[Bug 852479] Re: Merge asterisk 1:1.8.4.4~dfsg-2 (universe) from Debian unstable (main)

[Launchpad Bug Tracker]

This bug was fixed in the package asterisk - 1:1.8.4.4~dfsg-2ubuntu1

---------------
asterisk (1:1.8.4.4~dfsg-2ubuntu1) oneiric; urgency=low

  * Merge from debian unstable (LP: #852479).  Remaining changes:
    - debian/control: Build-depend on hardening-wrapper
    - debian/rules: Make use of hardening-wrapper
    - debian/asterisk.init: chown /dev/dahdi
    - debian/backports/hardy: add file
    - debian/backports/asterisk.init.hardy: add file
  * Changes dropped from Ubuntu delta as no longer applicable:
    - debian/control:
      + Removed Uploaders field
      + Removed Debian Vcs-Svn entry and replaced with ubuntu-voip Vcs-Bzr,
        to reflect divergence in packages.

asterisk (1:1.8.4.4~dfsg-2) unstable; urgency=low

  * Don't mark en-gsm sound files as enabled, so they won't be
downloaded.

asterisk (1:1.8.4.4~dfsg-1) unstable; urgency=high

  * AST-2011-011 (CVE-2011-2536): Don't leak SIP username information
    (closes: #632029)
  * Clearly the NC-ND license for AST.{pdf,txt} is here to stay. Strip it.
    - And while we're at at, strip out sound files and some generated files.

asterisk (1:1.8.4.3-1) unstable; urgency=high

  * New upstream point release, fixes 3 remotely-explitables (of sort) bugs:
    - AST-2011-008, CVE-2011-2529 (Closes: #631446)
    - AST-2011-009 (Closes: #631445)
    - AST-2011-010, CVE-2011-2535 (Closes: #631448)

asterisk (1:1.8.4.2-1) unstable; urgency=low

  * New upstream point release:
    - Fixes CVE-2011-2216 - AST-2011-007 (Closes: #629130).
  * Patch gcc46: Fix the induced regression.
  * Blacklist SRTP support on Sparc and hurd-i386 until SRTP available there.

asterisk (1:1.8.4-1) unstable; urgency=low

  * New upstream release.
    - Patch no_ssl2 removed: merged upstream.
  * Remove unneeded dependency on voicemail modules - only leave Recommends
    (Closes: #624190).
  * Patch refix_bashism: bashism crept bact into the configure script
    (Jilles Tjoelker).
  * Fixes for kFreeBSD (Closes: #624569):
    - Declare build-deps linux-any: libtonezone-dev, libvpb-dev,
      libbluetooth-dev, libopenh323-dev, libcap[2]-dev, libstrp0-dev.
    - Thus sub-packages asterisk-dahdi, asterisk-h323 and asterisk-mobile
      are linux-any.
    - And logic added to rules file not to copy their files on non-linux.
    - Patch kfreebsd: Fix building with kFreeBSD.
    - Patch no_uname: Fix building with kFreeBSD: an uglier patch.
  * Patch gcc46: Some gcc-4.6 fixes from upstream. Get rid of some
    build warnings.
 -- James Page <james.page at ubuntu.com>   Tue, 20 Sep 2011 14:05:14 +0100

** Changed in: asterisk (Ubuntu)
       Status: In Progress => Fix Released

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-2216

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-2529

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-2535

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-2536

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to asterisk in Ubuntu.
https://bugs.launchpad.net/bugs/852479

Title:
  Merge asterisk 1:1.8.4.4~dfsg-2 (universe) from Debian unstable (main)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/asterisk/+bug/852479/+subscriptions