← Back to branch summary

~ubuntu-branches/ubuntu/hardy/asterisk/hardy

« back to all changes in this revision

Viewing changes to debian/changelog

  • Committer: Bazaar Package Importer
  • Author(s): William Grant
  • Date: 2008-04-05 11:32:12 UTC
  • Revision ID: james.westby@ubuntu.com-20080405113212-p7slzlzms8iityna
Tags: 1:1.4.17~dfsg-2ubuntu1
https://launchpad.net/bugs/210124
* SECURITY UPDATE: arbitrary code execution and authentication bypass.
  (LP: #210124)
  - debian/patches/CVE-2008-1289: Check that incoming RTP payloads are
    within buffer limits. Patch from Debian.
  - debian/patches/CVE-2008-1332: Ensure that allowguest has been enabled
    before deciding that authentication isn't required. Patch from Debian.
  - debian/patches/CVE-2008-1333: Interpret logging output as a character
    string, not a format string. Patch from Debian.
  - References:
    + CVE-2008-1289
    + CVE-2008-1332
    + CVE-2008-1333
    + AST-2008-002
    + AST-2008-003
    + AST-2008-004
* Modify Maintainer value to match the DebianMaintainerField
  specification.

Show diffs side-by-side

added added

removed removed

Lines of Context:
debian/changelog
 
1
asterisk (1:1.4.17~dfsg-2ubuntu1) hardy; urgency=low
 
2
 
 
3
  * SECURITY UPDATE: arbitrary code execution and authentication bypass.
 
4
    (LP: #210124)
 
5
    - debian/patches/CVE-2008-1289: Check that incoming RTP payloads are
 
6
      within buffer limits. Patch from Debian.
 
7
    - debian/patches/CVE-2008-1332: Ensure that allowguest has been enabled
 
8
      before deciding that authentication isn't required. Patch from Debian.
 
9
    - debian/patches/CVE-2008-1333: Interpret logging output as a character
 
10
      string, not a format string. Patch from Debian.
 
11
    - References:
 
12
      + CVE-2008-1289
 
13
      + CVE-2008-1332
 
14
      + CVE-2008-1333
 
15
      + AST-2008-002
 
16
      + AST-2008-003
 
17
      + AST-2008-004
 
18
  * Modify Maintainer value to match the DebianMaintainerField
 
19
    specification.
 
20
 
 
21
 -- William Grant <william@qeuni.net>  Sat, 05 Apr 2008 11:32:12 +1100
 
22
 
1
23
asterisk (1:1.4.17~dfsg-2build1) hardy; urgency=low
2
24
 
3
25
  * Rebuild for libc-client2006j2 -> libc-client2007 transition (LP: #192415).