Patch Detail
get:
Show a patch.
patch:
Update a patch.
put:
Update a patch.
GET /api/patches/2232087/?format=api
{ "id": 2232087, "url": "http://patchwork.ozlabs.org/api/patches/2232087/?format=api", "web_url": "http://patchwork.ozlabs.org/project/buildroot/patch/20260502143839.1511519-1-bernd@kuhls.net/", "project": { "id": 27, "url": "http://patchwork.ozlabs.org/api/projects/27/?format=api", "name": "Buildroot development", "link_name": "buildroot", "list_id": "buildroot.buildroot.org", "list_email": "buildroot@buildroot.org", "web_url": "", "scm_url": "", "webscm_url": "", "list_archive_url": "", "list_archive_url_format": "", "commit_url_format": "" }, "msgid": "<20260502143839.1511519-1-bernd@kuhls.net>", "list_archive_url": null, "date": "2026-05-02T14:38:39", "name": "[1/1] package/asterisk: security bump version to 23.3.0", "commit_ref": null, "pull_url": null, "state": "new", "archived": false, "hash": "5ae87e43af34497c1188ff84ee6e46416d96351b", "submitter": { "id": 86624, "url": "http://patchwork.ozlabs.org/api/people/86624/?format=api", "name": "Bernd Kuhls", "email": "bernd@kuhls.net" }, "delegate": null, "mbox": "http://patchwork.ozlabs.org/project/buildroot/patch/20260502143839.1511519-1-bernd@kuhls.net/mbox/", "series": [ { "id": 502534, "url": "http://patchwork.ozlabs.org/api/series/502534/?format=api", "web_url": "http://patchwork.ozlabs.org/project/buildroot/list/?series=502534", "date": "2026-05-02T14:38:39", "name": "[1/1] package/asterisk: security bump version to 23.3.0", "version": 1, "mbox": "http://patchwork.ozlabs.org/series/502534/mbox/" } ], "comments": "http://patchwork.ozlabs.org/api/patches/2232087/comments/", "check": "pending", "checks": "http://patchwork.ozlabs.org/api/patches/2232087/checks/", "tags": {}, "related": [], "headers": { "Return-Path": "<buildroot-bounces@buildroot.org>", "X-Original-To": [ "incoming-buildroot@patchwork.ozlabs.org", "buildroot@buildroot.org" ], "Delivered-To": [ "patchwork-incoming-buildroot@legolas.ozlabs.org", "buildroot@buildroot.org" ], "Authentication-Results": [ "legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=buildroot.org header.i=@buildroot.org\n header.a=rsa-sha256 header.s=default header.b=I9vul4eY;\n\tdkim-atps=neutral", "legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=buildroot.org\n (client-ip=140.211.166.137; helo=smtp4.osuosl.org;\n envelope-from=buildroot-bounces@buildroot.org; receiver=patchwork.ozlabs.org)" ], "Received": [ "from smtp4.osuosl.org (smtp4.osuosl.org [140.211.166.137])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g79Ww6M8dz1yJ0\n\tfor <incoming-buildroot@patchwork.ozlabs.org>;\n Sun, 03 May 2026 00:38:51 +1000 (AEST)", "from localhost (localhost [127.0.0.1])\n\tby smtp4.osuosl.org (Postfix) with ESMTP id B713B41266;\n\tSat, 2 May 2026 14:38:47 +0000 (UTC)", "from smtp4.osuosl.org ([127.0.0.1])\n by localhost (smtp4.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id 14842Aj56NsF; Sat, 2 May 2026 14:38:46 +0000 (UTC)", "from lists1.osuosl.org (lists1.osuosl.org [140.211.166.142])\n\tby smtp4.osuosl.org (Postfix) with ESMTP id 5B98F4125E;\n\tSat, 2 May 2026 14:38:46 +0000 (UTC)", "from smtp1.osuosl.org (smtp1.osuosl.org [IPv6:2605:bc80:3010::138])\n by lists1.osuosl.org (Postfix) with ESMTP id 16259127\n for <buildroot@buildroot.org>; Sat, 2 May 2026 14:38:45 +0000 (UTC)", "from localhost (localhost [127.0.0.1])\n by smtp1.osuosl.org (Postfix) with ESMTP id 02F8D81E54\n for <buildroot@buildroot.org>; Sat, 2 May 2026 14:38:45 +0000 (UTC)", "from smtp1.osuosl.org ([127.0.0.1])\n by localhost (smtp1.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id AZS1DRVUs2Jq for <buildroot@buildroot.org>;\n Sat, 2 May 2026 14:38:43 +0000 (UTC)", "from dd20012.kasserver.com (dd20012.kasserver.com [85.13.140.57])\n by smtp1.osuosl.org (Postfix) with ESMTPS id 2F36981E53\n for <buildroot@buildroot.org>; Sat, 2 May 2026 14:38:42 +0000 (UTC)", "from fli4l.lan.fli4l (p4fd6c2eb.dip0.t-ipconnect.de\n [79.214.194.235])\n by dd20012.kasserver.com (Postfix) with ESMTPSA id A9586A4C0198;\n Sat, 2 May 2026 16:38:39 +0200 (CEST)", "from bruckner.lan.fli4l ([192.168.1.1]:60766)\n by fli4l.lan.fli4l with esmtp (Exim 4.99.2)\n (envelope-from <bernd@kuhls.net>) id 1wJBUN-000000002yG-2xwK;\n Sat, 02 May 2026 14:38:39 +0000" ], "X-Virus-Scanned": [ "amavis at osuosl.org", "amavis at osuosl.org" ], "X-Comment": "SPF check N/A for local connections - client-ip=140.211.166.142;\n helo=lists1.osuosl.org; envelope-from=buildroot-bounces@buildroot.org;\n receiver=<UNKNOWN> ", "DKIM-Filter": [ "OpenDKIM Filter v2.11.0 smtp4.osuosl.org 5B98F4125E", "OpenDKIM Filter v2.11.0 smtp1.osuosl.org 2F36981E53" ], "DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed; d=buildroot.org;\n\ts=default; t=1777732726;\n\tbh=zyVqVHS858wLBuwp1Xm1EV8QCj+7CzDdCsBmCvL/gpY=;\n\th=From:To:Date:Subject:List-Id:List-Unsubscribe:List-Archive:\n\t List-Post:List-Help:List-Subscribe:From;\n\tb=I9vul4eYtYJS4nudEHbtXld9N3v8SDfQhnF74IU4qknmwr/hujFlQ5EOPcYR4aKHg\n\t FXm9tewginyl0DqcqBY7tLplstSCeyzJ9ig7afpQbP0yzwZkHoFNoLwXG/fGuyzG6W\n\t TJqAp2sgwNDU0cETakw8Ax7Ava9Z0w4ummBFBEiR9q1PqgEwo53cdO7ZUB+4QcvHpa\n\t N/1PKeM240nvz63kKT5COFW+1RLVWWt9KVCy99HegcXcJ9JB+mrnjhSzOKn08mRucy\n\t lOZeXfpwM6uWZhC9eY/u3KLmdd9vCxE//LlMnxAmDnG7gjGkJiBDPui3HQwZfYCsRF\n\t 01K68ple5Lpzw==", "Received-SPF": "Pass (mailfrom) identity=mailfrom; client-ip=85.13.140.57;\n helo=dd20012.kasserver.com; envelope-from=bernd@kuhls.net;\n receiver=<UNKNOWN>", "DMARC-Filter": "OpenDMARC Filter v1.4.2 smtp1.osuosl.org 2F36981E53", "From": "Bernd Kuhls <bernd@kuhls.net>", "To": "buildroot@buildroot.org", "Date": "Sat, 2 May 2026 16:38:39 +0200", "Message-ID": "<20260502143839.1511519-1-bernd@kuhls.net>", "X-Mailer": "git-send-email 2.47.3", "MIME-Version": "1.0", "X-Spamd-Bar": "/", "X-Mailman-Original-DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=kuhls.net;\n s=kas202511301023; t=1777732719;\n bh=1d/MY6xTnly/Uw5kdsjvcOkaxFzIuzGtfZQ0tYF9gG8=;\n h=From:To:Cc:Subject:Date:From;\n b=g5Jfi8xMBXg9jouQoRNv7Z8qpG5s7I3Qrl5TR34po0qgBYkXQVImpmKGZtqicX3vE\n Fve6loHtdnTveBTYFJzgZF5sHYSbuX6IxpxGC57HmIb+cKL2VZzftMyqSBpOjeV6dU\n hxQm2KhBSxx0hDqLMY8yQXIcy2P6Sc1IIZR+3q2XubIQoTDKqkZ67DlS2PmNmK0K81\n kmVg6O/gqPZLE/jfBhlcDQM227EhJcQWXSH4Or2aeaCT41CRewTxwyKc32QNBJt+6n\n 5TyVjSRCFWYBgZgl0XfBlMMyTml8Wlcdj9/TNRWsblV+WXonnkTeRunvrbVCWrg+m3\n cIAT6/+eI45VQ==", "X-Mailman-Original-Authentication-Results": [ "smtp1.osuosl.org;\n dmarc=pass (p=none dis=none)\n header.from=kuhls.net", "smtp1.osuosl.org;\n dkim=pass (2048-bit key,\n unprotected) header.d=kuhls.net header.i=@kuhls.net header.a=rsa-sha256\n header.s=kas202511301023 header.b=g5Jfi8xM" ], "Subject": "[Buildroot] [PATCH 1/1] package/asterisk: security bump version to\n 23.3.0", "X-BeenThere": "buildroot@buildroot.org", "X-Mailman-Version": "2.1.30", "Precedence": "list", "List-Id": "Discussion and development of buildroot <buildroot.buildroot.org>", "List-Unsubscribe": "<https://lists.buildroot.org/mailman/options/buildroot>,\n <mailto:buildroot-request@buildroot.org?subject=unsubscribe>", "List-Archive": "<http://lists.buildroot.org/pipermail/buildroot/>", "List-Post": "<mailto:buildroot@buildroot.org>", "List-Help": "<mailto:buildroot-request@buildroot.org?subject=help>", "List-Subscribe": "<https://lists.buildroot.org/mailman/listinfo/buildroot>,\n <mailto:buildroot-request@buildroot.org?subject=subscribe>", "Content-Type": "text/plain; charset=\"us-ascii\"", "Content-Transfer-Encoding": "7bit", "Errors-To": "buildroot-bounces@buildroot.org", "Sender": "\"buildroot\" <buildroot-bounces@buildroot.org>" }, "content": "https://community.asterisk.org/t/asterisk-release-23-3-0/112566\n\nhttps://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-22.9.0.html\nSecurity Advisories Resolved: 0\n\nhttps://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-23.0.0.html\nSecurity Advisories Resolved: 1 (also included in 22.5.2)\n\nhttps://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-23.1.0.html\nhttps://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-23.2.0.html\nhttps://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-23.2.1.html\nSecurity Advisories Resolved: 0\n\nhttps://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-23.2.2.html\nSecurity Advisories Resolved: 4 (also included in 22.8.2)\n\nhttps://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-23.3.0.html\nSecurity Advisories Resolved: 0\n\nFollow upstream bump of the bundled pjproject version to 2.16 in\nasterisk 23.3.0:\nhttps://github.com/asterisk/asterisk/commit/104b908fe95f542692f49ee8d600ad1347369688\nhttps://github.com/pjsip/pjproject/releases/tag/2.16\nFixes CVE-2025-65102: https://github.com/pjsip/pjproject/security/advisories/GHSA-w5vr-39x7-h8g5\n\nAlso several upstream security fixes were added to pjproject in asterisk\n23.3.0:\nhttps://github.com/asterisk/asterisk/commit/d0a0dc8b6d5efc65ee9a8038363196d7c84da5a2\nFixes CVE-2026-25994, CVE-2026-28799, CVE-2026-32942 & CVE-2026-33069.\n\nRemove db.h license file due to upstream removal in version 23.0.0:\nhttps://github.com/asterisk/asterisk/commit/03f1c246746655a21e4f6d66fb4be5aef8b301f8\n\nSigned-off-by: Bernd Kuhls <bernd@kuhls.net>\n---\n package/asterisk/asterisk.hash | 5 ++---\n package/asterisk/asterisk.mk | 11 +++++------\n 2 files changed, 7 insertions(+), 9 deletions(-)", "diff": "diff --git a/package/asterisk/asterisk.hash b/package/asterisk/asterisk.hash\nindex 3a8274b458..4c52be9d74 100644\n--- a/package/asterisk/asterisk.hash\n+++ b/package/asterisk/asterisk.hash\n@@ -1,8 +1,8 @@\n # Locally computed\n-sha256 6669a8d2e50481a3b70c6099a21a100ab7d7ae9ac00e2182eabb94c68c94bcc9 asterisk-22.8.2.tar.gz\n+sha256 8662d367da1451acb08e8b7f217ea7bb961a44ef751190bc63e006d65053a2d3 asterisk-23.3.0.tar.gz\n \n # Locally computed\n-sha256 58bb83cec4d431f48d006e455d821668450f8cf6b6c95f090def47062fa3a60c pjproject-2.15.1.tar.bz2\n+sha256 633c3dc34ffb21af8ac9ee160245c9c174379391e35cace1b6c9f516a260f683 pjproject-2.16.tar.bz2\n sha256 6775095bcd417d375faddc1f17cdd7706ad8aa9b9b02404990c4b0ee218ee379 libjwt-1.15.3.tar.gz\n \n # sha1 from: http://downloads.asterisk.org/pub/telephony/sounds/releases\n@@ -16,4 +16,3 @@ sha256 449fb810d16502c3052fedf02f7e77b36206ac5a145f3dacf4177843a2fcb538 asteri\n sha256 82af40ed7f49c08685360811993d9396320842f021df828801d733e8fdc0312f COPYING\n sha256 3ce4755b8da872a0de93ecdbbe2f940763cc95c9027bbf3c4a2e914fcd8bf4c6 main/sha1.c\n sha256 6215e3ed73c3982a5c6701127d681ec0b9f1121ac78a28805bd93f93c3eb84c0 codecs/speex/speex_resampler.h\n-sha256 ea69cc96ab8a779c180a362377caeada71926897d1b55b980f04d74ba5aaa388 utils/db1-ast/include/db.h\ndiff --git a/package/asterisk/asterisk.mk b/package/asterisk/asterisk.mk\nindex e2fdb189fa..a5ad9ff44b 100644\n--- a/package/asterisk/asterisk.mk\n+++ b/package/asterisk/asterisk.mk\n@@ -4,7 +4,7 @@\n #\n ################################################################################\n \n-ASTERISK_VERSION = 22.8.2\n+ASTERISK_VERSION = 23.3.0\n # Use the github mirror: it's an official mirror maintained by Digium, and\n # provides tarballs, which the main Asterisk git tree (behind Gerrit) does not.\n ASTERISK_SITE = $(call github,asterisk,asterisk,$(ASTERISK_VERSION))\n@@ -12,21 +12,20 @@ ASTERISK_SITE = $(call github,asterisk,asterisk,$(ASTERISK_VERSION))\n # compilation with the external pjsip produces a non-working asterisk, which\n # segfaults. The reason behind this is unclear.\n # https://github.com/asterisk/asterisk/issues/671\n-ASTERISK_PJSIP_URL = https://raw.githubusercontent.com/asterisk/third-party/master/pjproject/2.15.1/\n+ASTERISK_PJSIP_URL = https://raw.githubusercontent.com/asterisk/third-party/master/pjproject/2.16/\n ASTERISK_LIBJWT_URL = https://raw.githubusercontent.com/asterisk/third-party/master/libjwt/1.15.3/\n ASTERISK_SOUNDS_BASE_URL = http://downloads.asterisk.org/pub/telephony/sounds/releases\n ASTERISK_EXTRA_DOWNLOADS = \\\n \t$(ASTERISK_SOUNDS_BASE_URL)/asterisk-core-sounds-en-gsm-1.6.1.tar.gz \\\n \t$(ASTERISK_SOUNDS_BASE_URL)/asterisk-moh-opsound-wav-2.03.tar.gz \\\n-\t$(ASTERISK_PJSIP_URL)/pjproject-2.15.1.tar.bz2 \\\n+\t$(ASTERISK_PJSIP_URL)/pjproject-2.16.tar.bz2 \\\n \t$(ASTERISK_LIBJWT_URL)/libjwt-1.15.3.tar.gz\n \n-ASTERISK_LICENSE = GPL-2.0, BSD-3-Clause (SHA1, resample), BSD-4-Clause (db1-ast)\n+ASTERISK_LICENSE = GPL-2.0, BSD-3-Clause (SHA1, resample)\n ASTERISK_LICENSE_FILES = \\\n \tCOPYING \\\n \tmain/sha1.c \\\n-\tcodecs/speex/speex_resampler.h \\\n-\tutils/db1-ast/include/db.h\n+\tcodecs/speex/speex_resampler.h\n \n ASTERISK_CPE_ID_VENDOR = sangoma\n ASTERISK_SELINUX_MODULES = asterisk\n", "prefixes": [ "1/1" ] }