Commit graph

1400 commits

Author SHA1 Message Date
Jiri Slachta
036cd451c3
Merge pull request #513 from micmac1/ast-1907-keys
[openwrt-19.07] asterisk-16.x: update keys directory in init script
2020-04-04 10:15:59 +02:00
Sebastian Kemper
163faeff02 asterisk-16.x: update keys directory in init script
Currently the init script creates "/var/lib/asterisk/keys". But the
default keys directory is actually "/usr/share/asterisk/keys".

This commit amends the init script.

Resolves: #512

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-04-03 20:10:44 +02:00
Jiri Slachta
7d86caa898
Merge pull request #506 from BKPepe/fix-patch-for-aslr-pie
asterisk-16.x: 056-fix-check_expr2-build.patch - rebase
2020-03-08 13:17:00 +01:00
Josef Schlehofer
a92450d77b
asterisk-16.x: 056-fix-check_expr2-build.patch - rebase
Fixes: 1ea2095081 (asterisk-16.x: fix
compile with PKG_ASLR_PIE)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-03-07 23:48:31 +01:00
Jiri Slachta
2d2ade3b8e
Merge pull request #505 from BKPepe/fix-hardening-asterisk-19.07
[19.07] asterisk-16.x: fix compile with PKG_ASLR_PIE
2020-03-07 13:11:29 +01:00
Sebastian Kemper
1ea2095081
asterisk-16.x: fix compile with PKG_ASLR_PIE
CFLAGS aren't used when compiling objects for check_expr2. This commits
adds the flags, which fixes the compilation when PKG_ASLR_PIE is
enabled. Note: The STANDALONE define is removed because it is already
defined in _ASTCFLAGS.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 357949967f)
2020-03-07 11:58:39 +01:00
micmac1
6f95d6ab3f
Merge pull request #501 from micmac1/19.07-fs-1102
[19.07] freeswitch-stable: bump to 1.10.2
2020-01-01 15:24:49 +01:00
Sebastian Kemper
625b2c81a0 freeswitch-stable: bump to 1.10.2
Patches refreshed, two patches removed (included upstream), fixed one
typo (will send pull request to upstream if nobody did so yet).

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-01-01 15:18:10 +01:00
micmac1
f920139fea
Merge pull request #498 from micmac1/1907-fix-weak-md
[19.07] freeswitch-stable: fix weak md in gentls_cert
2019-12-20 10:11:54 +01:00
Sebastian Kemper
549cad72b2 freeswitch-stable: fix weak md in gentls_cert
gentls_cert generates certificates that are deemed too weak by Debian's
OpenSSL (on Buster and up). This patch upgrades the message digest to
SHA256 to address this.

See patch for details. Sent upstream ([1]).

[1] https://github.com/signalwire/freeswitch/pull/126

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-12-20 10:01:26 +01:00
micmac1
483bbd79b9
Merge pull request #496 from micmac1/backport-sigwire
[19.07] freeswitch-stable: backport mod-signalwire + libs from master
2019-12-17 19:10:45 +01:00
Sebastian Kemper
801735a0da freeswitch-stable: add mod_signalwire
This plugin allows to make a connection to the SignalWire CLOUD.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-12-17 19:06:46 +01:00
Sebastian Kemper
ff2bcbede5 signalwire-client-c: new package
signalwire-client-c is a dependency of mod-signalwire.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-12-17 19:05:06 +01:00
Sebastian Kemper
86e5f18408 libks: new package
libks is a dependency of signalwire-client-c.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-12-17 19:04:53 +01:00
Jiri Slachta
505fb3846d
Merge pull request #488 from micmac1/19.07-AST-2019-006_007
[19.07] asterisk-16.x: add fixes for AST-2019-006 and 007
2019-12-01 22:21:05 +01:00
micmac1
44d82fa226
Merge pull request #493 from micmac1/fs-vpx-cve-1907
(19.07) freeswitch-stable: fix libvpx CVEs + T38 patch
2019-11-29 21:15:49 +01:00
Sebastian Kemper
7dddd23802 freeswitch-stable: patch CVEs in included libvpx
Patch taken from Debian Buster, fixes:

CVE-2019-9232
CVE-2019-9325
CVE-2019-9371
CVE-2019-9433

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-11-29 20:58:00 +01:00
Sebastian Kemper
a4478106ab freeswitch-stable: add T.38 reINVITE fix
Patch sent upstream. It's a one-liner with a big explanation within the
patch.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-11-29 20:38:56 +01:00
Sebastian Kemper
fddfcd6b9e freeswitch-stable: remove warning
The warning can be removed, as 19.07 is not affected.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-11-29 20:37:41 +01:00
Sebastian Kemper
90a0684e60 asterisk-16.x: add fixes for AST-2019-006 and 007
https://downloads.asterisk.org/pub/security/AST-2019-006.html
https://downloads.asterisk.org/pub/security/AST-2019-007.html

