Skip to content

Commit 3d4a03d

Browse files
author
jnemeth
committed
Update to Asterisk 21.10.1. This is a security update.
## Change Log for Release asterisk-21.10.1 ### Links: - [Full ChangeLog](https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-21.10.1.html) - [GitHub Diff](asterisk/asterisk@21.10.0...21.10.1) ### Summary: - Commits: 2 - Commit Authors: 2 - Issues Resolved: 0 - Security Advisories Resolved: 2 - [GHSA-mrq5-74j5-f5cr](GHSA-mrq5-74j5-f5cr): Remote DoS and possible RCE in asterisk/res/res_stir_shaken/verification.c - [GHSA-v9q8-9j8m-5xwp](GHSA-v9q8-9j8m-5xwp): Uncontrolled Search-Path Element in safe_asterisk script may allow local privilege escalation. ### User Notes: ### Upgrade Notes: - #### safe_asterisk: Add ownership checks for /etc/asterisk/startup.d and its files. The safe_asterisk script now checks that, if it was run by the root user, the /etc/asterisk/startup.d directory and all the files it contains are owned by root. If the checks fail, safe_asterisk will exit with an error and Asterisk will not be started. Additionally, the default logging destination is now stderr instead of tty "9" which probably won't exist in modern systems. ### Developer Notes: ### Commit Authors: - George Joseph: (1) - ThatTotallyRealMyth: (1) ## Issue and Commit Detail: ### Closed Issues: - !GHSA-mrq5-74j5-f5cr: Remote DoS and possible RCE in asterisk/res/res_stir_shaken/verification.c - !GHSA-v9q8-9j8m-5xwp: Uncontrolled Search-Path Element in safe_asterisk script may allow local privilege escalation. ### Commits By Author: - #### George Joseph (1): - res_stir_shaken: Test for missing semicolon in Identity header. - #### ThatTotallyRealMyth (1): - safe_asterisk: Add ownership checks for /etc/asterisk/startup.d and its files. ### Commit List: - safe_asterisk: Add ownership checks for /etc/asterisk/startup.d and its files. - res_stir_shaken: Test for missing semicolon in Identity header. ### Commit Details: #### safe_asterisk: Add ownership checks for /etc/asterisk/startup.d and its files. Author: ThatTotallyRealMyth Date: 2025-06-10 UpgradeNote: The safe_asterisk script now checks that, if it was run by the root user, the /etc/asterisk/startup.d directory and all the files it contains are owned by root. If the checks fail, safe_asterisk will exit with an error and Asterisk will not be started. Additionally, the default logging destination is now stderr instead of tty "9" which probably won't exist in modern systems. Resolves: #GHSA-v9q8-9j8m-5xwp #### res_stir_shaken: Test for missing semicolon in Identity header. Author: George Joseph Date: 2025-07-31 ast_stir_shaken_vs_verify() now makes sure there's a semicolon in the Identity header to prevent a possible segfault. Resolves: #GHSA-mrq5-74j5-f5cr
1 parent 94143ef commit 3d4a03d

3 files changed

Lines changed: 20 additions & 16 deletions

File tree

‎comms/asterisk21/Makefile‎

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
1-
# $NetBSD: Makefile,v 1.16 2025/07/21 06:30:02 jnemeth Exp $
1+
# $NetBSD: Makefile,v 1.17 2025/08/04 20:43:24 jnemeth Exp $
22
#
33
# NOTE: when updating this package, there are two places that sound
44
# tarballs need to be checked; look in ${WRKSRC}/sounds/Makefile
55
# to find out the current sound file versions
66
# Also look in ${WRKSRC}/third-party/versions.mak for pjproject
77

