summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorTony Vroon <chainsaw@gentoo.org>2014-06-14 12:20:35 +0000
committerTony Vroon <chainsaw@gentoo.org>2014-06-14 12:20:35 +0000
commit208cd8f42c090b1cd9bcbd7020c723acda7e6273 (patch)
treed5e20a4cc63be4b321dace427c3202b008692b4a /net-misc/asterisk
parentMixMonitor AMI command allowed arbitrary shell commands to be executed (AST-2... (diff)
downloadgentoo-2-208cd8f42c090b1cd9bcbd7020c723acda7e6273.tar.gz
gentoo-2-208cd8f42c090b1cd9bcbd7020c723acda7e6273.tar.bz2
gentoo-2-208cd8f42c090b1cd9bcbd7020c723acda7e6273.zip
MixMonitor AMI command allowed arbitrary shell commands to be executed (AST-2014-006). Upstream replacement of plain broken SSL read implementation as part of an HTTPS denial of service (AST-2014-007) finally fixes ASTERISK-18345 after almost three years. Relevant downstream patch removed, this means we were very likely not vulnerable.
(Portage version: 2.2.10/cvs/Linux x86_64, signed Manifest commit with key 0xB5058F9A)
Diffstat (limited to 'net-misc/asterisk')
-rw-r--r--net-misc/asterisk/Manifest24
1 files changed, 10 insertions, 14 deletions
diff --git a/net-misc/asterisk/Manifest b/net-misc/asterisk/Manifest
index 5c799b027b0c..0d6f2adb479f 100644
--- a/net-misc/asterisk/Manifest
+++ b/net-misc/asterisk/Manifest
@@ -15,36 +15,32 @@ AUX 1.8.0/asterisk.initd7 9382 SHA256 7951901371035da2cb958d029ddbd8af276a5de7be
AUX 1.8.0/find_call_ids.sh 1078 SHA256 185d0f55f54d044eb4b4dc64954e5191f8b993d139749bfe869e34f3ecff9d09 SHA512 1690eb3ea9eb51711df9fd7c121dbc520a2a15870fa06523f096968386ca68a132a46e361b9d19367c7089cd9ad18132ed02ef0aedd990d5939550182a3366c9 WHIRLPOOL f123f60557066707d0c276451af32f5561abb8db7e8d4eeb3a2da871ae0245108e42d28c7ff77d228a963e5f5326f7382b0ac54f92fc1bfeec2c085b9b237a15
AUX 1.8.0/find_call_sip_trace.sh 1115 SHA256 e1ebeb1dab05f552f89f380719d319cdf579cb6aeb86a9010e13e14c57f55985 SHA512 e679f3953b2e397d7c80bb2f0ca3db848f07ba97ca139c87224de4467f8172034eb4372e5ddd68116774a7b9d5fd48aa30d809e2af2c6e6e0747762c69090b6a WHIRLPOOL 8c30be245556b37dd45dd5ff5cf5c3141050f60c3e286631520f8114e167c6bd4f7930be21e57e93fd183ab65dfbd3b95b8e342808870979b67977f3ce189ebf
DIST asterisk-1.8.26.1.tar.gz 29484354 SHA256 f7e61845c5f5f79a46a81139000c7e6b17f05fe5c97ab5cd1a40f5d81ec1b1cb SHA512 7ceab17ab1e819aba8c7012448f22d2c53305a6c3c961371655d177e0df415495d0a05ad7c2bd85587b2ff1ef540ece4fb9ab673dc04903514c4273006535653 WHIRLPOOL f3a3afc04290fd2243d8a238094766446e4c5b1fe1a7f3a14757ebcbce865d2ad8d3bf91623c0011ad9ea499669a938395b006bc5f085e199bda1d94bf567a75
