05-10 17:59 +0000 [7de850f476] Kevin Harwell <kharwell@sangoma.com>
* AST-2021-008 - chan_iax2: remote crash on unsupported media format
If chan_iax2 received a packet with an unsupported media format, for
example vp9, then it would set the frame's format to NULL. This could
then result in a crash later when an attempt was made to access the
format.
This patch makes it so chan_iax2 now ignores/drops frames received
with unsupported media format types.
ASTERISK-29392 #close
Change-Id: Ifa869a90dafe33eed8fd9463574fe6f1c0ad3eb1
2021-06-16 11:27 +0000 [e7bf2dff2c] Kevin Harwell <kharwell@sangoma.com>
* AST-2021-009 - pjproject-bundled: Avoid crash during handshake for TLS
If an SSL socket parent/listener was destroyed during the handshake,
depending on timing, it was possible for the handling callback to
attempt access of it after the fact thus causing a crash.
ASTERISK-29415 #close
Change-Id: I105dacdcd130ea7fdd4cf2010ccf35b5eaf1432d
2021-06-22 15:25 +0000 Asterisk Development Team <asteriskteam@digium.com>
* asterisk certified/16.8-cert9 Released.

View File

@@ -0,0 +1,30 @@
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><title>Release Summary - asterisk-certified/16.8-cert13</title><h1 align="center"><a name="top">Release Summary</a></h1><h3 align="center">asterisk-certified/16.8-cert13</h3><h3 align="center">Date: 2022-03-04</h3><h3 align="center">&lt;asteriskteam@digium.com&gt;</h3><hr><h2 align="center">Table of Contents</h2><ol>
<li><a href="#summary">Summary</a></li>
<li><a href="#contributors">Contributors</a></li>
<li><a href="#closed_issues">Closed Issues</a></li>
<li><a href="#commits">Other Changes</a></li>
<li><a href="#diffstat">Diffstat</a></li>
</ol><hr><a name="summary"><h2 align="center">Summary</h2></a><center><a href="#top">[Back to Top]</a></center><p>This release has been made to address one or more security vulnerabilities that have been identified. A security advisory document has been published for each vulnerability that includes additional information. Users of versions of Asterisk that are affected are strongly encouraged to review the advisories and determine what action they should take to protect their systems from these issues.</p><p>Security Advisories:</p><ul>
<li><a href="http://downloads.asterisk.org/pub/security/AST-2022-004,AST-2022-005,AST-2022-006.html">AST-2022-004,AST-2022-005,AST-2022-006</a></li>
</ul><p>The data in this summary reflects changes that have been made since the previous release, asterisk-certified/16.8-cert12.</p><hr><a name="contributors"><h2 align="center">Contributors</h2></a><center><a href="#top">[Back to Top]</a></center><p>This table lists the people who have submitted code, those that have tested patches, as well as those that reported issues on the issue tracker that were resolved in this release. For coders, the number is how many of their patches (of any size) were committed into this release. For testers, the number is the number of times their name was listed as assisting with testing a patch. Finally, for reporters, the number is the number of issues that they reported that were affected by commits that went into this release.</p><table width="100%" border="0">
