From 822816f6a86de39f8c90de67363affbca7b52d4d Mon Sep 17 00:00:00 2001 From: Gustavo Zacarias Date: Tue, 13 Mar 2007 18:36:08 +0000 Subject: [PATCH] Revbump wrt security #169616 and sparc stable Package-Manager: portage-2.1.2.2 --- net-misc/asterisk/ChangeLog | 8 +- net-misc/asterisk/Manifest | 29 +- net-misc/asterisk/asterisk-1.2.14-r1.ebuild | 480 ++++++++++++++++++ .../1.2.0/asterisk-1.2.14-chan_sip.patch | 15 + .../asterisk/files/digest-asterisk-1.2.14-r1 | 15 + 5 files changed, 542 insertions(+), 5 deletions(-) create mode 100644 net-misc/asterisk/asterisk-1.2.14-r1.ebuild create mode 100644 net-misc/asterisk/files/1.2.0/asterisk-1.2.14-chan_sip.patch create mode 100644 net-misc/asterisk/files/digest-asterisk-1.2.14-r1 diff --git a/net-misc/asterisk/ChangeLog b/net-misc/asterisk/ChangeLog index ea640745c2ba..711fc6f946fe 100644 --- a/net-misc/asterisk/ChangeLog +++ b/net-misc/asterisk/ChangeLog @@ -1,6 +1,12 @@ # ChangeLog for net-misc/asterisk # Copyright 2002-2007 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/net-misc/asterisk/ChangeLog,v 1.147 2007/03/09 20:57:59 solar Exp $ +# $Header: /var/cvsroot/gentoo-x86/net-misc/asterisk/ChangeLog,v 1.148 2007/03/13 18:36:08 gustavoz Exp $ + +*asterisk-1.2.14-r1 (13 Mar 2007) + + 13 Mar 2007; Gustavo Zacarias + +files/1.2.0/asterisk-1.2.14-chan_sip.patch, +asterisk-1.2.14-r1.ebuild: + Revbump wrt security #169616 and sparc stable 09 Mar 2007; files/1.2.0/asterisk.rc6: - posix compliant init.d script from Natanael Copa. bug 170080 diff --git a/net-misc/asterisk/Manifest b/net-misc/asterisk/Manifest index 9e9034b567cd..cc11bece024b 100644 --- a/net-misc/asterisk/Manifest +++ b/net-misc/asterisk/Manifest @@ -1,3 +1,6 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA1 + AUX 1.0.0/asterisk-1.0-CVE-2006-1827.patch 422 RMD160 e025a6c976e9ee081e1379953b2ccbe86049a751 SHA1 5e95bd4e35827479aa008196b36c0ffd60a3cf52 SHA256 fa601a359aae0692d6166cd3625fd3415e50fcccc85c58ab37e6374d2575364d MD5 6e50e3012b488f05338d1ce3694f3082 files/1.0.0/asterisk-1.0-CVE-2006-1827.patch 422 RMD160 e025a6c976e9ee081e1379953b2ccbe86049a751 files/1.0.0/asterisk-1.0-CVE-2006-1827.patch 422 @@ -118,6 +121,10 @@ AUX 1.2.0/asterisk-1.2.13-memleaks.diff 374 RMD160 7bf17c2b3123f75e1c1aa5ca78f7e MD5 376ebb3345dc0910966e60a559f80653 files/1.2.0/asterisk-1.2.13-memleaks.diff 374 RMD160 7bf17c2b3123f75e1c1aa5ca78f7e4631071c9ff files/1.2.0/asterisk-1.2.13-memleaks.diff 374 SHA256 234cd56492927c60ec29f0c0cf52e49b8ba35ed4a423df4250b68c269e72632c files/1.2.0/asterisk-1.2.13-memleaks.diff 374 +AUX 1.2.0/asterisk-1.2.14-chan_sip.patch 468 RMD160 610a4e64e6c8207cf3f05d7c558a6d5d75b889ad SHA1 f563f2afab58f46e6383be4336284b7b75021937 SHA256 6251e649052bff2dd1aee186e9edecff3fcf88265975cb5a4a26c079929f6164 +MD5 