Your message dated Mon, 30 Sep 2013 19:19:17 +0000 with message-id <e1vqj01-0005dt...@franck.debian.org> and subject line Bug#721220: fixed in asterisk 1:11.5.1~dfsg-1 has caused the Debian Bug report #721220, regarding asterisk: CVE-2013-5641 CVE-2013-5642 to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 721220: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=721220 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: asterisk Severity: grave Tags: security Justification: user security hole Please see http://downloads.asterisk.org/pub/security/AST-2013-004.html and http://downloads.asterisk.org/pub/security/AST-2013-005.html These affect oldstable and stable. Can you please prepare updates for stable-security? Cheers, Moritz
--- End Message ---
--- Begin Message ---Source: asterisk Source-Version: 1:11.5.1~dfsg-1 We believe that the bug you reported is fixed in the latest version of asterisk, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 721...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Tzafrir Cohen <tzaf...@debian.org> (supplier of updated asterisk package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Mon, 30 Sep 2013 21:28:22 +0300 Source: asterisk Binary: asterisk asterisk-modules asterisk-dahdi asterisk-voicemail asterisk-voicemail-imapstorage asterisk-voicemail-odbcstorage asterisk-ooh323 asterisk-mp3 asterisk-mysql asterisk-mobile asterisk-doc asterisk-dev asterisk-dbg asterisk-config Architecture: source amd64 all Version: 1:11.5.1~dfsg-1 Distribution: unstable Urgency: low Maintainer: Debian VoIP Team <pkg-voip-maintain...@lists.alioth.debian.org> Changed-By: Tzafrir Cohen <tzaf...@debian.org> Description: asterisk - Open Source Private Branch Exchange (PBX) asterisk-config - Configuration files for Asterisk asterisk-dahdi - DAHDI devices support for the Asterisk PBX asterisk-dbg - Debugging symbols for Asterisk asterisk-dev - Development files for Asterisk asterisk-doc - Source code documentation for Asterisk asterisk-mobile - Bluetooth phone support for the Asterisk PBX asterisk-modules - loadable modules for the Asterisk PBX asterisk-mp3 - MP3 playback support for the Asterisk PBX asterisk-mysql - MySQL database protocol support for the Asterisk PBX asterisk-ooh323 - H.323 protocol support for the Asterisk PBX - ooH323c asterisk-voicemail - simple voicemail support for the Asterisk PBX asterisk-voicemail-imapstorage - IMAP voicemail storage support for the Asterisk PBX asterisk-voicemail-odbcstorage - ODBC voicemail storage support for the Asterisk PBX Closes: 545272 701505 710557 721220 Changes: asterisk (1:11.5.1~dfsg-1) unstable; urgency=low . [ Faidon Liambotis ] * New major upstream release. - Drop patch kfreebsd, fixed upstream. - Drop patch httpd_port. - Drop patch menuselect_cflags, merged upstream. - Drop patch bluetooth_bind, merged upstream. - Replace libopenais-dev with corosync-dev, res_corosync replaces res_ais. - Fixes CVE-2013-5641, CVE-2013-5642 (Closes: #721220). - Patch fix_xmpp_19532 also included (Closes: #545272). - Patch powerpcspe also included (Closes: #701505). - Fixes incorrect sip causes issue (Closes: #710557). - Patch powerpcspe also included (Closes: #701505). - Patces merged upstream: