Remove vulnerable version as per Alex "a3li" Legler in security bug #295270.
authorTony Vroon <chainsaw@gentoo.org>
Mon, 31 May 2010 21:29:24 +0000 (21:29 +0000)
committerTony Vroon <chainsaw@gentoo.org>
Mon, 31 May 2010 21:29:24 +0000 (21:29 +0000)
Package-Manager: portage-2.2_rc67/cvs/Linux x86_64

net-misc/asterisk/ChangeLog
net-misc/asterisk/Manifest
net-misc/asterisk/asterisk-1.2.36.ebuild [deleted file]

index c586ca4425cfd221002e4e3a3c4228fc86807ff8..983d0ffd589d1c6f9836ca6d5d302d72400891cf 100644 (file)
@@ -1,6 +1,10 @@
 # ChangeLog for net-misc/asterisk
 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-misc/asterisk/ChangeLog,v 1.256 2010/05/13 15:32:27 chainsaw Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-misc/asterisk/ChangeLog,v 1.257 2010/05/31 21:29:24 chainsaw Exp $
+
+  31 May 2010; <chainsaw@gentoo.org> -asterisk-1.2.36.ebuild:
+  Remove vulnerable version as per Alex "a3li" Legler in security bug
+  #295270.
 
 *asterisk-1.6.1.19 (13 May 2010)
 
index c66a9384110df4d65d8b9fede0c226973d1d79d4..514e86996c6c5e65d5e083d1ec27f6f858a83cd4 100644 (file)
@@ -37,26 +37,24 @@ AUX 1.6.2/asterisk-1.6.2.2-parallel-make.patch 842 RMD160 e62c458de2508c86985029
 AUX 1.6.2/asterisk-1.6.2.7-gsm-pic.patch 2252 RMD160 4937581fc7b1c13ea9c79b78e5b4ee5db88a7726 SHA1 ca7794d229fff2e4cf612b76b1a3adfcc1ecf282 SHA256 9e5ec93a3c5adf36567e6e2f8f3b02b24eee598ba3c209ca076048b748c84039
 AUX 1.6.2/asterisk-1.6.2.7-pri-missing-keyword.patch 547 RMD160 e45a2804c3d23deef066e4aece3fb332feb2a940 SHA1 b6331ef76abfebd29cc08904e58eb59d9fc539c2 SHA256 39df21e12b59be537200d522fa32f7dfdfb6026f2abb3c11d22aabcb6c6d97cd
 DIST asterisk-1.2.27-patches-1.0.tar.bz2 6653 RMD160 18f1d7fc4497466050ed4f517ff5732eb448ff2e SHA1 2aecd3e91cde38dbb0fd591e8a49db221f44b94e SHA256 a4da0570fca2df3c508f072be62722879956fe8c454027fbb8dafb7a6095384c
-DIST asterisk-1.2.36.tar.gz 29897926 RMD160 47b8c0e58c43cac6aa415482182aea15b1489ccc SHA1 b6f60404ba0ca802cfa5cd43685a36b467441c5c SHA256 69f48a0e49f3a37196b65f11e8babf5c28e33700903b9f304e984def6c35dbf0
 DIST asterisk-1.2.37.tar.gz 29899629 RMD160 1de7ff96d3b1fd8d89f3ef7b3bb9e35bedccfb33 SHA1 c9a3c4684e021f62b4d19f6e0c8fc11f64db19d6 SHA256 9f3ec67efe0e4d45434621cd358e8e7d64e1b05df04d66e2390c9420acd2aeaa
 DIST asterisk-1.2.40.tar.gz 29903514 RMD160 dc3da60756c82c98a055e49b068eb6760a01948e SHA1 4b4b794e858a3436bc35bdd2f4edf824c2885b68 SHA256 61dc745b12f6dc2998404e77747a964db56df8efae84a666c4ccddf016c9c06d
 DIST asterisk-1.6.1.18.tar.gz 23585542 RMD160 ca6647cce5a176526ba1cb9dcb0e1e227986b268 SHA1 99871bc2257185437c22b7f0e44a09c356ffe027 SHA256 f3dab39190c7c938099e8961eb9917d5cf15570180dc0e613e7bb2562a621e5b
 DIST asterisk-1.6.1.19.tar.gz 23600478 RMD160 df5ba06911f76cc54646c516c65c5e4ec4692f3d SHA1 a97f8f37b768fef88bc73ee066a0743978672a87 SHA256 a0a3f0c0d6eed2f7ca40474d67ea1ec40a0146f086966b369911ae8a9884646f
