Incorrect and unsafe memory handling (AST-2014-019) in res_http_websocket addressed in both branches, vulnerable non-stable ebuilds removed. For security bug #532242. Enable MeetMe conference support if DAHDI is enabled, as requested by Kristian Fiskerstrand in bug #531486.

Package-Manager: portage-2.2.15/cvs/Linux x86_64
Manifest-Sign-Key: 0xB5058F9A

4 files changed, 343 insertions, 10 deletions

diff --git a/net-misc/asterisk/ChangeLog b/net-misc/asterisk/ChangeLog
index 5595707296cc..5be3c2ab34c0 100644
--- a/net-misc/asterisk/ChangeLog
+++ b/net-misc/asterisk/ChangeLog
@@ -1,6 +1,16 @@
 # ChangeLog for net-misc/asterisk
 # Copyright 1999-2014 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-misc/asterisk/ChangeLog,v 1.508 2014/11/24 15:58:43 chainsaw Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-misc/asterisk/ChangeLog,v 1.509 2014/12/16 10:21:06 chainsaw Exp $
+
+*asterisk-12.7.2 (16 Dec 2014)
+*asterisk-11.14.2 (16 Dec 2014)
+
+  16 Dec 2014; Tony Vroon <chainsaw@gentoo.org> +asterisk-11.14.2.ebuild,
+  -asterisk-12.7.1.ebuild, +asterisk-12.7.2.ebuild:
+  Incorrect and unsafe memory handling (AST-2014-019) in res_http_websocket
+  addressed in both branches, vulnerable non-stable ebuilds removed. For
+  security bug #532242. Enable MeetMe conference support if DAHDI is enabled,
+  as requested by Kristian Fiskerstrand in bug #531486.
 
   24 Nov 2014; Tony Vroon <chainsaw@gentoo.org> -asterisk-11.13.1.ebuild:
   Remove vulnerable ebuilds now that stabilisation is complete. For security
diff --git a/net-misc/asterisk/Manifest b/net-misc/asterisk/Manifest
index 156f9a936e31..a8c8cb2ba540 100644
--- a/net-misc/asterisk/Manifest
+++ b/net-misc/asterisk/Manifest
@@ -11,17 +11,20 @@ AUX 1.8.0/asterisk.initd7 9382 SHA256 7951901371035da2cb958d029ddbd8af276a5de7be
 AUX 1.8.0/find_call_ids.sh 1078 SHA256 185d0f55f54d044eb4b4dc64954e5191f8b993d139749bfe869e34f3ecff9d09 SHA512 1690eb3ea9eb51711df9fd7c121dbc520a2a15870fa06523f096968386ca68a132a46e361b9d19367c7089cd9ad18132ed02ef0aedd990d5939550182a3366c9 WHIRLPOOL f123f60557066707d0c276451af32f5561abb8db7e8d4eeb3a2da871ae0245108e42d28c7ff77d228a963e5f5326f7382b0ac54f92fc1bfeec2c085b9b237a15
 AUX 1.8.0/find_call_sip_trace.sh 1115 SHA256 e1ebeb1dab05f552f89f380719d319cdf579cb6aeb86a9010e13e14c57f55985 SHA512 e679f3953b2e397d7c80bb2f0ca3db848f07ba97ca139c87224de4467f8172034eb4372e5ddd68116774a7b9d5fd48aa30d809e2af2c6e6e0747762c69090b6a WHIRLPOOL 8c30be245556b37dd45dd5ff5cf5c3141050f60c3e286631520f8114e167c6bd4f7930be21e57e93fd183ab65dfbd3b95b8e342808870979b67977f3ce189ebf
 DIST asterisk-11.14.1.tar.gz 34966823 SHA256 bc46e3b8dcfec84ac327000ad11fcce96869b256612a71bee5d19b7c5e93b8a8 SHA512 05aed902b010e43a8cdcd3d186ba762a9532695aaa3c184d6146baaff62186b7ecbc0052a8fb6fed8a4878fef94746c3f67a91ca3249299a8fe603bf25a6f29b WHIRLPOOL 720a133ededc5c34077fdb592f3fb4bdd99524315b4b4a1aff41d5b8adf8a257bc48e57dda936953629408c1dff834dd0156367df80e4189f58b0173926e3894