<tr><th width="33%">Coders</th><th width="33%">Testers</th><th width="33%">Reporters</th></tr>
<tr valign="top"><td width="33%">3 Kevin Harwell <kharwell@sangoma.com><br/>1 Sean Bright <sean.bright@gmail.com><br/>1 Asterisk Development Team <asteriskteam@digium.com><br/></td><td width="33%"><td width="33%">3 Kevin Harwell <kharwell@digium.com><br/>1 Daniel Zanutti <daniel@dazsoft.com.br><br/></td></tr>
</table><hr><a name="closed_issues"><h2 align="center">Closed Issues</h2></a><center><a href="#top">[Back to Top]</a></center><p>This is a list of all issues from the issue tracker that were closed by changes that went into this release.</p><h3>Security</h3><h4>Category: pjproject/pjsip</h4><a href="https://issues.asterisk.org/jira/browse/ASTERISK-29945">ASTERISK-29945</a>: pjproject: Security fixes for things<br/>Reported by: Kevin Harwell<ul>
<li><a href="https://code.asterisk.org/code/changelog/asterisk?cs=e6ecaf292d11f4698ba12824b6b4da393a8d126c">[e6ecaf292d]</a> Kevin Harwell -- AST-2022-005: pjproject - undefined behavior after freeing a dialog set</li>
<li><a href="https://code.asterisk.org/code/changelog/asterisk?cs=aaba516fb6433c2da35974f8c77c6052421d2b07">[aaba516fb6]</a> Kevin Harwell -- AST-2022-006: pjproject - unconstrained malformed multipart SIP message</li>
<li><a href="https://code.asterisk.org/code/changelog/asterisk?cs=2be8154ca1f9b5cc39824a93c2af8b87b82385a0">[2be8154ca1]</a> Kevin Harwell -- AST-2022-004: pjproject - possible integer underflow on STUN message</li>
</ul><br><h3>Bug</h3><h4>Category: Core/PBX</h4><a href="https://issues.asterisk.org/jira/browse/ASTERISK-28040">ASTERISK-28040</a>: pbx: "dialplan reload" is removing minus symbol from dynamic hints<br/>Reported by: Daniel Zanutti<ul>
<li><a href="https://code.asterisk.org/code/changelog/asterisk?cs=7420644f6d26596a5b5364267230fab05aaedfcd">[7420644f6d]</a> Sean Bright -- pbx.c: Don't remove dashes from hints on reload.</li>
</ul><br><hr><a name="commits"><h2 align="center">Commits Not Associated with an Issue</h2></a><center><a href="#top">[Back to Top]</a></center><p>This is a list of all changes that went into this release that did not reference a JIRA issue.</p><table width="100%" border="1">
<tr><th>Revision</th><th>Author</th><th>Summary</th></tr>
<tr><td><a href="https://code.asterisk.org/code/changelog/asterisk?cs=b531968dd5905db61c63ddc8367e0bb1405b2fde">b531968dd5</a></td><td>Asterisk Development Team</td><td>Update for certified/16.8-cert13</td></tr>
</table><hr><a name="diffstat"><h2 align="center">Diffstat Results</h2></a><center><a href="#top">[Back to Top]</a></center><p>This is a summary of the changes to the source code that went into this release that was generated using the diffstat utility.</p><pre>asterisk-certified-16.8-cert12-summary.html | 22 --
asterisk-certified-16.8-cert12-summary.txt | 92 --------
b/.version | 2
b/ChangeLog | 32 +++
b/asterisk-certified-16.8-cert13-summary.html | 23 ++
b/asterisk-certified-16.8-cert13-summary.txt | 103 ++++++++++
b/main/pbx.c | 9
b/third-party/pjproject/patches/0170-stun-integer-underflow.patch | 26 ++
b/third-party/pjproject/patches/0171-dialog-set-free.patch | 94 +++++++++
9 files changed, 287 insertions(+), 116 deletions(-)</pre><br></html>

