[OpenWrt-Devel] [PATCH 0/2] [telephony] Asterisk: Multiplevulnerabilities

[José Vázquez Fernández]

Do these vulnerabilities affect the versions included in Attitude Adjustment?

Pepe



Hello Daniel,

I have applied your patches.

Commits:
93ef5a1a85c9dc55b91778a806f6463b11d68026
eee55b8fd0ce811e0b1cc7400f012e19e1f99b30

Thank you so much!
Jiri

Dne 26/06/2014 05:18, Daniel Golle napsal(a):
> Vulnerabilities in various versions of Asterisk have been discovered
> recently.
> See
> http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo/xml/htdocs/security/en/glsa/glsa-201406-25.xml
> 
> http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-4046
> http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-4047
> 
> Both, asterisk-1.8.x and asterisk-11.x should thus be updated to
> the most recent releases.
> 
> Daniel Golle (2):
>   asterisk-1.8.x: bump version
>   asterisk-11.x: bump version
> 
>  net/asterisk-1.8.x/Makefile                                           | 4 ++--
>  net/asterisk-11.x/Makefile                                            | 4 ++--
>  .../patches/010-asterisk-configure-undef-res-ninit.patch              | 2 +-
>  3 files changed, 5 insertions(+), 5 deletions(-)
> 
_______________________________________________
openwrt-devel mailing list
openwrt-devel at lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.infradead.org/pipermail/openwrt-devel/attachments/20140626/2b699466/attachment.htm>
-------------- next part --------------
_______________________________________________
openwrt-devel mailing list
openwrt-devel at lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel