summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Merge pull request #852 from micmac1/rtpe-10.5.6.3-23.05openwrt-23.05micmac12024-01-063-35/+5
|\ | | | | [23.05] rtpengine: security bump to 10.5.6.2
| * rtpengine: bump to 10.5.6.2Sebastian Kemper2024-01-063-35/+5
|/ | | | | | | | | | | | Fixes "RTPEngine susceptible to Denial of Service via DTLS Hello packets during call initiation", see [1]. Removes 06-fix-compilation-with-iptables-1-8-8.patch as not needed anymore. [1] https://www.openwall.com/lists/oss-security/2023/12/15/8 Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* Merge pull request #850 from micmac1/23.05-ast-20.5.2Jiri Slachta2024-01-059-65/+60
|\ | | | | [23.05] asterisk + pjproject: bump for security
| * asterisk: bump to 20.5.2Sebastian Kemper2024-01-056-63/+22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Resolves GHSA-98rc-4j27-74hh, GHSA-hxj9-xwr8-w8pq, GHSA-5743-x3p5-3rg7 and GHSA-8857-hfmw-vg8f - patches refreshed - patch 180-app_queue_time_t.patch added to fix new warnings, sent upstream (see [1]) - 180-res_crypto.c-Avoid-using-the-non-portable-ALLPERMS-m.patch and 190-chan_iax2.c-Avoid-crash-with-IAX2-switch-support.patch removed as they're included in upstream release tar ball. [1] https://github.com/asterisk/asterisk/pull/516 Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net> (cherry picked from commit 4e4b2817944ec2c03a78b6ab2e7823a86f713d59)
| * asterisk: Add PKG_CPE_IDAndreas Gnau2024-01-051-0/+1
| | | | | | | | | | Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu> (cherry picked from commit 387ae7be1ea4dfdf82e25994a709e83febd5ada8)
| * pjproject: sync patches with asterisk 20.5.2Sebastian Kemper2024-01-053-2/+36
| | | | | | | | | | Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net> (cherry picked from commit 6643627656e1b66654bb0ab1a744b50dbec9d2b6)
| * pjproject: Add PKG_CPE_IDAndreas Gnau2024-01-051-0/+1
|/ | | | | Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu> (cherry picked from commit 2b3ae318e46bd92b6bbf751f2340d37be87d3065)
* Merge pull request #845 from micmac1/fs-1.10.11-23.05micmac12023-12-246-118/+7
|\ | | | | [23.05] freeswitch: bump to 1.10.11
| * freeswitch: bump to 1.10.11Sebastian Kemper2023-12-245-116/+5
| | | | | | | | | | | | | | | | | | See [1]. [1] https://github.com/signalwire/freeswitch/security/advisories/GHSA-39gv-hq72-j6m6 Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net> (cherry picked from commit 390b0aabe6bfaacf5f397af831bebffe7c2e214d)
| * sofia-sip: bump to 1.13.17Sebastian Kemper2023-12-241-2/+2
|/ | | | | Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net> (cherry picked from commit 2ec7aaca9c32ad4924d718eb303c20e0eda49f58)
* Merge pull request #832 from micmac1/fs-vpx-CVE-2023-5217-CVE-2023-44488-23micmac12023-10-073-1/+112
|\ | | | | [23.05] freeswitch: add patches for CVEs in bundled libvpx
| * freeswitch: add patches for CVEs in bundled libvpxSebastian Kemper2023-10-063-1/+112
|/ | | | | | | | | | | | CVE-2023-5217 CVE-2023-44488 Patches are for bundled libvpx, see [1]. [1] https://github.com/signalwire/freeswitch/issues/2258 Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net> (cherry picked from commit 26e09b2914af221e477a65f1ec92db48b9a9979a)
* Merge pull request #827 from micmac1/fs-1.10.10-23.05micmac12023-08-2516-122/+65
|\ | | | | [23.05] freeswitch: bump to 1.10.10
| * freeswitch: bump to 1.10.10Sebastian Kemper2023-08-229-65/+18
| | | | | | | | | | | | | | | | | | | | | | - bump to 1.10.10 - remove TARGET_CFLAGS workarounds - remove BROKEN from modules av & python3 - remove 500-libshout-deprecated.patch - refresh other patches Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net> (cherry picked from commit 999a8a9ff1df8af205dcb0d43603f316334b6592)
| * signalwire-client-c: bump to 2.0.0Sebastian Kemper2023-08-222-29/+19
| | | | | | | | | | Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net> (cherry picked from commit bd1a8deebe7060a80461047637b4c04ed3e096bf)
| * libks: bump to 2.0.2Sebastian Kemper2023-08-223-23/+23
| | | | | | | | | | Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net> (cherry picked from commit 04f03b98a52fc52b12f7ccf2f706667bcadee927)
| * sofia-sip: bump to 1.13.16Sebastian Kemper2023-08-221-2/+2
| | | | | | | | | | Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net> (cherry picked from commit 4cce5ebdd0c3447c68052e44a985e3030bfd1315)
| * spandsp3: bump to commit from June 16thSebastian Kemper2023-08-221-3/+3
|/ | | | | | | Same commit is used by freeswitch 1.10.10 for Windows. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net> (cherry picked from commit c18640bc0f46374b20e9a92981abd2fdc295c1dc)
* Merge pull request #823 from micmac1/23.05-ast-iax2-crash2micmac12023-07-232-1/+26
|\ | | | | [23.05] asterisk: add upstream patch against iax2 crash
| * asterisk: add upstream patch against iax2 crashSebastian Kemper2023-07-232-1/+26
|/ | | | | | | | | | Reported by Sergio in issue #821. This adds upstream patch for the crash. See upstream issue [1] for details. [1] https://github.com/asterisk/asterisk/issues/180 Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net> (cherry picked from commit 3d063acb25d745479df94d7731b90773d52b8e8a)
* Merge pull request #818 from micmac1/pj2131-23.05micmac12023-07-0912-822/+90
|\ | | | | [23.05] pjproject: bump to 2.13.1, asterisk: bump to 20.3.0
| * pjproject: bump to 2.13.1Sebastian Kemper2023-07-091-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | 1. add "/refs/tags" to PKG_SOURCE_URL, otherwise the downloaded file is broken now 2. bump minor version, includes security related fixes, see [1], [2] and [3] [1] https://github.com/pjsip/pjproject/security/advisories/GHSA-9pfh-r8x4-w26w [2] https://github.com/pjsip/pjproject/security/advisories/GHSA-cxwq-5g9x-x7fr [3] https://github.com/pjsip/pjproject/security/advisories/GHSA-q9cp-8wcq-7pfr Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net> (cherry picked from commit 73526e5661a3c357edeeeac407a7560b9d485a54)
| * asterisk: bump to 20.3.0Sebastian Kemper2023-07-095-10/+54
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - bump to 20.3.0 - new modules: app-broadcast, app-if, app-signal, func-export, res-pjsip-aoc and res-pjsip-rfc3329 - remove "--without-vpb", not available anymore - add configuration file for res-http-media-cache - drop libsrtp2 from res-pjproject dependencies, see changes in pjproject package - refresh patches - add upstream patch 180-res_crypto.c-Avoid-using-the-non-portable-ALLPERMS-m.patch to fix build [1] [1] https://github.com/asterisk/asterisk/issues/149 Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net> (cherry picked from commit 945b7ea1f0ba297c51753cf625a67923a231da10)
| * pjproject: bump to 2.13Sebastian Kemper2023-07-097-811/+35
|/ | | | | | | | | | | | | - bump to 2.13 - new option "--disable-libsrtp" now available so we can get rid of dependency on libsrtp2 (asterisk's SRTP support doesn't depend on pjproject) - new option "--disable-upnp" - 0007-execinfo.patch not required anymore, pjproject now checks for __GLIBC__ - sync patches with asterisk 20.3.0 Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net> (cherry picked from commit 2e9e9b838642a1129d130912d3f70997ae5a1fd7)
* Merge pull request #814 from micmac1/kam-py-3.11-patches-23.05micmac12023-05-304-1/+122
|\ | | | | [23.05] kamailio: add patches for app_python3
| * kamailio: add patches for app_python3Sebastian Kemper2023-05-304-1/+122
| | | | | | | | | | | | | | | | Python was updated to 3.11 and app_python3 doesn't compile anymore. This commit adds three upstream patches to resolve this. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net> (cherry picked from commit 4483312785de91630765abaa3c8ef7d223f6dfee)
