| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
(cherry picked from commit 94f2e3a93ab0837d47962643dd976aa5b2d7d5c4)
|
|
|
|
| |
(cherry picked from commit ea1bc95344b0d06cf45697dd951a6c2faa34abe2)
|
|
|
|
|
|
|
|
|
|
| |
- remove unused uclibc patches
- fix libcap with musl
- enable iconv as it is built into musl
- import mp3 addon as patch instead of svn checkout
- update ASTERISK-23818 patch from upstream
(cherry picked from commit a75e6feb7cbd28e93abe95b9bdb0b5c86a9f6532)
|
|
|
|
| |
(cherry picked from commit 1a0d51e3d4cc0308e014a7ed6287f55d27512b86)
|
|
|
|
|
|
| |
and make sure things fail if make install did not work
(cherry picked from commit 1e93f9349eb2945493a7a0b881ebad524e469353)
|
|
|
|
|
|
| |
revert incorrect fix for ASTERISK-23818
(cherry picked from commit fefcf952631344c8587a697b64eb9054fb61f0d8)
|
|
|
|
|
|
|
|
| |
... the default type should not be assumed to be recursive as
it's not specified in any spec. And in musl it defaults to non-recursive
mutex.
(cherry picked from commit 4291c7de2d59b026cf346e174bf14945cfc617b6)
|
|
|
|
| |
(cherry picked from commit 1a3fcd1cc8baf52c13053465260f220652cf4277)
|
|
|
|
|
|
| |
libasteriskssl requires libssl, but only for dynamic symbol lookups.
(cherry picked from commit c4b1644679fd921d8c24093ed8ed9a8a7acad400)
|
|
|
|
| |
(cherry picked from commit 34344768092baa595710800a8131202e7aac37d9)
|
|
|
|
| |
Fixes a major regression in the fix to AST-2014-007
|
|
|
|
|
|
|
| |
AST-2014-005: Remote Crash in PJSIP Channel Driver's Pub/Sub Framework
AST-2014-006: Permission Escalation via Manager User Unauthorized Shell Access
AST-2014-007: DoS via Exhaustion of Allowed Concurrent HTTP Connections
AST-2014-008: Denial of Service in PJSIP Channel Driver Subscriptions
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
| |
AST-2014-001, CVE-2014-2286: Stack Overflow in HTTP/Cookie Headers handling
AST-2014-002, CVE-2014-2287: DoS FD Exhaustion with chan_sip Session-Timers
AST-2014-003, CVE-2014-2288: DoS Vulnerability in PJSIP channel driver
AST-2014-004, CVE-2014-2289 was fixed before announcement already in 12.1.0
|
|
|
|
|
| |
ASTERISK-19109, rebased against 12.x (untested)
ASTERISK-19499, cherry picked from upstream
|
|
|
|
|
|
| |
app_meetme used to be there, but as it's deprecated it is no longer
built by default. add it back for the time being, but be prepared
for it to be removed in Asterisk 12.
|
|
|
|
| |
appears that busybox 1.22 requires it
|
| |
|
| |
|
|
|
|
|
| |
AST-2013-006 Buffer Overflow when receiving odd length 16 bit SMS message
AST-2013-007 Asterisk Manager User Dialplan Permission Escalation
|
| |
|
|
|
|
| |
remove upstreamed patches
|
|
|
|
|
| |
Picked from 11-stable branch, and is already in 11.6.0-rc1.
But I need it early for testing.
|
| |
|
| |
|
|
|
|
|
| |
AST-2013-004: Remote Crash From Late Arriving SIP ACK With SDP
AST-2013-005: Remote Crash when Invalid SDP is sent in SIP Request
|
| |
|
|
|
|
| |
it needs uuid from util-linux
|
| |
|
| |
|
|
|
|
|
| |
curl will be used when fetching the pkg so we need rename our split
function
|
| |
|
|
|
|
|
|
| |
the makefile checks for linux-gnu to detect flag for ldconfig to only
process given dirs. We set it hard since it fails to do the right thing
on uclibc.
|
|
|
|
| |
[Timo: Fixed few cosmetic issues]
|
| |
|
|
|
|
| |
duh.
|
| |
|
| |
|
|
|
|
|
|
|
| |
Fixes:
- AST-2013-001, CVE-2013-2685: SIP Buffer Overflow
- AST-2013-002, CVE-2013-2686: DoS in HTTP server
- AST-2013-003, CVE-2013-2264: Username disclosure in SIP
|
|
|
|
|
| |
Regression fixes from upstream. Rebase uclibc daemon patch,
and modify APKBUILD to use patches for the minor releases.
|
|
|
|
|
| |
Rebase uclibc-daemon patch, and cherry-pick regression fix for
ASTERISK-20938.
|
|
|
|
|
| |
AST-2012-014 (CVE-2012-5976): stack overflow with TCP connections
AST-2012-015 (CVE-2012-5977): DoS through device state cache exploitation
|
| |
|
| |
|
| |
|
|
|
|
| |
- re-enable libasteriskssl as the uclibc bug should be fixed now
|
|
|
|
|
|
| |
* remove upstreamed ASTERISK-19610
* rebase ASTERISK-13456 and ASTERISK-20527 patches
* update patch applying snippet
|
|
|
|
| |
duh!
|