]> git.ipfire.org Git - thirdparty/asterisk.git/commitdiff
Update for certified-22.8-cert2 releases/certified-22.8 certified-22.8-cert2
authorAsterisk Development Team <asteriskteam@digium.com>
Thu, 26 Mar 2026 20:11:21 +0000 (20:11 +0000)
committerAsterisk Development Team <asteriskteam@digium.com>
Thu, 26 Mar 2026 20:11:21 +0000 (20:11 +0000)
.version
CHANGES.html
CHANGES.md
ChangeLogs/ChangeLog-certified-22.8-cert2.html [new file with mode: 0644]
ChangeLogs/ChangeLog-certified-22.8-cert2.md [new file with mode: 0644]
README.html
README.md

index 40ebc3b7f7fb2ed96384d9169fbb341a6d4c6647..7c06e009d8038010433c5594f65c139002684381 100644 (file)
--- a/.version
+++ b/.version
@@ -1 +1 @@
-certified-22.8-cert1
+certified-22.8-cert2
index 32bf2863a52fe59c0e6b3dc8598d2f4e2ce45849..df0efcfdcd1fa7a898e8883cfa9e3142fcf4a870 120000 (symlink)
@@ -1 +1 @@
-ChangeLogs/ChangeLog-certified-22.8-cert1.html
\ No newline at end of file
+ChangeLogs/ChangeLog-certified-22.8-cert2.html
\ No newline at end of file
index 1c11b234cfbaea242c861faba85c92d014e4af0f..13cd861d38874510b8fcca937195ae3c4602f8fd 120000 (symlink)
@@ -1 +1 @@
-ChangeLogs/ChangeLog-certified-22.8-cert1.md
\ No newline at end of file
+ChangeLogs/ChangeLog-certified-22.8-cert2.md
\ No newline at end of file
diff --git a/ChangeLogs/ChangeLog-certified-22.8-cert2.html b/ChangeLogs/ChangeLog-certified-22.8-cert2.html
new file mode 100644 (file)
index 0000000..4baeb97
--- /dev/null
@@ -0,0 +1,50 @@
+<html><head><title>ChangeLog for asterisk-certified-22.8-cert2</title></head><body>
+<h2>Change Log for Release asterisk-certified-22.8-cert2</h2>
+<h3>Links:</h3>
+<ul>
+<li><a href="https://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-certified-22.8-cert2.html">Full ChangeLog</a>  </li>
+<li><a href="https://github.com/asterisk/asterisk/compare/certified-22.8-cert1...certified-22.8-cert2">GitHub Diff</a>  </li>
+<li><a href="https://downloads.asterisk.org/pub/telephony/certified-asterisk/asterisk-certified-22.8-cert2.tar.gz">Tarball</a>  </li>
+<li><a href="https://downloads.asterisk.org/pub/telephony/certified-asterisk">Downloads</a>  </li>
+</ul>
+<h3>Summary:</h3>
+<ul>
+<li>Commits: 1</li>
+<li>Commit Authors: 1</li>
+<li>Issues Resolved: 1</li>
+<li>Security Advisories Resolved: 0</li>
+</ul>
+<h3>User Notes:</h3>
+<h3>Upgrade Notes:</h3>
+<h3>Developer Notes:</h3>
+<h3>Commit Authors:</h3>
+<ul>
+<li>Mike Bradeen: (1)</li>
+</ul>
+<h2>Issue and Commit Detail:</h2>
+<h3>Closed Issues:</h3>
+<ul>
+<li>1833: [bug]: Address security vulnerabilities in pjproject</li>
+</ul>
+<h3>Commits By Author:</h3>
+<ul>
+<li>
+<h4>Mike Bradeen (1):</h4>
+</li>
+<li>res_pjsip: Address pjproject security vulnerabilities</li>
+</ul>
+<h3>Commit List:</h3>
+<ul>
+<li>res_pjsip: Address pjproject security vulnerabilities</li>
+</ul>
+<h3>Commit Details:</h3>
+<h4>res_pjsip: Address pjproject security vulnerabilities</h4>
+<p>Author: Mike Bradeen
+  Date:   2026-03-25</p>
+<p>Address the following pjproject security vulnerabilities</p>
+<p><a href="https://github.com/pjsip/pjproject/security/advisories/GHSA-j29p-pvh2-pvqp">GHSA-j29p-pvh2-pvqp - Buffer overflow in ICE with long username</a>
+  <a href="https://github.com/pjsip/pjproject/security/advisories/GHSA-8fj4-fv9f-hjpc">GHSA-8fj4-fv9f-hjpc - Heap use-after-free in PJSIP presense subscription termination header</a>
+  <a href="https://github.com/pjsip/pjproject/security/advisories/GHSA-g88q-c2hm-q7p7">GHSA-g88q-c2hm-q7p7 - ICE session use-after-free race conditions</a>
+  <a href="https://github.com/pjsip/pjproject/security/advisories/GHSA-x5pq-qrp4-fmrj">GHSA-x5pq-qrp4-fmrj - Out-of-bounds read in SIP multipart parsing</a></p>
