Your message dated Sat, 21 Jul 2007 11:32:06 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#433884: fixed in asterisk 1:1.4.8~dfsg-2
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message ---
Package: asterisk
Version: 1:1.4.2~dfsg-2
Severity: serious
Tags: patch
Upstream's makefile builds the "asterisk" binary with CXX and H323LBLIBS.
That is,
-lopenh323 -lpt -lldap -llber -lldap_r -lpthread -lsasl2 -lssl -lcrypto
-lexpat -lSDL -lresolv -ldl
I don't know why they did this -- I checked, and it was introduced in
r43281 along with many other chan_h323 changes and no useful comments.
There shouldn't be any reason to do that; only chan_h323.so needs these
libraries.
This results for the following added dependencies for the asterisk package:
libopenh323-1.18.0 libpt-1.10.0 libldap2 libsasl2-2, libexpat1,
libsdl1.2debian
The attached patch fixes this bug.
This bug is present in at least the 2 recent versions of Asterisk, and
since I have no indication from the changelog that it was ever fixed in
Debian, I'm marking it found for the earliest version of 1.4 I could
find in the changelog.
I think britney is using version tracking nowdays so this will hopefully
allow the security fix in lenny.
Regards,
Faidon
--- asterisk-1.4.8~dfsg+bristuff.orig/main/Makefile
+++ asterisk-1.4.8~dfsg+bristuff/main/Makefile
@@ -135,7 +135,7 @@ asterisk: $(OBJS) editline/libedit.a db1
@rm -f $(ASTTOPDIR)/include/asterisk/build.h.tmp
@$(CC) -c -o buildinfo.o $(ASTCFLAGS) buildinfo.c
$(ECHO_PREFIX) echo " [LD] $^ -> $@"
- $(CMD_PREFIX) $(CXX) $(STATIC_BUILD) -o $@ $(ASTLINK)
$(AST_EMBED_LDFLAGS) $(ASTLDFLAGS) $(H323LDFLAGS) $^ buildinfo.o $(AST_LIBS)
$(AST_EMBED_LIBS) $(H323LDLIBS)
+ $(CMD_PREFIX) $(CC) $(STATIC_BUILD) -o $@ $(ASTLINK)
$(AST_EMBED_LDFLAGS) $(ASTLDFLAGS) $^ buildinfo.o $(AST_LIBS) $(AST_EMBED_LIBS)
@$(ASTTOPDIR)/build_tools/strip_nonapi $@
clean::
--- End Message ---
--- Begin Message ---
Source: asterisk
Source-Version: 1:1.4.8~dfsg-2
We believe that the bug you reported is fixed in the latest version of
asterisk, which is due to be installed in the Debian FTP archive:
asterisk-config_1.4.8~dfsg-2_all.deb
to pool/main/a/asterisk/asterisk-config_1.4.8~dfsg-2_all.deb
asterisk-dbg_1.4.8~dfsg-2_i386.deb
to pool/main/a/asterisk/asterisk-dbg_1.4.8~dfsg-2_i386.deb
asterisk-dev_1.4.8~dfsg-2_all.deb
to pool/main/a/asterisk/asterisk-dev_1.4.8~dfsg-2_all.deb
asterisk-doc_1.4.8~dfsg-2_all.deb
to pool/main/a/asterisk/asterisk-doc_1.4.8~dfsg-2_all.deb
asterisk-h323_1.4.8~dfsg-2_i386.deb
to pool/main/a/asterisk/asterisk-h323_1.4.8~dfsg-2_i386.deb
asterisk-sounds-main_1.4.8~dfsg-2_all.deb
to pool/main/a/asterisk/asterisk-sounds-main_1.4.8~dfsg-2_all.deb
asterisk-web-vmail_1.4.8~dfsg-2_all.deb
to pool/main/a/asterisk/asterisk-web-vmail_1.4.8~dfsg-2_all.deb
asterisk_1.4.8~dfsg-2.diff.gz
to pool/main/a/asterisk/asterisk_1.4.8~dfsg-2.diff.gz
asterisk_1.4.8~dfsg-2.dsc
to pool/main/a/asterisk/asterisk_1.4.8~dfsg-2.dsc
asterisk_1.4.8~dfsg-2_i386.deb
to pool/main/a/asterisk/asterisk_1.4.8~dfsg-2_i386.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Mark Purcell <[EMAIL PROTECTED]> (supplier of updated asterisk package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Sat, 21 Jul 2007 11:41:01 +0100
Source: asterisk
Binary: asterisk-h323 asterisk-web-vmail asterisk asterisk-dbg asterisk-dev
asterisk-doc asterisk-sounds-main asterisk-config
Architecture: source all i386
Version: 1:1.4.8~dfsg-2
Distribution: unstable
Urgency: low
Maintainer: Debian VoIP Team <[EMAIL PROTECTED]>
Changed-By: Mark Purcell <[EMAIL PROTECTED]>
Description:
asterisk - Open Source Private Branch Exchange (PBX)
asterisk-config - config files for asterisk
asterisk-dbg - debugging symbols for asterisk
asterisk-dev - development files for asterisk
asterisk-doc - documentation for asterisk
asterisk-h323 - asterisk H.323 VoIP channel
asterisk-sounds-main - sound files for asterisk
asterisk-web-vmail - Web-based (CGI) voice mail interface for Asterisk
Closes: 433884 434066
Changes:
asterisk (1:1.4.8~dfsg-2) unstable; urgency=low
.
* Add patch from Faidon debian/patches/dbug433884.dpatch:
- Should not depend on libopenH323, libpt, libSDL, libssl, libldap,
... (Closes: #433884)
- Fails to restart after upgrade due to dep on libpt.so.1.10.2
(Closes: #434066)
Files:
bfe0a9121e00808ca7ab22e9890a2065 1477 comm optional asterisk_1.4.8~dfsg-2.dsc
cb343a3f0de1aab85a0d592198ddf3fa 36211 comm optional
asterisk_1.4.8~dfsg-2.diff.gz
bf5f14a7a98fda4ab2f58b8ea606ddc9 34146476 doc extra
asterisk-doc_1.4.8~dfsg-2_all.deb
2e5e3a98c93e12bdfc66a7600889ec3f 288786 devel extra
asterisk-dev_1.4.8~dfsg-2_all.deb
ba34ed418e3b00f12e2d49d90cc35e6d 1629440 comm optional
asterisk-sounds-main_1.4.8~dfsg-2_all.deb
88c6e04d8afd23e3d7236b1d1ea47825 155356 comm extra
asterisk-web-vmail_1.4.8~dfsg-2_all.deb
c0b2348b16e95444f2be342284eb7ffb 239704 comm optional
asterisk-config_1.4.8~dfsg-2_all.deb
5d8422a7443fd5efa4c74c80b64c5395 2156642 comm optional
asterisk_1.4.8~dfsg-2_i386.deb
6af1ea7c0f333abc04ae1b5e41c00d5c 256446 comm optional
asterisk-h323_1.4.8~dfsg-2_i386.deb
8142615839d927d4ac2a184be1baf669 11818386 devel extra
asterisk-dbg_1.4.8~dfsg-2_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFGoeTsoCzanz0IthIRAn1sAJ9xrIA+FajIt28xPlHQ+TvmtQ7UJQCgkMWz
46W+BgpPSvJ53b7w1g/8dtk=
=EYnK
-----END PGP SIGNATURE-----
--- End Message ---
