ims_qos_npn: check len before get_4bytes()

(cherry picked from commit e6ff84fea2da24e385b75928a3cf6d32e063d8f9)
(cherry picked from commit 801b7629fb038f1d78c787c132144141b84e13f7)

Gbp-Pq: Topic upstream
Gbp-Pq: Name ims_qos_npn-check-len-before-get_4bytes.patch

ims_qos: check len before get_4bytes()

(cherry picked from commit 45b30ecfa04c79ebc40afa76b60c17d000b65f82)
(cherry picked from commit 1a276ee343dde0454d1f28cc69c1c2bff8113541)

Gbp-Pq: Topic upstream
Gbp-Pq: Name ims_qos-check-len-before-get_4bytes.patch

ims_ocs: check len before get_4bytes()

(cherry picked from commit f30c4aa8b54320fef295c68d72c4b1d87b1b9c04)
(cherry picked from commit ce354d25a70b94d9f240bba317569529233c4299)

Gbp-Pq: Topic upstream
Gbp-Pq: Name ims_ocs-check-len-before-get_4bytes.patch

ims_ocs: Free after copying the values

- Remove extra freeavplist call
- Add len check

(cherry picked from commit a56942affd35d41890c23f1d3b5bb519f87ef5ad)

Gbp-Pq: Topic upstream
Gbp-Pq: Name ims_ocs-Free-after-copying-the-values.patch

ims_icscf: check len before get_4bytes()

(cherry picked from commit fd208b0fab7eba80ea4b80e9ff1c22c733619b65)
(cherry picked from commit fc616d62e44bee65de3e83cd3ec7e10742b9aec9)

Gbp-Pq: Topic upstream
Gbp-Pq: Name ims_icscf-check-len-before-get_4bytes.patch

ims_charging: check len before get_4bytes()

(cherry picked from commit 835e94e2795c932a3c62262cf4f7567955520ab8)
(cherry picked from commit 5dae7c5a7d2910844aaea4f6a0d68dca429bd393)

Gbp-Pq: Topic upstream
Gbp-Pq: Name ims_charging-check-len-before-get_4bytes.patch

ims_auth: check len before get_4bytes()

(cherry picked from commit 4794df44bf5195594b9b86a8f7e96222f23413b1)
(cherry picked from commit 675e0d53084e12cc1b78be020d1e81bde2863873)

Gbp-Pq: Topic upstream
Gbp-Pq: Name ims_auth-check-len-before-get_4bytes.patch

ims_registrar_pcscf: free previous sec-agree value at process_sec_agree_param()

process_sec_agree_param() can be called several times for the same parameter
in this case we will leak the mem for the previous value.

Based on solution from qasimomneia <qasim.l.ghalib@alkafeelomnnea.com> at #4841

(cherry picked from commit 11351f70892e0c6a1fc221b6b4cd503da60a07c4)
(cherry picked from commit f5d29d10cd0ad432cb0e5acb1959daf805592a5e)

Gbp-Pq: Topic upstream
Gbp-Pq: Name ims_registrar_pcscf-free-previous-sec-agree-value-at.patch

ims_registrar_pcscf: Fix problems with double mem free, take three

related #4671

* free params->data.ipsec always

(cherry picked from commit 5f6dd0bb09fa33a07397902f9822fb5c1a370945)
(cherry picked from commit bb74017208cdefdbc397d8b2474b73bde70e29f9)

Gbp-Pq: Topic upstream
Gbp-Pq: Name ims_registrar_pcscf-Fix-problems-with-double-mem-fre3.patch

ims_registrar_pcscf: Fix problems with double mem free, take two

* include sec_header check
* don't free data.ipsec before

related #4671

(cherry picked from commit 824dc0d39bf067ba343d7503b218e131a1944eea)
(cherry picked from commit 72e19957e2097b5a96ef50437dde9fae75077a63)

Gbp-Pq: Topic upstream
Gbp-Pq: Name ims_registrar_pcscf-Fix-problems-with-double-mem-fre2.patch

ims_registrar_pcscf: Fix problems with double mem free

fix #4671

same logic as 91c5ca751799db4f25a28a495350cc97f7c2f390

(cherry picked from commit 722c06b3efc53ccb369ce812c685c7d069508187)
(cherry picked from commit 66e0b5075dc741095bf3439e76d25833f8f82e52)

Gbp-Pq: Topic upstream
Gbp-Pq: Name ims_registrar_pcscf-Fix-problems-with-double-mem-fre.patch

ims_ipsec_pcscf: free previous sec-agree value at process_sec_agree_param()

process_sec_agree_param() can be called several times for the same parameter
in this case we will leak the mem for the previous value.

