Debian Patches

Status for kamailio/6.1.1-2

Patch Description Author Forwarded Bugs Origin Last update
no_INSTALL_file.patch Don't copy the INSTALL file to the docs dir Victor Seva <linuxmaniac@torreviejawireless.org> no 2023-09-29
Check-only-major-OpenSSL-version.patch Check only major OpenSSL version
The version check was written during OpenSSL 0.9 era.
It is not needed in Debian and only getting in the way.
Bastian Germann <bage@debian.org> no 2025-08-22
upstream/0001-xhttp_prom-include-global-tags-in-user-defined-metri.patch xhttp_prom: include global tags in user-defined metrics
(cherry picked from commit 9f7838561daece724a9fa877cd140f744c81d452)
Joel Serrano <joel@joelserrano.com> no 2026-01-30
upstream/0002-tm-disable-char-substitution-for-tm-uac-rpc.patch tm: disable char substitution for tm uac rpc
- undocumented unexpected behaviour
- can be enabled with compile option (considered to be modparam if
needed)

(cherry picked from commit 6796c967ab07616a9e749858de58f5e920ea9fdf)
Daniel-Constantin Mierla <miconda@gmail.com> no 2026-03-05
upstream/0003-tm-remove-unused-define-for-mi-fifo.patch tm: remove unused define for mi fifo
(cherry picked from commit 7b67d5a719b7ba0f5a34360e4713425a85911613)
Daniel-Constantin Mierla <miconda@gmail.com> no 2026-03-05
upstream/0004-cmake-Add-unistring-module.patch cmake: Add unistring module
- Add as a find_package to allow easier custom installs

(cherry picked from commit 46302eb4f5d7b2c0e85f19ff09a25fc9c74a2712)
Xenofon Karamanos <xk@gilawa.com> no 2026-01-30
upstream/0005-websocket-cmake-Use-find_package-to-find-unistring.patch websocket: cmake: Use find_package to find unistring
(cherry picked from commit f0437e30ce60fdbab1f56963ca15d04c9da43c30)
Xenofon Karamanos <xk@gilawa.com> no 2026-01-30
upstream/0006-phonenum-cmake-Fix-a-typo.patch phonenum: cmake: Fix a typo
(cherry picked from commit a898ee597e959cfe288853ed3521e7afb8e45e75)
Boris Korzun <drtr0jan@yandex.ru> no 2026-03-09
upstream/0007-cmake-Update-dbschema-generation-flow.patch cmake: Update dbschema generation flow
- dbschema will build schema files into db files and copy them to source directory

- install will copy source tree files (utils/kamctl/db*) to install folder

(cherry picked from commit 9631c04c09fa128718ecd0fa0cb614188625fafd)
Xenofon Karamanos <xk@gilawa.com> no 2026-03-05
upstream/0008-dialog-Check-for-Via-header.patch dialog: Check for Via header
(cherry picked from commit 8f1565799c8ba55805005a3e4880d7b9808c6fc8)
Bastian Triller <bastian.triller@gmail.com> no 2026-03-13
upstream/0009-core-fix-swapped-comparison-in-atomic_stdatomic.h-de.patch core: fix swapped comparison in atomic_stdatomic.h dec/inc_and_test

atomic_fetch_sub_explicit() returns the value BEFORE the subtraction.
To test whether the result reached zero, dec_and_test must compare the
old value against 1 (old=1, new=1-1=0). The code compared against -1,
which can never be true for a positive refcount, so the "reached zero"
condition was never triggered.

The symmetric bug existed in inc_and_test: it compared the pre-increment
value against 1 instead of -1.

This affected all 8 _and_test functions (int/long x relaxed/seq_cst).

The practical impact is that any refcount-guarded free (TM transactions,
TCP connections, DNS cache entries, config blocks, WebSocket connections)
never fired on aarch64, causing shared memory to leak monotonically.


(cherry picked from commit 79f5265057c99a6058bb92a3c0992fa1b9b0c121)
Norm Brandinger <n.brandinger@gmail.com> no 2026-03-09
upstream/0010-tls-fix-tls_my_subject-tls_peer_subject-always-retur.patch tls: fix $tls_my_subject/$tls_peer_subject always returning null

The PVs $tls_my_subject, $tls_my_issuer, $tls_peer_subject and
$tls_peer_issuer are registered with pv_comp() as their getter with
only PV_CERT_{LOCAL,PEER}|PV_CERT_{SUBJECT,ISSUER} flags — no
PV_COMP_* bit. After pv_comp() strips the cert/subject flags,
ind_local becomes 0, hitting the default: branch which sets
nid=NID_undef. get_comp() then called X509_NAME_get_index_by_NID()
with NID_undef which always returns -1, causing all four PVs to
silently return null regardless of the certificate content.

Fix by handling NID_undef in get_comp() as a request for the full
distinguished name, using X509_NAME_oneline() to return the complete
subject or issuer string (e.g. /O=Example/CN=host.example.com).

Cherry-picked from 86549be22f92442c192281bedcce1c3a1f80cac1
S-P Chan <shihping.chan@gmail.com> no 2026-03-12
upstream/0011-cmake-don-t-add-executable-perms-to-kamctl-kamctl.-f.patch cmake: don't add executable perms to kamctl/kamctl.* files
> W: kamailio: executable-not-elf-or-script [usr/lib/x86_64-linux-gnu/kamailio/kamctl/kamctl.base]

(cherry picked from commit bbf67a6d94427da38d32b361e15175bce3d2195f)
Victor Seva <vseva@sipwork.pro> no 2026-03-16
upstream/0013-cmake-Add-back-missing-definitions.patch cmake: Add back missing definitions
- b4df3a4e9 removed some definition by mistake
Xenofon Karamanos <xk@gilawa.com> no 2026-03-24
upstream/0014-ims_charging-Free-avp-after-traversing.patch ims_charging: Free avp after traversing
(cherry picked from commit 8d71214cddf1a82b229e0fb0ab11139878536178)
Xenofon Karamanos <xk@gilawa.com> no 2026-03-24
upstream/0015-cdp-copy-data-before-freeing.patch cdp: copy data before freeing
(cherry picked from commit d08376c33ee97613eb99b00405af86b5dba45738)
Xenofon Karamanos <xk@gilawa.com> no 2026-03-23
upstream/0016-presence-Validate-watcher-URI-length-before-copying.patch presence: Validate watcher URI length before copying
(cherry picked from commit e134644d16ea54c17598e880f1cc791715f4ea31)
Xenofon Karamanos <xk@gilawa.com> no 2026-03-24
upstream/0017-tls-fix-segfault-on-musl-libc-due-to-uninitialized-p.patch tls: fix segfault on musl libc due to uninitialized pthread TSD

On musl libc (Alpine Linux), pthread thread-specific data (TSD) for
the main thread is not initialized until pthread_key_create() is
called at least once. The diagnostic loop in mod_init() calls
pthread_getspecific() with raw integer keys 0-31 before any key has
been created, causing a NULL pointer dereference on musl.

Force TSD initialization by creating and immediately deleting a
pthread key before the diagnostic loop.

(cherry picked from commit d53dc5ab9b95b82a2e8769351d77e33ce8d43bb7)
Joey Golan <joey@synchapp.io> no 2026-03-08
upstream/0018-app_lua-cmake-fix-for-detect-lua5.5.patch app_lua: cmake fix for detect lua5.5
(cherry picked from commit 876b2d1d579c0386fe1c17faa4dd6fdb871889f4)
Victor Seva <vseva@sipwork.pro> no 2026-03-09
upstream/0019-app_lua-cmake-use-proper-lua-include-var.patch app_lua: [cmake] use proper lua include var
> https://cmake.org/cmake/help/latest/module/FindLua.html

(cherry picked from commit 2ccd8a1183690693038606735292e8586d325704)
Victor Seva <vseva@sipwork.pro> no 2026-03-09
upstream/0020-app_lua-cmake-set-missing-LUA_INCLUDE_DIR-when-using.patch app_lua: [cmake] set missing LUA_INCLUDE_DIR when using PkgConfig

