[Pkg-voip-commits] r7768 - in /asterisk/branches/lenny/debian: asterisk.examples changelog

[paravoid at alioth.debian.org]

Author: paravoid
Date: Sat Nov  7 08:48:33 2009
New Revision: 7768

URL: http://svn.debian.org/wsvn/pkg-voip/?sc=1&rev=7768
Log:
Stop shipping old static-http code in examples. Among other things, it
includes a vulnerable version of the prototype Javascript library.
AST-2009-009, CVE-2008-7220. (Closes: #554486)

Modified:
    asterisk/branches/lenny/debian/asterisk.examples
    asterisk/branches/lenny/debian/changelog

Modified: asterisk/branches/lenny/debian/asterisk.examples
URL: http://svn.debian.org/wsvn/pkg-voip/asterisk/branches/lenny/debian/asterisk.examples?rev=7768&op=diff
==============================================================================
--- asterisk/branches/lenny/debian/asterisk.examples (original)
+++ asterisk/branches/lenny/debian/asterisk.examples Sat Nov  7 08:48:33 2009
@@ -1,3 +1,2 @@
 sample.call
-static-http
 contrib/scripts/vmail.cgi

Modified: asterisk/branches/lenny/debian/changelog
URL: http://svn.debian.org/wsvn/pkg-voip/asterisk/branches/lenny/debian/changelog?rev=7768&op=diff
==============================================================================
--- asterisk/branches/lenny/debian/changelog (original)
+++ asterisk/branches/lenny/debian/changelog Sat Nov  7 08:48:33 2009
@@ -8,6 +8,9 @@
     - "SIP responses expose valid usernames", AST-2009-008.
       (Closes: #554487)
     - "IAX2 Call Number Resource Exhaustion", AST-2009-006, CVE-2009-2346.
+  * Stop shipping old static-http code in examples. Among other things, it
+    includes a vulnerable version of the prototype Javascript library.
+    AST-2009-009, CVE-2008-7220. (Closes: #554486)
   * Fix IAX2 encryption severe breakage. Thanks to Francois Marier for finding
     the upstream bug report and preparing a fix. (Closes: #521641)
   * bristuff: don't priority jump to n+201 if priority jumping is disabled.
@@ -16,7 +19,7 @@
     recorded at high speed. (Closes: #535968)
   * Create the /usr/share/asterisk/agi-bin directory. (Closes: #463983)
 
- -- Faidon Liambotis <paravoid at debian.org>  Sat, 07 Nov 2009 10:42:36 +0200
+ -- Faidon Liambotis <paravoid at debian.org>  Sat, 07 Nov 2009 10:48:11 +0200
 
 asterisk (1:1.4.21.2~dfsg-3) unstable; urgency=medium