-DIST asterisk-12.7.1.tar.gz 56867949 SHA256 f7f51e9d815c6c4ddab0d9d7732ca7e3996f805c5d7ccf9e1c2700afa643065b SHA512 93b6521713eeb029840ca515d596363f33b064cb682c49e95a3f9b4c444f2572e017bfd2c7bedb8580757a0c0a2e7b65c9f89d0d66edede0cedda8fa2cdac1db WHIRLPOOL 63017441d1aaeef61c60181cb97930fb1075d83e57ca63e185f924163a733b104f49e330d46a98acdf06fa7814cc8b9876b0391c3ab0bca318191c305b7fe850
+DIST asterisk-11.14.2.tar.gz 34967655 SHA256 c9a7a9cf4b4512333853a8f53ea243cd8b0bc62123a397b20e03835ad1497f7e SHA512 d91f0c6c64ab7c764159a52f87c9a5804e52984307295cbd8d4b8d3214b8d2ad075924610798405bb1f0227541997943a00750f5f8da2191500985d5c7ba0169 WHIRLPOOL 1863df103a950461c9262bb30ca12638355453fd76f9054952ecd831656e5f3945f8c378f45d3057036bfaf2bee1e24163b890e8465a738ff8344986ac965d20
+DIST asterisk-12.7.2.tar.gz 56867200 SHA256 1d4df46319ab20b985e65d65530d72f6413e71682a6984f786fce4fe08c11a7f SHA512 5ba560d7c38371f93cf175c7bddbfdb5902bd17168a21e70769364a689598e796881576d5a6aa28db3d7301e3d5796bb34c1a2e24decf075f437ddd109fdd4ec WHIRLPOOL 96961153cb877943073df8fe8c487fdf362383d8db80b5b79e44487d494a8c46fccb955fb70628159686ae86c93afa72ba9403a3800e5df12f55e06a021f8b63
 DIST gentoo-asterisk-patchset-3.13.tar.bz2 6321 SHA256 2eb19760f2b2917ff651296a3ab6332e2f087abfa4127d7e3b15d079b65cdf98 SHA512 b0d4f23fe09426dedfc67d2b022388e6c931fa38842ed5436beb3ff4033ce5b83e95d7513bbe3d1def0a98806450713c75b32b7a9211160b12767a8e49f14dde WHIRLPOOL 6e1117a2cad8646551acab72c5436030483fee550bcbfaa6b36745a80896503ce7b20e9c36ee81789331f2b086cf71bc3f213d288d90a189befe4c6a07b9876b
+DIST gentoo-asterisk-patchset-3.14.tar.bz2 5954 SHA256 20daa50d3e9131fcb783ea9fc39a2183e75e81d4a41337ab432c5cbde24cb74c SHA512 78fb2657047cc7f9590c1e5a3c796e0d78b3cc28eed121d8c824b778af8ef8797870206587faf99bf4f97c367899ccc158b1d84c2d5dceaa3b8dd60907ef3f7b WHIRLPOOL 356a9949b4729052b68b8bf004885b237cd7074f29244c6f31a87461dcdc86e3174769710fee212890cbe2d3f7f25821997de4ba75046a7d2731e464f74349f4
 EBUILD asterisk-11.14.1.ebuild 9473 SHA256 a6d13c05936455d5f8e1cf34198fa729da15fd257892455a89cea853c5446ff4 SHA512 e7a1ca12e557e201b968ea965295cc018d8802fa6b3f51276066cc7a14e27bf83cb3ddf1861e27cdf12e8744ceda88645cae7171327bfa75a9c91281d2a0c737 WHIRLPOOL 71347379d65276b06abc879e3642e517aee11bfa2eb27d9e7cf59d7693e69e4cea594e09ebfba3815065938fe1b0202f9eaa9d107b86a4eada87e0e5c8a831f7
-EBUILD asterisk-12.7.1.ebuild 9497 SHA256 9d44179f6a8a91f83ea2165d5268c156f138d3dc4527c4306a9ef220a536661f SHA512 7eae0436856b69efc17950ed51e3236e02018ec1f4a69390d25ca2cec3526097ef4705945bdb4fe3a6a0e26b8ee22402c1a6db3fc60fe089522b9d33a07e0d31 WHIRLPOOL 10941fddd055f1b121c3aa50c5fce08871f8408c716ed6b15d9ab39f809e440fbc554867b143d15f219b762e5807e93ae27b18c765da414626247439d7cba069
