Debian Package Tracker

general

source: asterisk (main)
version: 1:16.2.1~dfsg-2
maintainer: Debian VoIP Team (archive) (DMD)
uploaders: Mark Purcell [DMD] – Bernhard Schmidt [DMD] – Tzafrir Cohen [DMD] – Jonas Smedegaard [DMD] – Jeremy Lainé [DMD] – Daniel Pocock [DMD]
arch: all any
std-ver: 4.1.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 1:11.13.1~dfsg-2+deb8u5
o-o-sec: 1:11.13.1~dfsg-2+deb8u6
oldstable: 1:13.14.1~dfsg-2+deb9u4
old-sec: 1:13.14.1~dfsg-2+deb9u4
stable: 1:16.2.1~dfsg-1
testing: 1:16.2.1~dfsg-2
unstable: 1:16.2.1~dfsg-2

versioned links

1:11.13.1~dfsg-2+deb8u5: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1:11.13.1~dfsg-2+deb8u6: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1:13.14.1~dfsg-2+deb9u4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1:16.2.1~dfsg-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1:16.2.1~dfsg-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

asterisk (12 bugs: 0, 7, 5, 0)
asterisk-config (1 bugs: 0, 0, 1, 0)
asterisk-dahdi
asterisk-dev
asterisk-doc
asterisk-mobile
asterisk-modules
asterisk-mp3
asterisk-mysql
asterisk-ooh323
asterisk-tests
asterisk-voicemail
asterisk-voicemail-imapstorage
asterisk-voicemail-odbcstorage
asterisk-vpb

action needed

Marked for autoremoval on 15 September due to libss7: #925760 high

Version 1:16.2.1~dfsg-2 of asterisk is marked for autoremoval from testing on Sun 15 Sep 2019. It depends (transitively) on libss7, affected by #925760. You should try to prevent the removal by fixing these RC bugs.

Created: 2019-08-15 Last update: 2019-08-20 18:08

A new upstream version is available: 16.5.0 high

A new upstream version 16.5.0 is available, you should consider packaging it.

Created: 2019-04-05 Last update: 2019-08-20 12:13

Does not build reproducibly during testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2019-07-20 Last update: 2019-08-20 18:10

2 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit 6f330267e33c218bb2afa08d97a72de927918bec
Author: Bernhard Schmidt <berni@debian.org>
Date:   Sat Jul 13 23:49:22 2019 +0200

    Changelog for 1:16.2.1~dfsg-2

commit 4ddffa9d879cc5c46a42f69d453b0bb631f3622a
Author: Bernhard Schmidt <berni@debian.org>
Date:   Sat Jul 13 23:46:35 2019 +0200

    AST-2019-002 / AST-2019-003

Created: 2019-07-14 Last update: 2019-08-17 14:09

lintian reports 1 warning normal

Lintian reports 1 warning about this package. You should make the package lintian clean getting rid of them.

Created: 2019-03-13 Last update: 2019-03-13 05:36

2 ignored security issues in buster low

There are 2 open security issues in buster.

2 issues skipped by the security teams:

CVE-2019-12827: Buffer overflow in res_pjsip_messaging in Digium Asterisk versions 13.21-cert3, 13.27.0, 15.7.2, 16.4.0 and earlier allows remote authenticated users to crash Asterisk by sending a specially crafted SIP MESSAGE message.
CVE-2019-13161: An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk through 13.21-cert3. A pointer dereference in chan_sip while handling SDP negotiation allows an attacker to crash Asterisk when handling an SDP answer to an outgoing T.38 re-invite. To exploit this vulnerability an attacker must cause the chan_sip module to send a T.38 re-invite request to them. Upon receipt, the attacker must send an SDP answer containing both a T.38 UDPTL stream and another media stream containing only a codec (which is not permitted according to the chan_sip configuration).

Please fix them.

Created: 2019-07-13 Last update: 2019-08-02 08:17

2 ignored security issues in jessie low

There are 2 open security issues in jessie.

2 issues skipped by the security teams:

CVE-2019-12827: Buffer overflow in res_pjsip_messaging in Digium Asterisk versions 13.21-cert3, 13.27.0, 15.7.2, 16.4.0 and earlier allows remote authenticated users to crash Asterisk by sending a specially crafted SIP MESSAGE message.
CVE-2019-13161: An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk through 13.21-cert3. A pointer dereference in chan_sip while handling SDP negotiation allows an attacker to crash Asterisk when handling an SDP answer to an outgoing T.38 re-invite. To exploit this vulnerability an attacker must cause the chan_sip module to send a T.38 re-invite request to them. Upon receipt, the attacker must send an SDP answer containing both a T.38 UDPTL stream and another media stream containing only a codec (which is not permitted according to the chan_sip configuration).

Please fix them.

Created: 2019-07-13 Last update: 2019-08-02 08:17

2 ignored security issues in stretch low

There are 2 open security issues in stretch.

