Skip to content
Snippets Groups Projects
Commit e56a9056 authored by Asterisk Development Team's avatar Asterisk Development Team
Browse files

Update for 19.3.3

parent 0adbc4f4
No related branches found
Tags 19.3.3
No related merge requests found
Hide whitespace changes
Inline Side-by-side
.version
+ 1
− 1
View file @ e56a9056
19.3.2 19.3.3
\ No newline at end of file \ No newline at end of file
ChangeLog
+ 18
− 0
View file @ e56a9056
2022-04-26 16:36 +0000 Asterisk Development Team <asteriskteam@digium.com>
* asterisk 19.3.3 Released.
2022-04-21 10:26 +0000 [0adbc4f499] Ben Ford <bford@digium.com>
* res_pjsip_stir_shaken.c: Fix enabled when not configured.
There was an issue with the conditional where STIR/SHAKEN would be
enabled even when not configured. It has been changed to ensure that if
a profile does not exist and stir_shaken is not set in pjsip.conf, then
the conditional will return from the function without performing
STIR/SHAKEN operations.
ASTERISK-30024
Change-Id: I41286a3d35b033ccbfbe4129427a62cb793a86e6
2022-04-14 22:16 +0000 Asterisk Development Team <asteriskteam@digium.com> 2022-04-14 22:16 +0000 Asterisk Development Team <asteriskteam@digium.com>
   
* asterisk 19.3.2 Released. * asterisk 19.3.2 Released.
asterisk-19.3.2-summary.html deleted 100644 → 0
+ 0
− 46
View file @ 0adbc4f4
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><title>Release Summary - asterisk-19.3.2</title><h1 align="center"><a name="top">Release Summary</a></h1><h3 align="center">asterisk-19.3.2</h3><h3 align="center">Date: 2022-04-14</h3><h3 align="center">&lt;asteriskteam@digium.com&gt;</h3><hr><h2 align="center">Table of Contents</h2><ol>
<li><a href="#summary">Summary</a></li>
<li><a href="#contributors">Contributors</a></li>
<li><a href="#closed_issues">Closed Issues</a></li>
<li><a href="#commits">Other Changes</a></li>
<li><a href="#diffstat">Diffstat</a></li>
</ol><hr><a name="summary"><h2 align="center">Summary</h2></a><center><a href="#top">[Back to Top]</a></center><p>This release has been made to address one or more security vulnerabilities that have been identified. A security advisory document has been published for each vulnerability that includes additional information. Users of versions of Asterisk that are affected are strongly encouraged to review the advisories and determine what action they should take to protect their systems from these issues.</p><p>Security Advisories:</p><ul>
<li><a href="http://downloads.asterisk.org/pub/security/AST-2022-001.html">AST-2022-001</a></li>
<li><a href="http://downloads.asterisk.org/pub/security/AST-2022-002.html">AST-2022-002</a></li>
<li><a href="http://downloads.asterisk.org/pub/security/AST-2022-003.html">AST-2022-003</a></li>
</ul><p>The data in this summary reflects changes that have been made since the previous release, asterisk-19.3.1.</p><hr><a name="contributors"><h2 align="center">Contributors</h2></a><center><a href="#top">[Back to Top]</a></center><p>This table lists the people who have submitted code, those that have tested patches, as well as those that reported issues on the issue tracker that were resolved in this release. For coders, the number is how many of their patches (of any size) were committed into this release. For testers, the number is the number of times their name was listed as assisting with testing a patch. Finally, for reporters, the number is the number of issues that they reported that were affected by commits that went into this release.</p><table width="100%" border="0">
<tr><th width="33%">Coders</th><th width="33%">Testers</th><th width="33%">Reporters</th></tr>
<tr valign="top"><td width="33%">3 Asterisk Development Team <asteriskteam@digium.com><br/>2 Ben Ford <bford@digium.com><br/>1 Joshua C. Colp <jcolp@sangoma.com><br/></td><td width="33%"><td width="33%">1 Benjamin Keith Ford <bford@digium.com><br/>1 Clint Ruoho <clint@ruoho.org><br/>1 Leandro Dardini <ldardini@gmail.com><br/></td></tr>