8-
DISTNAME= asterisk-21.10.0
8+
DISTNAME= asterisk-21.10.1
99
CATEGORIES= comms net audio
1010
MASTER_SITES= https://downloads.asterisk.org/pub/telephony/asterisk/
1111
MASTER_SITES+= https://downloads.asterisk.org/pub/telephony/asterisk/old-releases/
@@ -271,10 +271,12 @@ post-install:
271271
${INSTALL_DATA} ${WRKSRC}/ChangeLogs/ChangeLog-21.9.0.md ${DESTDIR}${PREFIX}/share/doc/${PKGBASE}
272272
${INSTALL_DATA} ${WRKSRC}/ChangeLogs/ChangeLog-21.9.1.md ${DESTDIR}${PREFIX}/share/doc/${PKGBASE}
273273
${INSTALL_DATA} ${WRKSRC}/ChangeLogs/ChangeLog-21.10.0.md ${DESTDIR}${PREFIX}/share/doc/${PKGBASE}
274+
${INSTALL_DATA} ${WRKSRC}/ChangeLogs/ChangeLog-21.10.1.md ${DESTDIR}${PREFIX}/share/doc/${PKGBASE}
274275
${INSTALL_DATA} ${WRKSRC}/ChangeLogs/ChangeLog-21.8.0.html ${DESTDIR}${PREFIX}/share/doc/${PKGBASE}
275276
${INSTALL_DATA} ${WRKSRC}/ChangeLogs/ChangeLog-21.9.0.html ${DESTDIR}${PREFIX}/share/doc/${PKGBASE}
276277
${INSTALL_DATA} ${WRKSRC}/ChangeLogs/ChangeLog-21.9.1.html ${DESTDIR}${PREFIX}/share/doc/${PKGBASE}
277278
${INSTALL_DATA} ${WRKSRC}/ChangeLogs/ChangeLog-21.10.0.html ${DESTDIR}${PREFIX}/share/doc/${PKGBASE}
279+
${INSTALL_DATA} ${WRKSRC}/ChangeLogs/ChangeLog-21.10.1.html ${DESTDIR}${PREFIX}/share/doc/${PKGBASE}
278280
${INSTALL_DATA} ${WRKSRC}/ChangeLogs/historical/CHANGES ${DESTDIR}${PREFIX}/share/doc/${PKGBASE}
279281
${INSTALL_DATA} ${WRKSRC}/LICENSE ${DESTDIR}${PREFIX}/share/doc/${PKGBASE}
280282
${INSTALL_DATA} ${WRKSRC}/README-SERIOUSLY.bestpractices.md ${DESTDIR}${PREFIX}/share/doc/${PKGBASE}

‎comms/asterisk21/PLIST‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
@comment $NetBSD: PLIST,v 1.6 2025/07/21 06:30:02 jnemeth Exp $
1+
@comment $NetBSD: PLIST,v 1.7 2025/08/04 20:43:24 jnemeth Exp $
22
lib/asterisk/libasteriskpj.so
33
lib/asterisk/libasteriskpj.so.2
44
lib/asterisk/modules/app_adsiprog.so
@@ -2322,6 +2322,8 @@ share/doc/asterisk/ChangeLog-21.0.2.md
23222322
share/doc/asterisk/ChangeLog-21.1.0.md
23232323
share/doc/asterisk/ChangeLog-21.10.0.html
23242324
share/doc/asterisk/ChangeLog-21.10.0.md
2325+
share/doc/asterisk/ChangeLog-21.10.1.html
2326+
share/doc/asterisk/ChangeLog-21.10.1.md
23252327
share/doc/asterisk/ChangeLog-21.2.0.md
23262328
share/doc/asterisk/ChangeLog-21.3.0.md
23272329
share/doc/asterisk/ChangeLog-21.3.1.md

‎comms/asterisk21/distinfo‎

Lines changed: 13 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -1,17 +1,17 @@
1-
$NetBSD: distinfo,v 1.7 2025/07/21 06:30:02 jnemeth Exp $
1+
$NetBSD: distinfo,v 1.8 2025/08/04 20:43:24 jnemeth Exp $
22

