Commit graph

1448 commits

Author SHA1 Message Date
micmac1
f2dc3c0878
Merge pull request #762 from micmac1/19.07-AST-2022-01-02-03
[19.07] asterish-16.x: bump to 16.25.2
2022-04-21 19:11:22 +02:00
Sebastian Kemper
445b5e5ff1 asterisk-16.x: bump to version 16.25.2
This bumps asterisk to version 16.25.2 to address the following security
concerns:

https://downloads.asterisk.org/pub/security/AST-2022-001.html
https://downloads.asterisk.org/pub/security/AST-2022-002.html
https://downloads.asterisk.org/pub/security/AST-2022-003.html

Other changes:

- add two new modules (app_sf and func_json)
- update 100-build-reproducibly.patch as upstream refactored some of the
  code
- refresh patches
- "--disable-xmldoc" does no longer prevent the linking to libxslt, if
  available. If that's the case one is greeted with the following error:

    Package asterisk is missing dependencies for the following libraries:
    libxslt.so.1

  This commit explicitly disables the use of libxslt, to avoid the
  dependency.
- backport 160-AST_EXT_TOOL_CHECK.patch from master for issue #672
- backport 180_build-fix-bininstall-launchd-issue-on-cross-platfrom.patch
  from master to fix a build issue on MacOS (patch from Sergey V.
  Lobanov <sergey@lobanov.in>)

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2022-04-20 23:32:27 +02:00
Sebastian Kemper
cc4fd2982f pjproject: sync patches with asterisk 16.25.2
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2022-04-20 23:13:10 +02:00
micmac1
c6bff940c0
Merge pull request #754 from micmac1/openwrt-19.07-AST
[19.07] pjproject: add upstream security fixes
2022-03-06 12:32:11 +01:00
Sebastian Kemper
302a22c6bb pjproject: add upstream security fixes
Details:

https://downloads.asterisk.org/pub/security/AST-2022-004.html
https://downloads.asterisk.org/pub/security/AST-2022-005.html
https://downloads.asterisk.org/pub/security/AST-2022-006.html

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 623e5288f1)
2022-03-06 12:25:13 +01:00
micmac1
5ae3a58b26
Merge pull request #731 from micmac1/sof-1137-19
[19.07] sofia-sip: update to 1.13.7
2022-01-31 19:56:42 +01:00
Sebastian Kemper
cd42bc002a sofia-sip: update to 1.13.7
Contains DOS fix, see [1].

[1] https://github.com/signalwire/freeswitch/issues/1518

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2022-01-31 19:08:03 +01:00
Jiri Slachta
d88773392a
Merge pull request #717 from micmac1/restund-cve-19.07
[19.07] restund: fix CVE-2021-21382
2021-12-08 06:57:44 +01:00
Sebastian Kemper
4ca76cbccd restund: fix CVE-2021-21382
Patches taken from [1].

[1] https://github.com/wireapp/restund/pull/7

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit dec6316f2f)
2021-12-07 00:09:00 +01:00
micmac1
8de85c9588
Merge pull request #709 from micmac1/1907-sccp-mwi
[19.07] asterisk-chan-sccp: fix mwi header issue
2021-11-09 19:03:55 +01:00
Sebastian Kemper
d4043e133d asterisk-chan-sccp: fix mwi header issue
Asterisk, somewhere between release 16.3.0 and 16.22.0, added a new
header "mwi.h". This causes compile failure, because the chan-sccp
snapshot is not aware.

This adds a patch from upstream to resolve.

All patches refreshed.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2021-11-09 18:52:11 +01:00
micmac1
c2f7458131
Merge pull request #708 from micmac1/1907-fs1107
[19.07] freeswitch: security update to 1.10.7
2021-11-08 00:25:11 +01:00
Sebastian Kemper
d076f5a4fd freetdm: add package
It was moved from the freeswitch source tree into its own package.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2021-11-08 00:16:23 +01:00
Sebastian Kemper
87767edc22 freeswitch-stable: bump to 1.10.7
- freetdm is now external
- install libfreeswitch to staging directory for external freetdm
- fix pkgconfig file
- add dependency on libks to mod-verto
- add missing PKG_CONFIG_DEPENDS
- add build fixes
- refresh patches

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2021-11-08 00:12:45 +01:00
Sebastian Kemper
0732523916 sofia-sip: bump to 1.13.6
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2021-11-08 00:02:07 +01:00
micmac1
1b0861c248
Merge pull request #700 from micmac1/ast16.20
[19.07] bump pjproject, asterisk & chan-lantiq
2021-11-07 20:54:39 +01:00
Sebastian Kemper
87182ea560 asterisk-16.x-chan-lantiq: bump for DTMF fix
Patch and exports file dropped as included upstream.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2021-11-07 10:58:02 +01:00
Sebastian Kemper
abc7a17142 asterisk-16.x: bump to 16.22.0
- add new modules
- add res_timing_timerfd to base package (see commit e538fc3)
- update some module dependencies
- refresh patches
- remove upstreamed patches

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2021-11-07 10:57:36 +01:00
Sebastian Kemper
70937306b8 pjproject: bump to 2.10 + sync with asterisk
This is a squashed commit of the following:

01. revert of f42ce26555 to be able to
    cleanly cherry-pick from master
02. cherry pick from commit 9ea4a8b49b
03. cherry pick from commit 5cc8a67196
04. cherry pick from commit 93e08d1ad9
05. cherry pick from commit 80d0fbd405
06. cherry pick from commit a71a6666d2
07. cherry pick from commit f7fe759fe2
08. cherry pick from commit 6d6dd129aa
09. cherry pick from commit 5a916dc351
10. cherry pick from commit 95611304d9
11. cherry pick from commit 376473b38c
12. sync patches with asterisk 16.22.0

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2021-11-07 10:47:21 +01:00
micmac1
02b5c7b2d5
Merge pull request #669 from micmac1/19sof14
[19.07] sofia-sip: bump to 1.13.4
2021-08-11 23:00:42 +02:00
Sebastian Kemper
0f0ff11c6a sofia-sip: bump to 1.13.4
Fixes some issues, for instance a segfault during shutdown when
sofia-sip wasn't fully loaded, see [1]. The segfault was reproducible
by simply calling "freeswitch -help".

The added patch is to address a library versioning regression, patch is
from upstream.

[1] https://github.com/freeswitch/sofia-sip/issues/58

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2021-08-06 20:41:21 +02:00
micmac1
affee75bef
Merge pull request #646 from micmac1/fs1106-nua-mem-leak-19.07
[19.07] sofia-sip: add upstream fix for memory leak
2021-05-27 22:03:50 +02:00
Sebastian Kemper
8a21e28581 sofia-sip: add upstream fix for memory leak
Upstream provided a patch for a memory leak in Sofia SIP (see [1] for
more information).

[1] https://github.com/signalwire/freeswitch/issues/1174

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2021-05-27 20:24:04 +02:00
micmac1
61b7f93235
Merge pull request #636 from micmac1/fs-modmake-patch-19.07
[19.07] freeswitch-stable: fix 003-modmake-fix.patch
2021-04-08 22:02:51 +02:00
Sebastian Kemper
594cea401b freeswitch-stable: fix 003-modmake-fix.patch
Somehow this white space change slipped in unintentionally.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2021-04-07 20:55:46 +02:00
micmac1
99317b9341
Merge pull request #633 from micmac1/fs-1106-1907
[19.07] freeswitch-stable: bump to 1.10.6
2021-04-04 10:45:18 +02:00
Sebastian Kemper
094b0ab193 freeswitch-stable: bump to 1.10.6
- patches refreshed
- upstreamed patches removed
- hotplug script fix (ntpq output could print a plus that the script
  didn't expect)

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2021-04-03 10:44:04 +02:00
Sebastian Kemper
03ae16af5b spandsp3: bump to 2020-10-19
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2021-04-03 10:39:23 +02:00
Sebastian Kemper
efae548e6e sofia-sip: bump to 1.13.3
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2021-04-03 10:37:59 +02:00
Sebastian Kemper
1feaca4902 signalwire-client-c: bump to 1.3.0
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2021-04-03 10:36:17 +02:00
Sebastian Kemper
269cfc0836 libks: bump to 1.7.0
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2021-04-03 10:33:38 +02:00
Jiri Slachta
42605e413d
Merge pull request #620 from micmac1/ast-2021-1
[19.07] asterisk/pjproject: add patches for recently published Asterisk security notices
2021-03-09 17:29:57 +01:00
Sebastian Kemper
8f15bfbb0f asterisk-16.x: add patch for AST-2021-001
180-AST-2019-007-16.diff refreshed.

Upstream patch for AST-2021-001 added. This patch is mainly for
res_pjsip_diversion, but the part that is patched there was added later
("res_pjsip_diversion: implement support for History-Info"), so asterisk
16.3.0 is not affected. Hence the res_pjsip_diversion part was removed
from the patch. The patch resolves similar overflow situations in
res_pjsip_path and res_pjsip_outbound_registration, so these were kept.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2021-03-07 11:08:58 +01:00
Sebastian Kemper
f42ce26555 pjproject: add patch for AST-2021-005
https://downloads.asterisk.org/pub/security/AST-2021-005.html
https://issues.asterisk.org/jira/browse/ASTERISK-29196

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2021-03-07 11:06:26 +01:00
Jiri Slachta
6e019c94d0
Merge pull request #587 from micmac1/19.07AST
[19.07] asterisk-16.x: fix AST-2020-001 and 002
2020-11-23 21:52:23 +01:00
Sebastian Kemper
0394d0cbbd asterisk-16.x: fix AST-2020-001 and 002
Patches used:

http://downloads.asterisk.org/pub/security/AST-2020-001-16.diff
http://downloads.asterisk.org/pub/security/AST-2020-002-16.diff

Patch AST-2020-002-16.diff was amended a bit in res/res_pjsip_session.c:

if (++session->authentication_challenge_count > MAX_RX_CHALLENGES) {
	ast_debug(3, "%s: Initial INVITE reached maximum number of auth attempts.\n", ast_sip_session_get_name(session));
	return PJ_FALSE;
}

The above was not possible, because of missing bits introduced only in a
later version of Asterisk 16 (see upstream commit [1]). So the ast_debug
call was simplified accordingly.

Both patches were refreshed within OpenWrt SDK.

[1] 6abf6f345d

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-11-06 21:20:46 +01:00
Jiri Slachta
c1e923bcc0
Merge pull request #574 from guidosarducci/19.07-update-siproxd-0.8.3
[19.07] siproxd: update to version 0.8.3, improve logging and memory usage
2020-09-22 11:25:09 +02:00
Tony Ambardar
670c64193b siproxd: update to version 0.8.3, improve logging and memory usage
This release includes bug fixes and improvements accumulated over the last
4 years of development snapshots [1].

Bump upstream version, build new plugins 'stats' and 'blacklist', and add
an 'sqlite3' package dependency for siproxd-mod-blacklist.

Disable procd capturing stderr to syslog, since siproxd in 'foreground'
mode writes both to syslog and stderr, duplicating log messages.

Include a patch to drastically reduce memory usage (RSS from 17MB to 5MB
on ipq40xx platform):

  * 005-reduce-rtpproxy-urlmap-size.patch

Drop the following patches now included upstream:

  * 010-syslog-msg.patch
  * 100-musl-compat.patch

[1] http://siproxd.sourceforge.net/index.php?op=changelog.

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2020-09-21 00:19:06 -07:00
micmac1
85cb5591de
Merge pull request #573 from micmac1/span3xml2-1907
[19.07] spandsp3: prevent host include search paths
2020-09-20 20:19:44 +02:00
Sebastian Kemper
64f5323a28 spandsp3: prevent host include search paths
Note the host include path for libxml2 below. This shouldn't cause an
issue because libxml2 is never used. But better safe than sorry as the
configure script probes other host include paths as well.