</table><hr><a name="closed_issues"><h2 align="center">Closed Issues</h2></a><center><a href="#top">[Back to Top]</a></center><p>This is a list of all issues from the issue tracker that were closed by changes that went into this release.</p><h3>Security</h3><h4>Category: Functions/func_odbc</h4><a href="https://issues.asterisk.org/jira/browse/ASTERISK-29838">ASTERISK-29838</a>: ${SQL_ESC()} not correctly escaping a terminating \<br/>Reported by: Leandro Dardini<ul>
<li><a href="https://code.asterisk.org/code/changelog/asterisk?cs=cabd2d6950c6616adb29cc9095bb97661a8d6bc4">[cabd2d6950]</a> Joshua C. Colp -- func_odbc: Add SQL_ESC_BACKSLASHES dialplan function.</li>
</ul><br><h4>Category: Resources/res_stir_shaken</h4><a href="https://issues.asterisk.org/jira/browse/ASTERISK-29476">ASTERISK-29476</a>: res_stir_shaken: Blind SSRF vulnerabilities<br/>Reported by: Clint Ruoho<ul>
<li><a href="https://code.asterisk.org/code/changelog/asterisk?cs=b9f026c7fdadbb158f5b6b8e60b1beb6596ce9a9">[b9f026c7fd]</a> Ben Ford -- AST-2022-002 - res_stir_shaken/curl: Add ACL checks for Identity header.</li>
</ul><a href="https://issues.asterisk.org/jira/browse/ASTERISK-29872">ASTERISK-29872</a>: res_stir_shaken: Resource exhaustion with large files<br/>Reported by: Benjamin Keith Ford<ul>
<li><a href="https://code.asterisk.org/code/changelog/asterisk?cs=4857b7917ab5bf28f62d29f949feea861c56a90f">[4857b7917a]</a> Ben Ford -- AST-2022-001 - res_stir_shaken/curl: Limit file size and check start.</li>
</ul><br><hr><a name="commits"><h2 align="center">Commits Not Associated with an Issue</h2></a><center><a href="#top">[Back to Top]</a></center><p>This is a list of all changes that went into this release that did not reference a JIRA issue.</p><table width="100%" border="1">
<tr><th>Revision</th><th>Author</th><th>Summary</th></tr>
<tr><td><a href="https://code.asterisk.org/code/changelog/asterisk?cs=d3caebe072e36e34a9a1e53f63165156e46da325">d3caebe072</a></td><td>Asterisk Development Team</td><td>Doing a fresh summary</td></tr>
<tr><td><a href="https://code.asterisk.org/code/changelog/asterisk?cs=fda68af0f66ced04a4896ed827c14f163c3c126e">fda68af0f6</a></td><td>Asterisk Development Team</td><td>Update for 19.3.2</td></tr>
<tr><td><a href="https://code.asterisk.org/code/changelog/asterisk?cs=a3838678f4dc50f6361f239fde34699d1761fa64">a3838678f4</a></td><td>Asterisk Development Team</td><td>Update CHANGES and UPGRADE.txt for 19.3.2</td></tr>
</table><hr><a name="diffstat"><h2 align="center">Diffstat Results</h2></a><center><a href="#top">[Back to Top]</a></center><p>This is a summary of the changes to the source code that went into this release that was generated using the diffstat utility.</p><pre>asterisk-19.3.1-summary.html | 16 -
asterisk-19.3.1-summary.txt | 91 -----------
b/.version | 2
b/CHANGES | 12 +
b/ChangeLog | 57 +++++++
b/configs/samples/func_odbc.conf.sample | 4
b/configs/samples/pjsip.conf.sample | 4
b/configs/samples/stir_shaken.conf.sample | 18 ++
b/funcs/func_odbc.c | 39 ++++
b/include/asterisk/res_pjsip.h | 2
b/include/asterisk/res_stir_shaken.h | 54 ++++++
b/res/res_pjsip/pjsip_config.xml | 7
b/res/res_pjsip/pjsip_configuration.c | 1
b/res/res_pjsip_stir_shaken.c | 14 +
b/res/res_stir_shaken.c | 90 +++++++++--
b/res/res_stir_shaken/curl.c | 177 +++++++++++++++++-----
b/res/res_stir_shaken/curl.h | 5
b/res/res_stir_shaken/profile.c | 241 ++++++++++++++++++++++++++++++
b/res/res_stir_shaken/profile.h | 39 ++++
b/res/res_stir_shaken/profile_private.h | 40 ++++
b/res/res_stir_shaken/stir_shaken.c | 20 --
21 files changed, 760 insertions(+), 173 deletions(-)</pre><br></html>
\ No newline at end of file
asterisk-19.3.3-summary.html 0 → 100644
+ 11
− 0
View file @ e56a9056
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><title>Release Summary - asterisk-19.3.3</title><h1 align="center"><a name="top">Release Summary</a></h1><h3 align="center">asterisk-19.3.3</h3><h3 align="center">Date: 2022-04-26</h3><h3 align="center">&lt;asteriskteam@digium.com&gt;</h3><hr><h2 align="center">Table of Contents</h2><ol>
<li><a href="#summary">Summary</a></li>
<li><a href="#contributors">Contributors</a></li>
<li><a href="#closed_issues">Closed Issues</a></li>
<li><a href="#diffstat">Diffstat</a></li>