-MISC ChangeLog 22389 SHA256 0ce4ff91e181b4e3f4edb025e158b3e2da868af06555716ef6ead61ecca1bb70 SHA512 42b75a18d75eb623a94326a864d34c2c3a18d00fb7020477fcd133bd7189c7a3ea0dcbf73eb71ddecc35686bc98719395f46838daddae8a410d0720b54b87372 WHIRLPOOL 2e931a714b61c956feb870f05a56deee808f4d1418bace1a581ae73dd135296b3e10bba657d4dfb0e568077d595a38be3d31b7f585ec9589d68c537042ab3c70
+EBUILD asterisk-11.14.2.ebuild 9491 SHA256 24bec21fbd3de036235d439f5c2286103a39d52bec20d3bb2c17d5481b3ab24b SHA512 71689bf25882484a5609f79ff852bd91fd2d1ed53b284c4a9fff390a1bc86f021b2958f4f59c224b3acf43d1cef372371d6f6dce06ced8d3074218a5593d681d WHIRLPOOL 0de3f7edd6d6b87c7e085d7cd5a65ab4a8d213fc265a7087792f23abcc80a874865e5347f8e296207fe0b8a2ee35fee8eee597dc4cbdcfdbce390e8ce49956be
+EBUILD asterisk-12.7.2.ebuild 9508 SHA256 8261bbd5687b402b0a67d49f23c5a0b6020d8c93b40d1a2e240c739cb1659939 SHA512 cfba4b54cd16164ffc37a6d19d36b695985517a739b6931b36e5cd9f3838d39e9a69a78d7c18feac08d4281b7c529a4e425a5ff7031aa55083262d6bff130e8d WHIRLPOOL e9990116cbd8b478ea3f6caaee8ce0468aa3650d62681b4fc36307505cc3c2d6634a0b9fc0d20c0e9a4fb1371035bf6336bb74f68e48398235b7c4a418c92329
+MISC ChangeLog 22863 SHA256 5911481f9f5d5df295af64d71778bc449f7687d4767ba6fef96b7cccde9a0375 SHA512 100cbb0d631332ae82d766184db4eda424975f9bcf65b2d6553b3a39db325a33ccbbd79cebc762ee0a43784fa64edda134bd1c6d2a8ad9ca548d6949d47bf3e1 WHIRLPOOL d98b1849bd3e2df62b4d82cc0c321134dedc3f73b423998ace8dec2af8988d00ab243eb421889c646b8000acebb0bf5cd9de2b3d9c0a99e388407bc234313c37
 MISC ChangeLog-2012 113409 SHA256 6beb419f0c2e63641c73f2c14bd0c3a6a319c65bca8be526aa441fac2104fc9c SHA512 08c037acd578b9c3c387a80e45e80a68c4da84e63fced30215f22ec14eb6e223348d8e7d68f4decdf8a2d8cd0933b3f7fa3adddf7cd80bb407498b3e2868d917 WHIRLPOOL be0f2192531f7477545ccc0f10d9a50f36228e8d8d0e2773ccce3799c2d1b5e1b7be70d96502f759c7c878f88efd83122fc9230374c40c8963fe0bc7ff014b87
 MISC metadata.xml 1080 SHA256 297d1772ab811058eefd6d99d80eff0c552dd1c4c1a55a2d5cafebd14e7b85f9 SHA512 fce6e57053f835e396553796ea3ff64c9411f81fed6e07c77e37b00f23b01739962afb069497764cabf38c3d2f3fcfccdbd0ac41a3da06969ee95faf7e2e3999 WHIRLPOOL 148361759ded02f98c735b0e8d2f72a37b908f8484cd978055ee05c9dc9b290c29c3983a51c4ffebe943a149e3d0df0df2c9b548256027a0ee5df289d63337b0
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2
 
-iEYEAREIAAYFAlRzVbUACgkQp5vW4rUFj5puPgCfas0TvAm7AdVDKIUQwf7K+lZ0
-lyYAmgKIpiV4UvcBKy+lEu/iyB8IV0tW
-=bbFp
+iEYEAREIAAYFAlSQB5kACgkQp5vW4rUFj5pVwwCaAnsasQZi70QDeQbq82hCcGLx
+aVMAoL/Bb3ZOjp2RQJV/mHustgi27T8/
+=f5Uy
 -----END PGP SIGNATURE-----
diff --git a/net-misc/asterisk/asterisk-11.14.2.ebuild b/net-misc/asterisk/asterisk-11.14.2.ebuild
new file mode 100644
index 000000000000..c5efb26b445a
--- /dev/null
+++ b/net-misc/asterisk/asterisk-11.14.2.ebuild
@@ -0,0 +1,320 @@
+# Copyright 1999-2014 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/net-misc/asterisk/asterisk-11.14.2.ebuild,v 1.1 2014/12/16 10:21:06 chainsaw Exp $
+
+EAPI=5
+inherit autotools base eutils linux-info multilib user
+
+MY_P="${PN}-${PV/_/-}"
+
+DESCRIPTION="Asterisk: A Modular Open Source PBX System"
+HOMEPAGE="http://www.asterisk.org/"
+SRC_URI="http://downloads.asterisk.org/pub/telephony/asterisk/releases/${MY_P}.tar.gz
+	 mirror://gentoo/gentoo-asterisk-patchset-3.14.tar.bz2"
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~amd64 ~x86"
+
+IUSE_VOICEMAIL_STORAGE="
+	+voicemail_storage_file
+	voicemail_storage_odbc
+	voicemail_storage_imap
+"
+IUSE="${IUSE_VOICEMAIL_STORAGE} alsa bluetooth calendar +caps cluster curl dahdi debug doc freetds gtalk http iconv ilbc jabber ldap libedit lua mysql newt +samples odbc osplookup oss portaudio postgres radius selinux snmp span speex srtp static syslog vorbis"
+IUSE_EXPAND="VOICEMAIL_STORAGE"
+REQUIRED_USE="gtalk? ( jabber )
+	^^ ( ${IUSE_VOICEMAIL_STORAGE/+/} )
+	voicemail_storage_odbc? ( odbc )
+"
+
+EPATCH_SUFFIX="patch"
+PATCHES=( "${WORKDIR}/asterisk-patchset" )
+
+CDEPEND="dev-db/sqlite:3
+	dev-libs/popt
+	dev-libs/libxml2
+	dev-libs/openssl
+	sys-libs/ncurses
+	sys-libs/zlib
+	alsa? ( media-libs/alsa-lib )
+	bluetooth? ( net-wireless/bluez )
+	calendar? ( net-libs/neon
+		 dev-libs/libical
+		 dev-libs/iksemel )
+	caps? ( sys-libs/libcap )
+	cluster? ( sys-cluster/corosync )
+	curl? ( net-misc/curl )
+	dahdi? ( >=net-libs/libpri-1.4.12_beta2
+		net-misc/dahdi-tools )
+	freetds? ( dev-db/freetds )
+	gtalk? ( dev-libs/iksemel )
+	http? ( dev-libs/gmime:2.6 )
+	iconv? ( virtual/libiconv )
+	ilbc? ( dev-libs/ilbc-rfc3951 )
+	jabber? ( dev-libs/iksemel )
+	ldap? ( net-nds/openldap )
+	libedit? ( dev-libs/libedit )
+	lua? ( dev-lang/lua )
+	mysql? ( virtual/mysql )
+	newt? ( dev-libs/newt )
+	odbc? ( dev-db/unixODBC )
+	osplookup? ( net-libs/osptoolkit )
+	portaudio? ( media-libs/portaudio )
+	postgres? ( virtual/postgresql )
+	radius? ( net-dialup/radiusclient-ng )
+	snmp? ( net-analyzer/net-snmp )
+	span? ( media-libs/spandsp )
+	speex? ( media-libs/speex )
+	srtp? ( net-libs/libsrtp )
+	vorbis? ( media-libs/libvorbis )"
+
+DEPEND="${CDEPEND}
+	!net-libs/openh323
+	!net-libs/pjsip
+	voicemail_storage_imap? ( virtual/imap-c-client )
+	virtual/pkgconfig
+"
+
+RDEPEND="${CDEPEND}
+	selinux? ( sec-policy/selinux-asterisk )
+	syslog? ( virtual/logger )"
+
+PDEPEND="net-misc/asterisk-core-sounds
+	net-misc/asterisk-extra-sounds
+	net-misc/asterisk-moh-opsound"
+
+S="${WORKDIR}/${MY_P}"
+
+pkg_setup() {
+	CONFIG_CHECK="~!NF_CONNTRACK_SIP"
+	local WARNING_NF_CONNTRACK_SIP="SIP (NAT) connection tracking is enabled. Some users
+	have reported that this module dropped critical SIP packets in their deployments. You
+	may want to disable it if you see such problems."
+	check_extra_config
+
+	enewgroup asterisk
+	enewgroup dialout 20
+	enewuser asterisk -1 -1 /var/lib/asterisk "asterisk,dialout"
+}
+
+src_prepare() {
+	base_src_prepare
+	AT_M4DIR=autoconf eautoreconf
+}
+
+src_configure() {
+	local vmst
+
+	econf \
+		--libdir="/usr/$(get_libdir)" \
+		--localstatedir="/var" \
+		--with-crypto \
+		--with-gsm=internal \
+		--with-popt \
+		--with-ssl \
+		--with-z \
+		--without-pwlib \
+		$(use_with caps cap) \
+		$(use_with http gmime) \
+		$(use_with newt) \
+		$(use_with portaudio)
+
+	# Blank out sounds/sounds.xml file to prevent
+	# asterisk from installing sounds files (we pull them in via
+	# asterisk-{core,extra}-sounds and asterisk-moh-opsound.
+	>"${S}"/sounds/sounds.xml
+
+	# That NATIVE_ARCH chatter really is quite bothersome
+	sed -i 's/NATIVE_ARCH=/NATIVE_ARCH=0/' build_tools/menuselect-deps || die "Unable to squelch noisy build system"
+
+	# Compile menuselect binary for optional components
+	emake menuselect.makeopts
+
+	# Broken functionality is forcibly disabled (bug #360143)
+	menuselect/menuselect --disable chan_misdn menuselect.makeopts
+	menuselect/menuselect --disable chan_ooh323 menuselect.makeopts
+
+	# Utility set is forcibly enabled (bug #358001)
+	menuselect/menuselect --enable smsq menuselect.makeopts
+	menuselect/menuselect --enable streamplayer menuselect.makeopts
+	menuselect/menuselect --enable aelparse menuselect.makeopts
+	menuselect/menuselect --enable astman menuselect.makeopts
+
+	# this is connected, otherwise it would not find
+	# ast_pktccops_gate_alloc symbol
+	menuselect/menuselect --enable chan_mgcp menuselect.makeopts
+	menuselect/menuselect --enable res_pktccops menuselect.makeopts
+
+	# SSL is forcibly enabled, IAX2 & DUNDI are expected to be available
+	menuselect/menuselect --enable pbx_dundi menuselect.makeopts
+	menuselect/menuselect --enable func_aes menuselect.makeopts
+	menuselect/menuselect --enable chan_iax2 menuselect.makeopts
+
+	# SQlite3 is now the main database backend, enable related features
+	menuselect/menuselect --enable cdr_sqlite3_custom menuselect.makeopts
+	menuselect/menuselect --enable cel_sqlite3_custom menuselect.makeopts
+
+	# The others are based on USE-flag settings
+	use_select() {
+		local state=$(use "$1" && echo enable || echo disable)
+		shift # remove use from parameters
+
+		while [[ -n $1 ]]; do
+			menuselect/menuselect --${state} "$1" menuselect.makeopts
+			shift
+		done
+	}
+
+	use_select alsa			chan_alsa
+	use_select bluetooth		chan_mobile
+	use_select calendar		res_calendar res_calendar_{caldav,ews,exchange,icalendar}
+	use_select cluster		res_corosync
+	use_select curl			func_curl res_config_curl res_curl
+	use_select dahdi		app_dahdibarge app_dahdiras app_meetme chan_dahdi codec_dahdi res_timing_dahdi
+	use_select freetds		{cdr,cel}_tds
+	use_select gtalk		chan_motif
+	use_select http			res_http_post
+	use_select iconv		func_iconv
+	use_select jabber		res_xmpp
+	use_select ilbc                 codec_ilbc format_ilbc
+	use_select ldap			res_config_ldap
+	use_select lua			pbx_lua
+	use_select mysql		app_mysql cdr_mysql res_config_mysql
+	use_select odbc			cdr_adaptive_odbc res_config_odbc {cdr,cel,res,func}_odbc
+	use_select osplookup		app_osplookup
+	use_select oss			chan_oss
+	use_select postgres		{cdr,cel}_pgsql res_config_pgsql
+	use_select radius		{cdr,cel}_radius
+	use_select snmp			res_snmp
+	use_select span			res_fax_spandsp
+	use_select speex		{codec,func}_speex
+	use_select srtp			res_srtp
+	use_select syslog		cdr_syslog
+	use_select vorbis		format_ogg_vorbis
+
+	# Voicemail storage ...
+	for vmst in ${IUSE_VOICEMAIL_STORAGE/+/}; do
+		if use ${vmst}; then
+			menuselect/menuselect --enable $(echo ${vmst##*_} | tr '[:lower:]' '[:upper:]')_STORAGE menuselect.makeopts
+		fi
+	done
+
+	if use debug; then
+		for o in DONT_OPTIMIZE DEBUG_THREADS BETTER_BACKTRACES; do
+			menuselect/menuselect --enable $o menuselect.makeopts
+		done
+	fi
+}
+
+src_compile() {
+	ASTLDFLAGS="${LDFLAGS}" emake
+}
+
+src_install() {
+	mkdir -p "${D}"usr/$(get_libdir)/pkgconfig || die
+	emake DESTDIR="${D}" installdirs
+	emake DESTDIR="${D}" install
+
+	if use radius; then
+		insinto /etc/radiusclient-ng/
+		doins contrib/dictionary.digium
+	fi
+	diropts -m 0750 -o root -g asterisk
+	keepdir	/etc/asterisk
+	if use samples; then
+		emake DESTDIR="${D}" samples
+		for conffile in "${D}"etc/asterisk/*.*
+		do
+			chown root:root $conffile
+			chmod 0644 $conffile
+		done
+		einfo "Sample files have been installed"
+	else
+		einfo "Skipping installation of sample files..."
+		rm -f  "${D}"var/lib/asterisk/mohmp3/* || die
+		rm -f  "${D}"var/lib/asterisk/sounds/demo-* || die
+		rm -f  "${D}"var/lib/asterisk/agi-bin/* || die
+		rm -f  "${D}"etc/asterisk/* || die
+	fi
+	rm -rf "${D}"var/spool/asterisk/voicemail/default || die
+
+	# keep directories
+	diropts -m 0770 -o asterisk asterisk
+	keepdir /var/lib/asterisk
+	keepdir /var/spool/asterisk
+	keepdir /var/spool/asterisk/{system,tmp,meetme,monitor,dictate,voicemail}
+	diropts -m 0750 -o asterisk -g asterisk
+	keepdir /var/log/asterisk/{cdr-csv,cdr-custom}
+
+	newinitd "${FILESDIR}"/1.8.0/asterisk.initd7 asterisk
+	newconfd "${FILESDIR}"/1.8.0/asterisk.confd asterisk
+
+	# install the upgrade documentation
+	#
+	dodoc README UPGRADE* BUGS CREDITS
+
+	# install extra documentation
+	#
+	if use doc
+	then
+		dodoc doc/*.txt
+		dodoc doc/*.pdf
+	fi
+
+	# install SIP scripts; bug #300832
+	#
+	dodoc "${FILESDIR}/1.6.2/sip_calc_auth"
+	dodoc "${FILESDIR}/1.8.0/find_call_sip_trace.sh"
+	dodoc "${FILESDIR}/1.8.0/find_call_ids.sh"
+	dodoc "${FILESDIR}/1.6.2/call_data.txt"
+
+	# install logrotate snippet; bug #329281
+	#
+	insinto /etc/logrotate.d
+	newins "${FILESDIR}/1.6.2/asterisk.logrotate3" asterisk
+}
+
+pkg_postinst() {
+	#
+	# Announcements, warnings, reminders...
