Re: [Buildroot] [PATCH v2 1/1] package/asterisk: security bump version to 22.5.2

[Thomas Petazzoni via buildroot <buildroot@buildroot.org>]

Hello Bernd,

On Thu,  6 Nov 2025 21:47:37 +0100
Bernd Kuhls <bernd@kuhls.net> wrote:

> Fixes CVE-2025-1131:
> https://github.com/asterisk/asterisk/security/advisories/GHSA-v9q8-9j8m-5xwp
> 
> Acked-by: Titouan Christophe <titouan.christophe@mind.be>
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>

I'm not sure it's been introduced by this version bump, but Asterisk is
still causing quite a few build failures in the autobuilders.

I briefly looked into two of them:

- https://autobuild.buildroot.net/results/426/426336052c50768b06dd047ce4b8283e6da377d4/build-end.log

  menuselect/menuselect: error while loading shared libraries: libxml2.so.16: cannot open shared object file: No such file or directory

  The target asterisk package builds "menuselect" as a host tool, but
  our $(HOST_LDFLAGS) are not passed when building menuselect, so it
  doesn't have the right -Wl,-rpath flag passed, and therefore when it
  tries to *run* menuselect, it doesn't find libxml2 in $(HOST_DIR)/lib

  Not sure how to pass our HOST_LDFLAGS.

  Also, since it builds menuselect for the host, is it still needed for
  the target asterisk to depend on host-asterisk ?

- https://autobuild.buildroot.net/results/af9/af9c127965260044095f1fa98db88e1d1d762646/build-end.log

  Invalid configuration `or1k-buildroot-linux-gnu': machine `or1k-buildroot' not recognized

  The config.sub part of the pjsip code (downloaded as EXTRA_DOWNLOADS)
  is very old, and doesn't know about or1k. It would have to be
  overridden by our copy in support/gnuconfig/ (also config.guess).

Best regards,

Thomas
-- 
Thomas Petazzoni, co-owner and CEO, Bootlin
Embedded Linux and Kernel engineering and training
https://bootlin.com
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot