> I'm wondering about the status of the comm/asterisk pkg.
> 
> A root-shell exploit was found on version 1.0.7 which is the current 
> version in pkgsrc. The workaround is quite easy, the good news.
> 
> however, I would prefer to install 1.0.8 -- any idea when asterisk will 
> be updated?

About five hours ago, from the looks of it:

revision 1.6
date: 2005/09/02 12:58:34;  author: adam;  state: Exp;  lines: +8 -11
Changes 1.0.9:
 -- fix bug in callerid matching in the dialplan that was introduced in 1.0.8

cvs update, and all should be well.