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-11-22 18:53:30 +01:00
Jiri Slachta
821bcb7c58
Merge pull request #456 from micmac1/AST-2019-004-19.07
[19.07] asterisk-16.x: add patch for AST-2019-004
2019-09-20 18:18:10 +02:00
Jiri Slachta
b2bbba4be1
Merge pull request #454 from micmac1/1907-baresip-recurs
[19.07] baresip: fix recursive dependency
2019-09-20 18:03:49 +02:00
Sebastian Kemper
5b25b7821d asterisk-16.x: add patch for AST-2019-004
Add patch for a remote crash vulnerability. Crash can occur when
negotiating for T.38 with a declined stream.

CVE-2019-15297

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-09-05 19:58:55 +02:00
Sebastian Kemper
b2e7db645e baresip: fix recursive dependency
Since OpenWrt commit e82a4d9cfb ("config: regenerate *_shipped sources")
a few recursive dependencies have been discovered that were not visible
before.

$ make menuconfig
tmp/.config-package.in:103098:error: recursive dependency detected!
For a resolution refer to Documentation/kbuild/kconfig-language.txt
subsection "Kconfig recursive dependency limitations"
tmp/.config-package.in:103098: symbol PACKAGE_baresip-mod-pulse depends on PACKAGE_baresip-mod-pulse
tmp/.config-package.in:121863:error: recursive dependency detected!
For a resolution refer to Documentation/kbuild/kconfig-language.txt
subsection "Kconfig recursive dependency limitations"
tmp/.config-package.in:121863: symbol PACKAGE_pulseaudio-profiles depends on PACKAGE_pulseaudio-profiles
tmp/.config-package.in:121878:error: recursive dependency detected!
For a resolution refer to Documentation/kbuild/kconfig-language.txt
subsection "Kconfig recursive dependency limitations"
tmp/.config-package.in:121878: symbol PACKAGE_pulseaudio-tools depends on PACKAGE_pulseaudio-tools

The recursive dependencies were reported at [1] and [2].

This commit addresses the recursive dependency of baresip-mod-pulse. The
new dependency string may look a bit peculiar, but it works and when
specified like this pulseaudio (when selected) doesn't get compiled
automatically when the intention is only to build baresip with mod-pulse
disabled (which in general is why we have the "patsubst" in the module
builder - but this is only triggered when the dependency has a leading
"+").

[1] https://github.com/openwrt/packages/issues/9300
[2] https://forum.openwrt.org/t/make-menuconfig-errors-this-day/38673/5

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-09-04 22:37:49 +02:00
micmac1
26b6fe1356
Merge pull request #453 from micmac1/19.07fs1.10.1
freeswitch-stable: import 1.10.1 from master
2019-09-01 11:57:30 +02:00
Sebastian Kemper
b755b01c70 freeswitch-stable: import 1.10.1 from master
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-09-01 11:51:05 +02:00
Jiri Slachta
956289cb10
Merge pull request #440 from jslachta/asterisk-13-removal-1907
asterisk-13.x: move package to abandoned packages
2019-07-14 20:35:28 +02:00
Jiri Slachta
996dd2bd21 asterisk-13.x: move package to abandoned packages
Signed-off-by: Jiri Slachta <jiri@slachta.eu>
2019-07-14 20:31:06 +02:00
Jiri Slachta
cb61e5e368
Merge pull request #437 from micmac1/19-ast13-AST-2019-002-and-003
(for 19.07) asterisk-1{3,6}.x: fix AST-2019-002 & AST-2019-003
2019-07-12 22:14:22 +02:00
Sebastian Kemper
ecde326753 asterisk-16.x: fix AST-2019-002 & AST-2019-003
https://downloads.asterisk.org/pub/security/AST-2019-002.html
https://downloads.asterisk.org/pub/security/AST-2019-003.html

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-07-12 20:44:53 +02:00
Sebastian Kemper
f4eaf906cc asterisk-13.x: fix AST-2019-002 & AST-2019-003
https://downloads.asterisk.org/pub/security/AST-2019-002.html
https://downloads.asterisk.org/pub/security/AST-2019-003.html

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-07-12 20:43:16 +02:00
Jiri Slachta
a5b136487e freeswitch: move to packages-abandoned repository
Signed-off-by: Jiri Slachta <jiri@slachta.eu>
2019-06-16 13:22:44 +02:00
micmac1
fdd274e1df
Merge pull request #428 from micmac1/fs-186
freeswitch-stable: bump to 1.8.6
2019-06-10 15:18:12 +02:00
Sebastian Kemper
0d4bfdaf68 freeswitch-stable: bump to 1.8.6
- refresh patches
- drop RAND_bytes patch which was upstreamed
- fix ei_init detection
- add opusfile module

