security updates for asterisk

[Tzafrir Cohen]

Hi, thanks for patching Asterisk,

On Sat, Aug 11, 2007 at 08:16:55PM +0200, Stefan Fritsch wrote:
> Hi,
> 
> Steffen Joeris has prepared security updates for asterisk for etch and 
> lenny [1] (it doesn't seem likely that the current asterisk in sid 
> migrates to lenny soon).

Wow. Asterisk on lenny is still 1.2.13 ???

> 
> For lenny, the build-dep on libzap-dev had to be removed because 
> zapata has been removed from lenny and sid. 

libzap has actually not used in the version of Etch (and even in the one
of Sarge, I suspect).

> Comparing the new lenny 
> updates to the packages currently in lenny [2], there are several 
> modules missing. Some are due to the removed libzap, but I don't 
> think that's all. 

I suspect that this is more to do with the incompatibility of Zaptel
1.4.4 (in Lenny) and asterisk 1.2.13: zaptel.h (zaptl-sourrce) and
tonezone.h (libtonezone-dev) moved to /usr/include/zaptel . This
shouldbe fixed in the upcoming zaptel 1.4.4-2 using symlinks.

I can't think of any other reason whan chan_zap would not be built.

> It would be very helpful if one of you could review 
> these packages and tell me wether I should release these packages to 
> testing-security.
> 
> I am sure the stable security team would also welcome a review of the 
> etch packages.
> 
> Thanks for your help.
> 
> Cheers,
> Stefan
> 
> 
> [1] http://lists.debian.org/debian-security/2007/08/msg00002.html
> 
> [2] debdiff 
> asterisk-classic_1.2.13~dfsg-2_i386.deb
> asterisk-classic_1.2.13~dfsg-2lenny1_i386.deb

Generally take a look at asterisk-bristuff as well.

-- 
               Tzafrir Cohen       
icq#16849755                    jabber:tzafrir at jabber.org
+972-50-7952406           mailto:tzafrir.cohen at xorcom.com       
http://www.xorcom.com  iax:guest at local.xorcom.com/tzafrir