3-
BLAKE2s (asterisk-21.10.0/asterisk-21.10.0.tar.gz) = 06e21c3a0e2188008f99ec5f6636a850a00502235162bc1b78f8ce395ceba004
4-
SHA512 (asterisk-21.10.0/asterisk-21.10.0.tar.gz) = 99829addcd2f09d9a7135a325252b67c64e4aefb5bfb6d24478e3c06ac5b0ada962aedbc482bde4bc790ae8eb98a4ce58fc7a8e25c5b4269dd0d76f22de5da7f
5-
Size (asterisk-21.10.0/asterisk-21.10.0.tar.gz) = 26538178 bytes
6-
BLAKE2s (asterisk-21.10.0/asterisk-extra-sounds-en-gsm-1.5.2.tar.gz) = 3f7e5fe212d7e7cdca14c52527a2552311ab7762c3f1464b09ddedc7c66aebde
7-
SHA512 (asterisk-21.10.0/asterisk-extra-sounds-en-gsm-1.5.2.tar.gz) = 3f2f7bf3d5bce3544bc013f913c352f0204a3ce96239987403eb9dce8bc87e64a61d437762323a422a87b2fad1f3bf3e7a5f3d0d340f912a1b1dbfea9479d41d
8-
Size (asterisk-21.10.0/asterisk-extra-sounds-en-gsm-1.5.2.tar.gz) = 4253587 bytes
9-
BLAKE2s (asterisk-21.10.0/pjproject-2.15.1.md5) = 1bdb00828816aff69f43eaacd084bd7d0a48670af33110bd0cd6325ead45aa48
10-
SHA512 (asterisk-21.10.0/pjproject-2.15.1.md5) = 75963b64e702a5810fd5b8b574a07396cab1a87543d806135e7a9b9762d35129354f99283252f40ad75a6a94cd1921f164ed8e63174de0c5430e5c6913d21744
11-
Size (asterisk-21.10.0/pjproject-2.15.1.md5) = 172 bytes
12-
BLAKE2s (asterisk-21.10.0/pjproject-2.15.1.tar.bz2) = 2bcb38884531f0be966c78b6bac45ac63d8c612c060da91c584d192fe0fdf9cd
13-
SHA512 (asterisk-21.10.0/pjproject-2.15.1.tar.bz2) = c080eb44b49fccadb1c76ff2b3221935b0d531a1e2087b47c21b4ec2cdd8ee0e62b13c334495c9c759b348a0792204611987089a6aa6264999f0116aec8dbdfd
14-
Size (asterisk-21.10.0/pjproject-2.15.1.tar.bz2) = 8492214 bytes
3+
BLAKE2s (asterisk-21.10.1/asterisk-21.10.1.tar.gz) = 122e9bed801eee42b25c5df2b714c4d093187962df2620eb7d1ae11ebeb0fa1c
4+
SHA512 (asterisk-21.10.1/asterisk-21.10.1.tar.gz) = 0b972be132f8a3ed67cb880a3255db1bfb7f9c2fc2cf51fcc1a348ff3481588a1896f4041a032dccad10bebeaebdf786ab94ee69389acbf2e7676c2224063601
5+
Size (asterisk-21.10.1/asterisk-21.10.1.tar.gz) = 26541550 bytes
6+
BLAKE2s (asterisk-21.10.1/asterisk-extra-sounds-en-gsm-1.5.2.tar.gz) = 3f7e5fe212d7e7cdca14c52527a2552311ab7762c3f1464b09ddedc7c66aebde
7+
SHA512 (asterisk-21.10.1/asterisk-extra-sounds-en-gsm-1.5.2.tar.gz) = 3f2f7bf3d5bce3544bc013f913c352f0204a3ce96239987403eb9dce8bc87e64a61d437762323a422a87b2fad1f3bf3e7a5f3d0d340f912a1b1dbfea9479d41d
8+
Size (asterisk-21.10.1/asterisk-extra-sounds-en-gsm-1.5.2.tar.gz) = 4253587 bytes
9+
BLAKE2s (asterisk-21.10.1/pjproject-2.15.1.md5) = 1bdb00828816aff69f43eaacd084bd7d0a48670af33110bd0cd6325ead45aa48
10+
SHA512 (asterisk-21.10.1/pjproject-2.15.1.md5) = 75963b64e702a5810fd5b8b574a07396cab1a87543d806135e7a9b9762d35129354f99283252f40ad75a6a94cd1921f164ed8e63174de0c5430e5c6913d21744
11+
Size (asterisk-21.10.1/pjproject-2.15.1.md5) = 172 bytes
12+
BLAKE2s (asterisk-21.10.1/pjproject-2.15.1.tar.bz2) = 2bcb38884531f0be966c78b6bac45ac63d8c612c060da91c584d192fe0fdf9cd
13+
SHA512 (asterisk-21.10.1/pjproject-2.15.1.tar.bz2) = c080eb44b49fccadb1c76ff2b3221935b0d531a1e2087b47c21b4ec2cdd8ee0e62b13c334495c9c759b348a0792204611987089a6aa6264999f0116aec8dbdfd
14+
Size (asterisk-21.10.1/pjproject-2.15.1.tar.bz2) = 8492214 bytes
1515
SHA1 (patch-Makefile) = 5cf3b6937ec23a82e4d056b91e493a36bc1089b9
1616
SHA1 (patch-addons_chan__ooh323.c) = 1775da7ca2129a962ed460bd1e78ba3ce6afa62c
1717
SHA1 (patch-apps_app__adsiprog.c) = 031139e5cd1ef6bb2afb0a74fee3d752eded0a2c

0 commit comments

Comments
 (0)