security updates for asterisk

[Stefan Fritsch]

Hi,

Steffen Joeris has prepared security updates for asterisk for etch and 
lenny [1] (it doesn't seem likely that the current asterisk in sid 
migrates to lenny soon).

For lenny, the build-dep on libzap-dev had to be removed because 
zapata has been removed from lenny and sid. Comparing the new lenny 
updates to the packages currently in lenny [2], there are several 
modules missing. Some are due to the removed libzap, but I don't 
think that's all. It would be very helpful if one of you could review 
these packages and tell me wether I should release these packages to 
testing-security.

I am sure the stable security team would also welcome a review of the 
etch packages.

Thanks for your help.

Cheers,
Stefan


[1] http://lists.debian.org/debian-security/2007/08/msg00002.html

[2] debdiff 
asterisk-classic_1.2.13~dfsg-2_i386.deb
asterisk-classic_1.2.13~dfsg-2lenny1_i386.deb

Files in first .deb but not in second
-------------------------------------
/usr/lib/asterisk/modules/app_flash.so
/usr/lib/asterisk/modules/app_meetme.so
/usr/lib/asterisk/modules/app_page.so
/usr/lib/asterisk/modules/app_zapbarge.so
/usr/lib/asterisk/modules/app_zapras.so
/usr/lib/asterisk/modules/app_zapscan.so
/usr/lib/asterisk/modules/cdr_sqlite3_custom.so
/usr/lib/asterisk/modules/chan_zap.so

The following lines in the control files differ (wdiff output format):
----------------------------------------------------------------------
...
Depends: ... [-libcomerr2 (>= 1.33-3),-] ... [-libidn11 (>= 
0.5.18),-] ... [-libpri1.2-] ... [-libtonezone1 (>= 
1:1.2.10.dfsg)-] ...

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
Url : http://lists.alioth.debian.org/pipermail/pkg-voip-maintainers/attachments/20070811/f8e75e94/attachment.pgp