summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Remove vulnerable ebuilds now that stabilisation is complete. For security ↵Tony Vroon2014-11-243-337/+9
| | | | | | | bug #530056. Package-Manager: portage-2.2.14/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* Stable for x86, wrt bug #530056Agostino Sarubbo2014-11-243-18/+21
| | | | | | Package-Manager: portage-2.2.8-r2/cvs/Linux x86_64 RepoMan-Options: --include-arches="x86" Manifest-Sign-Key: 0x7194459F
* Stable for amd64, wrt bug #530056Agostino Sarubbo2014-11-243-8/+21
| | | | | | Package-Manager: portage-2.2.8-r2/cvs/Linux x86_64 RepoMan-Options: --include-arches="amd64" Manifest-Sign-Key: 0x7194459F
* 11 branch susceptible to AST-2014-012, AST-2014-014, AST-2014-017 & ↵Tony Vroon2014-11-245-334/+22
| | | | | | | AST-2014-018. 12 branch susceptible to AST-2014-012, AST-2014-013, AST-2014-015, AST-2014-016, AST-2014-017 & AST-2014-018. Vulnerable non-stable ebuilds removed. For security bug #530056. Package-Manager: portage-2.2.14/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* Resource leak fixes, particularly in error paths.Tony Vroon2014-11-204-5/+657
| | | | | Package-Manager: portage-2.2.14/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* Update PostgreSQL dependencies and/or checks to virtual/postgresql.Aaron Swenson2014-11-034-22/+16
| | | | | Package-Manager: portage-2.2.8-r2/cvs/Linux x86_64 Manifest-Sign-Key: 0xD1BBFDA0
* Remove sec-policy/selinux-* dependency from DEPEND but keep in RDEPEND (bug ↵Sven Vermeulen2014-11-024-18/+33
| | | | | | | #527698) Package-Manager: portage-2.2.8-r2/cvs/Linux x86_64 Manifest-Sign-Key: 0x2EDD52403B68AF47
* Remove vulnerable ebuilds now that stabilisation is complete. For security ↵Tony Vroon2014-10-213-337/+9
| | | | | | | bug #526208. Package-Manager: portage-2.2.14/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* Stable for x86, wrt bug #526208Agostino Sarubbo2014-10-213-18/+21
| | | | | | Package-Manager: portage-2.2.8-r2/cvs/Linux x86_64 RepoMan-Options: --include-arches="x86" Manifest-Sign-Key: 0x7194459F
* Stable for amd64, wrt bug #526208Agostino Sarubbo2014-10-213-8/+21
| | | | | | Package-Manager: portage-2.2.8-r2/cvs/Linux x86_64 RepoMan-Options: --include-arches="amd64" Manifest-Sign-Key: 0x7194459F
* New releases on the 11 & 12 branches to address the POODLE (AST-2014-011) ↵Tony Vroon2014-10-2112-1986/+27
| | | | | | | SSL 3.0 vulnerability. The 1.8 branch is hereby removed from portage as previously announced. 11 is low-churn and ideal to target for production environments. Our patch sets against 1.8 cost significant effort to maintain and essentially add 11-branch features to it. Package-Manager: portage-2.2.14/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* Additional resilience against invalid (ao2) object references. Now supports ↵Tony Vroon2014-09-293-5/+337
| | | | | | | empty passwords for PJSIP userpass authentication. Masquerade fixes for T38 between PJSIP and non-PJSIP chanels. FORTIFY_SOURCE fix now upstream. Modify permissions to suit a multi-daemon setup as per Jaco Kroon in bug #507894. Package-Manager: portage-2.2.13/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* Additional resilience against invalid (ao2) object references. ↵Tony Vroon2014-09-293-27/+29
| | | | | | | FORTIFY_SOURCE fix now upstream. Modify permissions to suit a multi-daemon setup as per Jaco Kroon in bug #507894. Package-Manager: portage-2.2.13/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* Stable for x86, wrt bug #523216Agostino Sarubbo2014-09-203-18/+21
| | | | | | Package-Manager: portage-2.2.8-r1/cvs/Linux x86_64 RepoMan-Options: --include-arches="x86" Manifest-Sign-Key: 0x7194459F
* Stable for amd64, wrt bug #523216Agostino Sarubbo2014-09-203-8/+21
| | | | | | Package-Manager: portage-2.2.8-r1/cvs/Linux x86_64 RepoMan-Options: --include-arches="amd64" Manifest-Sign-Key: 0x7194459F
* Upstream fix to fully respect SpanDSP API and avoid a potential null pointer ↵Tony Vroon2014-09-197-979/+21
| | | | | | | dereference. On the 12 branch, additional input validation for the PubSub framework in PJSIP. Remove older non-stable ebuilds. Package-Manager: portage-2.2.13/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* Add missing build-time dependency on pkgconfig, as identified by cyberbat in ↵Tony Vroon2014-09-1810-25/+42