2 issues skipped by the security teams:

CVE-2019-12827: Buffer overflow in res_pjsip_messaging in Digium Asterisk versions 13.21-cert3, 13.27.0, 15.7.2, 16.4.0 and earlier allows remote authenticated users to crash Asterisk by sending a specially crafted SIP MESSAGE message.
CVE-2019-13161: An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk through 13.21-cert3. A pointer dereference in chan_sip while handling SDP negotiation allows an attacker to crash Asterisk when handling an SDP answer to an outgoing T.38 re-invite. To exploit this vulnerability an attacker must cause the chan_sip module to send a T.38 re-invite request to them. Upon receipt, the attacker must send an SDP answer containing both a T.38 UDPTL stream and another media stream containing only a codec (which is not permitted according to the chan_sip configuration).

Please fix them.

Created: 2019-07-13 Last update: 2019-08-02 08:17

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2019-01-12 Last update: 2019-01-12 00:07

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.4.0 instead of 4.1.1).

Created: 2017-12-08 Last update: 2019-07-14 09:40

news

[rss feed]

[2019-07-16] asterisk 1:16.2.1~dfsg-2 MIGRATED to testing (Debian testing watch)
[2019-07-16] asterisk 1:16.2.1~dfsg-2 MIGRATED to testing (Debian testing watch)
[2019-07-13] Accepted asterisk 1:16.2.1~dfsg-2 (source) into unstable (Bernhard Schmidt)
[2019-03-15] asterisk 1:16.2.1~dfsg-1 MIGRATED to testing (Debian testing watch)
[2019-03-07] Accepted asterisk 1:16.2.1~dfsg-1 (source) into unstable (Bernhard Schmidt)
[2019-03-03] asterisk 1:16.2.0~dfsg-1 MIGRATED to testing (Debian testing watch)
[2019-02-20] Accepted asterisk 1:16.2.0~dfsg-1 (source) into unstable (Bernhard Schmidt)
[2019-01-14] asterisk 1:16.1.1~dfsg-1 MIGRATED to testing (Debian testing watch)
[2019-01-14] asterisk 1:16.1.1~dfsg-1 MIGRATED to testing (Debian testing watch)
[2019-01-11] Accepted asterisk 1:16.1.1~dfsg-1 (source) into unstable (Bernhard Schmidt)
[2019-01-07] asterisk 1:13.23.1~dfsg-2 MIGRATED to testing (Debian testing watch)
[2019-01-04] Accepted asterisk 1:16.1.0~dfsg-4 (source) into experimental (Bernhard Schmidt)
[2019-01-03] Accepted asterisk 1:13.23.1~dfsg-2 (source) into unstable (Bernhard Schmidt)
[2018-12-22] Accepted asterisk 1:16.1.0~dfsg-3 (source) into experimental (Bernhard Schmidt)
[2018-12-21] Accepted asterisk 1:16.1.0~dfsg-2 (source) into experimental (Bernhard Schmidt)
[2018-12-19] Accepted asterisk 1:16.1.0~dfsg-1 (source) into experimental (Bernhard Schmidt)
[2018-11-14] asterisk 1:13.23.1~dfsg-1 MIGRATED to testing (Debian testing watch)
[2018-10-20] Accepted asterisk 1:13.14.1~dfsg-2+deb9u4 (source) into proposed-updates->stable-new, proposed-updates (Bernhard Schmidt)
[2018-10-16] Accepted asterisk 1:13.14.1~dfsg-2+deb9u4 (source) into stable->embargoed, stable (Bernhard Schmidt)
[2018-09-27] Accepted asterisk 1:11.13.1~dfsg-2+deb8u6 (source amd64 all) into oldstable (Markus Koschany)
[2018-09-25] Accepted asterisk 1:13.23.1~dfsg-1 (source) into unstable (Bernhard Schmidt)
[2018-09-08] asterisk 1:13.22.0~dfsg-2 MIGRATED to testing (Debian testing watch)
[2018-09-05] Accepted asterisk 1:13.22.0~dfsg-2 (source) into unstable (Bernhard Schmidt)
[2018-07-28] asterisk 1:13.22.0~dfsg-1 MIGRATED to testing (Debian testing watch)
[2018-07-22] Accepted asterisk 1:13.22.0~dfsg-1 (source) into unstable (Bernhard Schmidt)
[2018-04-13] asterisk 1:13.20.0~dfsg-1 MIGRATED to testing (Debian testing watch)
[2018-04-03] Accepted asterisk 1:13.20.0~dfsg-1 (source) into unstable (Bernhard Schmidt)
[2018-02-10] Accepted asterisk 1:11.13.1~dfsg-2+deb8u5 (source amd64 all) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Tzafrir Cohen)
[2018-02-08] Accepted asterisk 1:13.14.1~dfsg-2+deb9u3 (source all amd64) into proposed-updates->stable-new, proposed-updates (Tzafrir Cohen)
[2018-01-02] asterisk 1:13.18.5~dfsg-1 MIGRATED to testing (Debian testing watch)

bugs [bug history graph]

all: 16
RC: 0
I&N: 9
M&W: 7
F&P: 0
patch: 0

links

homepage
lintian (0, 1)
buildd: logs, checks, clang, reproducibility, cross
popcon
browse source code
edit tags
security tracker
screenshots
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1:16.2.1~dfsg-2
16 bugs (1 patch)