<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#ffffff" text="#000000">
<pre>This message was generated by the Security Alerts service ( Free Trial 14th of August - 14th of September )
<a class="moz-txt-link-freetext" href="http://www.opensips.org/Resources/AlertsMain">http://www.opensips.org/Resources/AlertsMain</a>
<b>
SVN commit</b>:
<a class="moz-txt-link-freetext" href="http://opensips.svn.sourceforge.net/viewvc/opensips?view=revision&revision=9197">http://opensips.svn.sourceforge.net/viewvc/opensips?view=revision&revision=9197</a>
<b>Severity</b>: Medium
<b>Version</b> : 1.8, trunk
<b>Affected modules</b> : Dialog
<b>Effect</b> : Distributed Load-Balacing was not working properly
<b>Affected scenarios</b>: In a distributed load-balancing setup, the LoadBalancer module
was not properly marking the internally-created dialog profiles as shared,
thus breaking the distributed functionality.
<b>Description:</b> The bug was in the Dialog module. When the LoadBalancer modules used the
Dialog API to create distributed profiles, the Dialog module was mistakenly modifying
the resource name, removing the distributed marker ( /s ). When the LoadBalancer
module would search again for the profile, it couldn't be found anymore.
<b>Risks</b> : When setting up a distributed LoadBalancer setup, each node would not be able
to see the other nodes load, and would end up overloading destination servers.
<b>Update</b> :
- if you have an SVN checkout, 1.8 and trunk were fixed; so
update to a revision later than 9196 (trunk) or 9197 (1.8 branch)
- if you have OpenSIPS from sources, download and apply the patch from
<a class="moz-txt-link-freetext" href="http://opensips.svn.sourceforge.net/viewvc/opensips/branches/1.8/modules/dialog/dlg_profile.c?view=patch&r1=9197&r2=9196&pathrev=9197">http://opensips.svn.sourceforge.net/viewvc/opensips/branches/1.8/modules/dialog/dlg_profile.c?view=patch&r1=9197&r2=9196&pathrev=9197</a>
or see the attached patch;
- if using tarballs, they were already regenerated (and include the fix)
- If using the official Debian package (apt.opensips.org), they are also
re-generated including the fix.
</pre>
<pre class="moz-signature" cols="72">--
Vlad Paiu
OpenSIPS Developer
<a class="moz-txt-link-freetext" href="http://www.opensips-solutions.com">http://www.opensips-solutions.com</a> </pre>
</body>
</html>