AST-2012-012, ASt-2012-013, AST-2012-014, AST-2012-015, AST-2013-002, AST-2013-003 * Do not ship the removed-but-reincluded docs, they're outdated by now. Upstream wants their Wiki to be the primary Asterisk documentation place. * Ship UPGRADE-{10,1.8,1.4,1.2}.txt in asterisk-doc. * Do not ship app_meetme.so and app_dahdibarge.so, deprecated by upstream. - Also remove them from asterisk-dahdi's full description. * Remove ASTSAFE_CONSOLE and ASTSAFE_TTY from asterisk.default, they aren't being unused for a while now. . [ Tzafrir Cohen ] * Patch undeprecate: undeprecate meetme. * increased compat level for debian/clean. * Disable hardening for now. * Convert rules to dh. - Patch astdatadir: set datadir in /usr/share/asterisk instead of using an environment variable. * Patch pjproject: make pjproject optional. - Patch bzero: Simplify applying the above, and fix an interface stupidity inflicted by pjproject. - get-orig-source: remove res/pjproject from the source tarball. * debian/rules: switch to dh. * Patches dahdi_create_channels, dahdi_pri_event_removed: backport dynamic DAHDI support. * Patch hyphen: hypen-minus fixes in asterisk.8 * Patch astdb_man: Man pages for astdb2bdb and astdb2sqlite3. . [ David Sarmiento ] * Re-enabled pjproject * Modified rules file to be able to build pjproject * Updated build-deps Checksums-Sha1: 3062e47a8d86c05bb0c9cd0fa2ddeeaec47c3fd3 3047 asterisk_11.5.1~dfsg-1.dsc 14eab2e77d65e61924a87268fac05166754f7f3a 11181935 asterisk_11.5.1~dfsg.orig.tar.gz 23cc31ba64988baab60c2e96061fd59d19afd743 113368 asterisk_11.5.1~dfsg-1.debian.tar.gz 0f6f852c48acc1f0ffa6524a5ce64d7ba409f7d4 1449928 asterisk_11.5.1~dfsg-1_amd64.deb 48b94c84b7d730111d205bd1a6b5ad4a2771faa3 1990888 asterisk-modules_11.5.1~dfsg-1_amd64.deb 7d8eb274ca47cd8aaadd5e30e2d532dd1d1084d0 608204 asterisk-dahdi_11.5.1~dfsg-1_amd64.deb 94b99a1e3aaf36071adfaaaff72d49e39a38c21a 474714 asterisk-voicemail_11.5.1~dfsg-1_amd64.deb 54110c8b6829d9c2ebba7c1425d451754bef52c6 490836 asterisk-voicemail-imapstorage_11.5.1~dfsg-1_amd64.deb 345d6b1dc1a93d5d9d59c11743658cc89996f8e8 480552 asterisk-voicemail-odbcstorage_11.5.1~dfsg-1_amd64.deb 1d79a51c75de8a91427398cda46665dc79bf593d 734472 asterisk-ooh323_11.5.1~dfsg-1_amd64.deb 5c26b5f0a172eae34524e1a08c8c1bb7d7c35ba8 417022 asterisk-mp3_11.5.1~dfsg-1_amd64.deb f5bf5a802b98b2433c9df4702b0b4b2e9848c2f5 433980 asterisk-mysql_11.5.1~dfsg-1_amd64.deb 135fa6a1c5325e3985ddbcdded6f7c07dd373f0c 426848 asterisk-mobile_11.5.1~dfsg-1_amd64.deb d54f8796eef87b5e1ea25b6efe983ea0f7755e87 1056148 asterisk-doc_11.5.1~dfsg-1_all.deb ab9b6f179e6e9c1d2249d4ef22b3590d7e28798f 703010 asterisk-dev_11.5.1~dfsg-1_all.deb ff7f335db1399ba7a998174c381dc2d907224d5f 12369198 asterisk-dbg_11.5.1~dfsg-1_amd64.deb e7624d4fff279d967c8691e8db909eb4041bb7e8 743776 asterisk-config_11.5.1~dfsg-1_all.deb Checksums-Sha256: 5bf379576b48f6875b8ba0f14185512caded7d6315e2a82dbafc17174cafa1b6 3047 asterisk_11.5.1~dfsg-1.dsc 7fa404b4ed87319d2a85f8eb8b71505f9ec3213b8be27b66c89db3d80efb0266 11181935 asterisk_11.5.1~dfsg.orig.tar.gz c3734443fb1e9348154293742ba37ddab3d125f0a680a1399df491cd3ed40b45 113368 asterisk_11.5.1~dfsg-1.debian.tar.gz 14f4f236e0108bc2172bef8a6a8279e9dc8d6fb64bc4f49070c54d9d50f3fcda 1449928 asterisk_11.5.1~dfsg-1_amd64.deb 