 DIST asterisk-1.6.2.6.tar.gz 23265995 RMD160 35c724b968a00abdc5bbb07e63ec9004872cdef8 SHA1 93c25c30fbe2003955362d9ce173367ecc6e5b49 SHA256 2c724a53c40d12fc37100c1daa8312fd99eee26920907e3094c7c2b7d0e7eb61
 DIST asterisk-1.6.2.7.tar.gz 23283195 RMD160 d3298a22679c93e565e9f8f371d4abb158a0ee73 SHA1 da14520b918ae7ab5a8b47d8f3a4e7fd95f66ab3 SHA256 217f5fecd2a032c39f401ccdeb8fcdc31a94b44a504d1c567807a527bfacf117
-EBUILD asterisk-1.2.36.ebuild 10640 RMD160 de9118d48d7122200847783aec84e89724f33475 SHA1 8839099437bb0fa20ab7ba4c4aabeef33be353d5 SHA256 73421c18cf2aec1412ef1f86cb6a810765cf7c78fdb056b2e84224430368a1ca
 EBUILD asterisk-1.2.37.ebuild 10640 RMD160 82f1d14082b607402146bd8f7950ea32ee2558f3 SHA1 5718e0411fff8bc14c4c57562a9df281c33abdc5 SHA256 2f2290922b09f9b71b06cb73e99fc7916b4a994960375e0e48b6bb39fd802e0c
 EBUILD asterisk-1.2.40.ebuild 10647 RMD160 7b267ebc801d87ad4a1433454cf64b36227647b4 SHA1 949f14d1e7fce52b8a09af12aa5283aafe479450 SHA256 2d96cf3daddf083c3094780a97e6699869e7ad9fc8c82f1a4fb17cee520b96c6
 EBUILD asterisk-1.6.1.18.ebuild 10481 RMD160 67b58c7c3cef4861bb0e1b9664b77a35e28a9fb4 SHA1 12c06fec5595d4d14783ec47dce166c4a97d385f SHA256 80b633d3361a2cb00b3dd2849d15f41f8e9fd5c0c5ebaa579745ffff3ed9fb52
 EBUILD asterisk-1.6.1.19.ebuild 8266 RMD160 e41e7238bd6c98b88715a97d024fb80def54f996 SHA1 11dbe9bb8d3c90aa6abd78d6c614418d3c360d20 SHA256 89d529c87a11e75ebebcf0ea33bd353d14695574ceffc1e63ebd7d3caf17a612
 EBUILD asterisk-1.6.2.6.ebuild 9213 RMD160 e2b7a225465c40aa6918c49ec70cbeace348c0cf SHA1 05779eb142f09aad35f246a3f5476ad06bf5d4fe SHA256 e7f7581cfc7fe4bd1093f2372e3689a96d7db1b82d6a9d0c44a769e4a1a62cdf
 EBUILD asterisk-1.6.2.7.ebuild 8533 RMD160 a492f050c1d83b2c73ba14a8ec66802235523e6f SHA1 548eb8beb4036524dbdbce912165546d6df41dd4 SHA256 bedc535776fd541fe8a18293db2e0177fb6fac91bfa578624ae5c96bfafa44c5
-MISC ChangeLog 57596 RMD160 a31c55a4ba40bf91c84e0a31c3bd621386081c54 SHA1 438c319e2dcefc68b42c81128559511bfb7508c5 SHA256 7e504452e569730cc61dbf1186bc2bb91d387570beae3f756042cd724852ecdf
+MISC ChangeLog 57740 RMD160 d44838a477539fc2f6f0e85376ac5b3b66c451ea SHA1 39de9042d4b75341d8a301b2f636e39eb1a7e5dd SHA256 57fff4152f6b3979d69817873b6652530226e0d001c6cdadd3ecc8dd28f6df7e
 MISC metadata.xml 1194 RMD160 eb5bd4c2f4ca0a72b9c8240ca8b418b571a9fbc6 SHA1 9879daac2d99f61402611c074189d40e7b7686eb SHA256 5cc63816f6f4cbb85c45ceee1621eab11fc2f2b40be963af0c7d834dcbb7959d
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.15 (GNU/Linux)
 
-iEYEARECAAYFAkvsG5UACgkQp5vW4rUFj5rJ2gCdH7QAuW0R8FBMngeQj311OKbl
-P9QAn3Xv0MndHR3YVt5DEQlShE9rMPBs
-=C/40
+iEYEARECAAYFAkwEKmkACgkQp5vW4rUFj5r+uACfUhyUH4JCU4WZa2vbSHzN1NBO
+ZpsAnAqJTiEAtjv2W/ee6+cgd+5/miTn
+=CvOW
 -----END PGP SIGNATURE-----
diff --git a/net-misc/asterisk/asterisk-1.2.36.ebuild b/net-misc/asterisk/asterisk-1.2.36.ebuild
deleted file mode 100644 (file)
index 635a4da..0000000
+++ /dev/null
@@ -1,402 +0,0 @@
-# Copyright 1999-2009 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-misc/asterisk/asterisk-1.2.36.ebuild,v 1.6 2009/12/27 09:41:51 josejx Exp $
-
-EAPI=2
