| Commit message (Collapse) | Author | Age | Files | Lines |
| |\
| |
| | |
[23.05] rtpengine: security bump to 10.5.6.2
|
| |/
|
|
|
|
|
|
|
|
|
|
| |
Fixes "RTPEngine susceptible to Denial of Service via DTLS Hello packets
during call initiation", see [1].
Removes 06-fix-compilation-with-iptables-1-8-8.patch as not needed
anymore.
[1] https://www.openwall.com/lists/oss-security/2023/12/15/8
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
|
| |\
| |
| | |
[23.05] asterisk + pjproject: bump for security
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
- Resolves GHSA-98rc-4j27-74hh, GHSA-hxj9-xwr8-w8pq, GHSA-5743-x3p5-3rg7
and GHSA-8857-hfmw-vg8f
- patches refreshed
- patch 180-app_queue_time_t.patch added to fix new warnings, sent
upstream (see [1])
- 180-res_crypto.c-Avoid-using-the-non-portable-ALLPERMS-m.patch and
190-chan_iax2.c-Avoid-crash-with-IAX2-switch-support.patch removed as
they're included in upstream release tar ball.
[1] https://github.com/asterisk/asterisk/pull/516
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 4e4b2817944ec2c03a78b6ab2e7823a86f713d59)
|
| | |
| |
| |
| |
| | |
Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>
(cherry picked from commit 387ae7be1ea4dfdf82e25994a709e83febd5ada8)
|
| | |
| |
| |
| |
| | |
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 6643627656e1b66654bb0ab1a744b50dbec9d2b6)
|
| |/
|
|
|
| |
Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>
(cherry picked from commit 2b3ae318e46bd92b6bbf751f2340d37be87d3065)
|
| |\
| |
| | |
[23.05] freeswitch: bump to 1.10.11
|
| | |
| |
| |
| |
| |
| |
| |
| |
| | |
See [1].
[1] https://github.com/signalwire/freeswitch/security/advisories/GHSA-39gv-hq72-j6m6
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 390b0aabe6bfaacf5f397af831bebffe7c2e214d)
|
| |/
|
|
|
| |
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 2ec7aaca9c32ad4924d718eb303c20e0eda49f58)
|
| |\
| |
| | |
[23.05] freeswitch: add patches for CVEs in bundled libvpx
|
| |/
|
|
|
|
|
|
|
|
|
|
| |
CVE-2023-5217
CVE-2023-44488
Patches are for bundled libvpx, see [1].
[1] https://github.com/signalwire/freeswitch/issues/2258
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 26e09b2914af221e477a65f1ec92db48b9a9979a)
|
| |\
| |
| | |
[23.05] freeswitch: bump to 1.10.10
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
- bump to 1.10.10
- remove TARGET_CFLAGS workarounds
- remove BROKEN from modules av & python3
- remove 500-libshout-deprecated.patch
- refresh other patches
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 999a8a9ff1df8af205dcb0d43603f316334b6592)
|
| | |
| |
| |
| |
| | |
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit bd1a8deebe7060a80461047637b4c04ed3e096bf)
|
| | |
| |
| |
| |
| | |
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 04f03b98a52fc52b12f7ccf2f706667bcadee927)
|
| | |
| |
| |
| |
| | |
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 4cce5ebdd0c3447c68052e44a985e3030bfd1315)
|
| |/
|
|
|
|
|
| |
Same commit is used by freeswitch 1.10.10 for Windows.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit c18640bc0f46374b20e9a92981abd2fdc295c1dc)
|
| |\
| |
| | |
[23.05] asterisk: add upstream patch against iax2 crash
|
| |/
|
|
|
|
|
|
|
|
| |
Reported by Sergio in issue #821. This adds upstream patch for the
crash. See upstream issue [1] for details.
