summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Merge pull request #588 from micmac1/18.06ASTopenwrt-18.06Jiri Slachta2020-11-233-1/+509
|\ | | | | [18.06] asterisk-13.x: fix AST-2020-001 and 002
| * asterisk-13.x: fix AST-2020-001 and 002Sebastian Kemper2020-11-073-1/+509
|/ | | | | | | | | | | | | | | Patches used: http://downloads.asterisk.org/pub/security/AST-2020-001-13.diff http://downloads.asterisk.org/pub/security/AST-2020-002-13.diff Patch AST-2020-002-16.diff was amended a small bit in include/asterisk/res_pjsip_session.h due to Asterisk 13 getting some updates in the meantime which are not in OpenWrt. Both patches refreshed in OpenWrt SDK. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* Merge pull request #499 from micmac1/18.06-fs-upmicmac12019-12-238-91/+123
|\ | | | | [18.06] freeswitch-stable: minor bump + cherry picks
| * freeswitch-stable: fix weak md in gentls_certSebastian Kemper2019-12-231-0/+51
| | | | | | | | | | | | | | | | | | | | | | | | gentls_cert generates certificates that are deemed too weak by Debian's OpenSSL (on Buster and up). This patch upgrades the message digest to SHA256 to address this. See patch for details. Sent upstream ([1]). [1] https://github.com/signalwire/freeswitch/pull/126 Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * freeswitch-stable: fix reINVITE after T38 is rejectedSebastian Kemper2019-12-231-0/+66
| | | | | | | | | | | | For comments see added patch. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * freeswitch-stable: bump to 1.8.7Sebastian Kemper2019-12-236-91/+6
|/ | | | | | Version bump. Patches refreshed. Upstreamed patches removed. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* Merge pull request #489 from micmac1/18.06-AST-2019-006_007_008Jiri Slachta2019-12-017-2/+275
|\ | | | | [18.06] asterisk-1{3,5}.x: add fixes for AST-2019-006 and 007 (and 008)
| * asterisk-15.x: add fixes for AST-2019-006 and 007Sebastian Kemper2019-11-223-1/+120
| | | | | | | | | | | | | | https://downloads.asterisk.org/pub/security/AST-2019-006.html https://downloads.asterisk.org/pub/security/AST-2019-007.html Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * asterisk-13.x: add fixes for AST-2019-006 and 007 and 008Sebastian Kemper2019-11-224-1/+155
| | | | | | | | | | | | | | | | https://downloads.asterisk.org/pub/security/AST-2019-006.html https://downloads.asterisk.org/pub/security/AST-2019-007.html https://downloads.asterisk.org/pub/security/AST-2019-008.html Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | Merge pull request #494 from micmac1/fs-vpx-cve-1806micmac12019-11-292-1/+157
|\ \ | |/ |/| (18.06) freeswitch-stable: patch CVEs in included libvpx
| * freeswitch-stable: patch CVEs in included libvpxSebastian Kemper2019-11-292-1/+157
|/ | | | | | | | | | Patch taken from Debian Stretch, fixes: CVE-2019-9232 CVE-2019-9325 CVE-2019-9433 Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* Merge pull request #457 from micmac1/AST-2019-004-18.06Jiri Slachta2019-09-205-16/+178
|\ | | | | [18.06] asterisk-15.x: add patch for AST-2019-004
| * asterisk-15.x: add patch for AST-2019-004Sebastian Kemper2019-09-055-16/+178
|/ | | | | | | | | | | Add patch for a remote crash vulnerability. Crash can occur when negotiating for T.38 with a declined stream. CVE-2019-15297 Refreshed some other patches. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* Merge pull request #436 from micmac1/18-ast13-AST-2019-003Jiri Slachta2019-07-124-2/+80
|\ | | | | (for 18.06) asterisk-1{3,5}.x: fix AST-2019-003
| * asterisk-15.x: fix AST-2019-003Sebastian Kemper2019-07-122-1/+40
| | | | | | | | | | | | https://downloads.asterisk.org/pub/security/AST-2019-003.html Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * asterisk-13.x: fix AST-2019-003Sebastian Kemper2019-07-122-1/+40
|/ | | | | | https://downloads.asterisk.org/pub/security/AST-2019-003.html Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* Merge pull request #432 from micmac1/fs-186-1806micmac12019-06-248-18/+138
|\ | | | | (18.06) freeswitch-stable: bump to 1.8.6
| * freeswitch-stable: bump to 1.8.6Sebastian Kemper2019-06-248-18/+138
|/ | | | | | Backport from master. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* Merge pull request #415 from micmac1/AST-2019-001-18.06Jiri Slachta2019-04-092-1/+35
|\ | | | | asterisk-15.x (18.06): add patch for AST-2019-001
| * asterisk-15.x: add patch for AST-2019-001Sebastian Kemper2019-03-192-1/+35
|/ | | | | | Remote crash vulnerability with SDP protocol violation. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* Merge pull request #406 from micmac1/fs-184-186micmac12019-01-068-14/+81
|\ | | | | (18.06) bump freeswitch-stable & sngrep
| * sngrep: bump to 1.4.6Sebastian Kemper2019-01-063-4/+62
| | | | | | | | | | | | Import from trunk. Run-tested on 18.06. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * freeswitch-stable: bump to 1.8.4Sebastian Kemper2019-01-065-10/+19
|/ | | | | | Import from trunk. Run-tested on 18.06. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* Merge pull request #393 from micmac1/fs-182-1806micmac12018-11-1821-820/+259
|\ | | | | freeswitch-stable: upgrade to 1.8.2 on 18.06
| * freeswitch-stable-mod-bcg729: revision bumpSebastian Kemper2018-11-171-1/+1
| | | | | | | | | | | | Revision bump to cause a rebuild. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * freeswitch-stable: import 1.8.2 from masterSebastian Kemper2018-11-1720-819/+258
|/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | This upgrades freeswitch from 1.6.20 to 1.8.2. All changes imported from master. Notable changes: Modules: - v8 removed as too difficult to maintain - new modules: fail2ban, raven and video_filter Init and hotplug: - changed init config to uci (/etc/default/freeswitch replaced with /etc/config/freeswitch) - logging can now be enabled via /etc/config/freeswitch - hotplug script is now included in the main package - the post-install script no longer disables freeswitch during upgrades Fixes: - freeswitch now sends console output properly to procd Misc: - the new release adds support for MSRP (Message Session Relay Protocol, see https://en.wikipedia.org/wiki/Message_Session_Relay_Protocol), this opens TCP ports by default, can be limited to localhost in autoload_configs/msrp.conf.xml Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* Merge pull request #392 from micmac1/openwrt-18.06-AST-2018-010Jiri Slachta2018-11-152-1/+99
|\ | | | | (18.06) asterisk-15.x: add patch for AST-2018-010
| * asterisk-15.x: add patch for AST-2018-010Sebastian Kemper2018-11-142-1/+99
|/ | | | | | | | | | | | | Patch from upstream: Summary Remote crash vulnerability DNS SRV and NAPTR lookups Nature of Advisory Denial Of Service Susceptibility Remote Unauthenticated Sessions Severity Moderate Exploits Known No Reported On October 23, 2018 Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* Merge pull request #382 from micmac1/kam-awk-18.06Jiri Slachta2018-10-132-1/+33
|\ | | | | kamailio-5.x: make jsonrpc filter portable
| * kamailio-5.x: make jsonrpc filter portableSebastian Kemper2018-10-132-1/+33
|/ | | | | | | | With OpenWrt default awk - so awk from busybox - the filter is broken, causing jsonrpc calls to fail, i.e. when running "kamctl ps". Below patch makes the filter portable. Patch was already accepted upstream. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* Merge pull request #380 from micmac1/yate-regex-18.06Jiri Slachta2018-10-091-1/+5
|\ | | | | yate for 18.06: revert to internal regex implementation
| * yate: revert to internal regex implementationSebastian Kemper2018-10-021-1/+5
|/ | | | | | | | Robert Högberg found that the regex implementation in musl isn't fully compatible with yate, leading to unexpected regexp results. Fix this by using the internal regex. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* Merge pull request #374 from micmac1/AST-2018-009-18.06Jiri Slachta2018-09-214-2/+180
|\ | | | | (18.06) Fix for AST-2018-009
| * asterisk-15.x: fix for AST-2018-009Sebastian Kemper2018-09-202-1/+90
| | | | | | | | | | | | | | | | | | Add upstream fix for AST-2018-009: Remote crash vulnerability in HTTP websocket upgrade The vulnerability affects the res_http_websocket.so module. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * asterisk-13.x: fix for AST-2018-009Sebastian Kemper2018-09-202-1/+90
| | | | | | | | | | | | | | | | | | Add upstream fix for AST-2018-009: Remote crash vulnerability in HTTP websocket upgrade The vulnerability affects the res_http_websocket.so module. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | Merge pull request #371 from micmac1/kama-cveJiri Slachta2018-09-212-1/+47
|\ \ | |/ |/| (OpenWrt 18.06) kamailio-5.x: add fix for CVE-2018-16657
| * kamailio-5.x: add fix for CVE-2018-16657Sebastian Kemper2018-09-122-1/+47
