mirror of
https://github.com/asterisk/asterisk.git
synced 2025-09-02 03:02:04 +00:00
Update for 20.15.2
This commit is contained in:
Asterisk Development Team
@@ -1 +1 @@
|
|||||||
ChangeLogs/ChangeLog-20.15.1.html
|
ChangeLogs/ChangeLog-20.15.2.html
|
||||||
@@ -1 +1 @@
|
|||||||
ChangeLogs/ChangeLog-20.15.1.md
|
ChangeLogs/ChangeLog-20.15.2.md
|
||||||
50
ChangeLogs/ChangeLog-20.15.2.html
Normal file
50
ChangeLogs/ChangeLog-20.15.2.html
Normal file
@@ -0,0 +1,50 @@
|
|||||||
|
<html><head><title>ChangeLog for asterisk-20.15.2</title></head><body>
|
||||||
|
<h2>Change Log for Release asterisk-20.15.2</h2>
|
||||||
|
<h3>Links:</h3>
|
||||||
|
<ul>
|
||||||
|
<li><a href="https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-20.15.2.html">Full ChangeLog</a> </li>
|
||||||
|
<li><a href="https://github.com/asterisk/asterisk/compare/20.15.1...20.15.2">GitHub Diff</a> </li>
|
||||||
|
<li><a href="https://downloads.asterisk.org/pub/telephony/asterisk/asterisk-20.15.2.tar.gz">Tarball</a> </li>
|
||||||
|
<li><a href="https://downloads.asterisk.org/pub/telephony/asterisk">Downloads</a> </li>
|
||||||
|
</ul>
|
||||||
|
<h3>Summary:</h3>
|
||||||
|
<ul>
|
||||||
|
<li>Commits: 1</li>
|
||||||
|
<li>Commit Authors: 1</li>
|
||||||
|
<li>Issues Resolved: 0</li>
|
||||||
|
<li>Security Advisories Resolved: 1</li>
|
||||||
|
<li><a href="https://github.com/asterisk/asterisk/security/advisories/GHSA-64qc-9x89-rx5j">GHSA-64qc-9x89-rx5j</a>: A specifically malformed Authorization header in an incoming SIP request can cause Asterisk to crash</li>
|
||||||
|
</ul>
|
||||||
|
<h3>User Notes:</h3>
|
||||||
|
<h3>Upgrade Notes:</h3>
|
||||||
|
<h3>Developer Notes:</h3>
|
||||||
|
<h3>Commit Authors:</h3>
|
||||||
|
<ul>
|
||||||
|
<li>George Joseph: (1)</li>
|
||||||
|
</ul>
|
||||||
|
<h2>Issue and Commit Detail:</h2>
|
||||||
|
<h3>Closed Issues:</h3>
|
||||||
|
<ul>
|
||||||
|
<li>!GHSA-64qc-9x89-rx5j: A specifically malformed Authorization header in an incoming SIP request can cause Asterisk to crash</li>
|
||||||
|
</ul>
|
||||||
|
<h3>Commits By Author:</h3>
|
||||||
|
<ul>
|
||||||
|
<li>
|
||||||
|
<h4>George Joseph (1):</h4>
|
||||||
|
</li>
|
||||||
|
<li>res_pjsip_authenticator_digest: Fix SEGV if get_authorization_hdr returns NULL.</li>
|
||||||
|
</ul>
|
||||||
|
<h3>Commit List:</h3>
|
||||||
|
<ul>
|
||||||
|
<li>res_pjsip_authenticator_digest: Fix SEGV if get_authorization_hdr returns NULL.</li>
|
||||||
|
</ul>
|
||||||
|
<h3>Commit Details:</h3>
|
||||||
|
<h4>res_pjsip_authenticator_digest: Fix SEGV if get_authorization_hdr returns NULL.</h4>
|
||||||
|
<p>Author: George Joseph
|
||||||
|
Date: 2025-08-28</p>
|
||||||
|
<p>In the highly-unlikely event that get_authorization_hdr() couldn't find an
|
||||||
|
Authorization header in a request, trying to get the digest algorithm
|
||||||
|
would cauase a SEGV. We now check that we have an auth header that matches
|
||||||
|
the realm before trying to get the algorithm from it.</p>
|
||||||
|
<p>Resolves: #GHSA-64qc-9x89-rx5j</p>
|
||||||
|
</body></html>
|
||||||
60
ChangeLogs/ChangeLog-20.15.2.md
Normal file
60
ChangeLogs/ChangeLog-20.15.2.md
Normal file
@@ -0,0 +1,60 @@
|
|||||||
|
|
||||||
|
## Change Log for Release asterisk-20.15.2
|
||||||
|
|
||||||
|
### Links:
|
||||||
|
|
||||||
|
- [Full ChangeLog](https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-20.15.2.html)
|
||||||
|
- [GitHub Diff](https://github.com/asterisk/asterisk/compare/20.15.1...20.15.2)
|
||||||
|
- [Tarball](https://downloads.asterisk.org/pub/telephony/asterisk/asterisk-20.15.2.tar.gz)
|
||||||
|
- [Downloads](https://downloads.asterisk.org/pub/telephony/asterisk)
|
||||||
|
|
||||||
|
### Summary:
|
||||||
|
|
||||||
|
- Commits: 1