[1] https://github.com/asterisk/asterisk/issues/180
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 3d063acb25d745479df94d7731b90773d52b8e8a)
|
| |\
| |
| | |
[23.05] pjproject: bump to 2.13.1, asterisk: bump to 20.3.0
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
1. add "/refs/tags" to PKG_SOURCE_URL, otherwise the downloaded file is
broken now
2. bump minor version, includes security related fixes, see [1], [2] and
[3]
[1] https://github.com/pjsip/pjproject/security/advisories/GHSA-9pfh-r8x4-w26w
[2] https://github.com/pjsip/pjproject/security/advisories/GHSA-cxwq-5g9x-x7fr
[3] https://github.com/pjsip/pjproject/security/advisories/GHSA-q9cp-8wcq-7pfr
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 73526e5661a3c357edeeeac407a7560b9d485a54)
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
- bump to 20.3.0
- new modules: app-broadcast, app-if, app-signal, func-export,
res-pjsip-aoc and res-pjsip-rfc3329
- remove "--without-vpb", not available anymore
- add configuration file for res-http-media-cache
- drop libsrtp2 from res-pjproject dependencies, see changes in
pjproject package
- refresh patches
- add upstream patch
180-res_crypto.c-Avoid-using-the-non-portable-ALLPERMS-m.patch to fix
build [1]
[1] https://github.com/asterisk/asterisk/issues/149
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 945b7ea1f0ba297c51753cf625a67923a231da10)
|
| |/
|
|
|
|
|
|
|
|
|
|
|
| |
- bump to 2.13
- new option "--disable-libsrtp" now available so we can get rid of
dependency on libsrtp2 (asterisk's SRTP support doesn't depend on pjproject)
- new option "--disable-upnp"
- 0007-execinfo.patch not required anymore, pjproject now checks for
__GLIBC__
- sync patches with asterisk 20.3.0
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 2e9e9b838642a1129d130912d3f70997ae5a1fd7)
|
| |\
| |
| | |
[23.05] kamailio: add patches for app_python3
|
| | |
| |
| |
| |
| |
| |
| |
| | |
Python was updated to 3.11 and app_python3 doesn't compile anymore.
This commit adds three upstream patches to resolve this.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 4483312785de91630765abaa3c8ef7d223f6dfee)
|
| |\ \
| |/
|/| |
[23.05] freeswitch: mark mod-python3 BROKEN
|
| |/
|
|
|
|
|
|
| |
mod-python3 is not compatible with Python 3.11 currently, mark it
BROKEN.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 2d4c2d2361314fe622c114a03dc8caa0b802505f)
|
| |\
| |
| | |
freeswitch: fix compile against musl-1.2.4
|
| |/
|
|
| |
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
|
| |
|
|
|
|
| |
Add multiple patch fixing compilation warning and obvius code bug.
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
| |
Add patch fixing compilation warning for kernel module.
Always dynamically allocate buffer for proc_control_read_write.
Fix compilation warning:
/builder/shared-workdir/build/build_dir/target-arm_cortex-a8+vfpv3_musl_eabi/rtpengine-no-transcode/rtpengine-mr10.5.2.6/kernel-module/xt_RTPENGINE.c: In function 'proc_control_read_write':
/builder/shared-workdir/build/build_dir/target-arm_cortex-a8+vfpv3_musl_eabi/rtpengine-no-transcode/rtpengine-mr10.5.2.6/kernel-module/xt_RTPENGINE.c:3573:1: error: the frame size of 1272 bytes is larger than 1024 bytes [-Werror=frame-larger-than=]
3573 | }
| ^
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
|
| |\
| |
| | |
CI: sync up with changes in packages repo
|
| |/
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Catch up with the changes in the packages repository. All changes are
manual cherry picks from the packages repo and listed below.
ci: update github actions to v3
Update checkout and upload-artifact action to v3 to mute nodejs
deprecation warning.
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 52570d4242822e3db678f5484c2ca3e72f485d52)
CI: deprecate $(AUTORELEASE) via comments
Autorelease causes some issues like heavy bandwidth usage as well as
non-deterministic package releases whenever someone doesn't use the full
git log.
With this comment all modified packages are checked and if they use
the autorelease feature, kindly comment to the user to change that.
