treewide: replace AUTORELEASE with real PKG_RELEASE

Based on Paul Fertser <fercerpav@gmail.com>'s guidance:
Change AUTORELEASE in rules.mk to:
```
AUTORELEASE = $(if $(DUMP),0,$(shell sed -i "s/\$$(AUTORELEASE)/$(call commitcount,1)/" $(CURDIR)/Makefile))
```

then update all affected packages by:
```
for i in $(git grep -l PKG_RELEASE:=.*AUTORELEASE | sed 's^.*/\([^/]*\)/Makefile^\1^';);
do
make package/$i/clean
done
```

Signed-off-by: Kuan-Yi Li <kyli@abysm.org>

Merge pull request #817 from micmac1/pj2131

pjproject: bump to 2.13.1

pjproject: bump to 2.13.1

1. add "/refs/tags" to PKG_SOURCE_URL, otherwise the downloaded file is
   broken now
2. bump minor version, includes security related fixes, see [1], [2] and
   [3]

[1] https://github.com/pjsip/pjproject/security/advisories/GHSA-9pfh-r8x4-w26w
[2] https://github.com/pjsip/pjproject/security/advisories/GHSA-cxwq-5g9x-x7fr
[3] https://github.com/pjsip/pjproject/security/advisories/GHSA-q9cp-8wcq-7pfr

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #815 from micmac1/ast-20.3.0

asterisk: bump to 20.3.0

asterisk: bump to 20.3.0

- bump to 20.3.0
- new modules: app-broadcast, app-if, app-signal, func-export,
  res-pjsip-aoc and res-pjsip-rfc3329
- remove "--without-vpb", not available anymore
- add configuration file for res-http-media-cache
- drop libsrtp2 from res-pjproject dependencies, see changes in
  pjproject package
- refresh patches
- add upstream patch
  180-res_crypto.c-Avoid-using-the-non-portable-ALLPERMS-m.patch to fix
  build [1]

[1] https://github.com/asterisk/asterisk/issues/149

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

pjproject: bump to 2.13

- bump to 2.13
- new option "--disable-libsrtp" now available so we can get rid of
  dependency on libsrtp2 (asterisk's SRTP support doesn't depend on pjproject)
- new option "--disable-upnp"
- 0007-execinfo.patch not required anymore, pjproject now checks for
  __GLIBC__
- sync patches with asterisk 20.3.0

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #812 from micmac1/kam-py-3.11-patches

kamailio: add patches for app_python3

Merge pull request #811 from micmac1/fs-py-3.11-broken

freeswitch: mark mod-python3 BROKEN

kamailio: add patches for app_python3

Python was updated to 3.11 and app_python3 doesn't compile anymore.
This commit adds three upstream patches to resolve this.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

freeswitch: mark mod-python3 BROKEN

mod-python3 is not compatible with Python 3.11 currently, mark it
BROKEN.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #810 from micmac1/fs-musl-1.2.4

freeswitch: fix compile against musl-1.2.4

freeswitch: fix compile against musl-1.2.4

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

dahdi-linux: add multiple patch fixing compilation warning

Add multiple patch fixing compilation warning and obvius code bug.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

rtpengine: add patch fixing compilation warning for kernel module

Add patch fixing compilation warning for kernel module.
Always dynamically allocate buffer for proc_control_read_write.
Fix compilation warning:
/builder/shared-workdir/build/build_dir/target-arm_cortex-a8+vfpv3_musl_eabi/rtpengine-no-transcode/rtpengine-mr10.5.2.6/kernel-module/xt_RTPENGINE.c: In function 'proc_control_read_write':
/builder/shared-workdir/build/build_dir/target-arm_cortex-a8+vfpv3_musl_eabi/rtpengine-no-transcode/rtpengine-mr10.5.2.6/kernel-module/xt_RTPENGINE.c:3573:1: error: the frame size of 1272 bytes is larger than 1024 bytes [-Werror=frame-larger-than=]
 3573 | }
      | ^

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

Merge pull request #807 from micmac1/ci-up

CI: sync up with changes in packages repo

CI: sync up with changes in packages repo

Catch up with the changes in the packages repository. All changes are
manual cherry picks from the packages repo and listed below.

ci: update github actions to v3

Update checkout and upload-artifact action to v3 to mute nodejs
deprecation warning.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 52570d4242822e3db678f5484c2ca3e72f485d52)

CI: deprecate $(AUTORELEASE) via comments

Autorelease causes some issues like heavy bandwidth usage as well as
non-deterministic package releases whenever someone doesn't use the full
git log.

With this comment all modified packages are checked and if they use
the autorelease feature, kindly comment to the user to change that.

Signed-off-by: Paul Spooren <paul.spooren@rhebo.com>
[ move check to separate workflow to handle ci limitation ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 61d59fd54254b97218aa4e861b1f933d5c5e0bc4)

ci: only comment AUTORELEASE deprecation if exists

If it doesn't exists, don't confuse the contributors.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 75ff4ba358aa0357f0af62cb980568bdc8d390a1)

github-ci: error on any shell errors

Enable `errexit` and `nounset` [POSIX shell options][1]
in `.github/workflows/entrypoint.sh` so that the script fails
if any command within the script fails.

[1]: https://pubs.opengroup.org/onlinepubs/9699919799//utilities/V3_chap02.html#set

Reported-by: Marius Dinu <m95d+git@psihoexpert.ro>
Fixes: https://github.com/openwrt/packages/issues/19953
Signed-off-by: Alois Klink <alois@aloisklink.com>
(cherry picked from commit 18d3c529fa4ab8dafcf6c147cf3cb55792d8ca10)

CI: update build architectures

Removed arc_archs - archs38 was marked as source-only [1].
Renamed powerpc_8540 to powerpc_8548 [2].

1. https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=c01641bcc7236d2e2de3ea65444b0cf2898df351
2. https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=2cad88b99fdae9766de84e6c1cb56f111eb53748

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 29041e8f8eb42dcd8eee03602348b39dbf9d0c70)

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #806 from dhewg/buildflags

kamailio: refactor to use PKG_BUILD_FLAGS:=no-mips16

Merge pull request #802 from cotequeiroz/baresip

baresip: fix parallel build

Merge pull request #805 from micmac1/sccp-autoconf-2.70

asterisk-chan-sccp: autoconf fixes

kamailio: refactor to use PKG_BUILD_FLAGS:=no-mips16

See commit 5c545bdb "treewide: replace PKG_USE_MIPS16:=0 with
PKG_BUILD_FLAGS:=no-mips16" on the main repository.

Signed-off-by: Andre Heider <a.heider@gmail.com>

asterisk-chan-sccp: autoconf fixes

Since OpenWrt updated autoconf to 2.71 configure fails, because
"$ac_dir" is now empty when configure attempts to run
"./tools/versioncheck". With previous autoconf "$ac_dir" contained
"autoconf" at this point in the script.

As a workaround "$ac_dir" is replaced with "$ac_aux_dir", which
incidentally contains "autoconf".

Also a build dependency is added for gettext-full, as it provides
iconv.m4. Previously this was provided by libiconv, but not anymore.
Without iconv.m4 autoreconf fails.

Some patches were refreshed to allow CI to pass.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #804 from micmac1/fs-1109

freeswitch: bump to 1.10.9

freeswitch: bump to 1.10.9

ZRTP support removed as it was dropped upstream.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

spandsp3: bump to latest commit

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

sofia-sip: bump to 1.13.14

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

libks: bump to 1.8.2

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #803 from cotequeiroz/OpenSSL3

freeswitch,coturn: Prepare for OpenSSL 3.0 upgrade

baresip: fix parallel build

Include an upstream patch to fix random parallel build failures, such
as:

  CC [M]  build-arm/modules/ctrl_dbus/ctrl_dbus.o
modules/ctrl_dbus/ctrl_dbus.c:69:10: fatal error: baresipbus.h: No such
file or directory
   69 | #include "baresipbus.h"
      |          ^~~~~~~~~~~~~~

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

coturn: update to 4.6.1

Added a patch from Gentoo that brings compatiblity with OpenSSL 3.0.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

freeswitch: allow building with OpenSSL 3.0

Add -Wno-error=deprecated-declarations to CFLAGS to allow usage of
deprecated API.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