> https://cmake.org/cmake/help/latest/module/FindPkgConfig.html

(cherry picked from commit e54590d8758c978a452050a969db078fa3de2fdd)
Victor Seva <vseva@sipwork.pro> no 2026-03-09
upstream/0021-core-dns-Fix-lookup-of-multiple-NAPTR-entries.patch core: dns - Fix lookup of multiple NAPTR entries
- Allow storing NAPTR entries in dns_srv_handle
- When resolving NAPTR, try to reuse entry after initial lookup

(cherry picked from commit 34844f3b235235c9d44681f89098893967e3b408)
Kilian Wöber <Kilian.Woeber@kontron.com> no 2026-01-29
upstream/0022-jsonrpcs-docs-for-transports-and-store_path-field.patch jsonrpcs: docs for transports and store_path field
(cherry picked from commit 8ef9cedc1609ec519fbd029a70960fc27abbf37d)
Daniel-Constantin Mierla <miconda@gmail.com> no 2026-03-10
upstream/0023-tm-uac-keep-the-display-name-set-via-rpc.patch tm: uac - keep the display name set via rpc
(cherry picked from commit 2cc287dff638ea65aca3bf9fd55377f519bcab3f)
Daniel-Constantin Mierla <miconda@gmail.com> no 2026-03-12
upstream/0024-rtpengine-Fix-memory-leak-due-to-overwriting-nodes.patch rtpengine: Fix memory leak due to overwriting nodes
idx should not get reset within the outer loop as it will cause overwriting
of earlier nodes and leaking their mem.

(cherry picked from commit 80ae09ba669f5dba3b02a91c0ef19934843ee412)
Alex Hermann <gaaf@gmx.net> no 2026-03-12
upstream/0025-rtpengine-fix-NULL-pv_spec_t-dereference-in-DTMF-eve.patch rtpengine: fix NULL pv_spec_t dereference in DTMF event handling

Guard all pv_spec_t setf() calls in rtpengine_raise_dtmf_event()
with NULL checks. When DTMF event pvars are not configured via
modparams, the corresponding pv_spec_t pointers remain NULL, causing
a segfault when rtpengine sends a DTMF notification.

(cherry picked from commit 4767914ff7e29771ca4261dea38e8dff2b5dd3d2)
Norm Brandinger <n.brandinger@gmail.com> no 2026-03-10
upstream/0026-tm-fix-uninitialized-variables-tdname-fdname-in-buil.patch tm: fix uninitialized variables tdname/fdname in build_uac_req()

This caused a garbage (very large or negative) value to be passed to
shm_malloc(), resulting in allocation failure for any UAC-initiated
request with no display names in From/To headers - most visibly
dispatcher health check pings (OPTIONS/INFO).

Introduced by: 2cc287dff638ea65aca3bf9fd55377f519bcab3f
("tm: uac - keep the display name set via rpc")


(cherry picked from commit 6cc6b34f18e252f70501bb53d7dd38a326016406)
S-P Chan <shihping.chan@gmail.com> no 2026-03-14
upstream/0027-tm-uac-build-use-bracket-condtion-also-for-length.patch tm: uac build - use bracket condtion also for length
(cherry picked from commit 311157f86c6707be68258df7537345cc8075f90b)
Daniel-Constantin Mierla <miconda@gmail.com> no 2026-03-14
upstream/0028-core-tcp_main-do-not-check-tls-domain-for-non-tls-co.patch core: tcp_main: do not check tls domain for non-tls connections

(cherry picked from commit e1a8b303d9d46fa29c4da44b824fac83e518b29f)
Michael Furmur <furmur@pm.me> no 2026-03-16
upstream/0029-evapi-use-the-appropriate-define-for-tag-size.patch evapi: use the appropriate define for tag size
(cherry picked from commit 14a0d12e1d6e441e3d57fabd8f8aa416d6907056)
Daniel-Constantin Mierla <miconda@gmail.com> no 2026-03-16
upstream/0030-dispatcher-export-ds_ping_fr_timer-to-match-the-docs.patch dispatcher: export ds_ping_fr_timer to match the docs
(cherry picked from commit a1c8a3650143ae2c5a70455453a89d16f5a8fa66)
Daniel-Constantin Mierla <miconda@gmail.com> no 2026-03-17
upstream/0031-dispatcher-small-updates-to-log-messages.patch dispatcher: small updates to log messages
(cherry picked from commit 3000a0c29b7d872842822287dbc5fe55ca00d502)
Daniel-Constantin Mierla <miconda@gmail.com> no 2026-03-17
upstream/0032-pv-zero-terminate-s.replace-transformation-result.patch pv: zero terminate s.replace transformation result
- check the result length

