From cfe0e945b30ec61eddc6b8ea572118630cfd1cb1 Mon Sep 17 00:00:00 2001 From: Peter Korsgaard Date: Thu, 16 Jan 2025 12:30:39 +0100 Subject: [PATCH] package/asterisk: security bump to version 20.11.1 Fixes the following security issues: CVE-2024-53566: Path traversal via AMI ListCategories allows access to outside files https://github.com/asterisk/asterisk/security/advisories/GHSA-33x6-fj46-6rfh Release notes: https://www.asterisk.org/asterisk-news/asterisk-security-release-20-11-1-now-available/ Signed-off-by: Peter Korsgaard Signed-off-by: Julien Olivain --- package/asterisk/asterisk.hash | 2 +- package/asterisk/asterisk.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/asterisk/asterisk.hash b/package/asterisk/asterisk.hash index 61686d9fe4..8c8ebddc47 100644 --- a/package/asterisk/asterisk.hash +++ b/package/asterisk/asterisk.hash @@ -1,5 +1,5 @@ # Locally computed -sha256 a8162085b7d16f10d5cd16fc2e2cb8399dbe42bd1c321b14eec229fc0ed12570 asterisk-20.10.0.tar.gz +sha256 94647b3f887f7dc91df51a4f88dfc3a07cc279bef86b8d05aa72f0c49d187571 asterisk-20.11.1.tar.gz # sha1 from: http://downloads.asterisk.org/pub/telephony/sounds/releases # sha256 locally computed diff --git a/package/asterisk/asterisk.mk b/package/asterisk/asterisk.mk index 7b99d30fd9..ec67632ef4 100644 --- a/package/asterisk/asterisk.mk +++ b/package/asterisk/asterisk.mk @@ -4,7 +4,7 @@ # ################################################################################ -ASTERISK_VERSION = 20.10.0 +ASTERISK_VERSION = 20.11.1 # Use the github mirror: it's an official mirror maintained by Digium, and # provides tarballs, which the main Asterisk git tree (behind Gerrit) does not. ASTERISK_SITE = $(call github,asterisk,asterisk,$(ASTERISK_VERSION))