-inherit eutils multilib toolchain-funcs
-
-IUSE="alsa curl debug doc gtk hardened lowmem mmx nosamples \
-       odbc osp postgres pri sqlite ssl speex zaptel elibc_uclibc"
-
-AST_PATCHES="1.2.27-patches-1.0"
-
-MY_P="${P/_p/.}"
-
-DESCRIPTION="Asterisk: A Modular Open Source PBX System"
-HOMEPAGE="http://www.asterisk.org/"
-SRC_URI="http://downloads.digium.com/pub/asterisk/releases/${MY_P}.tar.gz
-        mirror://gentoo/${PN}-${AST_PATCHES}.tar.bz2"
-
-S="${WORKDIR}/${MY_P}"
-
-SLOT="0"
-LICENSE="GPL-2"
-KEYWORDS="alpha amd64 ~hppa ppc sparc x86"
-
-RDEPEND="dev-libs/newt
-       media-sound/sox
-       ssl? ( dev-libs/openssl )
-       gtk? ( =x11-libs/gtk+-1.2* )
-       pri? ( =net-libs/libpri-1.2*[-bri] )
-       alsa? ( media-libs/alsa-lib )
-       curl? ( net-misc/curl )
-       odbc? ( dev-db/unixODBC )
-       speex? ( media-libs/speex )
-       sqlite? ( <dev-db/sqlite-3.0.0 )
-       zaptel? ( >=net-misc/zaptel-1.2.16 )
-       postgres? ( virtual/postgresql-base )
-       osp? ( >=net-libs/osptoolkit-3.3.4 )"
-
-DEPEND="${RDEPEND}
-       sys-devel/flex
-       sys-devel/bison
-       doc? ( app-doc/doxygen )
-       virtual/logger"
-
-#asterisk uses special mpg123 functions and does not work with mpeg321, bug #42703
-PDEPEND="|| ( media-sound/mpg123 net-misc/asterisk-addons )"
-
-QA_TEXTRELS_x86="usr/lib/asterisk/modules/codec_gsm.so"
-QA_EXECSTACK_x86="usr/lib/asterisk/modules/codec_gsm.so"
-
-#
-# List of modules to ignore during scan (because they have been removed in 1.2.x)
-#
-SCAN_IGNORE_MODS="
-       app_qcall
-       chan_modem
-       chan_modem_i4l
-       chan_modem_bestdata
-       chan_modme_aopen"
-
-#
-# shortcuts
-#
-is_ast10update() {
-       return $(has_version "=net-misc/asterisk-1.0*")
-}
-
-is_astupdate() {
-       if ! is_ast10update; then
-               return $(has_version "<net-misc/asterisk-${PV}")
-       fi
-       return 0
-}
-
-#
-# Scan for asterisk-1.0.x modules that will have to be updated
-#
-scan_modules() {
-       local modules_list=""
-       local n
-
-       for x in $(ls -1 "${ROOT}"usr/$(get_libdir)/asterisk/modules/*.so); do
-               echo -en "Scanning.... $(basename ${x})   \r"
-
-               # skip blacklisted modules
-               hasq $(basename ${x//.so}) ${SCAN_IGNORE_MODS} && continue
-
-               if $(readelf -s "${x}" | grep -q "\(ast_load\|ast_destroy\)$"); then
-                       modules_list="${modules_list} $(basename ${x//.so})"
-               fi
-       done
-
-       if [[ -n "${modules_list}" ]]; then
-               echo  "   ========================================================"
-               ewarn "Please update or unmerge the following modules:"
-               echo
-
-               n=0
-               for x in ${modules_list}; do
-                       ewarn " -   ${x}"
-                       (( n++ ))
-               done
-
-               echo
-               ewarn "Warning: $n outdated module(s) found!"