(cherry picked from commit 6d21462c7c3c53dd0fab772d6acf288ff2e4759c)
Daniel-Constantin Mierla <miconda@gmail.com> no 2026-03-21
upstream/0033-msrp-use-macro-to-append-to-buffer.patch msrp: use macro to append to buffer
(cherry picked from commit 61f9db0a1ae8539ac9684ca8439ba975b881b540)
Daniel-Constantin Mierla <miconda@gmail.com> no 2026-03-21
upstream/0034-core-dns-cname-result-allocate-space-for-full-name.patch core: dns cname result - allocate space for full name
(cherry picked from commit fa3587c929e53c37d37b3396511ee165f8affeff)
Daniel-Constantin Mierla <miconda@gmail.com> no 2026-03-22
upstream/0035-core-check-boundaries-init-lb-size-keep-reference-to.patch core: check boundaries - init lb size, keep reference to last boundary list item

- rename local variable for clarity

(cherry picked from commit 762ef9169a0aaabb74989494057d025383d0cb3f)
Daniel-Constantin Mierla <miconda@gmail.com> no 2026-03-22
upstream/0036-nathelper-check-the-length-for-alias-ip-and-port.patch nathelper: check the length for alias ip and port
(cherry picked from commit f2896a23725df88469faa89b1b864727d7bc6534)
Daniel-Constantin Mierla <miconda@gmail.com> no 2026-03-22
upstream/0037-dialog-unref-after-dmq-operation-on-dlg-timeout.patch dialog: unref after dmq operation on dlg timeout
(cherry picked from commit 1b723b4d3ec6df6cf721a3794998c7d2fcab9582)
Daniel-Constantin Mierla <miconda@gmail.com> no 2026-03-22
upstream/0038-dialog-skip-other-state-tests-on-dlg-clean-run-on-a-.patch dialog: skip other state tests on dlg clean run on a match
(cherry picked from commit 6b5b97849c1cda9013ef4090809472e7aa047161)
Daniel-Constantin Mierla <miconda@gmail.com> no 2026-03-22
upstream/0039-nathelper-check-size-of-built-contact-for-select-ope.patch nathelper: check size of built contact for select operation
(cherry picked from commit 3c4746dc3873ce6766eb01fae598c47bbaaa5ea0)
Daniel-Constantin Mierla <miconda@gmail.com> no 2026-03-23
upstream/0040-siputils-find-special-chars-with-limit-for-set-user-.patch siputils: find special chars with limit for set user/host functions

- copy values with size to target buffer

(cherry picked from commit f678332df50ec60a2fb4f587dcd40f217aec32b5)
Daniel-Constantin Mierla <miconda@gmail.com> no 2026-03-23
upstream/0041-core-parser-guard-conditions-for-limits-on-multipart.patch core: parser: guard conditions for limits on multipart body processing

- GH #4656, GH #4657

(cherry picked from commit d20a5bae01f8eaa8e8fec271cd964d6e3b2fb694)
Daniel-Constantin Mierla <miconda@gmail.com> no 2026-03-24
upstream/0042-modules-readme-files-regenerated-modules-.-skip-ci.patch modules: readme files regenerated - modules ... [skip ci] Kamailio Dev <kamailio.dev@kamailio.org> no 2026-03-25
upstream/0046-textopsx-fix-segfault-in-pv_get_hf_iterator_hname.patch textopsx: fix segfault in pv_get_hf_iterator_hname()
Use correct array index [k] instead of [i] after loop exit.
Variable 'i' contains undefined value after the search loop completes,
causing segfault when dereferencing _hf_iterators[i].it->name.