Merge pull request #797 from micmac1/rtpe-lws-openssl

rtpengine: update libwebsockets dependency

rtpengine: update libwebsockets dependency

The rtpengine daemon requires lws_get_ssl(). This function is not
available in libwebsockets-mbedtls. This commit updates the dependency
to libwebsockets-openssl.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #795 from micmac1/sof-1.13.11

sofia-sip: bump to 1.13.11

sofia-sip: bump to 1.13.11

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #791 from micmac1/ast-20.0.1

asterisk: bump to 20.0.1

asterisk: bump to 20.0.1

Fixes

AST-2022-007
AST-2022-008
AST-2022-009

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

pjproject: backport security fixes from 2.13

Backports two security fixes (c4d3498 and 450baca) from pjproject 2.13.
Source: asterisk 20.0.1.

Also drop AUTORELEASE as OpenWrt project wants to get rid of it.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #790 from micmac1/init-return

Treewide: Use return in init scripts instead of exit

rtpproxy: use return in init script

"check_ipaddr()" & "start_service()" are functions, hence "return"
should be used instead of "exit".

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

kamailio: use return in init script

"check_listen()" & "start_service()" are functions, hence "return"
should be used instead of "exit".

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

freeswitch: use return in init script

"start_service()" is a function, hence "return" should be used instead
of "exit".

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

coturn: use return in init script

"start_service()" is a function, hence "return" should be used instead
of "exit".

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

baresip: use return in init script

"start_service()" is a function, hence "return" should be used instead
of "exit".

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

asterisk: use return in init script

"start_service()" is a function, hence "return" should be used instead
of "exit".

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #789 from micmac1/fs-libshout-deprecated

freeswitch: workaround mod-shout compile failure

freeswitch: workaround mod-shout compile failure

The recent libshout update causes compile failures due to deprecation.
This works around it. Can be removed once issue is fixed upstream.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #785 from micmac1/ast20

asterisk: bump to 20.0.0 LTS

asterisk: bump to 20.0.0 LTS

No longer existing modules removed from OpenWrt Makefile. Same for
configure switches. Patches refreshed.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #784 from micmac1/kam562

kamailio: bump to 5.6.2

kamailio: bump to 5.6.2

- 4 new modules: misctest, posops, siprepo & slack
- 140-redis_use_pkg-config.patch refreshed
- 160-ldap-rename-private-function-ldap_connect.patch and
  170-core-add-support-for-time64-libcs.patch removed (applied
  upstream)
- 160-siputils-fix-time_t-warning-and-a-typo.patch added to fix time_t
  warning (sent upstream, see [1])

[1] https://github.com/kamailio/kamailio/pull/3266

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

kamailio: fix dep for keepalive module

Currently the dependency is in the wrong position.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

kamailio: add descriptions via BuildKamailioModule

The Makefile currently advertises that descriptions can be added by
specifying a string in argument 3 of BuildKamailioModule, but there's
actually no mechanism for this. This commit adds the missing pieces.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #783 from micmac1/fs-1.10.8

freeswitch: bump to 1.10.8

freeswitch: bump to 1.10.8

- minor version bump
- mod-dingaling, mod-unimrcp and apr-util got removed from source tar
  ball, prompting some cleanup
- patches refreshed

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

libks: bump to 1.8.0

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #781 from micmac1/rtpengine-mqtt

rtpengine: add mqtt dep

rtpengine: add mqtt dep

rtpengine will use the lib if found, so add it.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #780 from micmac1/rtpengine-10.5.2.6

rtpengine: bump to 10.5.2.6

rtpengine: bump to 10.5.2.6

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #777 from micmac1/sof-1.13.9

sofia-sip: bump to 1.13.9

Merge pull request #778 from micmac1/sngrep-1.6.0

sngrep: bump to 1.6.0

sngrep: bump to 1.6.0

- use pcre2 instead of pcre
- add zlib support

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

sofia-sip: bump to 1.13.9

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #776 from micmac1/ast-18.4

asterisk: bump to 18.14.0 (includes pjproject bump)

asterisk: bump to 18.14.0

- add new modules
- res-geolocation depends on asterisk being built with libxlt support,
  but to make libxslt a general dependency is probably not a good idea
  for small devices, so this adds a config option
  ASTERISK_LIBXSLT_SUPPORT that is off by default except on x86_64
  builds
- correct some module titles by removing the extraneous "support" string
- refresh patches
- 170-time-add-support-for-time64-libcs.patch,
  180_build-fix-bininstall-launchd-issue-on-cross-platfrom.patch and
  190-logger-workaround-woefully-small-BUFSIZ-in-MUSL.patch removed as
  included in upstream release
- added 170-menuselect-force-use-of-xml2-config.patch as upstream
  switched to use pkg-config for libxml2 detection, which would be fine,
  except OpenWrt's host libxml2 is static and Asterisk can't handle that

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

pjproject: bump to 2.12.1

- add "--disable-android-mediacodec" to configure
- add EXCLUDE_APP=1 to "make" calls so some apps aren't built (speeds up
  the build a bit)
- drop "sed" call as no longer needed
- drop uclibc related patches
  (0002-uclibc-linker-unrecognized-options.patch and
  0003-non-gnu-pthreads.patch)
- update 0004-config_site.patch to sync up with Asterisk 18.14.0
- drop 0005-remove-hardcoded-lstdc++.patch as uclibcxx was removed from
  OpenWrt
- update 0006-fix-pkg_config-file.patch as there were some changes in
  this area upstream
- add 0007-execinfo.patch to prevent errors due to missing <execinfo.h>
- sync patches with 18.14.0

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #775 from micmac1/chan-dongle-iconv-update

asterisk-chan-dongle: adapt BUILD_NLS handling

asterisk-chan-dongle: adapt BUILD_NLS handling

openwrt recently stopped using libiconv-stub in the BUILD_NLS=n case.
Instead the libc's iconv has to be used.

This commit changes the iconv include path passed to
asterisk-chan-dongle for the BUILD_NLS=n case to
$(TOOLCHAIN_DIR)/include. That's where musl and glibc store iconv.h.

Also, the patch 200-fix-iconv-detection.patch gets replaced with a sed
script that only runs in the BUILD_NLS=y case.

And finally, $(AUTORELEASE) is added.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #773 from micmac1/fs-gcc-12

freeswitch: workaround for compile fail with gcc 12

freeswitch: workaround compile fail with gcc 12

An issue report already exists upstream [1].

[1] https://github.com/signalwire/freeswitch/issues/1670

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #772 from PolynomialDivision/fix-compile

rtpengine: fix compilation with iptables 1.8.8

Thanks!

rtpengine: fix compilation with iptables 1.8.8

The extension handling changed [0,1]. Fix compilation with iptables
1.8.8 [2].

[0] - https://git.netfilter.org/iptables/commit/?id=ef108943f69a6e20533d58823740d3f0534ea8ec
[1] - https://git.netfilter.org/iptables/commit/?id=6c689b639cf8e2aeced8685eca2915892d76ad86
[2] - https://github.com/openwrt/openwrt/pull/9886

Signed-off-by: Nick Hainke <vincent@systemli.org>

Merge pull request #768 from micmac1/github-sync-with-packages

CI: sync up with changes in packages repo

CI: sync up with changes in packages repo

Catch up with the changes in the packages repository. All changes are
manual cherry picks from the packages repo and listed below.

github: adapt templates

Remove refs to LEDE and use "OpenWrt" instead of "OpenWRT"

Remove instructions on self-checking pull request content for the
following considerations

 - The checks are now enforced by travis autocheck scripts
 - Github now prompts users to refer to the contributing guide on
   submitting new issue and pull request

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit f552f738e2d4bb1fc15acde8b7410e3d37586e2f)

repo: Add more information to the issue template

Rephrase the template a bit and add information about
older releases and forks.

