Security update AST-2010-003 on the 1.6.1 & 1.6.2 branches. This addresses invalid parsing of ACL rules. Removed vulnerable ebuilds.

Package-Manager: portage-2.2_rc63/cvs/Linux x86_64

4 files changed, 22 insertions, 13 deletions

diff --git a/net-misc/asterisk/ChangeLog b/net-misc/asterisk/ChangeLog
index 0c5962bdb652..8a95602503e4 100644
--- a/net-misc/asterisk/ChangeLog
+++ b/net-misc/asterisk/ChangeLog
@@ -1,6 +1,15 @@
 # ChangeLog for net-misc/asterisk
 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-misc/asterisk/ChangeLog,v 1.250 2010/02/21 21:44:08 chainsaw Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-misc/asterisk/ChangeLog,v 1.251 2010/03/01 22:07:46 chainsaw Exp $
+
+*asterisk-1.6.2.5 (01 Mar 2010)
+*asterisk-1.6.1.17 (01 Mar 2010)
+
+  01 Mar 2010; <chainsaw@gentoo.org> -asterisk-1.6.1.16.ebuild,
+  +asterisk-1.6.1.17.ebuild, -asterisk-1.6.2.4.ebuild,
+  +asterisk-1.6.2.5.ebuild:
+  Security update AST-2010-003 on the 1.6.1 & 1.6.2 branches. This addresses
+  invalid parsing of ACL rules. Removed vulnerable ebuilds.
 
 *asterisk-1.2.40 (21 Feb 2010)
 
diff --git a/net-misc/asterisk/Manifest b/net-misc/asterisk/Manifest
index da22c1f3f201..2674a1ae2d58 100644
--- a/net-misc/asterisk/Manifest
+++ b/net-misc/asterisk/Manifest
@@ -37,19 +37,19 @@ DIST asterisk-1.2.27-patches-1.0.tar.bz2 6653 RMD160 18f1d7fc4497466050ed4f517ff
 DIST asterisk-1.2.36.tar.gz 29897926 RMD160 47b8c0e58c43cac6aa415482182aea15b1489ccc SHA1 b6f60404ba0ca802cfa5cd43685a36b467441c5c SHA256 69f48a0e49f3a37196b65f11e8babf5c28e33700903b9f304e984def6c35dbf0
 DIST asterisk-1.2.37.tar.gz 29899629 RMD160 1de7ff96d3b1fd8d89f3ef7b3bb9e35bedccfb33 SHA1 c9a3c4684e021f62b4d19f6e0c8fc11f64db19d6 SHA256 9f3ec67efe0e4d45434621cd358e8e7d64e1b05df04d66e2390c9420acd2aeaa
 DIST asterisk-1.2.40.tar.gz 29903514 RMD160 dc3da60756c82c98a055e49b068eb6760a01948e SHA1 4b4b794e858a3436bc35bdd2f4edf824c2885b68 SHA256 61dc745b12f6dc2998404e77747a964db56df8efae84a666c4ccddf016c9c06d
-DIST asterisk-1.6.1.16.tar.gz 23517899 RMD160 a03f86ae3eecfe940eb63a40286b9697a3c7e6ac SHA1 df0ad2f94614479c7bff13ae24200b89f9605132 SHA256 997786c51698827d5dc9c17793deb47716c857de9ce884c6ecd9e8447599727c
-DIST asterisk-1.6.2.4.tar.gz 23184195 RMD160 72d42566475376484774e0e198075716a77f6c3c SHA1 bed12cbfb9af09898ec8810b903512f1ad1f4512 SHA256 3b08ce205ced7b5fe96dabb5f65f5d6b094cf1d4c543df3d86c08bbe3a0f2e51
+DIST asterisk-1.6.1.17.tar.gz 23519546 RMD160 86c54a56b9d5c7565c9d3d54c0d6cd043e9decd3 SHA1 7af18a384f7832d8818e0548263681b3e839447f SHA256 44a597cc5e3b5d1455cc0f957ac9519990b71360621d9580386b8316c4712fcf
+DIST asterisk-1.6.2.5.tar.gz 23186361 RMD160 b1eb6f20d965480f6895b92cde56d4eb25b8a65a SHA1 16fad82419469db2b059478e75bb0cb3c5d38892 SHA256 fbce90bcff67ab9d70931083e58642bf63164c9ed392b0b7fccf5c50d6e529be
 EBUILD asterisk-1.2.36.ebuild 10640 RMD160 de9118d48d7122200847783aec84e89724f33475 SHA1 8839099437bb0fa20ab7ba4c4aabeef33be353d5 SHA256 73421c18cf2aec1412ef1f86cb6a810765cf7c78fdb056b2e84224430368a1ca
 EBUILD asterisk-1.2.37.ebuild 10640 RMD160 82f1d14082b607402146bd8f7950ea32ee2558f3 SHA1 5718e0411fff8bc14c4c57562a9df281c33abdc5 SHA256 2f2290922b09f9b71b06cb73e99fc7916b4a994960375e0e48b6bb39fd802e0c
 EBUILD asterisk-1.2.40.ebuild 10647 RMD160 7b267ebc801d87ad4a1433454cf64b36227647b4 SHA1 949f14d1e7fce52b8a09af12aa5283aafe479450 SHA256 2d96cf3daddf083c3094780a97e6699869e7ad9fc8c82f1a4fb17cee520b96c6
-EBUILD asterisk-1.6.1.16.ebuild 11228 RMD160 353dc948d499efafee74c741bd61d310b0c74815 SHA1 d5d3f04469dd8b425ec30d7db9de552263439d46 SHA256 e6db16c5b51048839db684379ec05cc162ed03b7fa03a6a9dd8c7509c661473e
-EBUILD asterisk-1.6.2.4.ebuild 9958 RMD160 446e23144bf699618d57b116b1ff95efa550aff5 SHA1 30b1f6a0267df97a8dd8a5722a75339052a74691 SHA256 5d53e17d965a190b91dcf56fdf32e51dd36409c3408bc991052da20c117a2101
-MISC ChangeLog 55885 RMD160 7d661a63c9312a1a550a4c9c7acfaac7c1da7a3a SHA1 acd306d72b1f39f73181ce073ea8653f0b95ba60 SHA256 2963d40e82a7ba96a424d958578b051bdb43b32f8dfec90455709872b32f5579
+EBUILD asterisk-1.6.1.17.ebuild 11238 RMD160 4717b43691d51fda47c678e322b98b070f195511 SHA1 8904205ded4c2f85955a2156daf8b1c75262af77 SHA256 047a4b7efd2aeef3e4cdcd9c2eabbb5f079b0e8f739b3eb213257fa4cf723f20
+EBUILD asterisk-1.6.2.5.ebuild 9968 RMD160 a7c595cc21212cc579ebbb6822ca20b6c24cc565 SHA1 90a2298221b7f508392fb5f06001c8f59fa3b9e1 SHA256 10efdebb3c610f2e149f9972e20c25ed755590a6befe26fecef5923f9fce498e
+MISC ChangeLog 56236 RMD160 b569e5cf4f44a3a768b3976178f3c970f3208095 SHA1 22ecd8f428b1b0de2c578802004584a9ae829b9d SHA256 38a7b38998926afc7e30681114ffcbfaf5c1a81806c0c9a11b29e61b5e844d2d
 MISC metadata.xml 1103 RMD160 9be6c713684efa268e58cfc111fae4716e97f9dd SHA1 5af1f100c97f1bca1834867e06c3fb9111ed1fde SHA256 a83ca9d4cfd8da10b8dbb9583e1b6fa5fc0f30968a0681e4bc931673a00e1c99
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.14 (GNU/Linux)
 
