Bug#350905: asterisk: Multiple serious bugs in version currently in testing/unstable

[John Goerzen]

Package: asterisk
Version: 1:1.2.1.dfsg-3
Severity: grave
Justification: renders package unusable

Since 1.2.1 was released, the Asterisk folks have released new versions
that fix multiple serious problems.

Among the problems fixed:

* 1.2.4 fixes a "significant memory leak"

* 1.2.4 also fixes various SIP registration bugs

* 1.2.3 fixes the grave timebomb bug.
  See http://bugs.digium.com/view.php?id=6349

* 1.2.3 also fixed some memory leaks

* 1.2.3 fixed a bug with SIPAddHeader

* 1.2.3 fixed a segfault

* 1.2.2 also fixed a segfault

* 1.2.2 also fixes a memory leak

* 1.2.2 fixes a race condition surrounding uniqueid



-- System Information:
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.6.15.2
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages asterisk depends on:
ii  adduser                3.63              Add and remove users and groups
ii  asterisk-config        1:1.2.1.dfsg-3    config files for asterisk
ii  asterisk-sounds-main   1:1.2.1.dfsg-3    sound files for asterisk
ii  libasound2             1.0.8-3           ALSA library
ii  libc6                  2.3.2.ds1-22      GNU C Library: Shared libraries an
ii  libcurl3               7.13.2-2sarge4    Multi-protocol file transfer libra
ii  libgsm1                1.0.10-13         Shared libraries for GSM speech co
ii  libidn11               0.5.13-1.0        GNU libidn library, implementation
ii  libncurses5            5.4-4             Shared libraries for terminal hand
ii  libnewt0.51            0.51.6-20         Not Erik's Windowing Toolkit - tex
ii  libpq3                 7.4.7-6sarge1     PostgreSQL C client library
ii  libpri1                1.2.1-2           Primary Rate ISDN specification li
ii  libspeex1              1.1.6-2           The Speex Speech Codec
ii  libssl0.9.7            0.9.7e-3sarge1    SSL shared libraries
ii  unixodbc               2.2.4-11          ODBC tools libraries
ii  zlib1g                 1:1.2.2-4.sarge.2 compression library - runtime

-- no debconf information