[Buildroot] [PATCH 1/1] package/sofia-sip: security bump version to 1.13.19

[Buildroot] [PATCH 1/1] package/sofia-sip: security bump version to 1.13.19

[Bernd Kuhls]

https://github.com/freeswitch/sofia-sip/compare/v1.13.18...v1.13.19

Fixes CVE-2026-110658: https://github.com/freeswitch/sofia-sip/pull/347

Updated Upstream: tag in patch 0001.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
---
Gitlab pipelines passed including a build of freeswitch:
https://gitlab.com/bkuhls/buildroot/-/commits/73abebfd5d4b5816876dae85c5e17ed479781056

with the exception of bootlin-aarch64-glibc-old:
https://gitlab.com/bkuhls/buildroot/-/jobs/17677872559

  ./.libs/libfreeswitch.so: undefined reference to `getentropy'

Freeswitch added the usage of getentropy in version 1.11.0:
https://github.com/signalwire/freeswitch/commit/7f9dd270b492907ddd063be18003e18719bdb80b

getentropy was added in glibc 2.25
https://sourceware.org/git/?p=glibc.git;a=blob;f=NEWS;h=ec15dde7613306cfa574149f61ea38ab3fbba76d;hb=db0242e3023436757bbc7c488a779e6e3343db04#l116

causing a build error with bootlin-aarch64-glibc-old which is based on
glibc 2.24. I found no way to disable freeswitch for this toolchain.

 package/sofia-sip/0001-Fix-build-error-with-OpenSSL-4.0.patch | 2 +-
 package/sofia-sip/sofia-sip.hash                              | 2 +-
 package/sofia-sip/sofia-sip.mk                                | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/package/sofia-sip/0001-Fix-build-error-with-OpenSSL-4.0.patch b/package/sofia-sip/0001-Fix-build-error-with-OpenSSL-4.0.patch
index 4e1b2ad87d..cc1d11f7f6 100644
--- a/package/sofia-sip/0001-Fix-build-error-with-OpenSSL-4.0.patch
+++ b/package/sofia-sip/0001-Fix-build-error-with-OpenSSL-4.0.patch
@@ -3,7 +3,7 @@ From: Ravi Kant Sharma <ravi.kant.sharma@canonical.com>
 Date: Fri, 17 Jul 2026 16:41:11 +0200
 Subject: [PATCH] Fix build error with OpenSSL 4.0
 
-Upstream: https://github.com/freeswitch/sofia-sip/pull/337
+Upstream: https://github.com/freeswitch/sofia-sip/commit/3cc785eeb186d6103ea628d15ec4915f1a59be1b
 
 Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
 ---
diff --git a/package/sofia-sip/sofia-sip.hash b/package/sofia-sip/sofia-sip.hash
index 623b010190..e852c92000 100644
--- a/package/sofia-sip/sofia-sip.hash
+++ b/package/sofia-sip/sofia-sip.hash
@@ -1,4 +1,4 @@
 # Locally computed
-sha256  d2ad4e64753a7c9843b766b8de8081d9c1d7acfaeb53c12b3aed7fdb9235766c  sofia-sip-1.13.18.tar.gz
+sha256  99389b574dfcff5775b260dd9ef1bdd2bcb5a42e655bd229d477e488e658064f  sofia-sip-1.13.19.tar.gz
 sha256  e1c0890440efe31b6cd2ee2abf895eb917c787799f079133f5809414d90d5d60  COPYING
 sha256  b402ae58cf355b33be8fa023f704a039e3d41ecaccd2bbcda43ca31d703e4556  COPYRIGHTS
diff --git a/package/sofia-sip/sofia-sip.mk b/package/sofia-sip/sofia-sip.mk
index b8679f6961..c0d15878fc 100644
--- a/package/sofia-sip/sofia-sip.mk
+++ b/package/sofia-sip/sofia-sip.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-SOFIA_SIP_VERSION = 1.13.18
+SOFIA_SIP_VERSION = 1.13.19
 SOFIA_SIP_SITE = $(call github,freeswitch,sofia-sip,v$(SOFIA_SIP_VERSION))
 SOFIA_SIP_INSTALL_STAGING = YES
 # Fetched from github, no pre-generated configure script provided
-- 
2.47.3

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH 1/1] package/sofia-sip: security bump version to 1.13.19

[Thomas Petazzoni via buildroot]

On Mon, Nov 02, 2026 at 09:59:14PM +0100, Bernd Kuhls wrote:
> https://github.com/freeswitch/sofia-sip/compare/v1.13.18...v1.13.19
> 
> Fixes CVE-2026-110658: https://github.com/freeswitch/sofia-sip/pull/347
> 
> Updated Upstream: tag in patch 0001.
> 
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>

Applied to master, thanks!

Best regards,

Thomas Petazzoni
-- 
Thomas Petazzoni, co-owner and CEO, Bootlin
Embedded Linux and Kernel engineering and training
https://bootlin.com
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot