* [Buildroot] Asterisk for Buildroot 2024.02+
@ 2023-12-18 12:58 Peter Korsgaard
2023-12-18 16:49 ` Yann E. MORIN
0 siblings, 1 reply; 2+ messages in thread
From: Peter Korsgaard @ 2023-12-18 12:58 UTC (permalink / raw)
To: buildroot
FYI,
The Asterisk version in Buildroot (16.30.1) is EOL upstream since
October:
https://docs.asterisk.org/About-the-Project/Asterisk-Versions/
Recently a high severity (CVSS 7.5) security vulnerability was found:
https://github.com/asterisk/asterisk/security/advisories/GHSA-hxj9-xwr8-w8pq
16.x is most likely also affected, but no patch is available
upstream. We really need to move to a supported version (E.G. 18.x)
before the 2024.02 release. Is there interest in doing so or should the
package be dropped instead?
--
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: [Buildroot] Asterisk for Buildroot 2024.02+
2023-12-18 12:58 [Buildroot] Asterisk for Buildroot 2024.02+ Peter Korsgaard
@ 2023-12-18 16:49 ` Yann E. MORIN
0 siblings, 0 replies; 2+ messages in thread
From: Yann E. MORIN @ 2023-12-18 16:49 UTC (permalink / raw)
To: Peter Korsgaard; +Cc: buildroot
Peter, All,
On 2023-12-18 13:58 +0100, Peter Korsgaard spake thusly:
> FYI,
>
> The Asterisk version in Buildroot (16.30.1) is EOL upstream since
> October:
>
> https://docs.asterisk.org/About-the-Project/Asterisk-Versions/
>
> Recently a high severity (CVSS 7.5) security vulnerability was found:
>
> https://github.com/asterisk/asterisk/security/advisories/GHSA-hxj9-xwr8-w8pq
>
> 16.x is most likely also affected, but no patch is available
> upstream. We really need to move to a supported version (E.G. 18.x)
> before the 2024.02 release. Is there interest in doing so or should the
> package be dropped instead?
I unfortunately no longer have any need for asterisk, and I have no way
of testing a new version any longer either.
So, unless someone steps up, we'll have to drop the package.
Regards,
Yann E. MORIN.
--
.-----------------.--------------------.------------------.--------------------.
| Yann E. MORIN | Real-Time Embedded | /"\ ASCII RIBBON | Erics' conspiracy: |
| +33 662 376 056 | Software Designer | \ / CAMPAIGN | ___ |
| +33 561 099 427 `------------.-------: X AGAINST | \e/ There is no |
| http://ymorin.is-a-geek.org/ | _/*\_ | / \ HTML MAIL | v conspiracy. |
'------------------------------^-------^------------------^--------------------'
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2023-12-18 16:49 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2023-12-18 12:58 [Buildroot] Asterisk for Buildroot 2024.02+ Peter Korsgaard
2023-12-18 16:49 ` Yann E. MORIN
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox