security updates for asterisk

[Tzafrir Cohen]

Hi again,

On Sat, Aug 11, 2007 at 09:51:47PM +0300, Tzafrir Cohen wrote:
> 
> On Sat, Aug 11, 2007 at 08:16:55PM +0200, Stefan Fritsch wrote:
> > Hi,
> > 
> > Steffen Joeris has prepared security updates for asterisk for etch and 
> > lenny [1] (it doesn't seem likely that the current asterisk in sid 
> > migrates to lenny soon).
> 
> Wow. Asterisk on lenny is still 1.2.13 ???
> 
> > 
> > For lenny, the build-dep on libzap-dev had to be removed because 
> > zapata has been removed from lenny and sid. 
> 
> libzap has actually not used in the version of Etch (and even in the one
> of Sarge, I suspect).
> 
> > Comparing the new lenny 
> > updates to the packages currently in lenny [2], there are several 
> > modules missing. Some are due to the removed libzap, but I don't 
> > think that's all. 
> 
> I suspect that this is more to do with the incompatibility of Zaptel
> 1.4.4 (in Lenny) and asterisk 1.2.13: zaptel.h (zaptl-sourrce) and
> tonezone.h (libtonezone-dev) moved to /usr/include/zaptel . This
> shouldbe fixed in the upcoming zaptel 1.4.4-2 using symlinks.
> 
> I can't think of any other reason whan chan_zap would not be built.

> > [1] http://lists.debian.org/debian-security/2007/08/msg00002.html
> > 
> > [2] debdiff 
> > asterisk-classic_1.2.13~dfsg-2_i386.deb
> > asterisk-classic_1.2.13~dfsg-2lenny1_i386.deb
> 
> Generally take a look at asterisk-bristuff as well.

Right. If you'll have the newer zaptel-source but the current libpri
from Lenny, it will fail to build chan_zap.c in the bristuffed copy 
(the build will fail, actually)

-- 
               Tzafrir Cohen       
icq#16849755                    jabber:tzafrir at jabber.org
+972-50-7952406           mailto:tzafrir.cohen at xorcom.com       
http://www.xorcom.com  iax:guest at local.xorcom.com/tzafrir