|/ | | | | | | | | | | | | | In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with an invalid Via header causes a segmentation fault and crashes Kamailio. The reason is missing input validation in the crcitt_string_array core function for calculating a CRC hash for To tags. (An additional error is present in the check_via_address core function: this function also misses input validation.) This could result in denial of service and potentially the execution of arbitrary code. Patch from upstream. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* Merge pull request #366 from micmac1/fs-perl-18.06micmac12018-08-161-2/+4
|\ | | | | freeswitch-stable: fix perl setup
| * freeswitch-stable: fix perl setupSebastian Kemper2018-08-161-2/+4
|/ | | | | | | | A recent commit in packages/lang/perl is causing a problem with the perlmod.mk include. Work around this by including perlver.mk instead and setting up PERL_CMD and PERL_SITELIB manually. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* Merge pull request #361 from micmac1/kam-cve-18.06Jiri Slachta2018-08-112-1/+29
|\ | | | | kamailio-5.x: add fix for CVE-2018-14767
| * kamailio-5.x: add fix for CVE-2018-14767Sebastian Kemper2018-08-062-1/+29
|/ | | | | | | | | | | CVE-2018-14767: "In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with a double "To" header and an empty "To" tag causes a segmentation fault and crash. The reason is missing input validation in the "build_res_buf_from_sip_req" core function. This could result in denial of service and potentially the execution of arbitrary code." Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* Merge pull request #359 from micmac1/fs-sigkill-openwrt-18.06micmac12018-08-052-2/+11
|\ | | | | freeswitch-stable: add SIGKILL to init script
| * freeswitch-stable: add SIGKILL to init scriptSebastian Kemper2018-08-052-2/+11
|/ | | | | | | | | | | | | Sometimes freeswitch doesn't exit after receiving the SIGTERM signal. This can be reproduced by sending SIGTERM to a freeswitch instance which is initializing (which can take quite some time). Instead of just giving up and exiting - leaving a hung freeswitch process on the system - this commit adds some lines to the init script that send SIGKILL to freeswitch in case the attempt to terminate it with SIGTERM fails. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* Merge pull request #353 from micmac1/fs-18.06micmac12018-07-224-35/+106
|\ | | | | freeswitch-stable: backport fixes from master to 18.06
| * freeswitch-stable: backport pcre fixSebastian Kemper2018-07-222-1/+12
| | | | | | | | | | | | | | | | | | Backport from master. This patch is strictly speaking only needed for pcre 8.42 and up. Add it anyway in case pcre maintainer decides to bump the version. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * freeswitch-stable: backport apr fixSebastian Kemper2018-07-221-0/+50
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Backport from master. The macro APR_TRY_COMPILE_NO_WARNING included in apr/apr-util is incorrect. It results in extra brackets being put into conftest.c, for example: #include "confdefs.h" [ #include <stddef.h> #include <iconv.h> ] int main(int argc, const char *const *argv) { [ iconv(0,(char **)0,(size_t *)0,(char **)0,(size_t *)0); ] return 0; } The test always fails with: error: expected identifier or '(' before '[' token The following checks are affected: - variable length arrays - type of inbuf parameter to iconv Fix from upstream (Apache). Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * freeswitch-stable: backport iconv fixesSebastian Kemper2018-07-222-34/+44
|/ | | | | | | | | | | | | | | | | Backport iconv fixes from master. - Include nls.mk and remove the uclibc iconv hack. - The above change pointed to an issue with the unimrcp sed script. It is missing brackets, which causes follow-up breakage when APR_SETVAR is called, because the latter uses commas to separate its arguments - commas that TARGET_LDFLAGS contains when nls.mk is included. So add the missing brackets. - mod_gsmopen is unable to detect whether iconv's inbuf is const. Update the patch so the Makefile can pass this information on to mod_gsmopen. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* Merge pull request #344 from micmac1/openwrt-18.06Jiri Slachta2018-06-285-2/+253
|\ | | | | (for OpenWrt 18.06): asterik: fix AST-2018-007 and AST-2018-008
| * asterisk-15.x: patch AST-2018-007 and 008Sebastian Kemper2018-06-263-1/+151
| | | | | | | | | | | | | | | | | | Patches from upstream for: AST-2018-007 AST-2018-008 Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * asterisk-13.x: patch AST-2018-008Sebastian Kemper2018-06-262-1/+102
|/ | | | | | Patch from upstream for AST-2018-008. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
generated by cgit (git 2.46.0) at 2026-10-12 00:21:56 +0000