9a62dadb00b30ced51cfe57b86678743 files/1.2.0/asterisk-1.2.14-chan_sip.patch 468 +RMD160 610a4e64e6c8207cf3f05d7c558a6d5d75b889ad files/1.2.0/asterisk-1.2.14-chan_sip.patch 468 +SHA256 6251e649052bff2dd1aee186e9edecff3fcf88265975cb5a4a26c079929f6164 files/1.2.0/asterisk-1.2.14-chan_sip.patch 468 AUX 1.2.0/asterisk-updater 3127 RMD160 41ea584081c3e565205e59771e24a8715d7e2042 SHA1 1c11d9ce286972b6f98c15a16cbb7f1c943414eb SHA256 93e6862361a320c7f7f30525b4209366190dd2bc21eedbd3654ffb4b991af5fd MD5 b3b1dced30f74b9475ca7d3a8155385d files/1.2.0/asterisk-updater 3127 RMD160 41ea584081c3e565205e59771e24a8715d7e2042 files/1.2.0/asterisk-updater 3127 @@ -157,14 +164,18 @@ EBUILD asterisk-1.2.13.ebuild 12212 RMD160 e9d822949070983c535fe041021c9c8cdcce3 MD5 99256203a0fecb463765ca646d32f02b asterisk-1.2.13.ebuild 12212 RMD160 e9d822949070983c535fe041021c9c8cdcce3884 asterisk-1.2.13.ebuild 12212 SHA256 96d064cc9f10b6813cf1c4def2d12ca69a7ea2c1c9ed2f330734066d86fe4210 asterisk-1.2.13.ebuild 12212 +EBUILD asterisk-1.2.14-r1.ebuild 11934 RMD160 994dd704d1a987253b6dcd992a142b78c916d574 SHA1 e4367819c0cf7c64d32a3c6c553612bd8c899103 SHA256 e7c6c90a4aaa0f4b5bdb1b63bfa038e85aab693b50793cba2459130c14068f32 +MD5 822850013d66315f575c7fa5d2ed4caa asterisk-1.2.14-r1.ebuild 11934 +RMD160 994dd704d1a987253b6dcd992a142b78c916d574 asterisk-1.2.14-r1.ebuild 11934 +SHA256 e7c6c90a4aaa0f4b5bdb1b63bfa038e85aab693b50793cba2459130c14068f32 asterisk-1.2.14-r1.ebuild 11934 EBUILD asterisk-1.2.14.ebuild 11838 RMD160 834090ebf563ed70ec98cb63ab463159019c8582 SHA1 f60bf586c28c3f7dbb07cd7b9e2b1da53b1c3163 SHA256 7e3813497985452771afd493925519fb0783c300f2fc3784cf8875d2ee424aee MD5 08d28ca37d6b92bacc2298fb5fd5c515 asterisk-1.2.14.ebuild 11838 RMD160 834090ebf563ed70ec98cb63ab463159019c8582 asterisk-1.2.14.ebuild 11838 SHA256 7e3813497985452771afd493925519fb0783c300f2fc3784cf8875d2ee424aee asterisk-1.2.14.ebuild 11838 -MISC ChangeLog 28874 RMD160 5073334087cb0c6c7f1c25c5c8555522616c3de5 SHA1 9ba2898fdeec37a2c781797779f5f41c62ac02e6 SHA256 1c032804b0c0fff2fc2f12b15fd2eb258da600b70bbd79ab1104716a2d8225d4 -MD5 5c5c52dd3388c7c86202a362eeafd216 ChangeLog 28874 -RMD160 5073334087cb0c6c7f1c25c5c8555522616c3de5 ChangeLog 28874 -SHA256 1c032804b0c0fff2fc2f12b15fd2eb258da600b70bbd79ab1104716a2d8225d4 ChangeLog 28874 +MISC ChangeLog 29090 RMD160 88b0a25c33926af25604f7100d4952e634f3d354 SHA1 ac30b1857f107d3441dacedfd487581221f01ec2 SHA256 c08c3dbc17f05103f474cd82e440e215da62eda7042812793dd171ee43681709 +MD5 08063cb3ace22e1e4bd139243772a3fd ChangeLog 29090 +RMD160 88b0a25c33926af25604f7100d4952e634f3d354 ChangeLog 29090 +SHA256 c08c3dbc17f05103f474cd82e440e215da62eda7042812793dd171ee43681709 ChangeLog 29090 MISC metadata.xml 384 RMD160 f5de78add5676233b8e0b9e111eab08970443582 SHA1 