* | Merge pull request #813 from micmac1/fs-py-3.11-broken-23.05bmicmac12023-05-301-1/+1
|\ \ | |/ |/| [23.05] freeswitch: mark mod-python3 BROKEN
| * freeswitch: mark mod-python3 BROKENSebastian Kemper2023-05-301-1/+1
|/ | | | | | | | mod-python3 is not compatible with Python 3.11 currently, mark it BROKEN. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net> (cherry picked from commit 2d4c2d2361314fe622c114a03dc8caa0b802505f)
* Merge pull request #810 from micmac1/fs-musl-1.2.4micmac12023-05-193-4/+4
|\ | | | | freeswitch: fix compile against musl-1.2.4
| * freeswitch: fix compile against musl-1.2.4Sebastian Kemper2023-05-193-4/+4
|/ | | | Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* dahdi-linux: add multiple patch fixing compilation warningChristian Marangi2023-05-126-0/+320
| | | | | | Add multiple patch fixing compilation warning and obvius code bug. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* rtpengine: add patch fixing compilation warning for kernel moduleChristian Marangi2023-05-121-0/+36
| | | | | | | | | | | | Add patch fixing compilation warning for kernel module. Always dynamically allocate buffer for proc_control_read_write. Fix compilation warning: /builder/shared-workdir/build/build_dir/target-arm_cortex-a8+vfpv3_musl_eabi/rtpengine-no-transcode/rtpengine-mr10.5.2.6/kernel-module/xt_RTPENGINE.c: In function 'proc_control_read_write': /builder/shared-workdir/build/build_dir/target-arm_cortex-a8+vfpv3_musl_eabi/rtpengine-no-transcode/rtpengine-mr10.5.2.6/kernel-module/xt_RTPENGINE.c:3573:1: error: the frame size of 1272 bytes is larger than 1024 bytes [-Werror=frame-larger-than=] 3573 | } | ^ Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* Merge pull request #807 from micmac1/ci-upmicmac12023-03-294-10/+101
|\ | | | | CI: sync up with changes in packages repo
| * CI: sync up with changes in packages repoSebastian Kemper2023-03-244-10/+101
|/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Catch up with the changes in the packages repository. All changes are manual cherry picks from the packages repo and listed below. ci: update github actions to v3 Update checkout and upload-artifact action to v3 to mute nodejs deprecation warning. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com> (cherry picked from commit 52570d4242822e3db678f5484c2ca3e72f485d52) CI: deprecate $(AUTORELEASE) via comments Autorelease causes some issues like heavy bandwidth usage as well as non-deterministic package releases whenever someone doesn't use the full git log. With this comment all modified packages are checked and if they use the autorelease feature, kindly comment to the user to change that. Signed-off-by: Paul Spooren <paul.spooren@rhebo.com> [ move check to separate workflow to handle ci limitation ] Signed-off-by: Christian Marangi <ansuelsmth@gmail.com> (cherry picked from commit 61d59fd54254b97218aa4e861b1f933d5c5e0bc4) ci: only comment AUTORELEASE deprecation if exists If it doesn't exists, don't confuse the contributors. Signed-off-by: Paul Spooren <mail@aparcar.org> (cherry picked from commit 75ff4ba358aa0357f0af62cb980568bdc8d390a1) github-ci: error on any shell errors Enable `errexit` and `nounset` [POSIX shell options][1] in `.github/workflows/entrypoint.sh` so that the script fails if any command within the script fails. [1]: https://pubs.opengroup.org/onlinepubs/9699919799//utilities/V3_chap02.html#set Reported-by: Marius Dinu <m95d+git@psihoexpert.ro> Fixes: https://github.com/openwrt/packages/issues/19953 Signed-off-by: Alois Klink <alois@aloisklink.com> (cherry picked from commit 18d3c529fa4ab8dafcf6c147cf3cb55792d8ca10) CI: update build architectures Removed arc_archs - archs38 was marked as source-only [1]. Renamed powerpc_8540 to powerpc_8548 [2]. 1. https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=c01641bcc7236d2e2de3ea65444b0cf2898df351 2. https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=2cad88b99fdae9766de84e6c1cb56f111eb53748 Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org> (cherry picked from commit 29041e8f8eb42dcd8eee03602348b39dbf9d0c70) Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* Merge pull request #806 from dhewg/buildflagsmicmac12023-03-241-1/+1
