mirror of
https://github.com/asterisk/asterisk.git
synced 2025-09-02 11:06:31 +00:00
51 lines
2.0 KiB
HTML
51 lines
2.0 KiB
HTML
<html><head><title>ChangeLog for asterisk-22.5.2</title></head><body>
|
|
<h2>Change Log for Release asterisk-22.5.2</h2>
|
|
<h3>Links:</h3>
|
|
<ul>
|
|
<li><a href="https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-22.5.2.html">Full ChangeLog</a> </li>
|
|
<li><a href="https://github.com/asterisk/asterisk/compare/22.5.1...22.5.2">GitHub Diff</a> </li>
|
|
<li><a href="https://downloads.asterisk.org/pub/telephony/asterisk/asterisk-22.5.2.tar.gz">Tarball</a> </li>
|
|
<li><a href="https://downloads.asterisk.org/pub/telephony/asterisk">Downloads</a> </li>
|
|
</ul>
|
|
<h3>Summary:</h3>
|
|
<ul>
|
|
<li>Commits: 1</li>
|
|
<li>Commit Authors: 1</li>
|
|
<li>Issues Resolved: 0</li>
|
|
<li>Security Advisories Resolved: 1</li>
|
|
<li><a href="https://github.com/asterisk/asterisk/security/advisories/GHSA-64qc-9x89-rx5j">GHSA-64qc-9x89-rx5j</a>: A specifically malformed Authorization header in an incoming SIP request can cause Asterisk to crash</li>
|
|
</ul>
|
|
<h3>User Notes:</h3>
|
|
<h3>Upgrade Notes:</h3>
|
|
<h3>Developer Notes:</h3>
|
|
<h3>Commit Authors:</h3>
|
|
<ul>
|
|
<li>George Joseph: (1)</li>
|
|
</ul>
|
|
<h2>Issue and Commit Detail:</h2>
|
|
<h3>Closed Issues:</h3>
|
|
<ul>
|
|
<li>!GHSA-64qc-9x89-rx5j: A specifically malformed Authorization header in an incoming SIP request can cause Asterisk to crash</li>
|
|
</ul>
|
|
<h3>Commits By Author:</h3>
|
|
<ul>
|
|
<li>
|
|
<h4>George Joseph (1):</h4>
|
|
</li>
|
|
<li>res_pjsip_authenticator_digest: Fix SEGV if get_authorization_hdr returns NULL.</li>
|
|
</ul>
|
|
<h3>Commit List:</h3>
|
|
<ul>
|
|
<li>res_pjsip_authenticator_digest: Fix SEGV if get_authorization_hdr returns NULL.</li>
|
|
</ul>
|
|
<h3>Commit Details:</h3>
|
|
<h4>res_pjsip_authenticator_digest: Fix SEGV if get_authorization_hdr returns NULL.</h4>
|
|
<p>Author: George Joseph
|
|
Date: 2025-08-28</p>
|
|
<p>In the highly-unlikely event that get_authorization_hdr() couldn't find an
|
|
Authorization header in a request, trying to get the digest algorithm
|
|
would cauase a SEGV. We now check that we have an auth header that matches
|
|
the realm before trying to get the algorithm from it.</p>
|
|
<p>Resolves: #GHSA-64qc-9x89-rx5j</p>
|
|
</body></html>
|