|
||||||
|
- Commit Authors: 1
|
||||||
|
- Issues Resolved: 0
|
||||||
|
- Security Advisories Resolved: 1
|
||||||
|
- [GHSA-64qc-9x89-rx5j](https://github.com/asterisk/asterisk/security/advisories/GHSA-64qc-9x89-rx5j): A specifically malformed Authorization header in an incoming SIP request can cause Asterisk to crash
|
||||||
|
|
||||||
|
### User Notes:
|
||||||
|
|
||||||
|
|
||||||
|
### Upgrade Notes:
|
||||||
|
|
||||||
|
|
||||||
|
### Developer Notes:
|
||||||
|
|
||||||
|
|
||||||
|
### Commit Authors:
|
||||||
|
|
||||||
|
- George Joseph: (1)
|
||||||
|
|
||||||
|
## Issue and Commit Detail:
|
||||||
|
|
||||||
|
### Closed Issues:
|
||||||
|
|
||||||
|
- !GHSA-64qc-9x89-rx5j: A specifically malformed Authorization header in an incoming SIP request can cause Asterisk to crash
|
||||||
|
|
||||||
|
### Commits By Author:
|
||||||
|
|
||||||
|
- #### George Joseph (1):
|
||||||
|
- res_pjsip_authenticator_digest: Fix SEGV if get_authorization_hdr returns NULL.
|
||||||
|
|
||||||
|
|
||||||
|
### Commit List:
|
||||||
|
|
||||||
|
- res_pjsip_authenticator_digest: Fix SEGV if get_authorization_hdr returns NULL.
|
||||||
|
|
||||||
|
### Commit Details:
|
||||||
|
|
||||||
|
#### res_pjsip_authenticator_digest: Fix SEGV if get_authorization_hdr returns NULL.
|
||||||
|
Author: George Joseph
|
||||||
|
Date: 2025-08-28
|
||||||
|
|
||||||
|
In the highly-unlikely event that get_authorization_hdr() couldn't find an
|
||||||
|
Authorization header in a request, trying to get the digest algorithm
|
||||||
|
would cauase a SEGV. We now check that we have an auth header that matches
|
||||||
|
the realm before trying to get the algorithm from it.
|
||||||
|
|
||||||
|
Resolves: #GHSA-64qc-9x89-rx5j
|
||||||
|
|
||||||
@@ -1,4 +1,4 @@
|
|||||||
<html><head><title>Readme for asterisk-20.15.1</title></head><body>
|
<html><head><title>Readme for asterisk-20.15.2</title></head><body>
|
||||||
<h1>The Asterisk(R) Open Source PBX</h1>
|
<h1>The Asterisk(R) Open Source PBX</h1>
|
||||||
<pre><code>By Mark Spencer <markster@digium.com> and the Asterisk.org developer community.
|
<pre><code>By Mark Spencer <markster@digium.com> and the Asterisk.org developer community.
|
||||||
Copyright (C) 2001-2025 Sangoma Technologies Corporation and other copyright holders.
|
Copyright (C) 2001-2025 Sangoma Technologies Corporation and other copyright holders.
|
||||||
@@ -37,7 +37,7 @@ hardware.</p>
|
|||||||
<p>If you are updating from a previous version of Asterisk, make sure you
|
<p>If you are updating from a previous version of Asterisk, make sure you
|
||||||
read the Change Logs.</p>
|
read the Change Logs.</p>
|
||||||
<!-- CHANGELOGS (the URL will change based on the location of this README) -->
|
<!-- CHANGELOGS (the URL will change based on the location of this README) -->
|
||||||
<p><a href="ChangeLogs/ChangeLog-20.15.1.html">Change Logs</a></p>
|
<p><a href="ChangeLogs/ChangeLog-20.15.2.html">Change Logs</a></p>
|
||||||
<!-- END-CHANGELOGS -->
|
<!-- END-CHANGELOGS -->
|
||||||
|
|
||||||
<h3>NEW INSTALLATIONS</h3>
|
<h3>NEW INSTALLATIONS</h3>
|
||||||
|
|||||||
@@ -55,7 +55,7 @@ If you are updating from a previous version of Asterisk, make sure you
|
|||||||
read the Change Logs.
|
read the Change Logs.
|
||||||
|
|
||||||
<!-- CHANGELOGS (the URL will change based on the location of this README) -->
|
<!-- CHANGELOGS (the URL will change based on the location of this README) -->
|
||||||
[Change Logs](ChangeLogs/ChangeLog-20.15.1.html)
|
[Change Logs](ChangeLogs/ChangeLog-20.15.2.html)
|
||||||
<!-- END-CHANGELOGS -->
|
<!-- END-CHANGELOGS -->
|
||||||
|
|
||||||
### NEW INSTALLATIONS
|
### NEW INSTALLATIONS
|
||||||
|
|||||||
Reference in New Issue
Block a user