-               ewarn "Warning: asterisk may not work if you don't update them!"
-               echo  "   ========================================================"
-               echo
-               einfo "You can use the \"asterisk-updater\" script to update the modules"
-               epause
-               echo
-               return 1
-       else
-               einfo "No asterisk-1.0.x modules found!"
-               return 0
-       fi
-}
-
-pkg_setup() {
-       local checkfailed=0 waitaftermsg=0
-
-       if is_ast10update; then
-               ewarn "                      Asterisk UPGRADE Warning"
-               ewarn ""
-               ewarn "- Please read "${ROOT}"usr/share/doc/${PF}/UPGRADE.txt.gz after the installation!"
-               ewarn ""
-               ewarn "                      Asterisk UPGRADE Warning"
-               echo
-               waitaftermsg=1
-       fi
-
-       #
-       # Regular checks
-       #
-       einfo "Running some pre-flight checks..."
-       echo
-
-}
-
-src_prepare() {
-       #
-       # gentoo patchset
-       #
-       for x in $(grep -v "^#\| \+" "${WORKDIR}"/patches/patches.list); do
-               epatch "${WORKDIR}"/patches/${x}
-       done
-
-       if use mmx; then
-               if ! use hardened; then
-                       einfo "Enabling mmx optimization"
-                       sed -i -e "s:^#\(K6OPT[\t ]\+= -DK6OPT\):\1:" \
-                               Makefile
-               else
-                       ewarn "Hardened use-flag is set, not enabling mmx optimization for codec_gsm!"
-               fi
-       fi
-
-       if ! use debug; then
-               einfo "Disabling debug support"
-               sed -i -e "s:^\(DEBUG=\):#\1:" \
-                       Makefile
-       fi
-
-       if ! use ssl; then
-               einfo "Disabling crypto support"
-               sed -i -e 's:^#\(NOCRYPTO=yes\):\1:' \
-                       -e '/^LIBS+=-lssl/d' Makefile || die
-       fi
-
-       epatch "${FILESDIR}/1.2.0/${PN}-1.2.35-lpc10-prototypes.diff"
-
-       #
-       # uclibc patch
-       #
-       if use elibc_uclibc; then
-               einfo "Patching asterisk for uclibc..."
-               epatch "${FILESDIR}"/1.0.0/${PN}-1.0.5-uclibc-dns.diff
-               epatch "${FILESDIR}"/1.2.0/${PN}-1.2.1-uclibc-getloadavg.diff
-       fi
-
-       #
-       # Disable AEL, security bug #171884
-       # Re-enable at your own risk (no USE since it can be critical)
-       #
-       sed -i -e 's/pbx_ael.so//' pbx/Makefile || die
-
-       # codecs/Makefile does not add -lspeexdsp needed for speex 1.2,  bug #206463
-       if use speex && has_version ">=media-libs/speex-1.2"; then
-               sed -i -e "s/-lspeex/-lspeex -lspeexdsp/" codecs/Makefile \
-                       || die "patching codecs/Makefile failed"
-       fi
-}
-
-src_compile() {
-       local myopts
-
-       use lowmem && \
-               myopts="-DLOW_MEMORY"
-
-       einfo "Building Asterisk..."
