| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Converted to GLEP 81 for user+group.
Consolidated a few DEPEND issues.
Dropped pkg_config phase function.
Took maintainership.
Fixed a bunch of other issues from pkgcheck (${D} and ${ROOT} not having
a / following it directly).
Bumped to EAPI=7
Use $ED over $D where applicable.
Fix statsd integration.
Update depend on virtual/mysql to db/mysql-connector-c
Enable NOISY_BUILD as requested (instructed) by slyfox.
Fix /usr/share/doc/${PV} being asterisk: owned.
Make SSL optional.
This commit enables progress on the GLSA bug: https://bugs.gentoo.org/689796
Might close: https://bugs.gentoo.org/594160 (SIGILL, may be GRSEC, or #667498)
Package-Manager: Portage-2.3.76, Repoman-2.3.16
Closes: https://bugs.gentoo.org/631464
Closes: https://bugs.gentoo.org/654710
Closes: https://bugs.gentoo.org/656472
Closes: https://bugs.gentoo.org/666004
Closes: https://bugs.gentoo.org/667498
Closes: https://bugs.gentoo.org/670522
Closes: https://bugs.gentoo.org/679804
Closes: https://bugs.gentoo.org/686906
Closes: https://bugs.gentoo.org/692696
Signed-off-by: Jaco Kroon <jaco@uls.co.za>
Closes: https://github.com/gentoo/gentoo/pull/13649
Signed-off-by: Joonas Niilola <juippis@gentoo.org>
|
|
|
|
|
|
|
|
| |
Security stabilisation is complete, remove vulnerable 13 branch ebuilds.
Also remove one old 11 branch ebuild.
Signed-Off-By: Tony Vroon <chainsaw@gentoo.org>
Package-Manager: Portage-2.3.49, Repoman-2.3.11
|
|
|
|
|
|
|
| |
Only the 13 branch is vulnerable, so leave the 11 stable branch ebuilds in.
Signed-Off-By: Tony Vroon <chainsaw@gentoo.org>
Package-Manager: Portage-2.3.49, Repoman-2.3.11
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Version bump to 13.23.1 to address 2 security vulnerabilities.
CVE-2018-12227: PJSIP information disclosure
SIP requests blocked by ACL respond 403 for an endpoint that
exists and 401 for an endpoint that does not, allowing an
attacker to identify valid accounts.
CVE-2018-17281: HTTP websocket stack overflow
An attacker can exhaust available stack space and crash the
running Asterisk instance by sending a specially crafted HTTP
request to res_http_websocket.so
Bug: https://bugs.gentoo.org/668848
Signed-Off-By: Tony Vroon <chainsaw@gentoo.org>
Package-Manager: Portage-2.3.49, Repoman-2.3.11
|
|
|
|
|
|
| |
Introducing 13.20.0 & 13.21.0 to troubleshoot an issue.
Package-Manager: Portage-2.3.40, Repoman-2.3.9
|
|
|
|
|
|
|
| |
Bugfix release; addresses stuck channels after app_confbridge ended quickly,
CDR deadlocks and now copes with OpenSSL configured as no-deprecated.
Package-Manager: Portage-2.3.40, Repoman-2.3.9
|
|
|
|
|
|
|
|
| |
This reverts commit 4c1879a1e8036fba62d273cf290096c495dbd7b8.
By request of Jaco Kroon, reinstate 11.25.1 in order to allow
troubleshooting of a memory leak in 11.25.3.
The release will be hard-masked to avoid accidental downgrades.
Consensus in #gentoo-dev that this is acceptable practice.
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
Both vulnerabilities are in res_pjsip and allow a remote DoS. One through sending
a lot of SIP INVITE messages on SIP TCP or SIP-TLS channels and then tearing them
down. The other involves a SUBSCRIBE request containing more than 32 Accept headers,
which overflows the statically allocated buffer.
If you prevent res_pjsip from loading and use the classic chan_sip driver, you may
not be vulnerable. However, this upgrade is being pushed out to all.
Package-Manager: Portage-2.3.19, Repoman-2.3.6
|
|
|
|
| |
Package-Manager: Portage-2.3.19, Repoman-2.3.6
|
| |
|
|
|
|
| |
Package-Manager: portage-2.3.8
|
|
|
|
| |
Package-Manager: portage-2.3.8
|
|
|
|
|
|
|
|
|
|
|
| |
Addresses
- http://downloads.asterisk.org/pub/security/AST-2017-001.html
- http://downloads.asterisk.org/pub/security/AST-2017-002.html
- http://downloads.asterisk.org/pub/security/AST-2017-003.html
- http://downloads.asterisk.org/pub/security/AST-2017-004.html
Package-Manager: Portage-2.3.5, Repoman-2.3.2
|
|
|
|
| |
Package-Manager: Portage-2.3.4, Repoman-2.3.2
|
| |
|
|
|
|
|
|
| |
parameters in SDP offer.
Package-Manager: portage-2.3.2
|
|
|
|
| |
Package-Manager: portage-2.3.2
|
|
|
|
| |
Package-Manager: portage-2.3.2
|
|
|
|
| |
Package-Manager: portage-2.3.0
|
|
|
|
|
|
| |
This adds 11.23.0 & 13.10.0 to the tree. Init script updates by
Jaco Kroon allow faster start-up with a large spool directory,
closes bug #582512
|
| |
|
| |
|
|
|
|
|
|
| |
with removal of deprecated base eclass.
Package-Manager: portage-2.2.28
|
|
|
|
|
|
| |
11.21.1 from building on some systems.
Package-Manager: portage-2.2.27
|
|
|
|
|
|
| |
users in security release 13.7.1
Package-Manager: portage-2.2.27
|
| |
|
|
|
|
|
|
| |
updates on 11 & 13 branches. Removing all vulnerable non-stable ebuilds.
Package-Manager: portage-2.2.27
|
|
|
|
|
|
| |
around DTLS negotiation and PBX deadlocks.
Package-Manager: portage-2.2.26
|
| |
|
|
|
|
| |
Package-Manager: portage-2.2.20
|
|
This commit represents a new era for Gentoo:
Storing the gentoo-x86 tree in Git, as converted from CVS.
This commit is the start of the NEW history.
Any historical data is intended to be grafted onto this point.
Creation process:
1. Take final CVS checkout snapshot
2. Remove ALL ChangeLog* files
3. Transform all Manifests to thin
4. Remove empty Manifests
5. Convert all stale $Header$/$Id$ CVS keywords to non-expanded Git $Id$
5.1. Do not touch files with -kb/-ko keyword flags.
Signed-off-by: Robin H. Johnson <robbat2@gentoo.org>
X-Thanks: Alec Warner <antarus@gentoo.org> - did the GSoC 2006 migration tests
X-Thanks: Robin H. Johnson <robbat2@gentoo.org> - infra guy, herding this project
X-Thanks: Nguyen Thai Ngoc Duy <pclouds@gentoo.org> - Former Gentoo developer, wrote Git features for the migration
X-Thanks: Brian Harring <ferringb@gentoo.org> - wrote much python to improve cvs2svn
X-Thanks: Rich Freeman <rich0@gentoo.org> - validation scripts
X-Thanks: Patrick Lauer <patrick@gentoo.org> - Gentoo dev, running new 2014 work in migration
X-Thanks: Michał Górny <mgorny@gentoo.org> - scripts, QA, nagging
X-Thanks: All of other Gentoo developers - many ideas and lots of paint on the bikeshed
|