+<p>Resolves: #1833</p>
+</body></html>
diff --git a/ChangeLogs/ChangeLog-certified-22.8-cert2.md b/ChangeLogs/ChangeLog-certified-22.8-cert2.md
new file mode 100644 (file)
index 0000000..4bc21af
--- /dev/null
@@ -0,0 +1,60 @@
+
+## Change Log for Release asterisk-certified-22.8-cert2
+
+### Links:
+
+ - [Full ChangeLog](https://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-certified-22.8-cert2.html)  
+ - [GitHub Diff](https://github.com/asterisk/asterisk/compare/certified-22.8-cert1...certified-22.8-cert2)  
+ - [Tarball](https://downloads.asterisk.org/pub/telephony/certified-asterisk/asterisk-certified-22.8-cert2.tar.gz)  
+ - [Downloads](https://downloads.asterisk.org/pub/telephony/certified-asterisk)  
+
+### Summary:
+
+- Commits: 1
+- Commit Authors: 1
+- Issues Resolved: 1
+- Security Advisories Resolved: 0
+
+### User Notes:
+
+
+### Upgrade Notes:
+
+
+### Developer Notes:
+
+
+### Commit Authors:
+
+- Mike Bradeen: (1)
+
+## Issue and Commit Detail:
+
+### Closed Issues:
+
+  - 1833: [bug]: Address security vulnerabilities in pjproject
+
+### Commits By Author:
+
+- #### Mike Bradeen (1):
+  - res_pjsip: Address pjproject security vulnerabilities
+
+### Commit List:
+
+-  res_pjsip: Address pjproject security vulnerabilities
+
+### Commit Details:
+
+#### res_pjsip: Address pjproject security vulnerabilities
+  Author: Mike Bradeen
+  Date:   2026-03-25
+
+  Address the following pjproject security vulnerabilities
+
+  [GHSA-j29p-pvh2-pvqp - Buffer overflow in ICE with long username](https://github.com/pjsip/pjproject/security/advisories/GHSA-j29p-pvh2-pvqp)
+  [GHSA-8fj4-fv9f-hjpc - Heap use-after-free in PJSIP presense subscription termination header](https://github.com/pjsip/pjproject/security/advisories/GHSA-8fj4-fv9f-hjpc)
+  [GHSA-g88q-c2hm-q7p7 - ICE session use-after-free race conditions](https://github.com/pjsip/pjproject/security/advisories/GHSA-g88q-c2hm-q7p7)
+  [GHSA-x5pq-qrp4-fmrj - Out-of-bounds read in SIP multipart parsing](https://github.com/pjsip/pjproject/security/advisories/GHSA-x5pq-qrp4-fmrj)
+
+  Resolves: #1833
+
index 0645fd962f0a94a279ead7f834716fdbbcaa6c8e..0c9b074b3fc2496f30ec7456c5d79625985f330f 100644 (file)
@@ -1,4 +1,4 @@
-<html><head><title>Readme for asterisk-certified-22.8-cert1</title></head><body>
+<html><head><title>Readme for asterisk-certified-22.8-cert2</title></head><body>
 <h1>The Asterisk(R) Open Source PBX</h1>
 <pre><code>By Mark Spencer &lt;markster@digium.com&gt; and the Asterisk.org developer community.
 Copyright (C) 2001-2025 Sangoma Technologies Corporation and other copyright holders.
@@ -37,7 +37,7 @@ hardware.</p>
 <p>If you are updating from a previous version of Asterisk, make sure you
 read the Change Logs.</p>
 <!-- CHANGELOGS (the URL will change based on the location of this README) -->
-<p><a href="ChangeLogs/ChangeLog-certified-22.8-cert1.html">Change Logs</a></p>
+<p><a href="ChangeLogs/ChangeLog-certified-22.8-cert2.html">Change Logs</a></p>
 <!-- END-CHANGELOGS -->
 
 <h3>NEW INSTALLATIONS</h3>
index 13c6b0a98b5e1d6f055a815d5de9eb4dfb6b48cd..40903eadb5fc3900f7e8df9a6c72a933601e4b71 100644 (file)
--- a/README.md
+++ b/README.md
@@ -55,7 +55,7 @@ If you are updating from a previous version of Asterisk, make sure you
 read the Change Logs.
 
 <!-- CHANGELOGS (the URL will change based on the location of this README) -->
-[Change Logs](ChangeLogs/ChangeLog-certified-22.8-cert1.html)
+[Change Logs](ChangeLogs/ChangeLog-certified-22.8-cert2.html)
 <!-- END-CHANGELOGS -->
 
 ### NEW INSTALLATIONS