-       if use debug; then
-               unset CFLAGS
-               make \
-                       CC=$(tc-getCC) \
-                       NOTRACE=1 \
-                       PWLIBDIR=/usr/share/pwlib \
-                       OPTIONS="${myopts}" \
-                       dont-optimize=1 || die "Make failed"
-       else
-               make \
-                       CC=$(tc-getCC) \
-                       NOTRACE=1 \
-                       OPTIMIZE="${CFLAGS}" \
-                       PWLIBDIR=/usr/share/pwlib \
-                       OPTIONS="${myopts}" || die "Make failed"
-       fi
-
-       # create api docs
-       use doc && \
-               make progdocs
-}
-
-src_install() {
-
-       # install asterisk
-       make DESTDIR="${D}" ASTLIBDIR="\$(INSTALL_PREFIX)/usr/$(get_libdir)/asterisk" install || die "Make install failed"
-       make DESTDIR="${D}" ASTLIBDIR="\$(INSTALL_PREFIX)/usr/$(get_libdir)/asterisk" samples || die "Failed to create sample files"
-
-       # remove installed sample files if nosamples flag is set
-       if use nosamples; then
-               einfo "Skipping installation of sample files..."
-               rm -rf "${D}"var/spool/asterisk/voicemail/default
-               rm -f  "${D}"var/lib/asterisk/mohmp3/*
-               rm -f  "${D}"var/lib/asterisk/sounds/demo-*
-               rm -f  "${D}"var/lib/asterisk/agi-bin/*
-       else
-               einfo "Sample files have been installed"
-               keepdir /var/spool/asterisk/voicemail/default/1234/INBOX
-       fi
-
-       # move sample configuration files to doc directory
-       if is_ast10update; then
-               elog "Updating from old (pre-1.2) asterisk version, new configuration files have been installed"
-               elog "into "${ROOT}"etc/asterisk, use etc-update or dispatch-conf to update them"
-       elif has_version "net-misc/asterisk"; then
-               elog "Configuration samples have been moved to: $ROOT/usr/share/doc/${PF}/conf"
-               insinto /usr/share/doc/${PF}/conf
-               doins "${D}"etc/asterisk/*.conf*
-               rm -f "${D}"etc/asterisk/*.conf* 2>/dev/null
-       fi
-
-       # don't delete these directories, even if they are empty
-       for x in voicemail meetme system dictate monitor tmp; do
-               keepdir /var/spool/asterisk/${x}
-       done
-       keepdir /var/lib/asterisk/sounds/priv-callerintros
-       keepdir /var/lib/asterisk/mohmp3
-       keepdir /var/lib/asterisk/agi-bin
-       keepdir /var/log/asterisk/cdr-csv
-       keepdir /var/log/asterisk/cdr-custom
-       keepdir /var/run/asterisk
-
-       # install astxs
-       dobin  contrib/scripts/astxs
-
-       newinitd "${FILESDIR}"/1.2.0/asterisk.rc6 asterisk
-       newconfd "${FILESDIR}"/1.2.0/asterisk.confd asterisk
-
-       # install standard docs...
-       dodoc BUGS CREDITS ChangeLog HARDWARE README
-       dodoc SECURITY doc/CODING-GUIDELINES doc/linkedlists.README UPGRADE.txt
-       dodoc doc/README.*
-       dodoc doc/*.txt
-
-       docinto scripts
-       dodoc contrib/scripts/*
-
-       docinto utils
-       dodoc contrib/utils/*
-
-       docinto configs
-       dodoc configs/*
-
-       # install api docs
-       if use doc; then
-               insinto /usr/share/doc/${PF}/api/html
-               doins doc/api/html/*
-       fi
-
-       insinto /usr/share/doc/${PF}/cgi
-       doins contrib/scripts/vmail.cgi
-       doins images/*.gif
-
-       # install asterisk-updater
-       dosbin "${FILESDIR}"/1.2.0/asterisk-updater
-
-       # install asterisk.h, a lot of external modules need this
-       insinto /usr/include/asterisk
-       doins   include/asterisk.h
-
-       # make sure misdn/capi stuff is not installed, provided by asterisk-chan_..
