[asterisk-dev] $300 reward for security backports to 1.6.1

[Paul Belanger]

On 11-08-15 03:23 PM, Alistair Cunningham wrote:
> We have a customer who is running 1.6.1.12 and who wishes to keep
> running 1.6.1.X. We're therefore offering a USD 300 reward, payable via
> PayPal, for the following patches for these security updates:
>
> http://lists.digium.com/pipermail/asterisk-dev/2011-June/049786.html
>
> 1. A patch or patches for 1.6.1.12.
>
> 2. A patch or patches for the latest 1.6.1.X, currently 1.6.1.25.
>
> We're happy for these patches to be made public.
>
Alistair,

The security patches from downloads.asterisk.org should apply cleanly 
(actually a little fuzz), however you'd need to confirm the 
functionality. Payment not required :)

1.6.1.12
---
$ mkdir ~/svn/
$ cd ~/svn/
$ svn co http://svn.asterisk.org/svn/asterisk/tags/1.6.1.12
$ cd 1.6.1.12
$ wget 'http://downloads.asterisk.org/pub/security/AST-2011-008.diff' -O 
- | patch -p0
$  wget 
'http://downloads.asterisk.org/pub/security/AST-2011-010-1.6.2.diff' -O 
- | patch -p0
$ ./configure
$ make
$ sudo make install

1.6.1.25
---
$ cd ~/svn/
$ svn co http://svn.asterisk.org/svn/asterisk/tags/1.6.1.25
$ cd 1.6.1.25
$ wget 'http://downloads.asterisk.org/pub/security/AST-2011-008.diff' -O 
- | patch -p0
$  wget 
'http://downloads.asterisk.org/pub/security/AST-2011-010-1.6.2.diff' -O 
- | patch -p0
$ ./configure
$ make
$ sudo make install

-- 
Paul Belanger
Digium, Inc. | Software Developer
twitter: pabelanger | IRC: pabelanger (Freenode)
Check us out at: http://digium.com & http://asterisk.org