View File

@@ -0,0 +1,125 @@
Release Summary
asterisk-certified/16.8-cert13
Date: 2022-03-04
<asteriskteam@digium.com>
----------------------------------------------------------------------
Table of Contents
1. Summary
2. Contributors
3. Closed Issues
4. Other Changes
5. Diffstat
----------------------------------------------------------------------
Summary
[Back to Top]
This release has been made to address one or more security vulnerabilities
that have been identified. A security advisory document has been published
for each vulnerability that includes additional information. Users of
versions of Asterisk that are affected are strongly encouraged to review
the advisories and determine what action they should take to protect their
systems from these issues.
Security Advisories:
* AST-2022-004,AST-2022-005,AST-2022-006
The data in this summary reflects changes that have been made since the
previous release, asterisk-certified/16.8-cert12.
----------------------------------------------------------------------
Contributors
[Back to Top]
This table lists the people who have submitted code, those that have
tested patches, as well as those that reported issues on the issue tracker
that were resolved in this release. For coders, the number is how many of
their patches (of any size) were committed into this release. For testers,
the number is the number of times their name was listed as assisting with
testing a patch. Finally, for reporters, the number is the number of
issues that they reported that were affected by commits that went into
this release.
Coders Testers Reporters
3 Kevin Harwell 3 Kevin Harwell
1 Sean Bright 1 Daniel Zanutti
1 Asterisk Development Team
----------------------------------------------------------------------
Closed Issues
[Back to Top]
This is a list of all issues from the issue tracker that were closed by
changes that went into this release.
Security
Category: pjproject/pjsip
ASTERISK-29945: pjproject: Security fixes for things
Reported by: Kevin Harwell
* [e6ecaf292d] Kevin Harwell -- AST-2022-005: pjproject - undefined
behavior after freeing a dialog set
* [aaba516fb6] Kevin Harwell -- AST-2022-006: pjproject - unconstrained
malformed multipart SIP message
* [2be8154ca1] Kevin Harwell -- AST-2022-004: pjproject - possible
integer underflow on STUN message
Bug
Category: Core/PBX
ASTERISK-28040: pbx: "dialplan reload" is removing minus symbol from
dynamic hints
Reported by: Daniel Zanutti
* [7420644f6d] Sean Bright -- pbx.c: Don't remove dashes from hints on
reload.
----------------------------------------------------------------------
Commits Not Associated with an Issue
[Back to Top]
This is a list of all changes that went into this release that did not
reference a JIRA issue.
+------------------------------------------------------------------------+
| Revision | Author | Summary |
|------------+------------------------+----------------------------------|
| b531968dd5 | Asterisk Development | Update for certified/16.8-cert13 |
| | Team | |
+------------------------------------------------------------------------+
----------------------------------------------------------------------
Diffstat Results
[Back to Top]
This is a summary of the changes to the source code that went into this
release that was generated using the diffstat utility.
asterisk-certified-16.8-cert12-summary.html | 22 --
asterisk-certified-16.8-cert12-summary.txt | 92 --------
b/.version | 2
b/ChangeLog | 32 +++
b/asterisk-certified-16.8-cert13-summary.html | 23 ++
b/asterisk-certified-16.8-cert13-summary.txt | 103 ++++++++++
b/main/pbx.c | 9
b/third-party/pjproject/patches/0170-stun-integer-underflow.patch | 26 ++
b/third-party/pjproject/patches/0171-dialog-set-free.patch | 94 +++++++++
9 files changed, 287 insertions(+), 116 deletions(-)

