Buildroot Archive on lore.kernel.org
 help / color / mirror / Atom feed
* [Buildroot] Asterisk for Buildroot 2024.02+
@ 2023-12-18 12:58 Peter Korsgaard
  2023-12-18 16:49 ` Yann E. MORIN
  0 siblings, 1 reply; 2+ messages in thread
From: Peter Korsgaard @ 2023-12-18 12:58 UTC (permalink / raw)
  To: buildroot

FYI,

The Asterisk version in Buildroot (16.30.1) is EOL upstream since
October:

https://docs.asterisk.org/About-the-Project/Asterisk-Versions/

Recently a high severity (CVSS 7.5) security vulnerability was found:

https://github.com/asterisk/asterisk/security/advisories/GHSA-hxj9-xwr8-w8pq

16.x is most likely also affected, but no patch is available
upstream. We really need to move to a supported version (E.G. 18.x)
before the 2024.02 release. Is there interest in doing so or should the
package be dropped instead?

-- 
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: [Buildroot] Asterisk for Buildroot 2024.02+
  2023-12-18 12:58 [Buildroot] Asterisk for Buildroot 2024.02+ Peter Korsgaard
@ 2023-12-18 16:49 ` Yann E. MORIN
  0 siblings, 0 replies; 2+ messages in thread
From: Yann E. MORIN @ 2023-12-18 16:49 UTC (permalink / raw)
  To: Peter Korsgaard; +Cc: buildroot

Peter, All,

On 2023-12-18 13:58 +0100, Peter Korsgaard spake thusly:
> FYI,
> 
> The Asterisk version in Buildroot (16.30.1) is EOL upstream since
> October:
> 
> https://docs.asterisk.org/About-the-Project/Asterisk-Versions/
> 
> Recently a high severity (CVSS 7.5) security vulnerability was found:
> 
> https://github.com/asterisk/asterisk/security/advisories/GHSA-hxj9-xwr8-w8pq
> 
> 16.x is most likely also affected, but no patch is available
> upstream. We really need to move to a supported version (E.G. 18.x)
> before the 2024.02 release. Is there interest in doing so or should the
> package be dropped instead?

I unfortunately no longer have any need for asterisk, and I have no way
of testing a new version any longer either.

So, unless someone steps up, we'll have to drop the package.

Regards,
Yann E. MORIN.

-- 
.-----------------.--------------------.------------------.--------------------.
|  Yann E. MORIN  | Real-Time Embedded | /"\ ASCII RIBBON | Erics' conspiracy: |
| +33 662 376 056 | Software  Designer | \ / CAMPAIGN     |  ___               |
| +33 561 099 427 `------------.-------:  X  AGAINST      |  \e/  There is no  |
| http://ymorin.is-a-geek.org/ | _/*\_ | / \ HTML MAIL    |   v   conspiracy.  |
'------------------------------^-------^------------------^--------------------'
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2023-12-18 16:49 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2023-12-18 12:58 [Buildroot] Asterisk for Buildroot 2024.02+ Peter Korsgaard
2023-12-18 16:49 ` Yann E. MORIN

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox