<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<pre>This message was generated by the Security Alerts service ( Free Trial 14th of August - 14th of September )
<a class="moz-txt-link-freetext" href="http://www.opensips.org/Resources/AlertsMain">http://www.opensips.org/Resources/AlertsMain</a><b>
SVN commit</b>:
<a href="http://opensips.svn.sourceforge.net/viewvc/opensips?view=revision&revision=9229">http://opensips.svn.sourceforge.net/viewvc/opensips?view=revision&revision=9229</a>
<b>Severity</b>: Low
<b>Version</b> : 1.8, trunk
<b>Affected modules</b> : Dispatcher
<b>Effect</b> : Wrong value populated in the ATTRS AVP
<b>Affected scenarios</b>: When using ds_is_in_list() in order to identify if a SIP message
is originating from the gateway side, and also relying on the dispatcher module to
push custom information for the matched gateway ( based on the attrs AVP ), the AVP
will not have the proper value for the matched gateway
<b>Description</b> : When setting the AVP, there was a small bug in the dispatcher module,
which lead to the AVP always getting populated with the ATTRS value for the first
gateway in the set, instead of the actual matched gateway.
<b>Risks</b> : Low, if relying on such functionality on your OpenSIPS, you should
update, in order to get consistent information in the OpenSIPS script.
<b>Update</b> :
- if you have an SVN checkout, only 1.8 and trunk were fixed; so
update to a revision later than 9229 (trunk) or 9230 (1.8 branch) ;
- if you have OpenSIPS from sources, download and apply the patch from
<a href="http://opensips.svn.sourceforge.net/viewvc/opensips/trunk/modules/dispatcher/dispatch.c?view=patch&r1=9230&r2=9229&pathrev=9230">http://opensips.svn.sourceforge.net/viewvc/opensips/trunk/modules/dispatcher/dispatch.c?view=patch&r1=9230&r2=9229&pathrev=9230</a>
or see the attached patch;
- if using tarballs, they were already regenerated (and include the fix)
- If using the official Debian package (apt.opensips.org), they are also
re-generated including the fix.</pre>
<pre class="moz-signature" cols="72">--
Vlad Paiu
OpenSIPS Developer
<a class="moz-txt-link-freetext" href="http://www.opensips-solutions.com">http://www.opensips-solutions.com</a>
</pre>
</body>
</html>