View File

@@ -1,11 +0,0 @@
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><title>Release Summary - asterisk-certified/16.8-cert9</title><h1 align="center"><a name="top">Release Summary</a></h1><h3 align="center">asterisk-certified/16.8-cert9</h3><h3 align="center">Date: 2021-06-22</h3><h3 align="center">&lt;asteriskteam@digium.com&gt;</h3><hr><h2 align="center">Table of Contents</h2><ol>
<li><a href="#summary">Summary</a></li>
<li><a href="#contributors">Contributors</a></li>
<li><a href="#closed_issues">Closed Issues</a></li>
<li><a href="#diffstat">Diffstat</a></li>
</ol><hr><a name="summary"><h2 align="center">Summary</h2></a><center><a href="#top">[Back to Top]</a></center><p>This release is a point release of an existing major version. The changes included were made to address problems that have been identified in this release series, or are minor, backwards compatible new features or improvements. Users should be able to safely upgrade to this version if this release series is already in use. Users considering upgrading from a previous version are strongly encouraged to review the UPGRADE.txt document as well as the CHANGES document for information about upgrading to this release series.</p><p>The data in this summary reflects changes that have been made since the previous release, asterisk-certified/16.8-cert8.</p><hr><a name="contributors"><h2 align="center">Contributors</h2></a><center><a href="#top">[Back to Top]</a></center><p>This table lists the people who have submitted code, those that have tested patches, as well as those that reported issues on the issue tracker that were resolved in this release. For coders, the number is how many of their patches (of any size) were committed into this release. For testers, the number is the number of times their name was listed as assisting with testing a patch. Finally, for reporters, the number is the number of issues that they reported that were affected by commits that went into this release.</p><table width="100%" border="0">
<tr><th width="33%">Coders</th><th width="33%">Testers</th><th width="33%">Reporters</th></tr>
<tr valign="top"><td width="33%">1 Joshua C. Colp <jcolp@sangoma.com><br/></td><td width="33%"><td width="33%">1 Joshua C. Colp <jcolp@digium.com><br/></td></tr>
</table><hr><a name="closed_issues"><h2 align="center">Closed Issues</h2></a><center><a href="#top">[Back to Top]</a></center><p>This is a list of all issues from the issue tracker that were closed by changes that went into this release.</p><h3>Bug</h3><h4>Category: Core/PBX</h4><a href="https://issues.asterisk.org/jira/browse/ASTERISK-29485">ASTERISK-29485</a>: core: Inband generation of tones for Busy() and Congestion() may not occur<br/>Reported by: Joshua C. Colp<ul>
<li><a href="https://code.asterisk.org/code/changelog/asterisk?cs=a3481f07f210eaa2a7f73418758bfd53485d90a2">[a3481f07f2]</a> Joshua C. Colp -- core: Don't play silence for Busy() and Congestion() applications.</li>
</ul><br><hr><a name="diffstat"><h2 align="center">Diffstat Results</h2></a><center><a href="#top">[Back to Top]</a></center><p>This is a summary of the changes to the source code that went into this release that was generated using the diffstat utility.</p><pre>0 files changed</pre><br></html>

View File

@@ -1,82 +0,0 @@
Release Summary
asterisk-certified/16.8-cert9
Date: 2021-06-22
<asteriskteam@digium.com>
----------------------------------------------------------------------
Table of Contents
1. Summary
2. Contributors
3. Closed Issues
4. Diffstat
----------------------------------------------------------------------
Summary
[Back to Top]
This release is a point release of an existing major version. The changes
included were made to address problems that have been identified in this
release series, or are minor, backwards compatible new features or
improvements. Users should be able to safely upgrade to this version if
this release series is already in use. Users considering upgrading from a
previous version are strongly encouraged to review the UPGRADE.txt
document as well as the CHANGES document for information about upgrading
to this release series.
The data in this summary reflects changes that have been made since the
previous release, asterisk-certified/16.8-cert8.
----------------------------------------------------------------------
Contributors
[Back to Top]
This table lists the people who have submitted code, those that have
tested patches, as well as those that reported issues on the issue tracker
that were resolved in this release. For coders, the number is how many of
their patches (of any size) were committed into this release. For testers,
the number is the number of times their name was listed as assisting with
testing a patch. Finally, for reporters, the number is the number of
issues that they reported that were affected by commits that went into
this release.
Coders Testers Reporters
1 Joshua C. Colp 1 Joshua C. Colp
----------------------------------------------------------------------
Closed Issues
[Back to Top]
This is a list of all issues from the issue tracker that were closed by
changes that went into this release.
Bug
Category: Core/PBX
ASTERISK-29485: core: Inband generation of tones for Busy() and
Congestion() may not occur
Reported by: Joshua C. Colp
* [a3481f07f2] Joshua C. Colp -- core: Don't play silence for Busy() and
Congestion() applications.
----------------------------------------------------------------------
Diffstat Results
[Back to Top]
This is a summary of the changes to the source code that went into this
release that was generated using the diffstat utility.
0 files changed