| | | | | | | bug #522396. Package-Manager: portage-2.2.13/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* Squelching the FORTIFY_SOURCE warnings, as we have this in our GCC specs the ↵Tony Vroon2014-08-204-6/+659
| | | | | | | build system should not try to apply it again on the command line. At long last handles large SIP-over-SSL packets correctly. LUA vs convential dial plan context clashes found & fixed. Package-Manager: portage-2.2.12/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* New development on the 12 branch adds persistent connection support on the ↵Tony Vroon2014-07-145-6/+974
| | | | | | | built-in HTTP server. Fixes trickling down to stable branches include making ast_careful_fwrite careful enough to avoid infinite loops and avoiding unnecessary MOH restarts. Downstream patchset unchanged. Package-Manager: portage-2.2.7/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* Remove vulnerable ebuilds for security bug #513102, as requested by Agostino ↵Tony Vroon2014-06-236-1299/+11
| | | | | | | "ago" Sarubbo. Package-Manager: portage-2.2.10/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* Stable for x86, wrt bug #513102Agostino Sarubbo2014-06-214-21/+25
| | | | | | Package-Manager: portage-2.2.8-r1/cvs/Linux x86_64 RepoMan-Options: --include-arches="x86" Manifest-Sign-Key: 0x7194459F
* Stable for amd64, wrt bug #513102Agostino Sarubbo2014-06-214-11/+25
| | | | | | Package-Manager: portage-2.2.8-r1/cvs/Linux x86_64 RepoMan-Options: --include-arches="amd64" Manifest-Sign-Key: 0x7194459F
* Upstream distributed a broken release that did not carry traffic for SIP ↵Tony Vroon2014-06-163-9/+30
| | | | | | | over TCP or SIP over TLS. This remains masked and is not recommended for production deployments. Package-Manager: portage-2.2.7/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* Upstream distributed a broken release that did not carry traffic for SIP ↵Tony Vroon2014-06-164-11/+20
| | | | | | | over TCP or SIP over TLS. Package-Manager: portage-2.2.7/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* MixMonitor AMI command allowed arbitrary shell commands to be executed ↵Tony Vroon2014-06-146-650/+27
| | | | | | | (AST-2014-006). Upstream replacement of plain broken SSL read implementation as part of an HTTPS denial of service (AST-2014-007) finally fixes ASTERISK-18345 after almost three years. Relevant downstream patch removed, this means we were very likely not vulnerable. Package-Manager: portage-2.2.10/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* Significant string handling fixes as encouraged by GCC 4.10; leak fixes for ↵Tony Vroon2014-06-023-5/+333
| | | | | | | PJSIP. Still not recommended for production deployment, remains masked. Package-Manager: portage-2.2.10/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* Bugfixes trickling down from Asterisk 12 development, particularly around ↵Tony Vroon2014-05-304-5/+650
| | | | | | | string handling and signedness mismatches (GCC 4.10 is clamping down on this hard). T38 backport patch rediffed for 1.8 branch. Package-Manager: portage-2.2.10/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* Update ebuild dependencies to ensure only the 2.6 slot of gmime is selected. ↵Tony Vroon2014-05-088-23/+30
| | | | | | | Inverting the search order in the configure script was only a partial fix. As pointed out by Pacho Ramos in bug #439846. Package-Manager: portage-2.2.10/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* Adds HEPv3 protocol support and PJSIP gains DNS client abilities that unlock ↵Tony Vroon2014-04-253-5/+334
| | | | | | | SRV records & weighting. This branch remains experimental and is not recommended for production use at this time. Package-Manager: portage-2.2.7/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* Select bug fixes as cherry picked from the 11 branch. TLS chaining support ↵Tony Vroon2014-04-253-5/+327
| | | | | | | finally upstream. Move up to 11 if you still use this. Package-Manager: portage-2.2.7/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* Bug fix release, fixes include but are not limited to dial plan functions ↵Tony Vroon2014-04-253-15/+335
| | | | | | | coping with a NULL channel (AMI global function), correct NULL handling in ODBC, advertising MESSAGE support in SIP headers, SpanDSP API adherence and protection against non-G711 data in fax detection routines. TLS chaining support finally upstream. Package-Manager: portage-2.2.7/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* Remove oldAgostino Sarubbo2014-03-114-650/+19
| | | | | Package-Manager: portage-2.2.8-r1/cvs/Linux x86_64 Manifest-Sign-Key: 0x7194459F
* Stable for x86, wrt bug #504180Agostino Sarubbo2014-03-114-21/+25
| | | | | | Package-Manager: portage-2.2.8-r1/cvs/Linux x86_64 RepoMan-Options: --include-arches="x86" Manifest-Sign-Key: 0x7194459F
* Stable for amd64, wrt bug #504180Agostino Sarubbo2014-03-114-11/+25
| | | | | | Package-Manager: portage-2.2.8-r1/cvs/Linux x86_64 RepoMan-Options: --include-arches="amd64" Manifest-Sign-Key: 0x7194459F
* New releases in all three branches to address a stack overflow in HTTP ↵Tony Vroon2014-03-117-655/+28
| | | | | | | cookie header processing, a file descriptor exhaustion through session timers in chan_sip and two remote crashes in PJSIP (12 branch only). Removed all vulnerable non-stable ebuilds. Upstream vulnerability reports AST-2014-001, 002, 003 & 004. Package-Manager: portage-2.2.8-r1/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* Version bump on the 12 branch. This, at long last, merges the TLS chaining ↵Tony Vroon2014-03-043-5/+333
| | | | | | | support. Still not recommended for production deployments at this time. Package-Manager: portage-2.2.8-r1/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* Version bump on the 1.8 branch. If you still use this, you should be ↵Tony Vroon2014-03-043-5/+326
| | | | | | | thinking about 11. Package-Manager: portage-2.2.8-r1/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* Fixes a crash on hangup cause set, which is a regression introduced by an ↵Tony Vroon2014-03-043-5/+333
| | | | | | | earlier fix. Performance improvements for high console verbosity. Updated G729 VAD detection patch by Jaco Kroon, closes bug #496584. Package-Manager: portage-2.2.8-r1/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* Stop blowing up the V21 tone detector in SpanDSP by sanitising the input ↵Tony Vroon2014-02-063-5/+332
| | | | | | | data properly. Patch by Michal Rybarik scavenged from an upstream bug report by Jaco Kroon. Closes bug #500504. Package-Manager: portage-2.2.8-r1/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* First release on the 12 branch. This is not LTS, and uses the new ↵Tony Vroon2014-01-133-15/+332
| | | | | | | PJSIP-based SIP channel. If in doubt, you are not ready for this. Package-Manager: portage-2.2.8/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* Inherit the user eclass for enewuser/etc...Mike Frysinger2014-01-084-14/+28
| | | | | Package-Manager: portage-2.2.8/cvs/Linux x86_64 Manifest-Sign-Key: 0xD2E96200
* Remove all vulnerable ebuilds for AST-2013-006 & AST-2013-007; for security ↵Tony Vroon2013-12-237-1577/+11
| | | | | | | bug #494630. Package-Manager: portage-2.2.7/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* Stable for x86, wrt bug #494630Agostino Sarubbo2013-12-234-21/+25
| | | | | | Package-Manager: portage-2.2.7/cvs/Linux x86_64 RepoMan-Options: --include-arches="x86" Manifest-Sign-Key: 0x7194459F
* Stable for amd64, wrt bug #494630Agostino Sarubbo2013-12-234-11/+25
| | | | | | Package-Manager: portage-2.2.7/cvs/Linux x86_64 RepoMan-Options: --include-arches="amd64" Manifest-Sign-Key: 0x7194459F
* Upgrades on both branches for memory corruption (AST-2013-006) & security ↵Tony Vroon2013-12-184-5/+650
| | | | | | | bypass (AST-2013-007) vulnerabilities, as per Agostino Sarubbo in security bug #494630. Squelch unnecessary chatter from build system, as per Patryk Rzadzinski in bug #489862. Package-Manager: portage-2.2.7/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* A useful response to the debug USE-flag, as suggested by Kerin Millar and ↵Tony Vroon2013-10-303-5/+327
| | | | | | | implemented by Jaco Kroon. Closes bug #346959. Package-Manager: portage-2.2.7/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* Voip herd is removed: http://article.gmane.org/gmane.linux.gentoo.devel/88434Pacho Ramos2013-10-273-7/+9
| | | | | Package-Manager: portage-2.2.7/cvs/Linux x86_64 Manifest-Sign-Key: 0xA188FBD4
* Version bump.Tony Vroon2013-10-223-5/+322
| | | | | Package-Manager: portage-2.2.7/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* Version bump. Features improved NAT support and plugs a memory leak in the ↵Tony Vroon2013-10-223-17/+324
| | | | | | | logger. Package-Manager: portage-2.2.7/cvs/Linux x86_64 Manifest-Sign-Key: 0xB5058F9A
* Remove oldAgostino Sarubbo2013-08-284-639/+19
| | | | | Package-Manager: portage-2.1.13.7/cvs/Linux x86_64 Manifest-Sign-Key: 0x7194459F