+	#
+	einfo "Asterisk has been installed"
+	echo
+	elog "If you want to know more about asterisk, visit these sites:"
+	elog "http://www.asteriskdocs.org/"
+	elog "http://www.voip-info.org/wiki-Asterisk"
+	echo
+	elog "http://www.automated.it/guidetoasterisk.htm"
+	echo
+	elog "Gentoo VoIP IRC Channel:"
+	elog "#gentoo-voip @ irc.freenode.net"
+	echo
+	echo
+	elog "Please read the Asterisk 11 upgrade document:"
+	elog "https://wiki.asterisk.org/wiki/display/AST/Upgrading+to+Asterisk+11"
+}
+
+pkg_config() {
+	einfo "Do you want to reset file permissions and ownerships (y/N)?"
+
+	read tmp
+	tmp="$(echo $tmp | tr '[:upper:]' '[:lower:]')"
+
+	if [[ "$tmp" = "y" ]] ||\
+		[[ "$tmp" = "yes" ]]
+	then
+		einfo "Resetting permissions to defaults..."
+
+		for x in spool run lib log; do
+			chown -R asterisk:asterisk "${ROOT}"var/${x}/asterisk
+			chmod -R u=rwX,g=rwX,o=    "${ROOT}"var/${x}/asterisk
+		done
+
+		chown -R root:asterisk  "${ROOT}"etc/asterisk
+		chmod -R u=rwX,g=rwX,o= "${ROOT}"etc/asterisk
+
+		einfo "done"
+	else
+		einfo "skipping"
+	fi
+}
diff --git a/net-misc/asterisk/asterisk-12.7.1.ebuild b/net-misc/asterisk/asterisk-12.7.2.ebuild
index 3521e0481b6d..615ea4128f0c 100644
--- a/net-misc/asterisk/asterisk-12.7.1.ebuild
+++ b/net-misc/asterisk/asterisk-12.7.2.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2014 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-misc/asterisk/asterisk-12.7.1.ebuild,v 1.1 2014/11/24 11:31:45 chainsaw Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-misc/asterisk/asterisk-12.7.2.ebuild,v 1.1 2014/12/16 10:21:06 chainsaw Exp $
 
 EAPI=5
 inherit autotools base eutils linux-info multilib user
@@ -10,7 +10,7 @@ MY_P="${PN}-${PV/_/-}"
 DESCRIPTION="Asterisk: A Modular Open Source PBX System"
 HOMEPAGE="http://www.asterisk.org/"
 SRC_URI="http://downloads.asterisk.org/pub/telephony/asterisk/releases/${MY_P}.tar.gz
-	 mirror://gentoo/gentoo-asterisk-patchset-3.13.tar.bz2"
+	 mirror://gentoo/gentoo-asterisk-patchset-3.14.tar.bz2"
 LICENSE="GPL-2"
 SLOT="0"
 KEYWORDS="~amd64 ~x86"
@@ -171,7 +171,7 @@ src_configure() {
 	use_select calendar		res_calendar res_calendar_{caldav,ews,exchange,icalendar}
 	use_select cluster		res_corosync
 	use_select curl			func_curl res_config_curl res_curl
-	use_select dahdi		app_dahdibarge app_dahdiras chan_dahdi codec_dahdi res_timing_dahdi
+	use_select dahdi		app_dahdibarge app_dahdiras app_meetme chan_dahdi codec_dahdi res_timing_dahdi
 	use_select freetds		{cdr,cel}_tds
 	use_select gtalk		chan_motif
 	use_select http			res_http_post