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-06-10 14:44:31 +02:00
micmac1
470eb8e532
Merge pull request #426 from micmac1/fs-init-awk
freeswitch-stable: init script update
2019-05-12 14:07:37 +02:00
Sebastian Kemper
1c2023bad2 freeswitch-stable: init script update
- added trailing '--' to logger to make it foolproof
- the script now checks if user and group exist
- directory creation is now done via awk script (more robust)

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-05-12 13:57:56 +02:00
Jiri Slachta
3e73624f2c
Merge pull request #425 from micmac1/sccp-gcc8
asterisk-chan-sccp: fix gcc8 compiles
2019-05-08 20:55:03 +02:00
Sebastian Kemper
31ede68aac asterisk-chan-sccp: fix gcc8 compiles
Patch applied upstream. Fixes compiles for arc targets, which already
use new gcc8 toolchain.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-05-08 20:15:40 +02:00
Jiri Slachta
4d73f675bd
Merge pull request #422 from micmac1/ast16-mod-desc
asterisk-16.x: update module descriptions
2019-05-06 20:53:25 +02:00
Jiri Slachta
cf51b9b0ff asterisk-15.x: drop support for asterisk-15.x
This commit drops support for asterisk-15.x in favor
of asterisk-16.x.

Signed-off-by: Jiri Slachta <jiri@slachta.eu>
2019-05-05 22:10:53 +02:00
Jiri Slachta
0dd32f9d51
Merge pull request #424 from micmac1/16lantiq
asterisk-16.x-chan-lantiq: add compile fix
2019-05-05 10:37:24 +02:00
Sebastian Kemper
08a96465f0 asterisk-16.x-chan-lantiq: add compile fix
Patch from upstream pull request
(https://github.com/kochstefan/asterisk_channel_lantiq/pull/3).

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-05-04 22:35:05 +02:00
Jiri Slachta
b28098eae8
Merge pull request #423 from micmac1/ast16-semaphores
asterisk-16.x: disable semaphores only on uClibc
2019-05-04 07:47:50 +02:00
Jiri Slachta
46b58619b2
Merge pull request #417 from micmac1/ast16-add2
Asterisk 16 additions II
2019-05-02 12:01:13 +02:00
Jiri Slachta
57ca21a495
Merge pull request #412 from dhewg/pull/asterisk16
Asterisk 16 additions
2019-05-02 11:59:30 +02:00
Andre Heider
a669566e1b asterisk-opus: add variant for asterisk 16
Signed-off-by: Andre Heider <a.heider@gmail.com>
2019-05-02 10:53:12 +02:00
Andre Heider
2a87b37fb3 asterisk-g72x: add variant for asterisk 16
Signed-off-by: Andre Heider <a.heider@gmail.com>
2019-05-02 10:53:12 +02:00
Andre Heider
a7280b6114 pjproject: add patches from asterisk's bundled pjproject
"check whether UPDATE is supported on outgoing calls", commit 5de36abd:

In ASTERISK-27095 an issue had been fixed because of which chan_pjsip was not
trying to send UPDATE messages when connected_line_method was set to invite.
However this only solved the issue for incoming INVITES. For outgoing INVITES
(important when transferring calls) the options variable needs to be updated
at a different place.

"Add patch for double free issue in timer heap", commit 9c11399b:

Fixed #2172: Avoid double reference counter decrements in
timer in the scenario of race condition between
pj_timer_heap_cancel() and pj_timer_heap_poll().

"Add timer patch from pjproject r5934", commit d4cd2a97.

Signed-off-by: Andre Heider <a.heider@gmail.com>
2019-05-02 10:50:59 +02:00
Sebastian Kemper
63a8ad1755 asterisk-16.x: disable semaphores only on uClibc
The current patch disables semaphore use always. But musl and glibc
support semaphores. Only uClibc doesn't support them (the functions are
defined but just throw an error when called).

The patch is updated to allow Asterisk to use the system semaphores when
using anything but uClibc. It is also renamed to reflect that.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-05-01 20:52:08 +02:00
Sebastian Kemper
1de2464d5e asterisk-16.x: update module descriptions
The current module descriptions look a bit topsy-turvy.

This updates the BuildAsteriskModule macro to simply take any sentence
(without trying to integrate the input into another string). If the
input contains '\n' a line break is inserted.

The module descriptions were updated from menuselect-tree.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-05-01 20:32:51 +02:00