mirror of
https://github.com/asterisk/asterisk.git
synced 2025-09-03 11:25:35 +00:00
108 lines
3.9 KiB
Plaintext
108 lines
3.9 KiB
Plaintext
Release Summary
|
|
|
|
asterisk-18.5.1
|
|
|
|
Date: 2021-07-22
|
|
|
|
<asteriskteam@digium.com>
|
|
|
|
----------------------------------------------------------------------
|
|
|
|
Table of Contents
|
|
|
|
1. Summary
|
|
2. Contributors
|
|
3. Closed Issues
|
|
4. Diffstat
|
|
|
|
----------------------------------------------------------------------
|
|
|
|
Summary
|
|
|
|
[Back to Top]
|
|
|
|
This release has been made to address one or more security vulnerabilities
|
|
that have been identified. A security advisory document has been published
|
|
for each vulnerability that includes additional information. Users of
|
|
versions of Asterisk that are affected are strongly encouraged to review
|
|
the advisories and determine what action they should take to protect their
|
|
systems from these issues.
|
|
|
|
Security Advisories:
|
|
|
|
* AST-2021-007,AST-2021-008,AST-2021-009
|
|
|
|
The data in this summary reflects changes that have been made since the
|
|
previous release, asterisk-18.5.0.
|
|
|
|
----------------------------------------------------------------------
|
|
|
|
Contributors
|
|
|
|
[Back to Top]
|
|
|
|
This table lists the people who have submitted code, those that have
|
|
tested patches, as well as those that reported issues on the issue tracker
|
|
that were resolved in this release. For coders, the number is how many of
|
|
their patches (of any size) were committed into this release. For testers,
|
|
the number is the number of times their name was listed as assisting with
|
|
testing a patch. Finally, for reporters, the number is the number of
|
|
issues that they reported that were affected by commits that went into
|
|
this release.
|
|
|
|
Coders Testers Reporters
|
|
2 Kevin Harwell 1 Michael Welk
|
|
1 Joshua C. Colp 1 Ivan Poddubny
|
|
1 Andrew Yager
|
|
|
|
----------------------------------------------------------------------
|
|
|
|
Closed Issues
|
|
|
|
[Back to Top]
|
|
|
|
This is a list of all issues from the issue tracker that were closed by
|
|
changes that went into this release.
|
|
|
|
Security
|
|
|
|
Category: Channels/chan_pjsip
|
|
|
|
ASTERISK-29415: Crash in PJSIP TLS transport
|
|
Reported by: Andrew Yager
|
|
* [6c1aec36cb] Kevin Harwell -- AST-2021-009 - pjproject-bundled: Avoid
|
|
crash during handshake for TLS
|
|
|
|
Category: Resources/res_pjsip_session
|
|
|
|
ASTERISK-29381: chan_pjsip: Remote denial of service by an authenticated
|
|
user
|
|
Reported by: Ivan Poddubny
|
|
* [4a525a8971] Joshua C. Colp -- AST-2021-007 - res_pjsip_session: Don't
|
|
offer if no channel exists.
|
|
|
|
Bug
|
|
|
|
Category: Channels/chan_iax2
|
|
|
|
ASTERISK-29392: chan_iax2: Asterisk crashes when queueing video with
|
|
format
|
|
Reported by: Michael Welk
|
|
* [98e0b536d7] Kevin Harwell -- AST-2021-008 - chan_iax2: remote crash
|
|
on unsupported media format
|
|
|
|
----------------------------------------------------------------------
|
|
|
|
Diffstat Results
|
|
|
|
[Back to Top]
|
|
|
|
This is a summary of the changes to the source code that went into this
|
|
release that was generated using the diffstat utility.
|
|
|
|
channels/chan_iax2.c | 40 +-
|
|
res/res_pjsip_session.c | 10
|
|
third-party/pjproject/patches/0110-tls-parent-listener-destroyed.patch | 166 ++++++++++
|
|
third-party/pjproject/patches/0111-ssl-premature-destroy.patch | 136 ++++++++
|
|
4 files changed, 343 insertions(+), 9 deletions(-)
|