The loop finds the iterator at index i and stores it in k (line 2476),
but then incorrectly uses _hf_iterators[i] instead of _hf_iterators[k]
after the loop (lines 2486, 2489).

Crash backtrace:
#0 pv_get_strval() - dereferencing invalid pointer
#1 pv_get_hf_iterator_hname() at textopsx.c:2489
Passing garbage pointer &_hf_iterators[i].it->name where i is undefined

This bug causes crashes when processing SIP replies with header iterators.

(cherry picked from commit af593600fb7ae0297ce649ff099536aebf490134)
Julien Chavanton <jchavanton@gmail.com> no 2026-03-23
upstream/0047-msrp-reformat-initialized-structures.patch msrp: reformat initialized structures
(cherry picked from commit 2c860b61afd0207e897f47a65e644c0b6a1c54d2)
Daniel-Constantin Mierla <miconda@gmail.com> no 2026-03-25
upstream/0048-tls-fix-loading-of-providers-in-MP-mode-in-OpenSSL-3.patch tls: fix loading of providers in MP-mode in OpenSSL >= 3.3
- like engines in 1.1.1 we cannot use the config mechanism to
load in the child anymore
- provide a new parameter provider_quirks_config that points
to a provider configuration file
- required due to changes in OpenSSL 3.3+
- updated docs

Cherry-picked from b69fbf0001494fe45546c4f847364d34a40f8c57
Cherry-picked from 6a038dc232ddb908c8c1c066bfa0c918fa3566f1
S-P Chan <shihping.chan@gmail.com> no 2026-03-28
upstream/0049-modules-readme-files-regenerated-modules-.-skip-ci.patch modules: readme files regenerated - modules ... [skip ci] Kamailio Dev <kamailio.dev@kamailio.org> no 2026-03-29
upstream/0050-tls-fix-compilation-with-OpenSSL-4.patch tls: fix compilation with OpenSSL 4
Replace direct field access with accessor functions/macros.

Cherry-picked from 403c87522327e005e7387fc464519c8fa19c3719
S-P Chan <shihping.chan@gmail.com> no 2026-03-29
upstream/0051-tls_wolfssl-use-accessors-for-ASN1.patch tls_wolfssl: use accessors for ASN1
Cherry-picked from 6c3807836f6deeefa29508b2a01e09d87a3bdbfc
S-P Chan <shihping.chan@gmail.com> no 2026-03-29
upstream/0052-tls-fix-compilation-on-OpenSSL-1.1.1.patch tls: fix compilation on OpenSSL 1.1.1 S-P Chan <shihping.chan@gmail.com> no 2026-03-30
upstream/0053-tls-fix-builds-with-OpenSSL-3.0.x.patch tls: fix builds with OpenSSL 3.0.x
Cherry-picked from d139f421b85df86d7dbeb97d74c6c65626b2079d
S-P Chan <shihping.chan@gmail.com> no 2026-03-31
upstream/0056-ims_ocs-Free-after-copying-the-values.patch ims_ocs: Free after copying the values
- Remove extra freeavplist call
- Add len check

(cherry picked from commit a56942affd35d41890c23f1d3b5bb519f87ef5ad)
Xenofon Karamanos <xk@gilawa.com> no 2026-03-31
upstream/0057-ims_ocs-Add-memory-check.patch ims_ocs: Add memory check
(cherry picked from commit 53b47f5be5961dfca0142c74d549f7de5ce768b8)
Xenofon Karamanos <xk@gilawa.com> no 2026-03-31
upstream/0058-ims_ocs-Fix-typos-in-comments.patch ims_ocs: Fix typos in comments
(cherry picked from commit 0eb01e0515c84314b0b7e334b348b331afeaf233)
Xenofon Karamanos <xk@gilawa.com> no 2026-03-31
upstream/0059-kamctl-clarify-license-skip-ci.patch kamctl: clarify license [skip ci]
* remove history lines from files

(cherry picked from commit 99f121429b6f97cad647518bfebc7bc984108315)
Victor Seva <vseva@sipwork.pro> no 2026-03-31

All known versions for source package 'kamailio'

Links