https://bugzilla.novell.com/show_bug.cgi?id=839475 https://bugzilla.novell.com/show_bug.cgi?id=839475#c1 Stanislav Brabec changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED --- Comment #1 from Stanislav Brabec 2013-09-18 17:10:56 CEST --- They attempt to include autoconf style config.h. It is bad, as it is not intended to be a public include (it causes symbol conflicts). There is a new development of srtp in Cisco repositories: https://github.com/cisco/libsrtp It contains security fix (bug 828009). I'll check whether it fixes also this bug and whether it makes sense to switch for openSUSE 13.1. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=839475 https://bugzilla.novell.com/show_bug.cgi?id=839475#c3 Stanislav Brabec changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO InfoProvider| |avn@avnsite.com --- Comment #3 from Stanislav Brabec 2013-09-18 22:11:51 CEST --- I have upgraded to Cisco repository (which is not a branch but a regular development migration from CVS to GIT) Then I have created a fix, that installs config.h and rewrites all potentially colliding symbols and include file references to a safe form. Project: https://build.opensuse.org/package/show/home:sbrabec:branches:network:teleph... Packages: http://download.opensuse.org/repositories/home:/sbrabec:/branches:/network:/... Could you test whether you can compile asterisk with it? (Or send me a link to Build Service project.) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=839475 https://bugzilla.novell.com/show_bug.cgi?id=839475#c5 Stanislav Brabec changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO InfoProvider| |avn@avnsite.com --- Comment #5 from Stanislav Brabec 2013-09-26 19:48:45 CEST --- I just finished fixing of headers to be able to compile asterisk-1.8.23.1. Not only that srtp/config.h was incorrect, but also /usr/share/openh323/openh323u.mak from openh323-devel-1.19.0.1 was broken, and pointed to the build directories instead of install directories. Now I can compile asterisk configured by ./configure --with-srtp without any change. Please test, whether it compiles and works in a real world use. Thanks. Note: You may need to install also openh323-debugsource. Asterisk refers to source files, and is is the easiest way to provide source files. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=839475 https://bugzilla.novell.com/show_bug.cgi?id=839475#c7 Stanislav Brabec changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED --- Comment #7 from Stanislav Brabec 2013-10-03 19:53:55 CEST --- Created maintenance requests: obs maintenance request id 202073 for openh323 (12.2, 12.3) obs maintenance request id 202074 for srtp (12.3; just the header fix and nothing else) Submitted to network:telephony and waiting for review and re-sending to Factory: openh323: obs request id 202064 libsrtp: obs request id 202067 (upgrade, fix and all above mentioned changes) srtp: osc drop request id 202068 (rename is not implemented in OBS, drop and create new project with a different name) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=839475 https://bugzilla.novell.com/show_bug.cgi?id=839475#c9 --- Comment #9 from Stanislav Brabec 2013-10-08 14:59:25 CEST --- Yes, it is ugly. That is why I added it only as a Suggests, the weakest dependency possible. The problem is in the /usr/share/openh323/openh323u.mak, which contains variable OH323_SRCDIR. And OH323_SRCDIR is used in the LIBRARY_MAKEFILE rule below. If the OH323_SRCDIR is set to non-existing directory, then for example compilation of asterisk fails. openh323-debuginfo provides files that make asterisk build process happy. Maybe it could be solved by a detailed analysis of the exact purpose of the OH323_SRCDIR and then rewriting of openh323u.mak and/or providing needed source files in the devel package. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=839475 https://bugzilla.novell.com/show_bug.cgi?id=839475#c11 --- Comment #11 from Swamp Workflow Management 2013-10-28 12:04:25 UTC --- openSUSE-RU-2013:1581-1: An update that has one recommended fix can now be installed. Category: recommended (low) Bug References: 839475 CVE References: Sources used: openSUSE 12.3 (src): srtp-1.4.4-2.8.1 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=839475 https://bugzilla.novell.com/show_bug.cgi?id=839475#c Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard| |obs:running:3014:moderate -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.