-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Thu, 10 Feb 2011 17:06:37 +0200 Source: asterisk Binary: asterisk asterisk-h323 asterisk-doc asterisk-dev asterisk-dbg asterisk-sounds-main asterisk-config Architecture: mipsel Version: 1:1.4.21.2~dfsg-3+lenny2 Distribution: lenny-security Urgency: high Maintainer: mipsel Build Daemon (mayer) Changed-By: Faidon Liambotis Description: asterisk - Open Source Private Branch Exchange (PBX) asterisk-config - Configuration files for Asterisk asterisk-dbg - Debugging symbols for Asterisk asterisk-dev - Development files for Asterisk asterisk-doc - Source code documentation for Asterisk asterisk-h323 - H.323 protocol support for Asterisk asterisk-sounds-main - Core Sound files for Asterisk (English) Closes: 610487 Changes: asterisk (1:1.4.21.2~dfsg-3+lenny2) oldstable-security; urgency=high . [ Tzafrir Cohen ] * AST-2011-001/CVE-2011-0495: Stack buffer overflow in SIP channel driver (Closes: #610487) * Backport a one-liner patch from upstream (ast_uri_validhex) to successfully apply the AST-2011-001 patch. Checksums-Sha1: 11dc18b6968db4e9d7d7c84d07ac19884aef5140 2463012 asterisk_1.4.21.2~dfsg-3+lenny2_mipsel.deb cc0ed9fa141bf0d1d1edb781859bfc237be5716d 380268 asterisk-h323_1.4.21.2~dfsg-3+lenny2_mipsel.deb 090db5de27eb36a1d7b8f38d58e2bb3bfc792ee4 13381522 asterisk-dbg_1.4.21.2~dfsg-3+lenny2_mipsel.deb Checksums-Sha256: 65600bba0c8b736215fbbc2351714c32cdcb0c9ecbe76df4c45e8aa0c3b1c08b 2463012 asterisk_1.4.21.2~dfsg-3+lenny2_mipsel.deb 545dda90bd2dccbfc5456eefb7f5c44349ad9150acbca97c1c3e170d31b27346 380268 asterisk-h323_1.4.21.2~dfsg-3+lenny2_mipsel.deb c2e1196bc965de8ee696b1ffe5e7e292402e89a342491763bf8b2a7393310263 13381522 asterisk-dbg_1.4.21.2~dfsg-3+lenny2_mipsel.deb Files: bbb24083a4cc93a8e87d3a2e1828dd65 2463012 comm optional asterisk_1.4.21.2~dfsg-3+lenny2_mipsel.deb 67093b564319088d452e6071312a84e6 380268 comm optional asterisk-h323_1.4.21.2~dfsg-3+lenny2_mipsel.deb 36f7109c4be9aa5b3b6ba4ab53fdfd30 13381522 devel extra asterisk-dbg_1.4.21.2~dfsg-3+lenny2_mipsel.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iEYEARECAAYFAk1ZvZsACgkQXm3vHE4uylqYbQCfYba9mgkZy/XLTWm2+hMvepmq lgIAoM3pL/0bj3Q+irFEZVqKxIAkW6ob =TKwc -----END PGP SIGNATURE-----