-       rm -f "${D}"/etc/asterisk/misdn.conf "${D}"/usr/lib/asterisk/modules/chan_misdn.so \
-               "${D}"/usr/share/doc/${PF}/{conf/misdn.conf,configs/misdn.conf.sample.gz,README.misdn.gz}
-       rm -f "${D}"/usr/include/asterisk/chan_capi{,_app}.h \
-               "${D}"/usr/share/doc/${PF}/{conf/capi.conf,configs/capi.conf.sample.gz}
-
-       # make sure the broken speex support does not keep Asterisk from starting up
-       # bug #206463 if you care about this. solution needs to work with --as-needed
-       rm -f "${D}"usr/$(get_libdir)/asterisk/modules/codec_speex.so || die "Unable to remove fatally flawed codec_speex.so"
-}
-
-pkg_preinst() {
-       enewgroup asterisk
-       enewuser asterisk -1 -1 /var/lib/asterisk "asterisk,dialout"
-}
-
-pkg_postinst() {
-       einfo "Fixing permissions"
-       chown -R asterisk:asterisk "${ROOT}"var/log/asterisk
-       chmod -R u=rwX,g=rX,o=     "${ROOT}"var/log/asterisk
-
-       for x in lib run spool; do
-               chown -R asterisk:asterisk "${ROOT}"var/${x}/asterisk
-               chmod -R u=rwX,g=rwX,o=    "${ROOT}"var/${x}/asterisk
-       done
-
-       chown asterisk:asterisk "${ROOT}"etc/asterisk/
-       chown asterisk:asterisk "${ROOT}"etc/asterisk/*.adsi
-       chown asterisk:asterisk "${ROOT}"etc/asterisk/extensions.ael
-       chmod u=rwX,g=rwX,o= "${ROOT}"etc/asterisk/
-       chmod u=rwX,g=rwX,o= "${ROOT}"etc/asterisk/*.adsi
-       chmod u=rwX,g=rwX,o= "${ROOT}"etc/asterisk/extensions.ael
-       echo
-
-       #
-       # Announcements, warnings, reminders...
-       #
-       einfo "Asterisk has been installed"
-       einfo ""
-       elog "If you want to know more about asterisk, visit these sites:"
-       elog "http://www.asteriskdocs.org/"
-       elog "http://www.voip-info.org/wiki-Asterisk"
-       elog
-       elog "http://www.automated.it/guidetoasterisk.htm"
-       elog
-       elog "Gentoo VoIP IRC Channel:"
-       elog "#gentoo-voip @ irc.freenode.net"
-       elog
-       elog "Please note that AEL is no longer built because of security bugs"
-       elog "See http://bugs.gentoo.org/show_bug.cgi?id=171884"
-       elog
-       echo
-       echo
-
-       #
-       # Warning about 1.0 -> 1.2 changes...
-       #
-       if is_ast10update; then
-               ewarn ""
-               ewarn "- Please read "${ROOT}"usr/share/doc/${PF}/UPGRADE.txt.gz before continuing"
-               ewarn ""
-       fi
-
-       if is_astupdate; then
-               ewarn ""
-               ewarn " - The initgroups patch has been dropped, please update your"
-               ewarn "   \"conf.d/asterisk\" and \"init.d/asterisk\" file!"
-               ewarn ""
-       fi
-
-       # scan for old modules
-       if is_ast10update; then
-               einfo "Asterisk has been updated from pre-1.2.x, scanning for old modules"
-               scan_modules
-       fi
-}
-
-pkg_config() {
-       einfo "Do you want to reset file permissions and ownerships (y/N)?"
-
-       read tmp
-       tmp="$(echo $tmp | tr [:upper:] [:lower:])"
-
-       if [[ "$tmp" = "y" ]] ||\
-          [[ "$tmp" = "yes" ]]
-       then
-               einfo "Resetting permissions to defaults..."
-
-               for x in spool run lib log; do
-                       chown -R asterisk:asterisk "${ROOT}"var/${x}/asterisk
-                       chmod -R u=rwX,g=rX,o=     "${ROOT}"var/${x}/asterisk
-               done
-
-               chown -R root:asterisk "${ROOT}"etc/asterisk
-               chmod -R u=rwX,g=rX,o= "${ROOT}"etc/asterisk
-
-               einfo "done"
-       else
-               einfo "skipping"
-       fi
-}