-ChangeLogs/ChangeLog-20.15.1.html
\ No newline at end of file
+ChangeLogs/ChangeLog-20.15.2.html
\ No newline at end of file
-ChangeLogs/ChangeLog-20.15.1.md
\ No newline at end of file
+ChangeLogs/ChangeLog-20.15.2.md
\ No newline at end of file
--- /dev/null
+<html><head><title>ChangeLog for asterisk-20.15.2</title></head><body>
+<h2>Change Log for Release asterisk-20.15.2</h2>
+<h3>Links:</h3>
+<ul>
+<li><a href="https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-20.15.2.html">Full ChangeLog</a> </li>
+<li><a href="https://github.com/asterisk/asterisk/compare/20.15.1...20.15.2">GitHub Diff</a> </li>
+<li><a href="https://downloads.asterisk.org/pub/telephony/asterisk/asterisk-20.15.2.tar.gz">Tarball</a> </li>
+<li><a href="https://downloads.asterisk.org/pub/telephony/asterisk">Downloads</a> </li>
+</ul>
+<h3>Summary:</h3>
+<ul>
+<li>Commits: 1</li>
+<li>Commit Authors: 1</li>
+<li>Issues Resolved: 0</li>
+<li>Security Advisories Resolved: 1</li>
+<li><a href="https://github.com/asterisk/asterisk/security/advisories/GHSA-64qc-9x89-rx5j">GHSA-64qc-9x89-rx5j</a>: A specifically malformed Authorization header in an incoming SIP request can cause Asterisk to crash</li>
+</ul>
+<h3>User Notes:</h3>
+<h3>Upgrade Notes:</h3>
+<h3>Developer Notes:</h3>
+<h3>Commit Authors:</h3>
+<ul>
+<li>George Joseph: (1)</li>
+</ul>
+<h2>Issue and Commit Detail:</h2>
+<h3>Closed Issues:</h3>
+<ul>
+<li>!GHSA-64qc-9x89-rx5j: A specifically malformed Authorization header in an incoming SIP request can cause Asterisk to crash</li>
+</ul>
+<h3>Commits By Author:</h3>
+<ul>
+<li>
+<h4>George Joseph (1):</h4>
+</li>
+<li>res_pjsip_authenticator_digest: Fix SEGV if get_authorization_hdr returns NULL.</li>
+</ul>
+<h3>Commit List:</h3>
+<ul>
+<li>res_pjsip_authenticator_digest: Fix SEGV if get_authorization_hdr returns NULL.</li>
+</ul>
+<h3>Commit Details:</h3>
+<h4>res_pjsip_authenticator_digest: Fix SEGV if get_authorization_hdr returns NULL.</h4>
+<p>Author: George Joseph
+ Date: 2025-08-28</p>
+<p>In the highly-unlikely event that get_authorization_hdr() couldn't find an
+ Authorization header in a request, trying to get the digest algorithm
+ would cauase a SEGV. We now check that we have an auth header that matches
+ the realm before trying to get the algorithm from it.</p>
+<p>Resolves: #GHSA-64qc-9x89-rx5j</p>
+</body></html>
--- /dev/null
+
+## Change Log for Release asterisk-20.15.2
+
+### Links:
+
+ - [Full ChangeLog](https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-20.15.2.html)
+ - [GitHub Diff](https://github.com/asterisk/asterisk/compare/20.15.1...20.15.2)
+ - [Tarball](https://downloads.asterisk.org/pub/telephony/asterisk/asterisk-20.15.2.tar.gz)
+ - [Downloads](https://downloads.asterisk.org/pub/telephony/asterisk)
+
+### Summary:
+
+- Commits: 1
+- Commit Authors: 1
+- Issues Resolved: 0
+- Security Advisories Resolved: 1
+ - [GHSA-64qc-9x89-rx5j](https://github.com/asterisk/asterisk/security/advisories/GHSA-64qc-9x89-rx5j): A specifically malformed Authorization header in an incoming SIP request can cause Asterisk to crash
+
+### User Notes:
+
+
+### Upgrade Notes:
+
+
+### Developer Notes:
+
+
+### Commit Authors:
+
+- George Joseph: (1)
+
+## Issue and Commit Detail:
+
+### Closed Issues:
+
+ - !GHSA-64qc-9x89-rx5j: A specifically malformed Authorization header in an incoming SIP request can cause Asterisk to crash
+
+### Commits By Author:
+
+- #### George Joseph (1):
+ - res_pjsip_authenticator_digest: Fix SEGV if get_authorization_hdr returns NULL.
+
+
+### Commit List:
+
+- res_pjsip_authenticator_digest: Fix SEGV if get_authorization_hdr returns NULL.
+
+### Commit Details:
+
+#### res_pjsip_authenticator_digest: Fix SEGV if get_authorization_hdr returns NULL.
+ Author: George Joseph
+ Date: 2025-08-28
+
+ In the highly-unlikely event that get_authorization_hdr() couldn't find an
+ Authorization header in a request, trying to get the digest algorithm
+ would cauase a SEGV. We now check that we have an auth header that matches
+ the realm before trying to get the algorithm from it.
+
+ Resolves: #GHSA-64qc-9x89-rx5j
+
-<html><head><title>Readme for asterisk-20.15.1</title></head><body>
+<html><head><title>Readme for asterisk-20.15.2</title></head><body>
<h1>The Asterisk(R) Open Source PBX</h1>
<pre><code>By Mark Spencer <markster@digium.com> and the Asterisk.org developer community.
Copyright (C) 2001-2025 Sangoma Technologies Corporation and other copyright holders.
<p>If you are updating from a previous version of Asterisk, make sure you
read the Change Logs.</p>
<!-- CHANGELOGS (the URL will change based on the location of this README) -->
-<p><a href="ChangeLogs/ChangeLog-20.15.1.html">Change Logs</a></p>
+<p><a href="ChangeLogs/ChangeLog-20.15.2.html">Change Logs</a></p>
<!-- END-CHANGELOGS -->
<h3>NEW INSTALLATIONS</h3>
read the Change Logs.
<!-- CHANGELOGS (the URL will change based on the location of this README) -->
-[Change Logs](ChangeLogs/ChangeLog-20.15.1.html)
+[Change Logs](ChangeLogs/ChangeLog-20.15.2.html)
<!-- END-CHANGELOGS -->
### NEW INSTALLATIONS
projects / thirdparty / asterisk.git / commitdiff
