| Commit message (Collapse) | Author | Age | Files | Lines |
| |\
| |
| | |
[22.03] rtpengine: security bump to 9.5.8.2
|
| | |
| |
| |
| |
| |
| |
| |
| |
| | |
Fixes "RTPEngine susceptible to Denial of Service via DTLS Hello packets
during call initiation", see [1].
[1] https://www.openwall.com/lists/oss-security/2023/12/15/8
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
|
| |\ \
| |/
|/| |
[22.03] asterisk: security bump to 18.20.2
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
- Resolves GHSA-98rc-4j27-74hh, GHSA-hxj9-xwr8-w8pq, GHSA-5743-x3p5-3rg7
and GHSA-8857-hfmw-vg8f
- patches refreshed
- patch 180-app_queue_time_t.patch added to fix new warnings
- 180-chan_iax2.c-Avoid-crash-with-IAX2-switch-support.patch removed as
it's included in upstream release tar ball.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
|
| | |
| |
| |
| |
| | |
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 6643627656e1b66654bb0ab1a744b50dbec9d2b6)
|
| |/
|
|
|
| |
Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>
(cherry picked from commit 2b3ae318e46bd92b6bbf751f2340d37be87d3065)
|
| |\
| |
| | |
[22.03] freeswitch: bump to 1.10.11
|
| | |
| |
| |
| |
| |
| |
| |
| |
| | |
See [1].
[1] https://github.com/signalwire/freeswitch/security/advisories/GHSA-39gv-hq72-j6m6
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 390b0aabe6bfaacf5f397af831bebffe7c2e214d)
|
| |/
|
|
|
| |
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 2ec7aaca9c32ad4924d718eb303c20e0eda49f58)
|
| |\
| |
| | |
[22.03] freeswitch: add patches for CVEs in bundled libvpx
|
| |/
|
|
|
|
|
|
|
|
|
|
| |
CVE-2023-5217
CVE-2023-44488
Patches are for bundled libvpx, see [1].
[1] https://github.com/signalwire/freeswitch/issues/2258
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 26e09b2914af221e477a65f1ec92db48b9a9979a)
|
| |\
| |
| | |
[22.03] freeswitch: bump to 1.10.10
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
- bump to 1.10.10
- remove TARGET_CFLAGS workarounds
- remove BROKEN from modules av & python3
- remove 500-libshout-deprecated.patch
- refresh other patches
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 999a8a9ff1df8af205dcb0d43603f316334b6592)
|
| | |
| |
| |
| |
| |
| |
| |
| | |
mod-python3 is not compatible with Python 3.11 currently, mark it
BROKEN.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 2d4c2d2361314fe622c114a03dc8caa0b802505f)
|
| | |
| |
| |
| |
| | |
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 8bd8f5e3e4a328fd407230f4b9e77487cf6f2aad)
|
| | |
| |
| |
| |
| |
| |
| | |
ZRTP support removed as it was dropped upstream.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 269b6110274408e837bdd0972167981d2af1905c)
|
| | |
| |
| |
| |
| |
| |
| |
| | |
"start_service()" is a function, hence "return" should be used instead
of "exit".
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 9604a203d5b749e5ef17f5dcc6cfebbb4afeb7f6)
|
| | |
| |
| |
| |
| |
| |
| |
| | |
The recent libshout update causes compile failures due to deprecation.
This works around it. Can be removed once issue is fixed upstream.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 145d0b3a308457b20a8c699673a015a688433d72)
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
- minor version bump
- mod-dingaling, mod-unimrcp and apr-util got removed from source tar
ball, prompting some cleanup
- patches refreshed
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 66cddc04595c1af750a0ea9268a0dec60bb745ea)
|
| | |
| |
| |
| |
| |
| |
| |
| |
| | |
An issue report already exists upstream [1].
[1] https://github.com/signalwire/freeswitch/issues/1670
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 62929c24b639674ab6194234398e49fa3ed8378e)
|
| | |
| |
| |
| | |
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
|
| | |
| |
| |
| | |
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
|
| | |
| |
| |
| |
| | |
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit e52d417cce98fc3ef128971542e8cfa60def93ec)
|
| | |
| |
| |
| |
| | |
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit b1fa575a12d43c63d1c1a70f59e64fa1c8f172ed)
|
| | |
| |
| |
| |
| | |
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 4cce5ebdd0c3447c68052e44a985e3030bfd1315)
|
| | |
| |
| |
| |
| | |
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 9cfc0b415a6d15c6645f0dbe016b843bcebcc696)
|
| | |
| |
| |
| |
| | |
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 2aeae693248bc9cb05be517ef2b92534f03bf2a0)
|
| | |
| |
| |
| |
| | |
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit b563e61455425ddd3f1112dbd3d65067fad17235)
|
| | |
| |
| |
| |
| |
| |
| | |
Same commit is used by freeswitch 1.10.10 for Windows.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit c18640bc0f46374b20e9a92981abd2fdc295c1dc)
|
| |/
|
|
|
| |
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 5df2a49696b1b520d7af9692d2c8754f6c4f9fe1)
|
| |\
| |
| | |
[22.03] asterisk: add upstream patch against iax2 crash
|
| |/
|
|
|
|
|
|
|
| |
Reported by Sergio in issue #821. This adds upstream patch for the
crash. See upstream issue [1] for details.