-iEYEARECAAYFAkuBqTIACgkQp5vW4rUFj5qnIQCgoaLqBPCQHRBL4lWdlUH8gqfN
-vksAn0XdwUVRffMrKMoZp/zLgCfcM5/K
-=LUvJ
+iEYEARECAAYFAkuMOs8ACgkQp5vW4rUFj5q/NQCeJSmna9CiaA9LIc2exnYf82Hf
+fH0Anjehx8XUn88Q+3Ys+Ob1aB4jse01
+=7Qnr
 -----END PGP SIGNATURE-----
diff --git a/net-misc/asterisk/asterisk-1.6.1.16.ebuild b/net-misc/asterisk/asterisk-1.6.1.17.ebuild
index b4eb3becfedb..5a54623fed2b 100644
--- a/net-misc/asterisk/asterisk-1.6.1.16.ebuild
+++ b/net-misc/asterisk/asterisk-1.6.1.17.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2010 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-misc/asterisk/asterisk-1.6.1.16.ebuild,v 1.1 2010/02/21 20:39:54 chainsaw Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-misc/asterisk/asterisk-1.6.1.17.ebuild,v 1.1 2010/03/01 22:07:46 chainsaw Exp $
 
 EAPI=1
 inherit eutils autotools
@@ -9,7 +9,7 @@ MY_P="${PN}-${PV/_/-}"
 
 DESCRIPTION="Asterisk: A Modular Open Source PBX System"
 HOMEPAGE="http://www.asterisk.org/"
-SRC_URI="http://downloads.digium.com/pub/asterisk/releases/${MY_P}.tar.gz"
+SRC_URI="http://downloads.digium.com/pub/telephony/asterisk/releases/${MY_P}.tar.gz"
 LICENSE="GPL-2"
 SLOT="0"
 KEYWORDS="~amd64 ~x86"
diff --git a/net-misc/asterisk/asterisk-1.6.2.4.ebuild b/net-misc/asterisk/asterisk-1.6.2.5.ebuild
index 03830c1b75b4..d6d7aab37f6c 100644
--- a/net-misc/asterisk/asterisk-1.6.2.4.ebuild
+++ b/net-misc/asterisk/asterisk-1.6.2.5.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2010 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-misc/asterisk/asterisk-1.6.2.4.ebuild,v 1.1 2010/02/21 20:39:54 chainsaw Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-misc/asterisk/asterisk-1.6.2.5.ebuild,v 1.1 2010/03/01 22:07:46 chainsaw Exp $
 
 EAPI=1
 inherit eutils autotools linux-info
@@ -9,7 +9,7 @@ MY_P="${PN}-${PV/_/-}"
 
 DESCRIPTION="Asterisk: A Modular Open Source PBX System"
 HOMEPAGE="http://www.asterisk.org/"
-SRC_URI="http://downloads.digium.com/pub/asterisk/releases/${MY_P}.tar.gz"
+SRC_URI="http://downloads.digium.com/pub/telephony/asterisk/releases/${MY_P}.tar.gz"
 LICENSE="GPL-2"
 SLOT="0"
 KEYWORDS="~amd64 ~x86"