package/asterisk: security bump to version 16.1.0
authorPeter Korsgaard <peter@korsgaard.com>
Sun, 23 Dec 2018 21:22:05 +0000 (22:22 +0100)
committerThomas Petazzoni <thomas.petazzoni@bootlin.com>
Wed, 26 Dec 2018 20:12:17 +0000 (21:12 +0100)
Fixes the following security issues:

- ASTERISK-28127: Buffer overflow for DNS SRV/NAPTR records
  https://issues.asterisk.org/jira/browse/ASTERISK-28127

- ASTERISK-28013: res_http_websocket: Crash when reading HTTP Upgrade
  requests
  https://issues.asterisk.org/jira/browse/ASTERISK-28013

For more details, see the announcement:
https://www.asterisk.org/downloads/asterisk-news/asterisk-1610-now-available

Asterisk now also contains m4 code needed to autoreconf under
third-party/jansson, so add that to _AUTORECONF_OPTS.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
package/asterisk/asterisk.hash
package/asterisk/asterisk.mk

index 4b3a087ec51f4202d8d39478d3f1cf002b7d75c9..557660f0cf23881338a09534c5ee4c675669dee7 100644 (file)
@@ -1,5 +1,5 @@
 # Locally computed
-sha256  54f8b172fa41cb7d4450c12666a8f9716ed7ba7391c54d3467c64772f6399d67  asterisk-16.0.0.tar.gz
+sha256  97e1bae8e9034cb2a8bc0d4d5bcc9dee4ffe4c6c57ed40b8825be79266fcac50  asterisk-16.1.0.tar.gz
 
 # sha1 from: http://downloads.asterisk.org/pub/telephony/sounds/releases
 # sha256 locally computed
index 8a46438f923c346bd2a4fdb489bfbe14d53a8d47..90f415647e43940c779d1df1e80bd8edc64e3067 100644 (file)
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-ASTERISK_VERSION = 16.0.0
+ASTERISK_VERSION = 16.1.0
 # Use the github mirror: it's an official mirror maintained by Digium, and
 # provides tarballs, which the main Asterisk git tree (behind Gerrit) does not.
 ASTERISK_SITE = $(call github,asterisk,asterisk,$(ASTERISK_VERSION))
@@ -23,7 +23,7 @@ ASTERISK_LICENSE_FILES = \
 
 # For patches 0002, 0003 and 0005
 ASTERISK_AUTORECONF = YES
-ASTERISK_AUTORECONF_OPTS = -Iautoconf -Ithird-party -Ithird-party/pjproject
+ASTERISK_AUTORECONF_OPTS = -Iautoconf -Ithird-party -Ithird-party/pjproject -Ithird-party/jansson
 
 ASTERISK_DEPENDENCIES = \
        host-asterisk \