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
(cherry picked from commit 31179ef2a414412871c1c23a9b3e506a5eab1ef8)

CI: use new `openwrt` Docker username

We now own `openwrtorg` and `openwrt`, where the latter replaces the
former. Slowly migrate over.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit b164a3aa32caa181feff8074ecce3a42b052b060)

CI: define matrix individually and add targets

This allows more specific definition per test, like on which target
packages should be compiled.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 3701000051afe81c0f6c166a924828706cf21b05)

CI: reformat extra long line

Better readability on split screens.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 81f7461e66c877a9d1f6c751fd92252e950370c3)

CI: test build dependent packages

By using OPKGs `whatdepends` all packages dependent on a library are
printed. Use that feature to obtain packages which a version change may
break and build them as well.

Change "default" packages to contain a lib on which other packages
depend, instead of compiling `tmux` compile `attendedsysupgrade-common`
on which other packages depend.

Ignore any LuCI packages which only contains translations.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit c0d0c64f6ca1cbed2586812cad9d7da7b6e5e542)

CI: revert adding of *depending* packages

While the idea may make sense the current implementation is faulty.
Problem is that OpenWrt uses the folder name of packages within the
build system while `opkg` spits out the actual packages names.

An example, compiling the packages of folder `vim` (`make
package/vim/compile`) creates a package called `xxd`, where `make
package/xxd/compile` would fail.

The current implementation uses `opkg` to figure out dependent packages,
but the resulting names do not match the above mentioned folders.

Revert this for now until we come up with a better implementation to
avoid false positive CI failures.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit a2bda4cc69e4121dccba097578bbd0bd40d0675d)

github-ci: fix small typo

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 05a3011b00f7128c5f46c2d05999937fc01dc2ca)

CI: update SDK action to v3

No also check mirror hashes and badly formated init files

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 291d1f255abefbc05e53bb3019ed7a13e1826ef2)

github-ci: also build mipsel_24kc / mt7621

Signed-off-by: Kevin David <kevin.p.david@gmail.com>
This seems like a fairly popular configuration and is at least handy for me for temporary testing.

(cherry picked from commit a5de3d04557eccd1db58a35ab9f76b38eab4bfb4)

artifacts: use git commit sha in name

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit bbf983721cf41fd94388b16ce90f018d6c0496f5)

CI: add PKG-INFO metadata file

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit a40c1b3e442eccbf0619f06b473705f4a4a0ac6d)

CI: do not crash during PKG-INFO generation if there are no packages

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit b5132de5cf4f7d0562445cf3c65f9f1a4bcb1bbf)

CI: fix runtime testing for non master branch

The runtime testing always ran on master branch aka snapshots since the
branch wasn't passed over to the container execution!

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit f535d770901674d7d9f3d8cd9abe566d9db63ebe)

ci: use openwrt/gh-action-sdk@v4

In order to use feeds from GH mirror for GH actions, thus saving a lot
of resources being wasted. While at it fix whitespace issue.

Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit b1355832a05f96d96081044a90b4c9137eb15fad)

github: fix typo in issue template

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit ffdc2b09eada82dd563f23a9a51e4ef8e233920f)

ci: Look for changed packages in the PR branch only

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 6b2294ac379ecae55993a8faa583910423f620e7)

ci: Use openwrt/gh-action-sdk@v5

The previous build errors with v5 have been fixed. This version builds
packages as a normal user instead of as root.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 37f9b77b01fd148c946dc313869602fb8203eaea)

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #767 from micmac1/sof-1.13.8

sofia-sip: bump to 1.13.8

sofia-sip: bump to 1.13.8

Some security issues were fixed. Upstream labelled them as follows:

GHSA-79jq-hh82-cv9g: Fix Out-of-bound read in sip_method_d
GHSA-g3x6-p824-x6hm: Fix Out-of-bound read in url_canonize2 and
                     url_canonize3
GHSA-8w5j-6g2j-pxcp: Fix Heap-buffer-overflow in parse_descs and
                     parse_message

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #764 from micmac1/libsrtp-openssl

libsrtp: use OpenSSL

libsrtp: use OpenSSL

Use OpenSSL instead of the internal crypto backend. Everything in
OpenWrt that links to libsrtp2 depends on OpenSSL anyway.