0441844fb3a715d6979e6c548147ada23d73fec2 SHA256 674224368cb2be6f72655cd67ee19d4d2d0f3425d560aff22b698269e0adc6d8 MD5 488aea6fbdb7537394cc049b0ff9e5d5 metadata.xml 384 RMD160 f5de78add5676233b8e0b9e111eab08970443582 metadata.xml 384 @@ -184,3 +195,13 @@ SHA256 63571a9178e245b14ca367735b833b0d1700e4e2595c3d7694df7e0d5bd3fe9f files/di MD5 3342bcac7eb8510d9016dee340017fe6 files/digest-asterisk-1.2.14 1376 RMD160 57192415a5909407d11c68a9d1e8f17af6b44097 files/digest-asterisk-1.2.14 1376 SHA256 bedfbd607a6b74146a30d8b1b74b3464efa13b38362c2f1ae4fe0aa341435b83 files/digest-asterisk-1.2.14 1376 +MD5 3342bcac7eb8510d9016dee340017fe6 files/digest-asterisk-1.2.14-r1 1376 +RMD160 57192415a5909407d11c68a9d1e8f17af6b44097 files/digest-asterisk-1.2.14-r1 1376 +SHA256 bedfbd607a6b74146a30d8b1b74b3464efa13b38362c2f1ae4fe0aa341435b83 files/digest-asterisk-1.2.14-r1 1376 +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v1.4.6-ecc01.6 (GNU/Linux) + +iD8DBQFF9u8gKRy60XGEcJIRAr+KAKCQZi9Ijj/WvBbYwo6iRAgeFn6VJgCgsdf8 +ICCMKSbb/qOc6rZuc2PAkeU= +=b8Nu +-----END PGP SIGNATURE----- diff --git a/net-misc/asterisk/asterisk-1.2.14-r1.ebuild b/net-misc/asterisk/asterisk-1.2.14-r1.ebuild new file mode 100644 index 000000000000..f1956f300117 --- /dev/null +++ b/net-misc/asterisk/asterisk-1.2.14-r1.ebuild @@ -0,0 +1,480 @@ +# Copyright 1999-2007 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/net-misc/asterisk/asterisk-1.2.14-r1.ebuild,v 1.1 2007/03/13 18:36:08 gustavoz Exp $ + +inherit eutils multilib toolchain-funcs + +IUSE="alsa bri curl debug doc gtk genericjb h323 hardened lowmem mmx \ + nosamples odbc osp postgres pri speex sqlite ssl zaptel \ + elibc_uclibc" + +BRI_VERSION="0.3.0-PRE-1x" +AST_PATCHES="1.2.11-patches-1.0" +JB_PATCHES="1.2.11-jb" + +## NOTE: +# +# - t.38 dropped +# + +MY_P="${P/_p/.}" + +DESCRIPTION="Asterisk: A Modular Open Source PBX System" +HOMEPAGE="http://www.asterisk.org/" +SRC_URI="http://ftp.digium.com/pub/asterisk/releases/${MY_P}.tar.gz + http://www.netdomination.org/pub/asterisk/${PN}-${AST_PATCHES}.tar.bz2 + bri? ( mirror://gentoo/${MY_P}-bristuff-${BRI_VERSION}.diff.bz2 + http://www.junghanns.net/downloads/bristuff-${BRI_VERSION}.tar.gz ) + genericjb? ( http://www.netdomination.org/pub/asterisk/${PN}-${JB_PATCHES}.patch.bz2 )" +# bri? ( http://www.junghanns.net/downloads/bristuff-${BRI_VERSION}.tar.gz ) + + +S="${WORKDIR}/${MY_P}" +S_BRI="${WORKDIR}/bristuff-${BRI_VERSION}" + +SLOT="0" +LICENSE="GPL-2" +KEYWORDS="~alpha ~amd64 ~hppa ~ppc sparc ~x86" + +RDEPEND="dev-libs/newt + media-sound/sox + ssl? ( dev-libs/openssl ) + gtk? ( =x11-libs/gtk+-1.2* ) + pri? ( >=net-libs/libpri-1.2.3 ) + h323? ( >=dev-libs/pwlib-1.8.3 + >=net-libs/openh323-1.15.0 ) + alsa? ( media-libs/alsa-lib ) + curl? ( net-misc/curl ) + odbc? ( dev-db/unixODBC ) + speex? ( media-libs/speex ) + sqlite? ( =net-misc/zaptel-1.2.8 ) + postgres? ( dev-db/postgresql ) + osp? ( >=net-libs/osptoolkit-3.3.4 ) + bri? ( >=net-libs/libpri-1.2.3-r1 + >=net-misc/zaptel-1.2.8 )" + +DEPEND="${RDEPEND} + sys-devel/flex + sys-devel/bison + doc? ( app-doc/doxygen )" + +#asterisk uses special mpg123 functions and does not work with mpeg321, bug #42703 +PDEPEND="|| ( media-sound/mpg123 net-misc/asterisk-addons )" + +QA_TEXTRELS_x86="usr/lib/asterisk/modules/codec_gsm.so" +QA_EXECSTACK_x86="usr/lib/asterisk/modules/codec_gsm.so" + +# +# List of modules to ignore during scan (because they have been removed in 1.2.x) +# +SCAN_IGNORE_MODS=" + app_qcall + chan_modem + chan_modem_i4l + chan_modem_bestdata + chan_modme_aopen" + +# +# shortcuts +# +is_ast10update() { + return $(has_version "=net-misc/asterisk-1.0*") +} + +is_astupdate() { + if ! is_ast10update; then + return $(has_version "/dev/null + + # remove installed sample files if nosamples flag is set + if use nosamples; then + einfo "Skipping installation of sample files..." + rm -rf "${D}"var/spool/asterisk/voicemail/default + rm -f "${D}"var/lib/asterisk/mohmp3/* + rm -f "${D}"var/lib/asterisk/sounds/demo-* + rm -f "${D}"var/lib/asterisk/agi-bin/* + else + einfo "Sample files have been installed" + keepdir /var/spool/asterisk/voicemail/default/1234/INBOX + fi + + # move sample configuration files to doc directory + if is_ast10update; then + elog "Updating from old (pre-1.2) asterisk version, new configuration files have been installed" + elog "into ${ROOT}etc/asterisk, use etc-update or dispatch-conf to update them" + elif has_version "net-misc/asterisk"; then + elog "Configuration samples have been moved to: $ROOT/usr/share/doc/${PF}/conf" + insinto /usr/share/doc/${PF}/conf + doins "${D}"etc/asterisk/*.conf* + rm -f "${D}"etc/asterisk/*.conf* 2>/dev/null + fi + + # don't delete these directories, even if they are empty + for x in voicemail meetme system dictate monitor tmp; do + keepdir /var/spool/asterisk/${x} + done + keepdir /var/lib/asterisk/sounds/priv-callerintros + keepdir /var/lib/asterisk/mohmp3 + keepdir /var/lib/asterisk/agi-bin + keepdir /var/log/asterisk/cdr-csv + keepdir /var/log/asterisk/cdr-custom + keepdir /var/run/asterisk + + # install astxs + dobin contrib/scripts/astxs + + newinitd "${FILESDIR}"/1.2.0/asterisk.rc6 asterisk + newconfd "${FILESDIR}"/1.2.0/asterisk.confd asterisk + + # install standard docs... + dodoc BUGS CREDITS LICENSE ChangeLog HARDWARE README README.fpm + dodoc SECURITY doc/CODING-GUIDELINES doc/linkedlists.README UPGRADE.txt + dodoc doc/README.