Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
89
security advisorymoderateupdateFedora 9: 2009-0973 Moderate: Libresample Interface Update AST-2009-001
Add a patch to fix a problem with the manager interface. Update to 1.6.0.5 to fix AST-2009-001 / CVE-2009-0041.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2009-0973 2009-01-27 00:36:20 --------------------------------------------------------------------------------Name : libresample Product : Fedora 9 Version : 0.1.3 Release : 9.fc9 URL : Summary : A real-time library for audio sampling rate conversion Description : A real-time library for audio sampling rate conversion providing several useful features relative to resample-1.7 on which it is based: * It should build "out of the box" on more platforms, including Linux, Solaris, and Mac OS X (using the included configure script). There is also a Visual C++ project file for building under Windows. * Input and output signals are in memory (as opposed to sound files). * Computations are in floating-point (instead of fixed-point). * Filter table increased by a factor of 32, yielding more accurate results, even without linear interpolation (which also makes it faster). * Data can be processed in small chunks, enabling time-varying resampling ratios (ideal for time-warping applications and supporting an ``external clock input' in software). * Easily applied to any number of simultaneous data channels --------------------------------------------------------------------------------Update Information: Add a patch to fix a problem with the manager interface. Update to 1.6.0.5 to fix AST-2009-001 / CVE-2009-0041: http://downloads.asterisk.org/pub/security/ (Original patch in 1.6.0.3 introduced a regression.) --------------------------------------------------------------------------------ChangeLog: * Thu Oct 16 2008 Jeffrey C. Ollie - 0.1.3-9 - Update patch * Thu Oct 16 2008 Jeffrey C. Ollie - 0.1.3-8 - Add patch * Wed Oct 15 2008Jeffrey C. Ollie - 0.1.3-7 - Relax CMake requirements * Thu Sep 11 2008 Jeffrey C. Ollie - 0.1.3-6 - Add a patch that switches to cmake for building and build a shared library. --------------------------------------------------------------------------------References: [ 1 ] Bug #480132 - CVE-2009-0041 asterisk: Replies to failed login attempts differently based on whether the user account exists (information disclosure) https://bugzilla.redhat.com/show_bug.cgi?id=480132 --------------------------------------------------------------------------------This update can be installed with the "yum" update program. Use su -c 'yum update libresample' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at --------------------------------------------------------------------------------_______________________________________________ Fedora-package-announce mailing list
Feb 13, 2009
•Important
Fedora
89
security advisoryupdatecriticalFedora: 2022-0154 Important: Apache HTTP Server Security Update
Add a patch to fix a problem with the manager interface. Update to 1.6.0.5 to fix AST-2009-001 / CVE-2009-0041.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2009-0973 2009-01-27 00:36:20 --------------------------------------------------------------------------------Name : asterisk Product : Fedora 9 Version : 1.6.0.5 Release : 2.fc9 URL : https://www.asterisk.org/ Summary : The Open Source PBX Description : Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware. --------------------------------------------------------------------------------Update Information: Add a patch to fix a problem with the manager interface. Update to 1.6.0.5 to fix AST-2009-001 / CVE-2009-0041: http://downloads.asterisk.org/pub/security/ (Original patch in 1.6.0.3 introduced a regression.) --------------------------------------------------------------------------------ChangeLog: * Fri Jan 23 2009 Jeffrey C. Ollie - 1.6.0.5-2 - Add a patch to fix a problem with the manager interface. * Fri Jan 23 2009 Jeffrey C. Ollie - 1.6.0.5-1 - Update to 1.6.0.5 to fix regressions caused by fixes for AST-2009-001/CVE-2009-0041 (Asterisk 1.6.0.4 was never released). * Thu Jan 8 2009 Jeffrey C. Ollie - 1.6.0.3-1 - Update to 1.6.0.3 to fix AST-2009-001/CVE-2009-0041 - http://downloads.asterisk.org/pub/security/ * Sun Jan 4 2009 Jeffrey C. Ollie - 1.6.0.2-4 - Fedora Directory Server compatibility patch/subpackage. BZ#452176 * Sun Jan 4 2009 Jeffrey C. Ollie - 1.6.0.2-3 - Don't package func_curl in the main package. BZ#475910 - Fix up paths. BZ#477238 * Sun Jan 4 2009 Jeffrey C. Ollie - 1.6.0.2-2 - Add patch to fix compilation on PPC * Sun Jan 4 2009 JeffreyC. Ollie - 1.6.0.2-1 - Update to 1.6.0.2 * Wed Nov 5 2008 Jeffrey C. Ollie - 1.6.0.1-3 - Fix issue with init script giving wrong path to config file. * Thu Oct 16 2008 Jeffrey C. Ollie - 1.6.0.1-2 - Explicitly require dahdi-tools-libs to see if we can get this to build. * Fri Oct 10 2008 Jeffrey C. Ollie - 1.6.0-1 - Update to final release. * Thu Sep 11 2008 - Bastien Nocera - 1.6.0-0.22.beta9 - Rebuild * Wed Jul 30 2008 Jeffrey C. Ollie - 1.6.0-0.21.beta9 - Replace app_rxfax/app_txfax with app_fax taken from upstream SVN. * Tue Jul 29 2008 Jeffrey C. Ollie - 1.6.0-0.20.beta9 - Bump release and rebuild with new libpri and zaptel. * Fri Jul 25 2008 Jeffrey C. Ollie - 1.6.0-0.19.beta9 - Add patch pulled from upstream SVN that fixes AST-2008-010 and AST-2008-011. * Fri Jul 25 2008 Jeffrey C. Ollie - 1.6.0-0.18.beta9 - Add patch for LDAP extracted from upstream SVN (#442011) * Wed Jul 2 2008 Jeffrey C. Ollie - 1.6.0-0.17.beta9 - Add patch that unbreaks cdr_tds with FreeTDS 0.82. - Properly obsolete conference subpackage. * Thu Jun 12 2008 Jeffrey C. Ollie - 1.6.0-0.16.beta9 - Disable building cdr_tds since new FreeTDS in rawhide no longer provides needed library. * Wed Jun 11 2008 Jeffrey C. Ollie - 1.6.0-0.15.beta9 - Bump release and rebuild to fix libtds breakage. * Mon May 19 2008 Jeffrey C. Ollie - 1.6.0-0.14.beta9 - Update to 1.6.0-beta9. - Update patches so that they apply cleanly. - Temporarily disable app_conference patch as it doesn't compile - config/scripts/postgres_cdr.sql has been merged into realtime_pgsql.sql - Re-add the asterisk-strip.sh script as a source file. --------------------------------------------------------------------------------References: [ 1 ] Bug #480132 - CVE-2009-0041 asterisk: Replies to failed login attempts differently based on whether the user account exists (information disclosure) https://bugzilla.redhat.com/show_bug.cgi?id=480132 --------------------------------------------------------------------------------This update can be installed with the "yum" update program. Use su -c 'yum update asterisk' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ Fedora-package-announce mailing list
Feb 13, 2009
•Important
Fedora
89
security advisoryFedorapatchFedora: 2009-0973 Moderate: Dahdi-Tools Manager Interface Update
Add a patch to fix a problem with the manager interface. Update to 1.6.0.5 to fix AST-2009-001 / CVE-2009-0041.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2009-0973 2009-01-27 00:36:20 --------------------------------------------------------------------------------Name : dahdi-tools Product : Fedora 9 Version : 2.0.0 Release : 1.fc9 URL : https://www.asterisk.org/ Summary : Userspace tools to configure the DAHDI kernel modules Description : DAHDI stands for Digium Asterisk Hardware Device Interface. This package contains the userspace tools to configure the DAHDI kernel modules. DAHDI is the replacement for Zaptel, which must be renamed due to trademark issues. --------------------------------------------------------------------------------Update Information: Add a patch to fix a problem with the manager interface. Update to 1.6.0.5 to fix AST-2009-001 / CVE-2009-0041: http://downloads.asterisk.org/pub/security/ (Original patch in 1.6.0.3 introduced a regression.) --------------------------------------------------------------------------------ChangeLog: --------------------------------------------------------------------------------References: [ 1 ] Bug #480132 - CVE-2009-0041 asterisk: Replies to failed login attempts differently based on whether the user account exists (information disclosure) https://bugzilla.redhat.com/show_bug.cgi?id=480132 --------------------------------------------------------------------------------This update can be installed with the "yum" update program. Use su -c 'yum update dahdi-tools' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ Fedora-package-announce mailing list
Feb 13, 2009
Fedora
89
security advisoryFedoracritical fixFedora 10 FEDORA-2009-0984 Critical: Asterisk Manager Interface Fix
Add a patch to fix a problem with the manager interface. Update to 1.6.0.5 to fix AST-2009-001 / CVE-2009-0041.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2009-0984 2009-01-27 00:36:31 --------------------------------------------------------------------------------Name : asterisk Product : Fedora 10 Version : 1.6.0.5 Release : 2.fc10 URL : https://www.asterisk.org/ Summary : The Open Source PBX Description : Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware. --------------------------------------------------------------------------------Update Information: Add a patch to fix a problem with the manager interface. Update to 1.6.0.5 to fix AST-2009-001 / CVE-2009-0041: http://downloads.asterisk.org/pub/security/ (Original patch in 1.6.0.3 introduced a regression.) --------------------------------------------------------------------------------ChangeLog: * Fri Jan 23 2009 Jeffrey C. Ollie - 1.6.0.5-2 - Add a patch to fix a problem with the manager interface. * Fri Jan 23 2009 Jeffrey C. Ollie - 1.6.0.5-1 - Update to 1.6.0.5 to fix regressions caused by fixes for AST-2009-001/CVE-2009-0041 (Asterisk 1.6.0.4 was never released). * Thu Jan 8 2009 Jeffrey C. Ollie - 1.6.0.3-1 - Update to 1.6.0.3 to fix AST-2009-001/CVE-2009-0041 - http://downloads.asterisk.org/pub/security/ * Sun Jan 4 2009 Jeffrey C. Ollie - 1.6.0.2-4 - Fedora Directory Server compatibility patch/subpackage. BZ#452176 * Sun Jan 4 2009 Jeffrey C. Ollie - 1.6.0.2-3 - Don't package func_curl in the main package. BZ#475910 - Fix up paths. BZ#477238 * Sun Jan 4 2009 Jeffrey C. Ollie - 1.6.0.2-2 - Add patch to fix compilation on PPC * Sun Jan 4 2009Jeffrey C. Ollie - 1.6.0.2-1 - Update to 1.6.0.2 * Wed Nov 5 2008 Jeffrey C. Ollie - 1.6.0.1-3 - Fix issue with init script giving wrong path to config file. --------------------------------------------------------------------------------References: [ 1 ] Bug #480132 - CVE-2009-0041 asterisk: Replies to failed login attempts differently based on whether the user account exists (information disclosure) https://bugzilla.redhat.com/show_bug.cgi?id=480132 --------------------------------------------------------------------------------This update can be installed with the "yum" update program. Use su -c 'yum update asterisk' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ Fedora-package-announce mailing list
Feb 12, 2009
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!