[1] https://github.com/asterisk/asterisk/issues/180
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
|
| |\
| |
| | |
[22.03] pjproject: bump to 2.13.1
|
| | |
| |
| |
| |
| |
| | |
Not required anymore with pjproject 2.13.1.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
1. add "/refs/tags" to PKG_SOURCE_URL, otherwise the downloaded file is
broken now
2. bump minor version, includes security related fixes, see [1], [2] and
[3]
[1] https://github.com/pjsip/pjproject/security/advisories/GHSA-9pfh-r8x4-w26w
[2] https://github.com/pjsip/pjproject/security/advisories/GHSA-cxwq-5g9x-x7fr
[3] https://github.com/pjsip/pjproject/security/advisories/GHSA-q9cp-8wcq-7pfr
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 73526e5661a3c357edeeeac407a7560b9d485a54)
|
| |/
|
|
|
|
|
|
|
|
|
|
|
| |
- bump to 2.13
- new option "--disable-libsrtp" now available so we can get rid of
dependency on libsrtp2 (asterisk's SRTP support doesn't depend on pjproject)
- new option "--disable-upnp"
- 0007-execinfo.patch not required anymore, pjproject now checks for
__GLIBC__
- sync patches with asterisk 20.3.0
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 2e9e9b838642a1129d130912d3f70997ae5a1fd7)
|
| |\
| |
| | |
[22.03] freeswitch: backport commit "allow building with OpenSSL 3.0"
|
| |/
|
|
|
|
|
|
| |
Add -Wno-error=deprecated-declarations to CFLAGS to allow usage of
deprecated API.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 09ad78b6cce247f4e610be006d89dfe70003aa58)
|
| |\
| |
| | |
[22.03] rtpengine: update libwebsockets dependency
|
| |/
|
|
|
|
|
|
| |
The rtpengine daemon requires lws_get_ssl(). This function is not
available in libwebsockets-mbedtls. This commit updates the dependency
to libwebsockets-openssl.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
|
| |\
| |
| | |
[22.03] asterisk: bump to 18.15.1
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Fixes
AST-2022-007
AST-2022-008
AST-2022-009
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Backports two security fixes (c4d3498 and 450baca) from pjproject 2.13.
Source: asterisk 20.0.1.
Also drop AUTORELEASE as OpenWrt project wants to get rid of it.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 472f1ac7ac867b8fbc2841c56e7d61935dba9d52)
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
- add new modules
- res-geolocation depends on asterisk being built with libxlt support,
but to make libxslt a general dependency is probably not a good idea
for small devices, so this adds a config option
ASTERISK_LIBXSLT_SUPPORT that is off by default except on x86_64
builds
- correct some module titles by removing the extraneous "support" string
- refresh patches
- 170-time-add-support-for-time64-libcs.patch,
180_build-fix-bininstall-launchd-issue-on-cross-platfrom.patch and
190-logger-workaround-woefully-small-BUFSIZ-in-MUSL.patch removed as
included in upstream release
- added 170-menuselect-force-use-of-xml2-config.patch as upstream
switched to use pkg-config for libxml2 detection, which would be fine,
except OpenWrt's host libxml2 is static and Asterisk can't handle that
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit aa3bc352e787768fbf5f1f806a9b2b06a74b19fc)
|
| |/
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- add "--disable-android-mediacodec" to configure
- add EXCLUDE_APP=1 to "make" calls so some apps aren't built (speeds up
the build a bit)
- drop "sed" call as no longer needed
- drop uclibc related patches
(0002-uclibc-linker-unrecognized-options.patch and
0003-non-gnu-pthreads.patch)
- update 0004-config_site.patch to sync up with Asterisk 18.14.0
- drop 0005-remove-hardcoded-lstdc++.patch as uclibcxx was removed from
OpenWrt
- update 0006-fix-pkg_config-file.patch as there were some changes in
this area upstream
- add 0007-execinfo.patch to prevent errors due to missing <execinfo.h>
- sync patches with 18.14.0
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit a57228588602e5217b95f1e9ded0b76402cb6c72)
|
| |\
| |
| | |
[openwrt-22.03] sofia-sip: bump to 1.13.8
|
| |/
|
|
|
|
|
|
|
|
|
|
|
| |
Some security issues were fixed. Upstream labelled them as follows:
GHSA-79jq-hh82-cv9g: Fix Out-of-bound read in sip_method_d
GHSA-g3x6-p824-x6hm: Fix Out-of-bound read in url_canonize2 and
url_canonize3
GHSA-8w5j-6g2j-pxcp: Fix Heap-buffer-overflow in parse_descs and
parse_message
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 1efc4f3f98ed46b8bef2e29710d04131cda8ad44)
|
| |\
| |
| | |
[22.03] asterisk: add --without-libxslt to configure
|
| |/
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Since upstream commit b40c4d59b1dd803cad79060fb5b5a48d249ba578
"--disable-xmldoc" does no longer prevent the linking to libxslt, if
available. If that's the case one is greeted with the following error:
Package asterisk is missing dependencies for the following libraries:
libxslt.so.1
This commit explicitly disables the use of libxslt, to avoid the
dependency.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 64a1d2faef62352327c4aaeec803ce71ff5d2c40)
|
| |\
| |
| | |
[22.03] asterisk: bump to 18.11.2
|