</ol><hr><a name="summary"><h2 align="center">Summary</h2></a><center><a href="#top">[Back to Top]</a></center><p>This release is a point release of an existing major version. The changes included were made to address problems that have been identified in this release series, or are minor, backwards compatible new features or improvements. Users should be able to safely upgrade to this version if this release series is already in use. Users considering upgrading from a previous version are strongly encouraged to review the UPGRADE.txt document as well as the CHANGES document for information about upgrading to this release series.</p><p>The data in this summary reflects changes that have been made since the previous release, asterisk-19.3.2.</p><hr><a name="contributors"><h2 align="center">Contributors</h2></a><center><a href="#top">[Back to Top]</a></center><p>This table lists the people who have submitted code, those that have tested patches, as well as those that reported issues on the issue tracker that were resolved in this release. For coders, the number is how many of their patches (of any size) were committed into this release. For testers, the number is the number of times their name was listed as assisting with testing a patch. Finally, for reporters, the number is the number of issues that they reported that were affected by commits that went into this release.</p><table width="100%" border="0">
<tr><th width="33%">Coders</th><th width="33%">Testers</th><th width="33%">Reporters</th></tr>
<tr valign="top"><td width="33%">1 Ben Ford <bford@digium.com><br/></td><td width="33%"><td width="33%">1 Claude Diderich <claude.diderich@yahoo.com><br/></td></tr>
</table><hr><a name="closed_issues"><h2 align="center">Closed Issues</h2></a><center><a href="#top">[Back to Top]</a></center><p>This is a list of all issues from the issue tracker that were closed by changes that went into this release.</p><h3>Bug</h3><h4>Category: Resources/res_stir_shaken</h4><a href="https://issues.asterisk.org/jira/browse/ASTERISK-30024">ASTERISK-30024</a>: Failed to sign STIR/SHAKEN payload with functionality not enabled<br/>Reported by: Claude Diderich<ul>
<li><a href="https://code.asterisk.org/code/changelog/asterisk?cs=0adbc4f499248aed746e2074504fd535c791e168">[0adbc4f499]</a> Ben Ford -- res_pjsip_stir_shaken.c: Fix enabled when not configured.</li>
</ul><br><hr><a name="diffstat"><h2 align="center">Diffstat Results</h2></a><center><a href="#top">[Back to Top]</a></center><p>This is a summary of the changes to the source code that went into this release that was generated using the diffstat utility.</p><pre>0 files changed</pre><br></html>
\ No newline at end of file
asterisk-19.3.2-summary.txt → asterisk-19.3.3-summary.txt
+ 82
− 0
View file @ e56a9056
Release Summary Release Summary
asterisk-19.3.2 asterisk-19.3.3
Date: 2022-04-14 Date: 2022-04-26
<asteriskteam@digium.com> <asteriskteam@digium.com>
...@@ -13,8 +13,7 @@ ...@@ -13,8 +13,7 @@
1. Summary 1. Summary
2. Contributors 2. Contributors
3. Closed Issues 3. Closed Issues
4. Other Changes 4. Diffstat
5. Diffstat
---------------------------------------------------------------------- ----------------------------------------------------------------------
...@@ -22,21 +21,17 @@ ...@@ -22,21 +21,17 @@
[Back to Top] [Back to Top]
This release has been made to address one or more security vulnerabilities This release is a point release of an existing major version. The changes
that have been identified. A security advisory document has been published included were made to address problems that have been identified in this
for each vulnerability that includes additional information. Users of release series, or are minor, backwards compatible new features or
versions of Asterisk that are affected are strongly encouraged to review improvements. Users should be able to safely upgrade to this version if
the advisories and determine what action they should take to protect their this release series is already in use. Users considering upgrading from a
systems from these issues. previous version are strongly encouraged to review the UPGRADE.txt
document as well as the CHANGES document for information about upgrading
Security Advisories: to this release series.
