Author: Matthias Klose
Revision Date: 2015-07-10 12:56:51 UTC

* Non-maintainer upload.

[ Matthias Klose ]
* Build with -fgnu89-inline. Closes: #777782.
* CVE-2015-1558: File descriptor leak when incompatible codecs are offered.
  Closes: #780601.

[ James Cowgill ]
* Fix OSARCH detection on all linux architectures. Closes: #780287.

Author: Matthias Klose
Revision Date: 2015-07-10 12:56:51 UTC

* Non-maintainer upload.

[ Matthias Klose ]
* Build with -fgnu89-inline. Closes: #777782.
* CVE-2015-1558: File descriptor leak when incompatible codecs are offered.
  Closes: #780601.

[ James Cowgill ]
* Fix OSARCH detection on all linux architectures. Closes: #780287.

Author: Tzafrir Cohen
Revision Date: 2015-01-01 01:25:11 UTC

* New upstream release: fixes AST-2014-011 (CVE-2014-3566, POODLE).
* Add a local gbp.conf for branch jessie
* New patches for recent security issues (Closes: #771463):
  - AST-2014-012 (CVE-2014-8412): Mixed IP address families in ACLs
    may permit unwanted traffic
  - AST-2014-014 (CVE-2014-8414): High call load may result in hung
    channels in ConfBridge
  - AST-2014-017 (CVE-2014-8417): Mark CONFBRIDGE as a sensitive
    function for external APIs
  - AST-2014-018 (CVE-2014-8418): Mark DB as a sensitive function for
    external APIs
* AST-2014-019.patch (CVE-2014-9374): Remote Crash Vulnerability in
  WebSocket Server (Closes: #773230).
* sanity check to avoid changing the ABI hash.

Author: Daniel Pocock
Revision Date: 2014-02-06 12:28:37 UTC

* Add the DTLS-SRTP patch for Firefox WebRTC support
* suppress_warning_rasterisk.patch: rasterisk should not print a
  warning.

Author: Tzafrir Cohen
Revision Date: 2014-01-04 02:26:42 UTC

* Bumped repackages tarball number: security and main had different copies
  of the original.
* Fix patch AST-2013-007: avoid warning on rasterisk.

Author: Tzafrir Cohen
Revision Date: 2013-12-20 21:00:49 UTC

* Backport of fixes in Asterisk 1.8.24.1 (Closes: #732355):
  - Patch AST-2013-006: fixes a buffer overflow in app_sms.
  - Patch AST-2013-007: guards access to code execution from remote interfaces
    - but patch out the change in asterisk.conf.
    - Patch ASTERISK-20658: fixes potential crash with asterisk-realtime

Author: Tzafrir Cohen
Revision Date: 2011-12-18 22:12:00 UTC

* Patch AST-2011-013: potential remote information disclosure
  Closes: #651552 (CVE-2011-4597 The side issue. The DoS is
  inapplicable to Lenny).
  - The patch changeges the sample sip.conf . We change the sample
     config files, but not the files under /etc/asterisk .