| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
fixes #3046
|
|
|
|
|
|
|
|
|
| |
fixes #2505
AST-2013-004 Remote Crash From Late Arriving SIP ACK With SDP
AST-2013-005 Remote Crash when Invalid SDP is sent in SIP Request
AST-2013-006 Buffer Overflow when receiving odd length 16 bit SMS message
AST-2013-007 Asterisk Manager User Dialplan Permission Escalation
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Fixes:
- AST-2013-001, CVE-2013-2685: SIP Buffer Overflow
- AST-2013-002, CVE-2013-2686: DoS in HTTP server
- AST-2013-003, CVE-2013-2264: Username disclosure in SIP
- regressions from upstream
(cherry picked from commit dfb8a36)
(cherry picked from commit f11acc5)
(cherry picked from commit f7e2057)
(cherry picked from commit 7a10513)
|
|
|
|
|
|
| |
Rebase uclibc-daemon patch, and cherry-pick regression fix for
ASTERISK-20938.
(cherry picked from commit 7cdcfc5ff0305f0a806fd5c5a483275f329bbfdb)
|
|
|
|
|
|
| |
AST-2012-014 (CVE-2012-5976): stack overflow with TCP connections
AST-2012-015 (CVE-2012-5977): DoS through device state cache exploitation
(cherry picked from commit 43c4090824288439314ee365589a957eac4ef5b8)
|
|
|
|
| |
(cherry picked from commit 80aa523c971b108d5f472ca5ac576e7deda46240)
|
|
|
|
| |
(cherry picked from commit 429bcc16248a39abd26ba6a03f739804734521b5)
|
| |
|
|
|
|
| |
- re-enable libasteriskssl as the uclibc bug should be fixed now
|
|
|
|
|
|
| |
* remove upstreamed ASTERISK-19610
* rebase ASTERISK-13456 and ASTERISK-20527 patches
* update patch applying snippet
|
|
|
|
| |
duh!
|
| |
|
|
|
|
|
| |
They commit ASTERISK-19610c from upstream has a typo, that was
fixed in separate commit. Fixed here manually.
|
|
|
|
|
|
| |
Also cherry-pick ASTERISK-19610 related commits from 10.9.0-rc1 to
fix a long-time DTMF detection regression bug early. These three
patches can be dropped when upgrading to 10.9.0.
|
| |
|
|
|
|
|
|
| |
An annying bug that can cause incoming SIP calls for a registered
number to be associated with wrong peer entry. This can also have
security implications on some systems.
|
|
|
|
|
|
| |
AST-2012-012: Asterisk Manager User Unauthorized Shell Access
AST-2012-013: ACL rules ignored when placing outbound calls by
certain IAX2 users
|
| |
|
|
|
|
| |
Fixes a major bug in TLS connection handling.
|
| |
|
| |
|
|
|
|
|
|
|
|
|
| |
Remove the patch requested in: http://bugs.alpinelinux.org/issues/227
This bug has been fixed in upstream with a better patch in all
asterisk branches.
See: https://issues.asterisk.org/view.php?id=15627
|
|
|
|
|
| |
* AST-2012-10 - Possible resource leak on uncompleted re-invite
* AST-2012-11 (CVE-2012-3812) - Remote crash in voice mail application
|
|
|
|
| |
AST-2012-009 (CVE-2012-3553) - Skinny Channel Driver Remote Crash
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
Add it to a subpackage called asterisk-mobile
fixes #1178
|
|
|
|
|
| |
AST-2012-007 (CVE-2012-2947): Remote crash vulnerability in IAX2
AST-2012-008 (CVE-2012-2948): Skinny Channel Driver Remote Crash
|
| |
|
|
|
|
|
|
| |
* AST-2012-004
* AST-2012-005
* AST-2012-006
|
| |
|
|
|
|
|
| |
AST-2012-002 Remote crash in app_milliwatt
AST-2012-003 Remote exploitable crash in HTTP Manager interface
|
|
|
|
| |
remove patches merged upstream
|
| |
|
| |
|
|
|
|
| |
instead of using post install script to do it
|
| |
|
|
|
|
|
|
|
| |
uclibc-0.9.33 implements res_ninit but not res_nquery or others.
The configure checks only for res_ninit and assumes other functions
are then present too, but this breaks build against new uclibc.
Just disable the res_ninit check for now.
|
| |
|
|
|
|
|
|
| |
Asterisk build (since 10.1.0) will set -march=native unless
explicitly overridden via ASTCFLAGS on the main build. So set
ASTCFLAGS to Alpine CFLAGS that include the -march.
|
|
|
|
|
|
| |
It was from 10-branch, but appears that chan_sip already got
incompatible changes for 10.2.0-rc1 that conflict with this
commit.
|
|
|
|
| |
It's now the patch that actually got committed.
|
|
|
|
|
|
|
| |
* remove ASTERISK-18994.patch, it got merged upstream
* refresh ASTERISK-19109.patch from review board to latest version
* use --with-unixodbc (--with-odbc got removed earlier)
* no more subpackage -sqlite as sqlite is now a core dependency
|
|
|
|
|
| |
Fixes now to answer to incoming calls. The patch was updated to
fix-sip-registration-after-dns-fail4.txt and rebased for 10.0.1.
|
|
|
|
| |
* security fix AST-2012-001 (remote crash under certain special configs)
|
|
|
|
| |
fixes #947
|
|
|
|
| |
Instead of using the obsolete #-include patch from Asterisk JIRA.
|
| |
|
| |
|