|\ | | | | kamailio: refactor to use PKG_BUILD_FLAGS:=no-mips16
| * kamailio: refactor to use PKG_BUILD_FLAGS:=no-mips16Andre Heider2023-03-231-1/+1
| | | | | | | | | | | | | | See commit 5c545bdb "treewide: replace PKG_USE_MIPS16:=0 with PKG_BUILD_FLAGS:=no-mips16" on the main repository. Signed-off-by: Andre Heider <a.heider@gmail.com>
* | Merge pull request #802 from cotequeiroz/baresipmicmac12023-03-242-1/+24
|\ \ | | | | | | baresip: fix parallel build
| * | baresip: fix parallel buildEneas U de Queiroz2023-02-102-1/+24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Include an upstream patch to fix random parallel build failures, such as: CC [M] build-arm/modules/ctrl_dbus/ctrl_dbus.o modules/ctrl_dbus/ctrl_dbus.c:69:10: fatal error: baresipbus.h: No such file or directory 69 | #include "baresipbus.h" | ^~~~~~~~~~~~~~ Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
* | | Merge pull request #805 from micmac1/sccp-autoconf-2.70micmac12023-03-244-8/+20
|\ \ \ | |_|/ |/| | asterisk-chan-sccp: autoconf fixes
| * | asterisk-chan-sccp: autoconf fixesSebastian Kemper2023-03-184-8/+20
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Since OpenWrt updated autoconf to 2.71 configure fails, because "$ac_dir" is now empty when configure attempts to run "./tools/versioncheck". With previous autoconf "$ac_dir" contained "autoconf" at this point in the script. As a workaround "$ac_dir" is replaced with "$ac_aux_dir", which incidentally contains "autoconf". Also a build dependency is added for gettext-full, as it provides iconv.m4. Previously this was provided by libiconv, but not anymore. Without iconv.m4 autoreconf fails. Some patches were refreshed to allow CI to pass. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | Merge pull request #804 from micmac1/fs-1109micmac12023-03-0314-44/+24
|\ \ | | | | | | freeswitch: bump to 1.10.9
| * | freeswitch: bump to 1.10.9Sebastian Kemper2023-03-0210-34/+14
| | | | | | | | | | | | | | | | | | ZRTP support removed as it was dropped upstream. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * | spandsp3: bump to latest commitSebastian Kemper2023-03-021-3/+3
| | | | | | | | | | | | Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * | sofia-sip: bump to 1.13.14Sebastian Kemper2023-03-021-2/+2
| | | | | | | | | | | | Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * | libks: bump to 1.8.2Sebastian Kemper2023-03-022-5/+5
|/ / | | | | | | Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | Merge pull request #803 from cotequeiroz/OpenSSL3micmac12023-02-126-37/+295
|\ \ | |/ |/| freeswitch,coturn: Prepare for OpenSSL 3.0 upgrade
| * coturn: update to 4.6.1Eneas U de Queiroz2023-02-105-37/+292
| | | | | | | | | | | | Added a patch from Gentoo that brings compatiblity with OpenSSL 3.0. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
| * freeswitch: allow building with OpenSSL 3.0Eneas U de Queiroz2023-02-101-0/+3
|/ | | | | | | Add -Wno-error=deprecated-declarations to CFLAGS to allow usage of deprecated API. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
* Merge pull request #797 from micmac1/rtpe-lws-opensslJiri Slachta2023-01-091-2/+2
|\ | | | | rtpengine: update libwebsockets dependency
| * rtpengine: update libwebsockets dependencySebastian Kemper2023-01-091-2/+2
|/ | | | | | | | The rtpengine daemon requires lws_get_ssl(). This function is not available in libwebsockets-mbedtls. This commit updates the dependency to libwebsockets-openssl. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>