[Bug 491632] Re: ACL not respected on SIP INVITE

2009-12-30 Thread Launchpad Bug Tracker
This bug was fixed in the package asterisk - 1:1.6.2.0~rc2-0ubuntu2 --- asterisk (1:1.6.2.0~rc2-0ubuntu2) lucid; urgency=low [ Dave Walker (Daviey) ] * SECURITY UPDATE: ACL not respected on SIP INVITE (LP: #491632). - debian/patches/AST-2009-007: Additional check in channels/c

[Bug 491632] Re: ACL not respected on SIP INVITE

2009-12-08 Thread Launchpad Bug Tracker
** Branch linked: lp:ubuntu/karmic-security/asterisk -- ACL not respected on SIP INVITE https://bugs.launchpad.net/bugs/491632 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https

[Bug 491632] Re: ACL not respected on SIP INVITE

2009-12-08 Thread Launchpad Bug Tracker
This bug was fixed in the package asterisk - 1:1.6.2.0~rc2-0ubuntu1.1 --- asterisk (1:1.6.2.0~rc2-0ubuntu1.1) karmic-security; urgency=low * SECURITY UPDATE: ACL not respected on SIP INVITE (LP: #491632). - debian/patches/AST-2009-007: Additional check in channels/chan_sip.c to

[Bug 491632] Re: ACL not respected on SIP INVITE

2009-12-08 Thread Jamie Strandboge
Dave, I forgot to mention, when you submit debdiffs for the other releases, please nominate for release and mark In Progress for each debdiff submitted. Thanks again! -- ACL not respected on SIP INVITE https://bugs.launchpad.net/bugs/491632 You received this bug notification because you are a me

[Bug 491632] Re: ACL not respected on SIP INVITE

2009-12-08 Thread Jamie Strandboge
Dave, Thanks again for your patch. It looks great with one exception: the patch file names should be appended to debian/patches/series, not prepended. If you haven't already, I suggest becoming familiar with https://wiki.ubuntu.com/PackagingGuide/Complete which will help you use quilt to manage th

[Bug 491632] Re: ACL not respected on SIP INVITE

2009-12-07 Thread Dave Walker
Also includes resolution to #493555 ** Attachment added: "Updated karmic debdiff" http://launchpadlibrarian.net/36528954/asterisk_1.6.2.0%7Erc2-0ubuntu1.1.debdiff ** Changed in: asterisk (Ubuntu Karmic) Status: Triaged => In Progress -- ACL not respected on SIP INVITE https://bugs.la

[Bug 491632] Re: ACL not respected on SIP INVITE

2009-12-03 Thread Jamie Strandboge
Thanks for the debdiff! It looks good, though I'd prefer: 1. it use http://dep.debian.net/deps/dep3/ 2. you remove the unicode from the patch description 3. you not change the banner (edge does work after all) I don't feel super strongly about fixing the banner, but it seems more like something to

[Bug 491632] Re: ACL not respected on SIP INVITE

2009-12-03 Thread Dave Walker
The attached debdiff resolves this bug and #491637 for Karmic. It's using patches derived from upstream, and builds cleanly. I have tested installation and basic functionality. I have not tried to reproduce the known exploit for one of the bugs. There is also a minor string change in the ubuntu

[Bug 491632] Re: ACL not respected on SIP INVITE

2009-12-03 Thread Dave Walker
** Changed in: asterisk (Ubuntu Karmic) Status: Confirmed => In Progress -- ACL not respected on SIP INVITE https://bugs.launchpad.net/bugs/491632 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-

[Bug 491632] Re: ACL not respected on SIP INVITE

2009-12-02 Thread Dave Walker
** Changed in: asterisk (Ubuntu Karmic) Assignee: (unassigned) => Dave Walker (davewalker) -- ACL not respected on SIP INVITE https://bugs.launchpad.net/bugs/491632 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mail

[Bug 491632] Re: ACL not respected on SIP INVITE

2009-12-02 Thread Marc Deslauriers
This is CVE-2009-3723 ** Visibility changed to: Public ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2009-3723 ** Changed in: asterisk (Ubuntu) Status: New => Confirmed ** Also affects: asterisk (Ubuntu Karmic) Importance: Undecided Status: New ** Changed in