Upsides:

  - the libsrtp2 package size shrinks a bit (for example from 35 to 24
    KiB on ath79)
  - allows to use more cipher suites
  - may allow for hardware acceleration

Closes #763

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #759 from micmac1/ast-disable-libxslt

asterisk: add --without-libxslt to configure

asterisk: add --without-libxslt to configure

Since upstream commit b40c4d59b1dd803cad79060fb5b5a48d249ba578
"--disable-xmldoc" does no longer prevent the linking to libxslt, if
available. If that's the case one is greeted with the following error:

Package asterisk is missing dependencies for the following libraries:
libxslt.so.1

This commit explicitly disables the use of libxslt, to avoid the
dependency.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #756 from micmac1/ast-18.11.2

asterisk: bump to 18.11.2

asterisk: add logger patch

Add a patch from Philip that got upstreamed. This is in reference to
issue #737.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

asterisk: replace time64 patch

This replaces the current patch with the one upstreamed by Philip.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

asterisk: bump to version 18.11.2

- add two new modules (app_sf and func_json)
- update 100-build-reproducibly.patch as upstream refactored some of the
  code
- refresh patches

This bump includes fixes for the following security issues:

https://downloads.asterisk.org/pub/security/AST-2022-001.html
https://downloads.asterisk.org/pub/security/AST-2022-002.html
https://downloads.asterisk.org/pub/security/AST-2022-003.html

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

pjproject: sync patches with asterisk 18.11.2

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #739 from pprindeville/issue#738

asterisk: don't send stdout to syslog by default

Merge pull request #752 from micmac1/pj-AST

pjproject: add upstream security fixes

pjproject: add upstream security fixes

Details:

https://downloads.asterisk.org/pub/security/AST-2022-004.html
https://downloads.asterisk.org/pub/security/AST-2022-005.html
https://downloads.asterisk.org/pub/security/AST-2022-006.html

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #751 from micmac1/mod-av-BROKEN

freeswitch: mark mod-av BROKEN

freeswitch: mark mod-av BROKEN

FS is not yet ready for FFMPEG 5.0. Upstream has a related issue already
([1]).

Also move to AUTORELEASE.

[1] https://github.com/signalwire/freeswitch/issues/1560

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #749 from micmac1/rtpengine-host-perl

rtpengine: use perl/host when building

rtpengine: use perl/host when building

utils/const_str_hash is called by rtpengine build system. The Perl
script uses shebang "#!/usr/bin/perl" and depends on perl-IPC-Cmd. If
this is missing the build will fail:

../utils/const_str_hash < "control_ng.c" > "control_ng.strhash.c"
Can't locate IPC/Cmd.pm in @INC (you may need to install the IPC::Cmd module) (@INC contains: /usr/local/lib64/perl5/5.34 /usr/local/share/perl5/5.34 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5) at ../utils/const_str_hash line 6.
BEGIN failed--compilation aborted at ../utils/const_str_hash line 6.
make[4]: *** [../lib/common.Makefile:46: control_ng.strhash.c] Error 2

OpenWrt does not depend on perl-IPC-Cmd being available, so this commit
makes rtpengine build depend on perl/host, which provides this Perl
module.

Closes #748

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #745 from micmac1/pj-AST-2021-009-2

pjproject: add missing patch for AST-2021-009

pjproject: add missing patch for AST-2021-009

AST-2021-009 has two patches, the second of which was missed.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #744 from micmac1/siproxd-up

siproxd/libosip2: update to latest

siproxd: update to latest git

This includes time64 fixes plus allows reproducible builds.

Also switch to $(AUTORELEASE)

Closes #613
Closes #742

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

libosip2: update to 5.3.0

Switch to $(AUTORELEASE).

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #740 from svlobanov/kamailio-fix-build-on-macos

kamailio: fix build on macos

Merge pull request #743 from micmac1/bare-aud-sup

baresip: only build gst with AUDIO_SUPPORT enabled

kamailio: fix build on macos

kamailio macos build fails due to kamailio Makefile checks OS
(`uname -s`) and OSREL (`uname -r`). If build host is not Linux,
then these checks will provide different results, but OpenWrt is
always Linux so target OS should be always Linux.

This patch explicitly specifies OS=linux and OSREL=$(LINUX_UNAME_VERSION)
to avoid using build host values for target build.

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>