[OpenSIPS-Devel] [OpenSIPS/opensips] 1dd136: db: fix pi_xml_parse_file node leak

[Răzvan Crainea]

  Branch: refs/heads/master
  Home:   https://github.com/OpenSIPS/opensips
  Commit: 1dd136b7f8aaffea414973d1f5ba7038f9cc5728
      https://github.com/OpenSIPS/opensips/commit/1dd136b7f8aaffea414973d1f5ba7038f9cc5728
  Author: Razvan Crainea <razvan at opensips.org>
  Date:   2026-08-17 (Mon, 17 Aug 2026)

  Changed paths:
    M db/pi_xml.c

  Log Message:
  -----------
  db: fix pi_xml_parse_file node leak

Fixes Coverity CID 562691.


  Commit: c06d9812e8954b541e180cad13f9844604401a15
      https://github.com/OpenSIPS/opensips/commit/c06d9812e8954b541e180cad13f9844604401a15
  Author: Razvan Crainea <razvan at opensips.org>
  Date:   2026-08-17 (Mon, 17 Aug 2026)

  Changed paths:
    M modules/xcap/uri.c

  Log Message:
  -----------
  xcap: reject overlong SIP URI normalization input

Reject invalid or oversized XCAP-provided SIP URIs before unescaping.

Security advisory: GHSA-prfg-gmxf-8v59

Thanks to zx (Jace) @manus-use on GitHub for the report.


  Commit: abd0bff062f5a19465bb52d400c3743be9fc6411
      https://github.com/OpenSIPS/opensips/commit/abd0bff062f5a19465bb52d400c3743be9fc6411
  Author: Razvan Crainea <razvan at opensips.org>
  Date:   2026-08-17 (Mon, 17 Aug 2026)

  Changed paths:
    M modules/enum/enum.c

  Log Message:
  -----------
  enum: reject overlong ISN R-URI users

Reject R-URI user values that cannot fit isn_query()'s buffer.

Security advisory: GHSA-x5hj-r293-vpw4

Thanks to zx (Jace) @manus-use on GitHub for the report.


  Commit: 0893129568e27d306163f8318617a14f61aeef8b
      https://github.com/OpenSIPS/opensips/commit/0893129568e27d306163f8318617a14f61aeef8b
  Author: Razvan Crainea <razvan at opensips.org>
  Date:   2026-08-17 (Mon, 17 Aug 2026)

  Changed paths:
    M modules/mediaproxy/mediaproxy.c

  Log Message:
  -----------
  mediaproxy: bound SDP connection line insertion

Avoiding unsafe strncat() appends and check whether buffer fits.

Security advisory: GHSA-ggff-j9pg-p572

Thanks to zx (Jace) @manus-use on GitHub for the report.


  Commit: e12c990d2587e92814fafecb53dc54d7865ef8c5
      https://github.com/OpenSIPS/opensips/commit/e12c990d2587e92814fafecb53dc54d7865ef8c5
  Author: Razvan Crainea <razvan at opensips.org>
  Date:   2026-08-17 (Mon, 17 Aug 2026)

  Changed paths:
    M modules/pua/hash.c
    M modules/pua/hash.h
    M modules/pua/send_publish.c

  Log Message:
  -----------
  pua: reject overlong publish ETags

Reject too long SIP-ETag values before storing them from PUBLISH replies

Security advisory: GHSA-5w5j-xrr5-wr49

Thanks to zx (Jace) @manus-use on GitHub for the report.


Compare: https://github.com/OpenSIPS/opensips/compare/d5d1760ff135...e12c990d2587

To unsubscribe from these emails, change your notification settings at https://github.com/OpenSIPS/opensips/settings/notifications