0ba0312d62714b242a1e814ee0abe916a4a189c190121af05e2d99a428c6129e 1990888 asterisk-modules_11.5.1~dfsg-1_amd64.deb 5eef892ec1c4574e58886bb7c9fcd2c6c5ef04c7b83d0160cf0e93057825c239 608204 asterisk-dahdi_11.5.1~dfsg-1_amd64.deb 76b258d23badb6b4480d91efa60738608d4aa0bc58943704cb319168f793d245 474714 asterisk-voicemail_11.5.1~dfsg-1_amd64.deb 61ac1c5b327b1fee88286630b82428f49e3d4625599c662f8911ef31194b7190 490836 asterisk-voicemail-imapstorage_11.5.1~dfsg-1_amd64.deb 8afd2d0305a6466ff75a85e249a0e6dce1601e7cc279f1e2bab08864bed7aa4b 480552 asterisk-voicemail-odbcstorage_11.5.1~dfsg-1_amd64.deb f940aad6dcac42390179e50851252e48474bea2c4ad064c1232581f7ec482f4b 734472 asterisk-ooh323_11.5.1~dfsg-1_amd64.deb e5333c08fb421a1053a753c102b264c1951ed99a76a77d7866e35a2ba0e5d592 417022 asterisk-mp3_11.5.1~dfsg-1_amd64.deb a4010cf002cd191c1729611afd7c4c8f24196d8be32d7e90b61f2a67819102ce 433980 asterisk-mysql_11.5.1~dfsg-1_amd64.deb bcd4f4dffc088056b728ee418b977ebb1de321bc516f312dd11558fe864751f1 426848 asterisk-mobile_11.5.1~dfsg-1_amd64.deb 20291f1546167b77a3465a86bea9f66acfcc90a142ac39ac356ab5ceefa8a51b 1056148 asterisk-doc_11.5.1~dfsg-1_all.deb 63f787971be86cb7663bcd67cfa0d6834e052a9987aee49eb0c9c08e4ae97221 703010 asterisk-dev_11.5.1~dfsg-1_all.deb 0232a7865f617c4fb5a60b654fec56a401af6d6b1d1d7c3ee31ef19051993da3 12369198 asterisk-dbg_11.5.1~dfsg-1_amd64.deb 94c9a7c2ba5207bc21f1e0ded0b53301e6b843af35f3879a39bf6fd041b379e0 743776 asterisk-config_11.5.1~dfsg-1_all.deb Files: a81244fa37f6df6c1e813d8b6d126a0c 3047 comm optional asterisk_11.5.1~dfsg-1.dsc ec7cf27b196a80c7d7220041a53a0eb6 11181935 comm optional asterisk_11.5.1~dfsg.orig.tar.gz 9102afb38b55bca6f306075f3cdcc387 113368 comm optional asterisk_11.5.1~dfsg-1.debian.tar.gz 115865d741487a62fd32351f7471c285 1449928 comm optional asterisk_11.5.1~dfsg-1_amd64.deb 0d71ed7585a8b3a7e7d37fbabaed5583 1990888 libs optional asterisk-modules_11.5.1~dfsg-1_amd64.deb 761a66c6bc36a75461c1135b8ca786a8 608204 comm optional asterisk-dahdi_11.5.1~dfsg-1_amd64.deb 0921e5d8bc55363721050ccc11ac97c1 474714 comm optional asterisk-voicemail_11.5.1~dfsg-1_amd64.deb 3e22852083653c5091158d782dd946c3 490836 comm optional asterisk-voicemail-imapstorage_11.5.1~dfsg-1_amd64.deb 56c3de915cef8749cab3126a6a88cfc7 480552 comm optional asterisk-voicemail-odbcstorage_11.5.1~dfsg-1_amd64.deb 8a344e68b844160935f3e7d3323c5207 734472 comm optional asterisk-ooh323_11.5.1~dfsg-1_amd64.deb 637cc22f8ab1c94a73330e50c5912f28 417022 comm optional asterisk-mp3_11.5.1~dfsg-1_amd64.deb c1c85fff25c680cf5701821fc697d93d 433980 comm optional asterisk-mysql_11.5.1~dfsg-1_amd64.deb dc850e5848f4b547c54cd5c7c0bedeaa 426848 comm optional asterisk-mobile_11.5.1~dfsg-1_amd64.deb f04b8fc51d89059c50be080751205e50 1056148 doc extra asterisk-doc_11.5.1~dfsg-1_all.deb eca381c70394ee50d68a5f84770627cf 703010 devel extra asterisk-dev_11.5.1~dfsg-1_all.deb ef4a148de0d048990421019607816aaf 12369198 debug extra asterisk-dbg_11.5.1~dfsg-1_amd64.deb 927b4fe9dd34e0a4b243b2c0fe29d066 743776 comm optional asterisk-config_11.5.1~dfsg-1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iEYEARECAAYFAlJJyucACgkQxArWdkN9MosVUQCgm1PSlEny4Sb19gD2zWA1aUP9 5/gAoM+9T0nnFCgCq5jHf6whrc5B+9hh =7VQo -----END PGP SIGNATURE-----
--- End Message ---
