4f13dc362d
Fixes the following security issues: * AST-2017-014: Crash in PJSIP resource when missing a contact header A select set of SIP messages create a dialog in Asterisk. Those SIP messages must contain a contact header. For those messages, if the header was not present and using the PJSIP channel driver, it would cause Asterisk to crash. The severity of this vulnerability is somewhat mitigated if authentication is enabled. If authentication is enabled a user would have to first be authorized before reaching the crash point. For more details, see the announcement: https://www.asterisk.org/downloads/asterisk-news/asterisk-13185-1475-1515-and-1318-cert2-now-available-security Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> |
||
|---|---|---|
| .. | ||
| 0001-configure-do-not-configure-in-menuselect.patch | ||
| 0002-sounds-do-not-download-and-check-sha1s.patch | ||
| 0003-configure-fix-detection-of-libcrypt.patch | ||
| 0004-build-ensure-target-directory-for-modules-exists.patch | ||
| 0005-install-samples-need-the-data-files.patch | ||
| asterisk.hash | ||
| asterisk.mk | ||
| Config.in | ||