* + dodoc doc/*.txt + + docinto scripts + dodoc contrib/scripts/* + + docinto utils + dodoc contrib/utils/* + + docinto configs + dodoc configs/* + + # install api docs + if use doc; then + insinto /usr/share/doc/${PF}/api/html + doins doc/api/html/* + fi + + # install ISDNguard + if use bri; then + cd "${S_BRI}"/ISDNguard + dosbin ISDNguard + + docinto ISDNguard + dodoc INSTALL.ISDNguard + + cd "${S}" + fi + + insinto /usr/share/doc/${PF}/cgi + doins contrib/scripts/vmail.cgi + doins images/*.gif + + # install asterisk-updater + dosbin "${FILESDIR}"/1.2.0/asterisk-updater + + # install asterisk.h, a lot of external modules need this + insinto /usr/include/asterisk + doins include/asterisk.h + + # make sure misdn/capi stuff is not installed, provided by asterisk-chan_.. + rm -f "${D}"/etc/asterisk/misdn.conf "${D}"/usr/lib/asterisk/modules/chan_misdn.so \ + "${D}"/usr/share/doc/${PF}/{conf/misdn.conf,configs/misdn.conf.sample.gz,README.misdn.gz} + rm -f "${D}"/usr/include/asterisk/chan_capi{,_app}.h \ + "${D}"/usr/share/doc/${PF}/{conf/capi.conf,configs/capi.conf.sample.gz} +} + +pkg_preinst() { + enewgroup asterisk + enewuser asterisk -1 -1 /var/lib/asterisk asterisk +} + +pkg_postinst() { + einfo "Fixing permissions" + for x in spool run lib log; do + chown -R asterisk:asterisk "${ROOT}"var/${x}/asterisk + chmod -R u=rwX,g=rX,o= "${ROOT}"var/${x}/asterisk + done + + chown -R root:asterisk "${ROOT}"etc/asterisk + chmod -R u=rwX,g=rX,o= "${ROOT}"etc/asterisk + echo + + # + # Announcements, warnings, reminders... + # + einfo "Asterisk has been installed" + einfo "" + elog "If you want to know more about asterisk, visit these sites:" + elog "http://www.asteriskdocs.org/" + elog "http://www.voip-info.org/wiki-Asterisk" + echo + elog "http://asterisk.xvoip.com/" + elog "http://junghanns.net/asterisk/" + elog "http://www.automated.it/guidetoasterisk.htm" + echo + elog "Gentoo VoIP IRC Channel:" + elog "#gentoo-voip @ irc.freenode.net" + echo + echo + + # + # Warning about 1.0 -> 1.2 changes... + # + if is_ast10update; then + ewarn "" + ewarn "- Please read ${ROOT}usr/share/doc/${PF}/UPGRADE.txt.gz before continuing" + ewarn "" + fi + + if is_astupdate; then + ewarn "" + ewarn " - The initgroups patch has been dropped, please update your" + ewarn " \"conf.d/asterisk\" and \"init.d/asterisk\" file!" + ewarn "" + fi + + if use genericjb; then + ewarn "********************** Experimental Feature **************************" + ewarn "Please note that generic jitterbuffer support is experimental and may not" + ewarn "be included in newer versions!" + echo + fi + + # scan for old modules + if is_ast10update; then + einfo "Asterisk has been updated from pre-1.2.x, scanning for old modules" + scan_modules + fi +} + +pkg_config() { + einfo "Do you want to reset file permissions and ownerships (y/N)?" + + read tmp + tmp="$(echo $tmp | tr [:upper:] [:lower:])" + + if [[ "$tmp" = "y" ]] ||\ + [[ "$tmp" = "yes" ]] + then + einfo "Resetting permissions to defaults..." + + for x in spool run lib log; do + chown -R asterisk:asterisk "${ROOT}"var/${x}/asterisk + chmod -R u=rwX,g=rX,o= "${ROOT}"var/${x}/asterisk + done + + chown -R root:asterisk "${ROOT}"etc/asterisk + chmod -R u=rwX,g=rX,o= "${ROOT}"etc/asterisk + + einfo "done" + else + einfo "skipping" + fi +} diff --git a/net-misc/asterisk/files/1.2.0/asterisk-1.2.14-chan_sip.patch b/net-misc/asterisk/files/1.2.0/asterisk-1.2.14-chan_sip.patch new file mode 100644 index 000000000000..95847272940f --- /dev/null +++ b/net-misc/asterisk/files/1.2.0/asterisk-1.2.14-chan_sip.patch @@ -0,0 +1,15 @@ +--- branches/1.2/channels/chan_sip.c 2007/03/02 16:59:22 57474 ++++ branches/1.2/channels/chan_sip.c 2007/03/02 17:02:46 57475 +@@ -11340,6 +11340,12 @@ + } + } + ++ if (!e && (p->method == SIP_INVITE || p->method == SIP_SUBSCRIBE || p->method == SIP_REGISTER)) { ++ transmit_response(p, "503 Server error", req); ++ ast_set_flag(p, SIP_NEEDDESTROY); ++ return -1; ++ } ++ + /* Handle various incoming SIP methods in requests */ + switch (p->method) { + case SIP_OPTIONS: diff --git a/net-misc/asterisk/files/digest-asterisk-1.2.14-r1 b/net-misc/asterisk/files/digest-asterisk-1.2.14-r1 new file mode 100644 index 000000000000..93b80edeb7ab --- /dev/null +++ b/net-misc/asterisk/files/digest-asterisk-1.2.14-r1 @@ -0,0 +1,15 @@ +MD5 a407d1ef9bc88e38f435581380975fec asterisk-1.2.11-jb.patch.bz2 15598 +RMD160 cbf4a95e25bf03a41ebef2a726419299494bb298 asterisk-1.2.11-jb.patch.bz2 15598 +SHA256 e85e438cb88993a188d063582f38eff0efc1b727e47d9f71809ee81d19992946 asterisk-1.2.11-jb.patch.bz2 15598 +MD5 c91195d62d39cf71da31122dd8157828 asterisk-1.2.11-patches-1.0.tar.bz2 7432 +RMD160 b840a16b6ae9ffb1e76da4a7a8129916e1710204 asterisk-1.2.11-patches-1.0.tar.bz2 7432 +SHA256 46d198be655b35383725dde72ed82ecc7767b8009356f88d27c763323d1cdaa8 asterisk-1.2.11-patches-1.0.tar.bz2 7432 +MD5 8bda7388cf9a7fd045af9efaf58a1a6f asterisk-1.2.14-bristuff-0.3.0-PRE-1x.diff.bz2 95462 +RMD160 4b592148b692d010dfd64df4a969838d15525489 asterisk-1.2.14-bristuff-0.3.0-PRE-1x.diff.bz2 95462 +SHA256 30203a73f6f409bc96f0896d26d1cba47857e040003f6e066227519bb2ef91ef asterisk-1.2.14-bristuff-0.3.0-PRE-1x.diff.bz2 95462 +MD5 2ce03466b99e0b9471e6c791ed14a5f2 asterisk-1.2.14.tar.gz 10595184 +RMD160 c07410e57086ebc34c78fd6794fa5395c3f5a174 asterisk-1.2.14.tar.gz 10595184 +SHA256 115248cb7b1fc35dc2be24218f91a87272cf5c0d8c2050a36da2314fadc05cf4 asterisk-1.2.14.tar.gz 10595184 +MD5 2f9c26b445dc76e7767fffa5e350d618 bristuff-0.3.0-PRE-1x.tar.gz 279200 +RMD160 bc84aa50370627cfead9e0646cf87c16ddff7b00 bristuff-0.3.0-PRE-1x.tar.gz 279200 +SHA256 13d98160d4a10b46b77c822577e6c64ad7dadbc2df1b4cd0a1007ae3bbbd4aa8 bristuff-0.3.0-PRE-1x.tar.gz 279200 -- 2.26.2