Trim down 1.8 branch by removing vulnerable 1.8.4.3 ebuild. Version bump to 1.8.4.4 for AST-2011-011. Information disclosure vulnerability; alwaysauthreject is not always effective resulting in different replies for non-existent SIP users than for a wrong password on a valid user.

Package-Manager: portage-2.1.10.3/cvs/Linux x86_64

3 files changed, 14 insertions, 15 deletions

diff --git a/net-misc/asterisk/ChangeLog b/net-misc/asterisk/ChangeLog
index bd8ca473fd44..1cbcda76da02 100644
--- a/net-misc/asterisk/ChangeLog
+++ b/net-misc/asterisk/ChangeLog
@@ -1,6 +1,15 @@
 # ChangeLog for net-misc/asterisk
 # Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-misc/asterisk/ChangeLog,v 1.323 2011/06/27 08:17:27 chainsaw Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-misc/asterisk/ChangeLog,v 1.324 2011/06/28 21:38:10 chainsaw Exp $
+
+*asterisk-1.8.4.4 (28 Jun 2011)
+
+  28 Jun 2011; Tony Vroon <chainsaw@gentoo.org> -asterisk-1.8.4.3.ebuild,
+  +asterisk-1.8.4.4.ebuild:
+  Trim down 1.8 branch by removing vulnerable 1.8.4.3 ebuild. Version bump to
+  1.8.4.4 for AST-2011-011. Information disclosure vulnerability;
+  alwaysauthreject is not always effective resulting in different replies for
+  non-existent SIP users than for a wrong password on a valid user.
 