* AST-2022-001
* AST-2022-002
* AST-2022-003
The data in this summary reflects changes that have been made since the The data in this summary reflects changes that have been made since the
previous release, asterisk-19.3.1. previous release, asterisk-19.3.2.
---------------------------------------------------------------------- ----------------------------------------------------------------------
...@@ -53,10 +48,8 @@ ...@@ -53,10 +48,8 @@
issues that they reported that were affected by commits that went into issues that they reported that were affected by commits that went into
this release. this release.
Coders Testers Reporters Coders Testers Reporters
3 Asterisk Development Team 1 Benjamin Keith Ford 1 Ben Ford 1 Claude Diderich
2 Ben Ford 1 Clint Ruoho
1 Joshua C. Colp 1 Leandro Dardini
---------------------------------------------------------------------- ----------------------------------------------------------------------
...@@ -67,45 +60,15 @@ ...@@ -67,45 +60,15 @@
This is a list of all issues from the issue tracker that were closed by This is a list of all issues from the issue tracker that were closed by
changes that went into this release. changes that went into this release.
Security Bug
Category: Functions/func_odbc
ASTERISK-29838: ${SQL_ESC()} not correctly escaping a terminating \
Reported by: Leandro Dardini
* [cabd2d6950] Joshua C. Colp -- func_odbc: Add SQL_ESC_BACKSLASHES
dialplan function.
Category: Resources/res_stir_shaken Category: Resources/res_stir_shaken
ASTERISK-29476: res_stir_shaken: Blind SSRF vulnerabilities ASTERISK-30024: Failed to sign STIR/SHAKEN payload with functionality not
Reported by: Clint Ruoho enabled
* [b9f026c7fd] Ben Ford -- AST-2022-002 - res_stir_shaken/curl: Add ACL Reported by: Claude Diderich
checks for Identity header. * [0adbc4f499] Ben Ford -- res_pjsip_stir_shaken.c: Fix enabled when not
ASTERISK-29872: res_stir_shaken: Resource exhaustion with large files configured.
Reported by: Benjamin Keith Ford
* [4857b7917a] Ben Ford -- AST-2022-001 - res_stir_shaken/curl: Limit
file size and check start.
----------------------------------------------------------------------
Commits Not Associated with an Issue
[Back to Top]
This is a list of all changes that went into this release that did not
reference a JIRA issue.
+------------------------------------------------------------------------+
| Revision | Author | Summary |
|------------+---------------------------+-------------------------------|
| d3caebe072 | Asterisk Development Team | Doing a fresh summary |
|------------+---------------------------+-------------------------------|
| fda68af0f6 | Asterisk Development Team | Update for 19.3.2 |
|------------+---------------------------+-------------------------------|
| a3838678f4 | Asterisk Development Team | Update CHANGES and |
| | | UPGRADE.txt for 19.3.2 |
+------------------------------------------------------------------------+
---------------------------------------------------------------------- ----------------------------------------------------------------------
...@@ -116,25 +79,4 @@ ...@@ -116,25 +79,4 @@
This is a summary of the changes to the source code that went into this This is a summary of the changes to the source code that went into this
release that was generated using the diffstat utility. release that was generated using the diffstat utility.
asterisk-19.3.1-summary.html | 16 - 0 files changed
asterisk-19.3.1-summary.txt | 91 -----------
b/.version | 2
b/CHANGES | 12 +
b/ChangeLog | 57 +++++++
b/configs/samples/func_odbc.conf.sample | 4
b/configs/samples/pjsip.conf.sample | 4
b/configs/samples/stir_shaken.conf.sample | 18 ++
b/funcs/func_odbc.c | 39 ++++
b/include/asterisk/res_pjsip.h | 2
b/include/asterisk/res_stir_shaken.h | 54 ++++++
b/res/res_pjsip/pjsip_config.xml | 7
b/res/res_pjsip/pjsip_configuration.c | 1
b/res/res_pjsip_stir_shaken.c | 14 +
b/res/res_stir_shaken.c | 90 +++++++++--
b/res/res_stir_shaken/curl.c | 177 +++++++++++++++++-----
b/res/res_stir_shaken/curl.h | 5
b/res/res_stir_shaken/profile.c | 241 ++++++++++++++++++++++++++++++
b/res/res_stir_shaken/profile.h | 39 ++++
b/res/res_stir_shaken/profile_private.h | 40 ++++
b/res/res_stir_shaken/stir_shaken.c | 20 --
21 files changed, 760 insertions(+), 173 deletions(-)
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment