[pkgsrc/trunk]: pkgsrc/comms/asterisk13 asterisk13: Update to Asterisk 13.38.3.

[jnemeth <jnemeth%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/a5c10da58959
branches:  trunk
changeset: 456489:a5c10da58959
user:      jnemeth <jnemeth%pkgsrc.org@localhost>
date:      Sun Aug 01 02:57:12 2021 +0000

description:
asterisk13: Update to Asterisk 13.38.3.

The Asterisk Development Team would like to announce security releases for
Asterisk 13, 16, 17 and 18, and Certified Asterisk 16.8. The available releases
are released as versions 13.38.3, 16.19.1, 17.9.4, 18.5.1 and 16.8-cert10.

These releases are available for immediate download at

https://downloads.asterisk.org/pub/telephony/asterisk/releases

The following security vulnerabilities were resolved in these versions:

* AST-2021-007: Remote Crash Vulnerability in PJSIP channel driver
  When Asterisk receives a re-INVITE without SDP after having sent
  a BYE request a crash will occur. This occurs due to the Asterisk
  channel no longer being present while code assumes it is.

* AST-2021-008: Remote crash when using IAX2 channel driver
  If the IAX2 channel driver receives a packet that contains an

* AST-2021-009: pjproject/pjsip: crash when SSL socket destroyed during
                handshake
  Depending on the timing, it's possible for Asterisk to crash when
  using a TLS connection if the underlying socket parent/listener
  gets destroyed during the handshake.

For a full list of changes in the current releases, please see the ChangeLogs:

https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-13.38.3

The security advisories are available at:

https://downloads.asterisk.org/pub/security/AST-2021-007.pdf
https://downloads.asterisk.org/pub/security/AST-2021-008.pdf
https://downloads.asterisk.org/pub/security/AST-2021-009.pdf

Thank you for your continued support of Asterisk!

diffstat:

 comms/asterisk13/Makefile |   5 ++---
 comms/asterisk13/distinfo |  18 +++++++++---------
 2 files changed, 11 insertions(+), 12 deletions(-)

diffs (44 lines):

diff -r 43fa36b15306 -r a5c10da58959 comms/asterisk13/Makefile
--- a/comms/asterisk13/Makefile Sun Aug 01 02:42:07 2021 +0000
+++ b/comms/asterisk13/Makefile Sun Aug 01 02:57:12 2021 +0000
@@ -1,12 +1,11 @@
-# $NetBSD: Makefile,v 1.71 2021/05/24 19:49:17 wiz Exp $
+# $NetBSD: Makefile,v 1.72 2021/08/01 02:57:12 jnemeth Exp $
 #
 # NOTE: when updating this package, there are two places that sound
 #       tarballs need to be checked; look in ${WRKSRC}/sounds/Makefile
 #       to find out the current sound file versions
 
-DISTNAME=      asterisk-13.38.2
+DISTNAME=      asterisk-13.38.3
 #PKGREVISION=  1
-PKGREVISION=   3
 CATEGORIES=    comms net audio
 MASTER_SITES=  http://downloads.asterisk.org/pub/telephony/asterisk/
 MASTER_SITES+= http://downloads.asterisk.org/pub/telephony/asterisk/old-releases/
diff -r 43fa36b15306 -r a5c10da58959 comms/asterisk13/distinfo
--- a/comms/asterisk13/distinfo Sun Aug 01 02:42:07 2021 +0000
+++ b/comms/asterisk13/distinfo Sun Aug 01 02:57:12 2021 +0000
@@ -1,13 +1,13 @@
-$NetBSD: distinfo,v 1.18 2021/02/28 22:48:07 jnemeth Exp $
+$NetBSD: distinfo,v 1.19 2021/08/01 02:57:12 jnemeth Exp $
 
-SHA1 (asterisk-13.38.2/asterisk-13.38.2.tar.gz) = 1e86b5b11c1053b0f6a7ec72a7e385aa356694f3
-RMD160 (asterisk-13.38.2/asterisk-13.38.2.tar.gz) = ad4ff2ef7f9c298f1bfcc8d28fc4600970d955a0
-SHA512 (asterisk-13.38.2/asterisk-13.38.2.tar.gz) = bd9755503048cd8dcf8e39947dd5cfb617c20c4b1ad5033ae297499a4967c06ba11b6e43233c1ae0d33f8f11a81dbb9b4487f16a1f4786007172028caf1ee051
-Size (asterisk-13.38.2/asterisk-13.38.2.tar.gz) = 33708267 bytes
-SHA1 (asterisk-13.38.2/asterisk-extra-sounds-en-gsm-1.5.2.tar.gz) = 0207e289404704c42941759db9660269599044f9
-RMD160 (asterisk-13.38.2/asterisk-extra-sounds-en-gsm-1.5.2.tar.gz) = 5d660e7664a56086bd60ad49196e1b622a60f106
-SHA512 (asterisk-13.38.2/asterisk-extra-sounds-en-gsm-1.5.2.tar.gz) = 3f2f7bf3d5bce3544bc013f913c352f0204a3ce96239987403eb9dce8bc87e64a61d437762323a422a87b2fad1f3bf3e7a5f3d0d340f912a1b1dbfea9479d41d
-Size (asterisk-13.38.2/asterisk-extra-sounds-en-gsm-1.5.2.tar.gz) = 4253587 bytes
+SHA1 (asterisk-13.38.3/asterisk-13.38.3.tar.gz) = 56653f0685dc0d5271cac32e5ec0268b627685ef
+RMD160 (asterisk-13.38.3/asterisk-13.38.3.tar.gz) = d34103dd29398640288aed65081a923bf8be62d4
+SHA512 (asterisk-13.38.3/asterisk-13.38.3.tar.gz) = dd67f73704f1c68639313852ba1508165c7b525f0f4156c776258e27ee19a0ee87293ae7805178b0f37188fca91b861c52b5206cbba754a6181492d0efb7e895
+Size (asterisk-13.38.3/asterisk-13.38.3.tar.gz) = 33711458 bytes
+SHA1 (asterisk-13.38.3/asterisk-extra-sounds-en-gsm-1.5.2.tar.gz) = 0207e289404704c42941759db9660269599044f9
+RMD160 (asterisk-13.38.3/asterisk-extra-sounds-en-gsm-1.5.2.tar.gz) = 5d660e7664a56086bd60ad49196e1b622a60f106
+SHA512 (asterisk-13.38.3/asterisk-extra-sounds-en-gsm-1.5.2.tar.gz) = 3f2f7bf3d5bce3544bc013f913c352f0204a3ce96239987403eb9dce8bc87e64a61d437762323a422a87b2fad1f3bf3e7a5f3d0d340f912a1b1dbfea9479d41d
+Size (asterisk-13.38.3/asterisk-extra-sounds-en-gsm-1.5.2.tar.gz) = 4253587 bytes
 SHA1 (patch-Makefile) = 7fb5c784cb5246d7b1ec9c586db8af1a9b9c5577
 SHA1 (patch-apps_app__dumpchan.c) = 127ac02bdc180ad2334cd095aa6e646feb6fba10
 SHA1 (patch-apps_app__followme.c) = c6a5790b5e9b34d07dbfdd66a58e2854c8c72695