   27 Jun 2011; Tony Vroon <chainsaw@gentoo.org> -asterisk-1.6.2.17.3.ebuild:
   Remove last vulnerable ebuild on 1.6.2 branch now that stabling has been
diff --git a/net-misc/asterisk/Manifest b/net-misc/asterisk/Manifest
index acfde3de4fcf..42e18df30017 100644
--- a/net-misc/asterisk/Manifest
+++ b/net-misc/asterisk/Manifest
@@ -1,6 +1,3 @@
------BEGIN PGP SIGNED MESSAGE-----
-Hash: SHA1
-
 AUX 1.6.0/asterisk.confd 2204 RMD160 31bceebfa535e97cb2634e313678cc42186d4750 SHA1 748c623cea238cd9b322672d5ebcfe214a4f0463 SHA256 daec84c58e0ef6cbd71a6fc62cb83129b1bcffdfdd619ebbd62a642f0cd1eee7
 AUX 1.6.2/asterisk.initd2 6658 RMD160 b694da109e746e9a9e642ffa7f1d278f03543cea SHA1 63443d3066d4c47228fe1d852420d571ae6f8800 SHA256 f6fd2c229e61c12360b1d289a631f6a0a6f8638e7c6f6add6040ad988170bf70
 AUX 1.6.2/asterisk.initd3 6658 RMD160 adabbacaff55cc49077a919fb23eb6f8e3a2c076 SHA1 a256b7af478a4d83c19a89b23d79a4f832f1fb5a SHA256 ba737b5eadd4a5ff8653e30b54959c1d25a8a68699b8ce9adc9afe09da8b4110
@@ -10,17 +7,10 @@ AUX 1.6.2/find_call_ids.sh 446 RMD160 e3e46295e7a4b7fdc2364c5ddfbe76290311a6fd S
 AUX 1.6.2/find_call_sip_trace.sh 530 RMD160 a45c1710a159dd5e7f9dfba51e92981ebb2ab035 SHA1 1e221f910625ce47ad9c84937d8160fdeedb713d SHA256 6818f5cde5f99b7c9be35d20e2c84c61cf0d14f63aa1e3952d0dc91ecb93e3a4
 AUX 1.6.2/sip_calc_auth 493 RMD160 1813bd5aecbb60b38c20752050e6be44cca10f47 SHA1 139db5af00790f7b18e9a3e14948edc683e7e03f SHA256 18590fd24d6fa0b7392228695b764351ac9af25482e22247bf80471858a90c4c
 DIST asterisk-1.6.2.18.1.tar.gz 23754336 RMD160 d67f6d6b0e8f650a0835dda66c5ea2254b2baf07 SHA1 fd40c4ffdd15760d499a98b793b0d005609a2e45 SHA256 92a9f53fe6f1cb905f6151b8f6d389064a8fbaf19f63c72450a4c42d238312f0
-DIST asterisk-1.8.4.3.tar.gz 27327187 RMD160 cc07b30754ead0f1c6ff139d3b9f94642d380ddb SHA1 bebb82a19b86817a3ae62b7495991af480cdaad8 SHA256 3aa85798f2ec125f03a997e6359245ebc6b06c6ae5a2a80945707a79216a3c1f
+DIST asterisk-1.8.4.4.tar.gz 27326189 RMD160 c95cab1b24547f1abd229dcf323cc7ed0b0b36a0 SHA1 07d3ae5744e2dd10c5d9564b503690f3f0b84d96 SHA256 08d44e7cfd5c306d944cd48eb8a497a345ebbb4e781d7a6cc917376784789c1f
 DIST gentoo-asterisk-patchset-0.1.tar.bz2 5394 RMD160 bfd546101c77f6e6989c406bfb202e592f9d16fd SHA1 e49b7784f987e027d833fbe8e0773acb1ef78521 SHA256 07c1bc6a29bda4fa98e7d1eb436d2e6eafc13263b774a0ff41698e523fa59a97
 DIST gentoo-asterisk-patchset-0.5.tar.bz2 6790 RMD160 ce738a36248b974d707ef748314e160acccd6ddb SHA1 4b6ae9e6e1529237fe4fe5d313440be741921d8e SHA256 258cbc3b81019b99bfe4b12888ed181ab142ca6d21ad61eae3d032c3617a7a79
 EBUILD asterisk-1.6.2.18.1.ebuild 5827 RMD160 85a92e55997c14988be694f47996187cada13bbe SHA1 8c0d6a2040a8622fdcb988da01948ec281563d6a SHA256 f7e5d23fef1124d1101ce6bc041166d1e443f20f35086e09617c6448003833d4
-EBUILD asterisk-1.8.4.3.ebuild 14629 RMD160 ae83569949bce8379369b12f625466e430d1c614 SHA1 073a8c7610f8e36ecfa63d627336be30366e3d18 SHA256 ff45ec8de865d866d48bd09c8fbe14a573a6f73834a9263195d10a7f4c774b43
-MISC ChangeLog 81459 RMD160 3f9da8ef30adb8b40577af6eff3ec5a4c19469bc SHA1 a91bdd68f14693255e3cbfa505a97118441c5b97 SHA256 d7c593bf1ddc8cd373e53a8b8cf6b0083e5f2cde9987ebae0c53976203876dd0
+EBUILD asterisk-1.8.4.4.ebuild 14629 RMD160 4ed73419287f570ecd761c27c61bd3f51a65ece2 SHA1 05593230f3999d7b13e533dd6df76ec51bbfd8ad SHA256 bac46f48c31a41ad50e4e243e0817b4ecbab2dd1e7e6d4c7e7eef8455fdafbcc
+MISC ChangeLog 81885 RMD160 920fe76807654f81be11ae9677fc7053a8f03501 SHA1 a8280052a8ef57c4c6eda717643d82cd849b40b0 SHA256 8c459971bc3761033b1a2e8d646c7019a7c2b72b1a5897fc13e0ca867d49da2f
 MISC metadata.xml 1104 RMD160 5b90405c685bc1c0ee173b3024afab5bc849bf40 SHA1 bf76dd265acf32efba9e4e8189ae154a4b9ebd40 SHA256 17e96f326cd60399fb217025567ae4c80f1b9b12418f1bf5b41c8fa4c49598ec
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v2.0.17 (GNU/Linux)
-
-iEYEARECAAYFAk4IPJQACgkQp5vW4rUFj5qLawCgv7vae7W3C6ZTmJC4Bs23t6sH
-JNkAn2ieBddmV3OID44CIEmrTSEVCYTy
-=0i4L
------END PGP SIGNATURE-----
diff --git a/net-misc/asterisk/asterisk-1.8.4.3.ebuild b/net-misc/asterisk/asterisk-1.8.4.4.ebuild
index 8661847f98f3..8be7c8737619 100644
--- a/net-misc/asterisk/asterisk-1.8.4.3.ebuild
+++ b/net-misc/asterisk/asterisk-1.8.4.4.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2011 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-misc/asterisk/asterisk-1.8.4.3.ebuild,v 1.1 2011/06/24 09:01:58 chainsaw Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-misc/asterisk/asterisk-1.8.4.4.ebuild,v 1.1 2011/06/28 21:38:10 chainsaw Exp $
 
 EAPI=3
 inherit autotools base eutils linux-info multilib