Signed-off-by: Paul Spooren <paul.spooren@rhebo.com>
[ move check to separate workflow to handle ci limitation ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 61d59fd54254b97218aa4e861b1f933d5c5e0bc4)
ci: only comment AUTORELEASE deprecation if exists
If it doesn't exists, don't confuse the contributors.
Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 75ff4ba358aa0357f0af62cb980568bdc8d390a1)
github-ci: error on any shell errors
Enable `errexit` and `nounset` [POSIX shell options][1]
in `.github/workflows/entrypoint.sh` so that the script fails
if any command within the script fails.
[1]: https://pubs.opengroup.org/onlinepubs/9699919799//utilities/V3_chap02.html#set
Reported-by: Marius Dinu <m95d+git@psihoexpert.ro>
Fixes: https://github.com/openwrt/packages/issues/19953
Signed-off-by: Alois Klink <alois@aloisklink.com>
(cherry picked from commit 18d3c529fa4ab8dafcf6c147cf3cb55792d8ca10)
CI: update build architectures
Removed arc_archs - archs38 was marked as source-only [1].
Renamed powerpc_8540 to powerpc_8548 [2].
1. https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=c01641bcc7236d2e2de3ea65444b0cf2898df351
2. https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=2cad88b99fdae9766de84e6c1cb56f111eb53748
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 29041e8f8eb42dcd8eee03602348b39dbf9d0c70)
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
|
| |\
| |
| | |
kamailio: refactor to use PKG_BUILD_FLAGS:=no-mips16
|
| | |
| |
| |
| |
| |
| |
| | |
See commit 5c545bdb "treewide: replace PKG_USE_MIPS16:=0 with
PKG_BUILD_FLAGS:=no-mips16" on the main repository.
Signed-off-by: Andre Heider <a.heider@gmail.com>
|
| |\ \
| | |
| | | |
baresip: fix parallel build
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Include an upstream patch to fix random parallel build failures, such
as:
CC [M] build-arm/modules/ctrl_dbus/ctrl_dbus.o
modules/ctrl_dbus/ctrl_dbus.c:69:10: fatal error: baresipbus.h: No such
file or directory
69 | #include "baresipbus.h"
| ^~~~~~~~~~~~~~
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
|
| |\ \ \
| |_|/
|/| | |
asterisk-chan-sccp: autoconf fixes
|
| |/ /
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Since OpenWrt updated autoconf to 2.71 configure fails, because
"$ac_dir" is now empty when configure attempts to run
"./tools/versioncheck". With previous autoconf "$ac_dir" contained
"autoconf" at this point in the script.
As a workaround "$ac_dir" is replaced with "$ac_aux_dir", which
incidentally contains "autoconf".
Also a build dependency is added for gettext-full, as it provides
iconv.m4. Previously this was provided by libiconv, but not anymore.
Without iconv.m4 autoreconf fails.
Some patches were refreshed to allow CI to pass.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
|
| |\ \
| | |
| | | |
freeswitch: bump to 1.10.9
|
| | | |
| | |
| | |
| | |
| | |
| | | |
ZRTP support removed as it was dropped upstream.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
|
| | | |
| | |
| | |
| | | |
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
|
| | | |
| | |
| | |
| | | |
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
|
| |/ /
| |
| |
| | |
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
|
| |\ \
| |/
|/| |
freeswitch,coturn: Prepare for OpenSSL 3.0 upgrade
|
| | |
| |
| |
| |
| |
| | |
Added a patch from Gentoo that brings compatiblity with OpenSSL 3.0.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
|
| |/
|
|
|
|
|
| |
Add -Wno-error=deprecated-declarations to CFLAGS to allow usage of
deprecated API.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
|
| |\
| |
| | |
rtpengine: update libwebsockets dependency
|
| |/
|
|
|
|
|
|
| |
The rtpengine daemon requires lws_get_ssl(). This function is not
available in libwebsockets-mbedtls. This commit updates the dependency
to libwebsockets-openssl.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
|