-DIST asterisk-1.8.27.0.tar.gz 29516337 SHA256 11ebe4f342eec62db3ea019fde577c80a4649cf0a76e21123659a634104facee SHA512 677493db5a0b6777b4cdeb3a849f5fb2be17669b5827d4fee7a430d42ea0f77873f258d69553ae014211e8524e87868b2d00c120f79a6adf80d0e1ced35532bc WHIRLPOOL 6e4093c9e018f25f44d9bb81fb827254df6a8cde19776dd8cc4cf8e9e0f110867bd190bed0dcd253b95936436f3d530ed4de22479911efc5df01210a93acacb2
-DIST asterisk-1.8.28.0.tar.gz 29524734 SHA256 bb259f893f9b95d14a23666ad7d342520c2086bcfb8129818cb79df257c6d004 SHA512 fe720b434113d6c81346f83f258814e4f8a28384fb47aa375fb91b4f0fc3bdde882bbaffe2da2633db59ded61e97a910f508f344f67a12dd312b35e79f2966c3 WHIRLPOOL 560518e6434a2c141af4399fb51f3c12353b241571dbfe9d4fd4f3d7815834be505251965325aef204b4e35798c04e4038c0da3283864cc1c67912be7c6169f1
-DIST asterisk-11.10.0.tar.gz 34848342 SHA256 32fc29ab820c446206064d7a8f7d48b57f3269c55ac998cfe10bc61a9cca3a33 SHA512 2bcb270b65799f34c7dfa7d4010eeec8b4e3fb46611cc1ad92aaa6d540aa1e0ddc5a7c1fa5a4811df73f6d93899f11d605f065423c01c993f030ddc36aaab951 WHIRLPOOL 700f6e71bbf66f3631533cf5e6e799606212ceb11b94b3587db7f774e6d53b90d192d89482fd6857fe248cc9ae1eff19d5bfae64e56097419bcfddaf6b3f57d7
+DIST asterisk-1.8.28.1.tar.gz 29519347 SHA256 bbfd432629221d0d4b51f316938daa80e97804f9ac0b12d5ecb433fc53dd781e SHA512 19942253afbda2c23df23db7710f5d8b973047709c6d688a0313ab41f7483988d3140a4ed2d84c04c330797560137be09cea9bbc360ef98cb3df3a7ff1af9c1d WHIRLPOOL 0eee4b09d0e53e551953b22ec4e0fd7701cf404e4eeaf7660740313e1c0b4d2890356c69ebe9b888665f4a4d7c79704c33b34fb3b4726c5f84d13d27058c42b4
+DIST asterisk-11.10.1.tar.gz 34848313 SHA256 b9ef4b8bdf3d440e9237f765aeffa326270c01a7fb0d9edaa9b4f33fd69fc78d SHA512 8fac915a329e315c58c500f8567e2a57def026af8c3ad7900f7383c34e2cace39f96d52bbdacc57404f10fb8ddc14e7d880a24a3cc8a820b3c2b7ec018797b9c WHIRLPOOL 5462c353e9487aa3edd79764000d4e766ab974e19e30abffdc0009102717b6eaa08e915211ae84d18adc401084114573554c88e0fa8f72d6104ed5ae99eacf48
DIST asterisk-11.8.1.tar.gz 34794750 SHA256 216eaf3af703ef08cf18fb996e5a7da4082c1883e5b74ec15ab609f2d4a0f818 SHA512 f0c44126d9a31b5943d4da20dbf92cbe75a29fbb9dc9390ae8d39a4bd046268b245c852cd990c3db0f1690b95bd7f13b07978e1d08ee7a837ba6b04d988ccf86 WHIRLPOOL 33801f7d9fff2fdf7b9df370a61f80bf4023b64de5f79226f805f01b26f3ec2dd362ba7af4b214ef5a1729d4bae2ad1dd8893fed5a8a39adbe744194364456f3
-DIST asterisk-11.9.0.tar.gz 34844777 SHA256 1627c9d48db2dab2763c65feb7b6e576b03d09e38b6b05c36d300de7d0eca1d6 SHA512 ac249e5d9889722e1e00fda325a8d04967e80ded110b05f2066cbd62a56601a325da200e8f1d92c3b8af9ef33fba733cf6767646afa05a937bbeaeb8f58b542a WHIRLPOOL a440e1d157c8798ba2e6028c007f15d5096a817049bcd307b1fce62c2901b6df486e8bbdac6a3110fdcc22281a97449c0c23fbc6f668cf1989e3f022abd679df
DIST asterisk-12.1.1.tar.gz 56483961 SHA256 c53f51b2dea22ca5b2f042562cfc9e021f9dbda64293ef3652f569f86f65b4ba SHA512 7308db6537b1eb9e97276a46862b65c28f715fcba05c1b1ed15c76984165ad10d4747c00731d9435cdab38111ad97a115d8c05ca85d5283443f351c9b2324c62 WHIRLPOOL 6e83c6ceee01f6d01bbced6264e22b88ba3d2431156e8456ef7cc0c48db96b10639d50cfc10047ae15f7b6326a2cb0328cd54952b43f656be2e4d830d87e6ace
DIST asterisk-12.2.0.tar.gz 56591378 SHA256 1858abd9be49eabba545fe74d6730d90ac211d2d421be9ab776209f522994263 SHA512 fe47c29641483bbd9f8ee79342b9c7d606d1a34c2e92773732705019aa4387b1fbac70d2c688e8b372a7ac3c48038654576ad1feb3572043f5222944bbe019b5 WHIRLPOOL dbc70edf5a69cd52bd49272a7f36b5a78ba2258ba0763c74fdb6617114486b74a4e9fc0ca9d088ae7d3e339d5d6aec4bea47e4bdd5bc5a59588d40d3923ca1a1
DIST asterisk-12.3.0.tar.gz 56629812 SHA256 d9b7b22992cb5903893eb4521e3fd46a8f1f1fafff62166f11003cebeb2c2f55 SHA512 23d377e804194f619e6dce5a579b9da487bc18f5edfcfb21a722b7cfaff7ba87a5b5cd393ddfee8159ee4b4b5e924e87994bb6329d5b6c09a1011280124513c1 WHIRLPOOL c2f8d056c9caa89546ffc7f0f2ee555aa659767ea84afcb012360fc57a934b5ac2e8e278e81af318ee21234de5b354578cebf9ac1230dc4ca67fda15d0a26cc6
DIST gentoo-asterisk-patchset-1.17.tar.bz2 31552 SHA256 fa1c202a42a9b2b3c8e1f90df05f8c8e818688347ad62d38c1bd2daa69d58af4 SHA512 84d5cd12894f452a4f17f95531321f2e15f745391965f6351de5af52e2ac3b580c50552cf04d656f91fdc7db69c0ebd9e2cf210143f57c8a9fb0d2745477ce00 WHIRLPOOL 54c98f94acd95519087c4a6c62269c5f1c41a250eea4f9def40c01e968be6bc2b4e85cc18a16367a8af02c217a5088718e0bc0f55e03aebc29aa5247a2d03274
-DIST gentoo-asterisk-patchset-1.18.tar.bz2 31282 SHA256 f1ee594848036c883e95185a6c112402847c1defdfe46d11444702ace4377c6d SHA512 3414589a38526188ab2ea8f38e976f2143061f52001c1edb2993453f43717a66d381dcb590b37c04d56ae933b900d747800b62dbc35d10789ea7726218ecc85e WHIRLPOOL 46662710d5c2a45a61064a99dff1ffc83dfa6f2a92a04ef844c1be9a65280f0f4d949ecd963a5d155aeef20ffff6b9cd9dcdbda7bb0180c63c9bb8a95892d443
-DIST gentoo-asterisk-patchset-1.19.tar.bz2 31216 SHA256 af8ceebbf5f54e751e88b614b408abb7c12641016160fdaacedc816a8d5a6d3e SHA512 fb17fc134b9d08c226ef2ac681db3a69d31bca4c5ab640d583a9a38b9d7177dfe574dc9fe6a490520190f838354c5e0a641d444f909c7151cd3fa78330556258 WHIRLPOOL 3f724c9b0483660e25d33749e1d68572cea434f65404699752a3fbfa8689b86c8310e16578113561694b30a33923a2515d45c6c47c800519a16ade055a2d244c
