Re: [asterisk-users] Recieve_Fax caused crash 1.8.2.3

2011-02-25 Thread Andrew Latham
On Fri, Feb 25, 2011 at 9:49 AM, Leif Madsen
 wrote:
> On 11-02-24 08:56 PM, Andrew Latham wrote:
>>
>> And I go back to triple check and compare revision numbers...  You are
>> 100% correct, the revision numbers in our local repository are wrong,
>> someone pushed the 1.8.3 RC3 into our local 1.8.2 branch.  I apologize
>> and will work to better control my trust of other engineers as this is
>> twice in one week I have looked like an ass.  International bandwidth
>> limits change how you work and as a business force the mirroring of as
>> many sources as possible.
>
> No worries, you had my heart going there pretty good for a moment!
>
> Leif!

Me, too, when our repository did not match up, my heart skipped a
beat. Time for fresh checkouts.

~~~ Andrew "lathama" Latham lath...@gmail.com ~~~

--
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
   http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] Recieve_Fax caused crash 1.8.2.3

2011-02-25 Thread Leif Madsen

On 11-02-24 08:56 PM, Andrew Latham wrote:

And I go back to triple check and compare revision numbers...  You are
100% correct, the revision numbers in our local repository are wrong,
someone pushed the 1.8.3 RC3 into our local 1.8.2 branch.  I apologize
and will work to better control my trust of other engineers as this is
twice in one week I have looked like an ass.  International bandwidth
limits change how you work and as a business force the mirroring of as
many sources as possible.


No worries, you had my heart going there pretty good for a moment!

Leif!

--
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
  http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [asterisk-users] Recieve_Fax caused crash 1.8.2.3

2011-02-24 Thread Andrew Latham
On Thu, Feb 24, 2011 at 7:43 PM, Leif Madsen
 wrote:
> On 11-02-24 04:08 PM, Andrew Latham wrote:
>>
>> There are many updates in 1.8.2.4 that may fix your issue.  If you are
>> running any version of 1.8 it should be a quick update.
>
> I wouldn't say "many". There is one fix in 1.8.2.4 over 1.8.2.3.
>
> From the ChangeLog:
>
>        * Asterisk 1.8.2.4 Released.
>
>        * AST-2011-002: Multiple array overflow and crash vulnerabilities in
>          UDPTL code
>
>
> The release announcement for AST-2011-002 is here:
> http://downloads.asterisk.org/pub/security/AST-2011-002.pdf
>
> Leif.

And I go back to triple check and compare revision numbers...  You are
100% correct, the revision numbers in our local repository are wrong,
someone pushed the 1.8.3 RC3 into our local 1.8.2 branch.  I apologize
and will work to better control my trust of other engineers as this is
twice in one week I have looked like an ass.  International bandwidth
limits change how you work and as a business force the mirroring of as
many sources as possible.

~~~ Andrew "lathama" Latham lath...@gmail.com ~~~

--
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
   http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] Recieve_Fax caused crash 1.8.2.3

2011-02-24 Thread Leif Madsen

On 11-02-24 04:08 PM, Andrew Latham wrote:

There are many updates in 1.8.2.4 that may fix your issue.  If you are
running any version of 1.8 it should be a quick update.


I wouldn't say "many". There is one fix in 1.8.2.4 over 1.8.2.3.

From the ChangeLog:

* Asterisk 1.8.2.4 Released.

* AST-2011-002: Multiple array overflow and crash vulnerabilities in
  UDPTL code


The release announcement for AST-2011-002 is here: 
http://downloads.asterisk.org/pub/security/AST-2011-002.pdf


Leif.

--
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
  http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [asterisk-users] Recieve_Fax caused crash 1.8.2.3

2011-02-24 Thread Andrew Latham
On Thu, Feb 24, 2011 at 6:05 PM, Bryant Zimmerman  wrote:
> I had an issue today where receive_fax caused an asterisk switch to crash.
> The switch is 1.8.2.3 version. The call was coming from a fax machine. The
> call started receive_fax answered and then asterisk stopped responding. I
> was able to log into asterisk but it would not do a core restart now nor
> would it take any calls or show an peer registrations.
> I had to kill the asterisk process and restart it.  As best we can tell
> there was no attempt by the sender to intentionally send any malformed
> packets that should have caused this. I see there is a security patch
> 1.8.2.4 that lists some RTP security issues. is it possible that this fix
> may address what I ran into as well?
>
> Thanks
>
> zktech

There are many updates in 1.8.2.4 that may fix your issue.  If you are
running any version of 1.8 it should be a quick update.

~~~ Andrew "lathama" Latham lath...@gmail.com ~~~

--
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
   http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

[asterisk-users] Recieve_Fax caused crash 1.8.2.3

2011-02-24 Thread Bryant Zimmerman
I had an issue today where receive_fax caused an asterisk switch to crash.
The switch is 1.8.2.3 version. The call was coming from a fax machine. The 
call started receive_fax answered and then asterisk stopped responding. I 
was able to log into asterisk but it would not do a core restart now nor 
would it take any calls or show an peer registrations.
I had to kill the asterisk process and restart it.  As best we can tell 
there was no attempt by the sender to intentionally send any malformed 
packets that should have caused this. I see there is a security patch 
1.8.2.4 that lists some RTP security issues. is it possible that this fix 
may address what I ran into as well?

Thanks

zktech
--
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
   http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users