/bin/sh ../libtool  --tag=CC   --mode=compile ccache_cc -DHAVE_CONFIG_H -I.  -I.. -I/openwrt/staging_dir/target-mips_24kc_musl/usr/include -I/openwrt/staging_dir/toolchain-mips_24kc_gcc-10.2.0_musl/usr/include -I/openwrt/staging_dir/toolchain-mips_24kc_gcc-10.2.0_musl/include/fortify -I/openwrt/staging_dir/toolchain-mips_24kc_gcc-10.2.0_musl/include  -I/usr/include/libxml2 -DNDEBUG -Wunused-but-set-variable -std=gnu99 -ffast-math -Wall -Wunused-variable -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -fvisibility=hidden -DHAVE_VISIBILITY=1  -Os -pipe -mno-branch-likely -mips32r2 -mtune=24kc -fno-caller-saves -fno-plt -fhonour-copts -Wno-error=unused-but-set-variable -Wno-error=unused-result -msoft-float -mips16 -minterlink-mips16 -fmacro-prefix-map=/openwrt/build_dir/target-mips_24kc_musl/spandsp3-2020-08-14-6ec23e5a=spandsp3-2020-08-14-6ec23e5a -Wformat -Werror=format-security -fstack-protector -D_FORTIFY_SOURCE=1 -Wl,-z,now -Wl,-z,relro   -MT dds_float.lo -MD -MP -MF .deps/dds_float.Tpo -c -o dds_float.lo dds_float.c

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-09-20 13:46:01 +02:00
micmac1
10c68488ee
Merge pull request #570 from micmac1/1907fs10105
(19.07) freeswitch-stable: bump to 1.10.5
2020-09-17 19:15:38 +02:00
Sebastian Kemper
f7e7543393 freeswitch-stable: bump to 1.10.5
Includes some backports from master.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-09-11 14:01:37 +02:00
Sebastian Kemper
671b95efac spandsp3: backport from master
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-09-11 14:01:02 +02:00
Sebastian Kemper
be616aadf9 sofia-sip: backport from master
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-09-11 14:00:45 +02:00
micmac1
91b34e7eef
Merge pull request #539 from micmac1/fs-check-19
[19.07] freeswitch-stable: prevent libcheck use
2020-06-10 20:22:21 +02:00
Sebastian Kemper
377fd29660 freeswitch-stable: prevent libcheck use
Currently we disable some sofia tests to prevent build failure. An issue
was actually raised upstream ([1]) where this was discussed.

This cleared up some doubts. For instance it was established that
libcheck is used as a test framework, if the lib is detected. In OpenWrt
libcheck is available, so it may be in staging during the freeswitch
build.

Upstream also mentioned that libcheck is not always compatible with
freeswitch, which depends on the libcheck version.

This commit prevents libcheck detection. This is nicer than explicitly
disabling tests that fail.

[1] https://github.com/signalwire/freeswitch/issues/681

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-06-09 19:06:24 +02:00
micmac1
86a38f1cd4
Merge pull request #535 from micmac1/fs110319
[19.07] freeswitch-stable: bump to 1.10.3
2020-05-30 07:10:03 +02:00
Sebastian Kemper
e89be69988 freeswitch-stable: bump to 1.10.3
Minor version bump. Backport from master.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-26 21:38:43 +02:00
Jiri Slachta
036cd451c3
Merge pull request #513 from micmac1/ast-1907-keys
[openwrt-19.07] asterisk-16.x: update keys directory in init script
2020-04-04 10:15:59 +02:00
Sebastian Kemper
163faeff02 asterisk-16.x: update keys directory in init script
Currently the init script creates "/var/lib/asterisk/keys". But the
default keys directory is actually "/usr/share/asterisk/keys".

This commit amends the init script.

Resolves: #512

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-04-03 20:10:44 +02:00