2
1
Эх сурвалжийг харах

package/asterisk: security bump to version 16.1.0

Fixes the following security issues:

- ASTERISK-28127: Buffer overflow for DNS SRV/NAPTR records
  https://issues.asterisk.org/jira/browse/ASTERISK-28127

- ASTERISK-28013: res_http_websocket: Crash when reading HTTP Upgrade
  requests
  https://issues.asterisk.org/jira/browse/ASTERISK-28013

For more details, see the announcement:
https://www.asterisk.org/downloads/asterisk-news/asterisk-1610-now-available

Asterisk now also contains m4 code needed to autoreconf under
third-party/jansson, so add that to _AUTORECONF_OPTS.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Peter Korsgaard 6 жил өмнө
parent
commit
7d3548cf46

+ 1 - 1
package/asterisk/asterisk.hash

@@ -1,5 +1,5 @@
 # Locally computed
-sha256  54f8b172fa41cb7d4450c12666a8f9716ed7ba7391c54d3467c64772f6399d67  asterisk-16.0.0.tar.gz
+sha256  97e1bae8e9034cb2a8bc0d4d5bcc9dee4ffe4c6c57ed40b8825be79266fcac50  asterisk-16.1.0.tar.gz
 
 # sha1 from: http://downloads.asterisk.org/pub/telephony/sounds/releases
 # sha256 locally computed

+ 2 - 2
package/asterisk/asterisk.mk

@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-ASTERISK_VERSION = 16.0.0
+ASTERISK_VERSION = 16.1.0
 # Use the github mirror: it's an official mirror maintained by Digium, and
 # provides tarballs, which the main Asterisk git tree (behind Gerrit) does not.
 ASTERISK_SITE = $(call github,asterisk,asterisk,$(ASTERISK_VERSION))
@@ -23,7 +23,7 @@ ASTERISK_LICENSE_FILES = \
 
 # For patches 0002, 0003 and 0005
 ASTERISK_AUTORECONF = YES
-ASTERISK_AUTORECONF_OPTS = -Iautoconf -Ithird-party -Ithird-party/pjproject
+ASTERISK_AUTORECONF_OPTS = -Iautoconf -Ithird-party -Ithird-party/pjproject -Ithird-party/jansson
 
 ASTERISK_DEPENDENCIES = \
 	host-asterisk \