+DIST gentoo-asterisk-patchset-1.20.tar.bz2 30799 SHA256 0dec59f2fd19da61eec5b157ca458d2cbe4e77c43e0db62c6e4a58ed51557f9b SHA512 62ae929570129f4046b773a76c763840711771b859aedf7e5c2b1937b34b5a9005230c27ef4fa2f3c7094979206ec4b890c1b6459d18cfae1620b2d7a49fe15d WHIRLPOOL eeaf23f6dfe3b3b2141c9c57e312b8a1c943e78efd5b6ad2e3fdecd9aad68f02e87d0333a7289b20541e2fbecf7afc5b87b1b566db32767323bba8d680313e75
DIST gentoo-asterisk-patchset-3.10.tar.bz2 6705 SHA256 20ee24b47e0b764dee9473f5df1ac30bc2dd2056d9227ad4794e60df2699a8fb SHA512 9d0767f9e81cdbc1efc8effcafa6bb4c7bb310f8e3bff51f2413b52b040007f290f3a88659d5b1e09a93a0d043fe92b6c2216a27fc03496dfa34db30f002a4f6 WHIRLPOOL 308580fb52018c8670211073b542720f97ad6b7354b55c294ef364e7af00e5f968691f1127c823ebe2bfbf778375fe3022be139ff57afbf0764fa2799df69b25
+DIST gentoo-asterisk-patchset-3.11.tar.bz2 6319 SHA256 7f11dc8a8d07c8985fa5ddf6b075f14c91268305aa992f609c6c575d656a6f59 SHA512 ec36b8c3e1b20269da17685127a15d7a701cf81c94d38aab272e2a55eba6caa9df1d5dff059427cfdab494c436f827ccf638634c370b34544677f4c4ce995149 WHIRLPOOL 168ff24881d8fa9002a8a68b37379f69efa42002afb22a8545169ebf351796e623ea345f097ca8a42ec4b9ca6e87f63c9ac114010730f034b6147f8e549c9d92
DIST gentoo-asterisk-patchset-3.7.tar.bz2 7068 SHA256 7633a3ea22cab8aa83da8499b7eb9d2703ee6c4a4e4fd9f135bd39d313a33cda SHA512 f45753e1f065a78040344a2006ef1f6c14efc6b0187fe4ccf71ed8f30b1f20a1fec58cb14751a5806f06e7ae9269344e267121865b04af146388f9acdbfbd4e7 WHIRLPOOL a6ba6682411c6cf0344c0919441a4b2259769cbc101e39ada748540668aa4e42794008c9d3917452bf30242abe232f44b6ce7fc7f91ef1c8889c6664512d04f9
DIST gentoo-asterisk-patchset-3.9.tar.bz2 7857 SHA256 d41b2c47a56040e3eb55b9354f05df6857f6efc60b35c081b8cdf50a8f6eed50 SHA512 97c49fdfb874e89a07abc0b129c9db0113a77feecd6bb1fea9b00a1f82161a9799f7a280fd2f6fc11c5e1e6984fc8374354967307f8e1b2d3a9fa713d350453c WHIRLPOOL ce7367cca3e6516d0e1fdb758f3463670b1cc2dad5a82abb3c3b1b3dc25ef07bc917ac0184e58674a02e88ffc6ac0b770f217a6870011791758e6612febf09f6
EBUILD asterisk-1.8.26.1.ebuild 9192 SHA256 ba59b0630b84a5406245c51bc4f01cd1d272f3122436eab3c9ad819e1bf26ae5 SHA512 889286a57081ea6f0de90b9a03cf16fcea19963f1eebb051c3f4ebceca31d8019674927d986e60cb2e5ef22320839f003d45440ba0b91f319da167b6eaf420c1 WHIRLPOOL ea73eabcfca6fd9a54bb6a0a15845f4564872833037d90d35cb9b7f3a742bd41c7d033bf2258fd142fcd2ac0cbc9d88dde4485c0d885d50c0f0b60480217a565
-EBUILD asterisk-1.8.27.0.ebuild 9194 SHA256 bddd92d9a2fcbb3d79d0ed4b2f2b6e3cc0368bc5298b00f461fdef0e5a53d543 SHA512 4b6ae5a6b2335f5a7070b68f622bdf6504af3a6709efb6f3cd3ceec0ce8420fa6deafce0d95f505bc602fa7eceec0104f75c56645beba40d7bd072b2698f9b4c WHIRLPOOL 2ae32bbfaf02704f2f6cb13123d678497186a4b5012f13ade22fca3d16f60edfb63b24fd2302aab14db0294530e3feb4f9a1ecd9a88be0653021fd4981b99caa
