Update for certified-22.8-cert2

This commit is contained in:
Asterisk Development Team
2026-03-26 20:11:21 +00:00
parent 80b99b84d3
commit ce9bf76d69
7 changed files with 116 additions and 6 deletions

View File

@@ -1 +1 @@
certified-22.8-cert1
certified-22.8-cert2

View File

@@ -1 +1 @@
ChangeLogs/ChangeLog-certified-22.8-cert1.html
ChangeLogs/ChangeLog-certified-22.8-cert2.html

View File

@@ -1 +1 @@
ChangeLogs/ChangeLog-certified-22.8-cert1.md
ChangeLogs/ChangeLog-certified-22.8-cert2.md

View File

@@ -0,0 +1,50 @@
<html><head><title>ChangeLog for asterisk-certified-22.8-cert2</title></head><body>
<h2>Change Log for Release asterisk-certified-22.8-cert2</h2>
<h3>Links:</h3>
<ul>
<li><a href="https://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-certified-22.8-cert2.html">Full ChangeLog</a> </li>
<li><a href="https://github.com/asterisk/asterisk/compare/certified-22.8-cert1...certified-22.8-cert2">GitHub Diff</a> </li>
<li><a href="https://downloads.asterisk.org/pub/telephony/certified-asterisk/asterisk-certified-22.8-cert2.tar.gz">Tarball</a> </li>
<li><a href="https://downloads.asterisk.org/pub/telephony/certified-asterisk">Downloads</a> </li>
</ul>
<h3>Summary:</h3>
<ul>
<li>Commits: 1</li>
<li>Commit Authors: 1</li>
<li>Issues Resolved: 1</li>
<li>Security Advisories Resolved: 0</li>
</ul>
<h3>User Notes:</h3>
<h3>Upgrade Notes:</h3>
<h3>Developer Notes:</h3>
<h3>Commit Authors:</h3>
<ul>
<li>Mike Bradeen: (1)</li>
</ul>
<h2>Issue and Commit Detail:</h2>
<h3>Closed Issues:</h3>
<ul>
<li>1833: [bug]: Address security vulnerabilities in pjproject</li>
</ul>
<h3>Commits By Author:</h3>
<ul>
<li>
<h4>Mike Bradeen (1):</h4>
</li>
<li>res_pjsip: Address pjproject security vulnerabilities</li>
</ul>
<h3>Commit List:</h3>
<ul>
<li>res_pjsip: Address pjproject security vulnerabilities</li>
</ul>
<h3>Commit Details:</h3>
<h4>res_pjsip: Address pjproject security vulnerabilities</h4>
<p>Author: Mike Bradeen
Date: 2026-03-25</p>
<p>Address the following pjproject security vulnerabilities</p>
<p><a href="https://github.com/pjsip/pjproject/security/advisories/GHSA-j29p-pvh2-pvqp">GHSA-j29p-pvh2-pvqp - Buffer overflow in ICE with long username</a>
<a href="https://github.com/pjsip/pjproject/security/advisories/GHSA-8fj4-fv9f-hjpc">GHSA-8fj4-fv9f-hjpc - Heap use-after-free in PJSIP presense subscription termination header</a>
<a href="https://github.com/pjsip/pjproject/security/advisories/GHSA-g88q-c2hm-q7p7">GHSA-g88q-c2hm-q7p7 - ICE session use-after-free race conditions</a>
<a href="https://github.com/pjsip/pjproject/security/advisories/GHSA-x5pq-qrp4-fmrj">GHSA-x5pq-qrp4-fmrj - Out-of-bounds read in SIP multipart parsing</a></p>
<p>Resolves: #1833</p>
</body></html>

View File

@@ -0,0 +1,60 @@
## Change Log for Release asterisk-certified-22.8-cert2
### Links:
- [Full ChangeLog](https://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-certified-22.8-cert2.html)
- [GitHub Diff](https://github.com/asterisk/asterisk/compare/certified-22.8-cert1...certified-22.8-cert2)
- [Tarball](https://downloads.asterisk.org/pub/telephony/certified-asterisk/asterisk-certified-22.8-cert2.tar.gz)
- [Downloads](https://downloads.asterisk.org/pub/telephony/certified-asterisk)
### Summary:
- Commits: 1
- Commit Authors: 1
- Issues Resolved: 1
- Security Advisories Resolved: 0
### User Notes:
### Upgrade Notes:
### Developer Notes:
### Commit Authors:
- Mike Bradeen: (1)
## Issue and Commit Detail:
### Closed Issues:
- 1833: [bug]: Address security vulnerabilities in pjproject
### Commits By Author:
- #### Mike Bradeen (1):
- res_pjsip: Address pjproject security vulnerabilities
### Commit List:
- res_pjsip: Address pjproject security vulnerabilities
### Commit Details:
#### res_pjsip: Address pjproject security vulnerabilities
Author: Mike Bradeen
Date: 2026-03-25
Address the following pjproject security vulnerabilities
[GHSA-j29p-pvh2-pvqp - Buffer overflow in ICE with long username](https://github.com/pjsip/pjproject/security/advisories/GHSA-j29p-pvh2-pvqp)
[GHSA-8fj4-fv9f-hjpc - Heap use-after-free in PJSIP presense subscription termination header](https://github.com/pjsip/pjproject/security/advisories/GHSA-8fj4-fv9f-hjpc)
[GHSA-g88q-c2hm-q7p7 - ICE session use-after-free race conditions](https://github.com/pjsip/pjproject/security/advisories/GHSA-g88q-c2hm-q7p7)
[GHSA-x5pq-qrp4-fmrj - Out-of-bounds read in SIP multipart parsing](https://github.com/pjsip/pjproject/security/advisories/GHSA-x5pq-qrp4-fmrj)
Resolves: #1833

View File

@@ -1,4 +1,4 @@
<html><head><title>Readme for asterisk-certified-22.8-cert1</title></head><body>
<html><head><title>Readme for asterisk-certified-22.8-cert2</title></head><body>
<h1>The Asterisk(R) Open Source PBX</h1>
<pre><code>By Mark Spencer &lt;markster@digium.com&gt; and the Asterisk.org developer community.
Copyright (C) 2001-2025 Sangoma Technologies Corporation and other copyright holders.
@@ -37,7 +37,7 @@ hardware.</p>
<p>If you are updating from a previous version of Asterisk, make sure you
read the Change Logs.</p>
<!-- CHANGELOGS (the URL will change based on the location of this README) -->
<p><a href="ChangeLogs/ChangeLog-certified-22.8-cert1.html">Change Logs</a></p>
<p><a href="ChangeLogs/ChangeLog-certified-22.8-cert2.html">Change Logs</a></p>
<!-- END-CHANGELOGS -->
<h3>NEW INSTALLATIONS</h3>

View File

@@ -55,7 +55,7 @@ If you are updating from a previous version of Asterisk, make sure you
read the Change Logs.
<!-- CHANGELOGS (the URL will change based on the location of this README) -->
[Change Logs](ChangeLogs/ChangeLog-certified-22.8-cert1.html)
[Change Logs](ChangeLogs/ChangeLog-certified-22.8-cert2.html)
<!-- END-CHANGELOGS -->
### NEW INSTALLATIONS