[Karmic] Upgrade Ekiga to 3.2.6

Bug #435295 reported by Yannick Defais on 2009-09-23
30
This bug affects 5 people
Affects Status Importance Assigned to Milestone
ekiga (Ubuntu)
Undecided
Unassigned
Nominated for Karmic by Yannick Defais

Bug Description

Binary package hint: ekiga

Hi,

Yesterday, the ekiga team released Ekiga 3.2.6 which is a big step for stability/security. Please upgrade to Kamic version to 3.2.6.

I made packages for Karmic (and Jaunty) here:
https://launchpad.net/~sevmek/+archive/ekiga-released

Changelog:
** User-visible fixes
- Fixed crashes shown as assertion failed in
/usr/include/ptlib/safecoll.h:813
- Fixed crash when device list is empty or contains non-latin1 characters
- Fixed crash when pressing shift-f10 (popup menu) in Preferences window
- Fixed possible crash when garbage collecting REGISTER requests
- Fixed possible segfault when receiving a NOTIFY
- Fixed freeze by preventing SIP handlers retry timer from executing
  during destruction
- Fixed freeze during packet write
- Fixed "Lockup after a day of idle" in publishing code
- Fixed various deadlocks in the OPAL subscription code
- Added "%limit" workaround for registrars which refuse several
  contacts during registration
- Fixed "Contacts never go offline"
- Fixed "New SIP account mangles fields if Authentications User is empty"
- Make sure the output device is set before a call
- Fixed port handling when registering to a proxy with a non-standard port
- Fixed "In some circumstances, smileys are not displayed graphically"
- Improved audio latency when not collecting all of the audio data
- Fixed the newmessage.wav file
- Fixed "Accounts were automatically active after editing them"
- Make possible to register e.g. user@a.b as user name as required by
  some providers
- Remove deprecated "Encoding" field from desktop file

** Protocol fixes
- Fixed problem with REGISTER IntervalTooBrief response handling not
  using correct interface for new transaction
- Fixed "480 Temporarily Unavailable" response handling
- Fixed problem with doing DNS lookup when using explicit proxy or
  presence agent
- Fixed problem with PUBLISH using wrong expiry after Interval Too Brief
  error
- If we find no authentication information when subscribing, keep trying
  as it could become available at a later stage
- Changed so does not put both global and media specific connection
  addresses in SDP if they are the same (needed for freephonie SIP
  registrar)
- Fixed support for unusual SIP "start with hold", that is an initial
  offer INVITE with a connection address of 0.0.0.0
- Fixed failure to retry (after a suitable period) REGISTER/SUBSCRIBE
  if get transport level timeout
- Added closing of our local media streams if remote sends a re-INVITE
  and leaves out streams (e.g. video) that were there previously
- Fixed problems when can not bind to any interface
- Fixed various problems with some SDP options
- Fixed regression where the username would be lost from the Contact
  field
- Fixed invalid request-uri in BYE request
- Fixed issue with overlapping INVITEs
- Fixed H.263-1998 plug in compilation, by asking latest avcodec
- Fixed "OpalBitRateCalculator limits bitrates"
- Fixed "SIP wrong response on a failed REFER-request"
- Fixed "SIP: OK response to CANCEL incomplete"
- Do not send "100 Trying" message when receiving a NOTIFY message
- Fixed incorrect register/subscribe refresh timer calculation

** Build fixes
- Support building on kFreeBSD
- Fixed problem with moving libsoup api
- Various fixes for SIP and H323 configuration
- Fixed "A build error when generating SunAudio ptlib plugin"
- Fixed "The video convertor of YUY2toYUV420P in ptlib does not work"
- Fixed "The absence of libv4l2 should not block V4L2 ptlib plugin"
- and other minor changes

** Windows port fixes
- Thanks to Michael Rickmann's continuous work, Windows port has
  reached a quality almost comparable to GNU/Linux version. We invite
  people to test it, see ekiga wiki. Some improvements:
  - shortened audio delay
  - DirectX video input and output
  - device name handling
  - fixed audio volume
  - fixed building with mingw
  - made so the linker doesn't find main on win32
  - Keep the output sound volume across calls

** Distributor-visible changes
- Changed default for AVC plug in to be disabled until someone fixes
  the plug in
- Note: Pulse audio server does not play nicely with ekiga, very high
  latencies are noticed

** Translation fixes
- Updated translations: ar, bn, et, ga, hi, hu, ko, lt, ml, nb, sr,
  sr@latin, uk, zh_HK, zh_TW
- New translations: ca@valencia
- Updated help translations: de

Best regards,
Yannick

Yannick Defais (sevmek) on 2009-09-23
visibility: private → public
security vulnerability: yes → no
Yannick Defais (sevmek) wrote :

"- Fixed possible segfault when receiving a NOTIFY"
means a crafted UDP packet from internet can crash ekiga, it is a security issue, isn't?

security vulnerability: no → yes
Kees Cook (kees) wrote :

In general we don't include client DoS issues. Is there a reproducer for the problem?

security vulnerability: yes → no
Yannick Defais (sevmek) wrote :

Hi,

ptlib 2.6.5 and opal 3.6.6 are in the new queue for debian:
http://ftp-master.debian.org/new/ptlib_2.6.5-1.html
http://ftp-master.debian.org/new/opal_3.6.6~dfsg-1.html

Ekiga 3.2.6 will follow soon.

All of them should be published in debian in 2-5 days.

Best regards,
Yannick

Yannick Defais (sevmek) wrote :

@Kees Cook,

The DoS issue is probably this one:
http://sourceforge.net/tracker/?func=detail&aid=2837056&group_id=204472&atid=989748

It includes a wireshark trace, and is reported as 100% reproducible.

Best regards,
Yannick

Jeremy Nickurak (nickurak) wrote :

Upgraded to 3.2.6 in ppa: https://launchpad.net/~sevmek/+archive/ekiga-released

Went from useless (constant crashes, incredibally choppy audio, no audio whatsoever after about 2 seconds) to perfect.

joeclarkia (joeclark) wrote :

Is there something holding this up from being in the main repositories? Ekiga (3.2.5) is seg-faulting fairly regularly for me -- guessing this new version will improve things.

Logan Rosen (logan) wrote :

Karmic reached EOL, so I am marking this bug as Invalid. Please upgrade to a newer version of Ubuntu if you would like to use a more recent version of Ekiga. Thanks!

Changed in ekiga (Ubuntu):
status: New → Invalid
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.