-EBUILD asterisk-1.8.28.0.ebuild 9194 SHA256 2063f5410de6040800ffdbe9be3a1c012c66d4b28450c456675fd73c41f90a7e SHA512 1f286d66743e5c5bbda9abef71fc67f0510f1e1341c6bb08078f660028c253772f9bf89332beb9706c960efa169a62b0c7e8207db341e66584330f876cdf6f50 WHIRLPOOL ffd0f7ac881c7ad790245e9a6700af2062487057193cd916f80bf87210b7562622d3f73579258925859d446a3b17aa9c5973f109e965950d8dbd1e9c04a88d1a
-EBUILD asterisk-11.10.0.ebuild 9439 SHA256 2250ede1d7a9b6f3af981c7333b0071e7701f9faba997844e74f35d53911863e SHA512 f4b6c471cf1299ff74cb4a496b0223e9fce468a4283458ece251f6892280e964b83e2781c45004fe50cb40cf1fbfe22d7588e05766dbc4109d1f4c4a260d9131 WHIRLPOOL ccdc99200d9bf1baf7804ff04e89517f89ad8dbec03229164c451172794aa0ccfbe0cdcf0da5fb6b6e9b6f9f3fe01c4273ea38f9611bdcc8082296c001efe6c1
+EBUILD asterisk-1.8.28.1.ebuild 9194 SHA256 4c4676c338223e5275671b3b328ee2b9b1e051ea0f973b1ad82a80407f789d19 SHA512 9cb910988ff1e4a894e21be18b0ec245dd6146b228b97a774983ace628f71b71383f35add07e75d949cf95dcf3322f0be7c674ff28ff46055ff51187b52e7e8c WHIRLPOOL 89ad508e8377d706572fceb1f609c2b9fb3188d6072c988dce2f49a8f1bca2ebada8f5f1740e2977bdc49d7a5aabc0c110a67c9916f770ea28c427f436c83421
+EBUILD asterisk-11.10.1.ebuild 9439 SHA256 4c3348edd484d275edba9217360b384c033c23c30c3c7953513043c4c57a9300 SHA512 a5d0461052b3a51bf200ccfb62069ef415639fb4981e129f36617bf316cbc90a145370c6c1e46d9c0fe78e40826b944e707831b73ed59ca3f61b10eeab8c2d05 WHIRLPOOL 022788f7fc3e175513b450a09684cbe44765bb2f02234bda55fdb6cbaf198e3a0d95fe443e8204650c5a1a2b0f29781e5300b217801c36e05c5e7dcd06f384c5
EBUILD asterisk-11.8.1.ebuild 9435 SHA256 3c6f800cc1aac9bec05714ae2bc8d52b56506d1785f551df093ee2a05f0eebc3 SHA512 91fa15b296615543e56c50fe810a96107fb3326be01f9d90c2ea1c7a1a4f497acd9bfabdbf0fe22f5744e75003c08505854944a959c0d32d8e563bfff304f6dd WHIRLPOOL 1f5d6a2cf3c1cf75b314a17065f386396b5adb62e4f16b0177da6bb425f0f966dc1024bc6e1a4b5d8e1fcaaefcbad876f55f324756a94db6be121731869f4579
-EBUILD asterisk-11.9.0.ebuild 9438 SHA256 117dd5fcccc7120c435bf0da7786e3825b5e3a4731381953c7638e0f205d9580 SHA512 1c61eb778141ab245398a297b0527b0658263477135b476d143802227dba638e3f12a008783a68a6796f8edb74f9c3e252b20eeba2a3f9d1a42d6ed0228a4dc0 WHIRLPOOL fe8ad40040efa0cde629bf9e98a1e8fc9f079faa987bd4a78da11468fc6bedcb941116265a136a6b2d0a517bcbbecf22496505e424308723afc84ccb2b37cff2
EBUILD asterisk-12.1.1.ebuild 9514 SHA256 460900f24442b6175540dda7551e51a256f9e0b1c6fc371f37d5493879a1138f SHA512 192e0f3645de7703b9e6a04b653255ad3eeaccb247d0b593776f174395f6aa9f2de67803d80f6da10d8e8f60e1d73b3d95d06c2e5cd4f24c142d152bcf170ab8 WHIRLPOOL 4ab8d43965a12294af5d66cbd7c15b11f8af5688cf987d6d5d94e54c07e4658e5a612442ac7853df1e684d2a3ef228031dd8321f6a02e7cd1250f5bb37772934
EBUILD asterisk-12.2.0.ebuild 9515 SHA256 be93d8ab142f2a01173ec8909129da2e5d51d4926e57c4abac2167502905176d SHA512 5848048ad1b291ab7a970c08d7b67875a17ea23ddb7e1ffc7ae2639677e46b399dcc487da4e1ec6f779563e63307f0488770ac1776ca314b6c52c721b18a95b0 WHIRLPOOL b93250c8f9adf3e7ab230b83ac08cd82827ff568939cbe295ecda0e3ca0b90495631519ddd6c48df3ab32041f6a335984fd2da3e050ef13ef4220a50b38576b3
EBUILD asterisk-12.3.0.ebuild 9515 SHA256 34d00437d36c4eaba04bf4ebbb2689265b624d2256cc73690cb7860128c376c8 SHA512 b378a2414fbc00b57406dc4baff0b41177fe71117e2db763b919522beb9e3150d11e20b0d92d774f9f0146ab54bc7e341430a06cbed1f94b4458431d84475836 WHIRLPOOL 94252ad1b26fded2433a70566313419bd9e9d3e2934eb6b72029f4e3be5ad52daed99fac8587261b4433d9be0a0d57bb54a95a597ca0af530d61f33179b4e1d9
-MISC ChangeLog 14289 SHA256 b74350d45114bac738ff58d9f2512d3a23b29986d64193eeeb10300cc074b16d SHA512 794e904930593e45fe4a5db82e1fc3f4bb603a0610b2b9f833434af72037a5c52e4df5157ca05524322734a4b3325eb9eedb8ec5a2027a867ee36dabcad7a95e WHIRLPOOL 19a40485926ea900243242e02f24832312e5df3643b406862cf76498947a759afd189eda4394443842aa03e65efb8cb10d4e55b839f1cd5bedf6f36be452fab1
+MISC ChangeLog 14914 SHA256 ad1b59972b7cc0604de10b68c06773e727ec0b4bc0b3450b6cbe43cd6ff4946a SHA512 9b5eb7b4f619d49f330de29e7874da678cd0965b2800b2b6f86a7fab15a1d7417a71f117c8f57402755cc39ae44bcb424ff3a2ad3efcf6e19041aced65eae9eb WHIRLPOOL 331106e8ff25b6a34bf5edc8ade301c4ab83efc6e5fad58cd923817889d7d0e22fbdbf75e80b0efa4273d92dbf693e9b5e5e1d85e9d713c4539db9ae9f813abd
MISC ChangeLog-2012 113409 SHA256 6beb419f0c2e63641c73f2c14bd0c3a6a319c65bca8be526aa441fac2104fc9c SHA512 08c037acd578b9c3c387a80e45e80a68c4da84e63fced30215f22ec14eb6e223348d8e7d68f4decdf8a2d8cd0933b3f7fa3adddf7cd80bb407498b3e2868d917 WHIRLPOOL be0f2192531f7477545ccc0f10d9a50f36228e8d8d0e2773ccce3799c2d1b5e1b7be70d96502f759c7c878f88efd83122fc9230374c40c8963fe0bc7ff014b87
MISC metadata.xml 1183 SHA256 f92828f92cf3e0ce3581e031e3ecdc26336481db45fe6ea7b91e79fc3e58032c SHA512 9b00df0793f68988b4b7b2da778b05cd183e663a96c92b5f96ac1e09ba34a96a5155deb0639638e499701e5cf76de6cc6736f757a48608c2accf14e3ff633c14 WHIRLPOOL d5e4bd47714fa34285733f9c3ed2dff0fa65f33daeda7276428e7eaf0cd44ef59351f67f590ecab38305e77b9c3683c368ad764f323f3d9891b3414600aa4211
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
-iEYEAREIAAYFAlOMpA8ACgkQp5vW4rUFj5o5jgCfULHMKP5OfDV/G6TO4A4AaN4k
-y2oAn3SWyN/ekRqa7NTI/qtiwmgk7iHO
-=e2wK
+iEYEAREIAAYFAlOcPgkACgkQp5vW4rUFj5rW4ACfXBZctSCdsamVQoWV5vDHSL1h
+etAAn1j2mwBYHyOYQ9EgZKC318a9ilN5
+=8G+6
-----END PGP SIGNATURE-----