Based on solution from qasimomneia <qasim.l.ghalib@alkafeelomnnea.com> at #4841

(cherry picked from commit f0e3348c5e3a6c24b2921fbfb8b998317076146f)
(cherry picked from commit 56f30c96a22eb0437090d4c376ac2eca67a93508)

Gbp-Pq: Topic upstream
Gbp-Pq: Name ims_ipsec_pcscf-free-previous-sec-agree-value-at-pro.patch

ims_ipsec_pcscf: Fix problems with double mem free, take three

related #4670

* free paramas->data.ipsec always

(cherry picked from commit c257ac9aeabadabc24be8e59dee6e85b74d556e2)
(cherry picked from commit de4fc33ce90c3c11382eff3e8dc4789e0ec8c084)

Gbp-Pq: Topic upstream
Gbp-Pq: Name ims_ipsec_pcscf-Fix-problems-with-double-mem-free-ta3.patch

ims_ipsec_pcscf: Fix problems with double mem free, take two

related #4670

(cherry picked from commit d6e94a640097f31e14df652b039f017a90f20872)
(cherry picked from commit e47d4792de562b767d0796662525da902b270df3)

Gbp-Pq: Topic upstream
Gbp-Pq: Name ims_ipsec_pcscf-Fix-problems-with-double-mem-free-ta.patch

ims_ipsec_pcscf: Fix problems with double mem free

fix #4670

same logic as 91c5ca751799db4f25a28a495350cc97f7c2f390

(cherry picked from commit c7f290cc92760365af81f99c290a905d4e5c609c)
(cherry picked from commit d04659303e7fbfb55d0884dedc6dde6ceac7c51b)

Gbp-Pq: Topic upstream
Gbp-Pq: Name ims_ipsec_pcscf-Fix-problems-with-double-mem-free.patch

auth: use AUTH_FLAG_NOINVNC flag

(cherry picked from commit 9dc160d1d2bdf0542d3d9d8ae090bb1352520a1c)

Gbp-Pq: Topic upstream
Gbp-Pq: Name auth-use-AUTH_FLAG_NOINVNC-flag.patch

auth: add defines for authenticate flags

(cherry picked from commit cd88ca4bb64a8d44e2ea9f73be53b24d3b3a93fa)

Gbp-Pq: Topic upstream
Gbp-Pq: Name auth-add-defines-for-authenticate-flags.patch

auth_db: init variable and set the result header later

(cherry picked from commit c2e62cd2dfb0c9969f7e410020fa3a39f343d608)

Gbp-Pq: Topic upstream
Gbp-Pq: Name auth_db-init-variable-and-set-the-result-header-late.patch

auth: init variable

(cherry picked from commit 6d99a650cb79ec5551bb1af29132be9e9c7c555b)

Gbp-Pq: Topic upstream
Gbp-Pq: Name auth-init-variable.patch

auth: propagate auth header via pv_authenticate()

(cherry picked from commit aa14327b826ac3dfa348c33fe1e9d354cdd855af)

Gbp-Pq: Topic upstream
Gbp-Pq: Name auth-propagate-auth-header-via-pv_authenticate.patch

core: tcp read - check coontent lenght for max int limit

(cherry picked from commit 2c47fe1625b57e04252230e0e783ba4182afbebb)
(cherry picked from commit 4076b32435b32205460e4d5fbcbef3ed8500e8c7)

Gbp-Pq: Topic upstream
Gbp-Pq: Name core-tcp-read-check-coontent-lenght-for-max-int-limi.patch

Check only major OpenSSL version

The version check was written during OpenSSL 0.9 era.
It is not needed in Debian and only getting in the way.

Gbp-Pq: Name Check-only-major-OpenSSL-version.patch

Stop setting -march on arm

This broke the Debian armhf build due to the Debian gcc maintainer
changing the semantics of -march to disable FPU support unless +fp
is included.

Gbp-Pq: Name stop-setting-march-on-arm.patch

make sure symbols are exported from main binary to allow loading modules

Gbp-Pq: Name fix_export.patch

Don't copy the INSTALL file to the docs dir

Gbp-Pq: Name no_INSTALL_file.patch

don't try to install to lib64

Gbp-Pq: Name no_lib64_on_64_bits.patch

kamailio (6.0.1-1+deb13u2) trixie-security; urgency=medium

  * CVE-2026-39863 fix
  * CVE-2026-39864 fix
  * CVE-2026-52022 fix
  * CVE-2026-52023 fix
  * CVE-2026-82608 fix

[dgit import unpatched kamailio 6.0.1-1+deb13u2]

Import kamailio_6.0.1-1+deb13u2.debian.tar.xz

[dgit import tarball kamailio 6.0.1-1+deb13u2 kamailio_6.0.1-1+deb13u2.debian.tar.xz]

Import kamailio_6.0.1.orig.tar.gz

[dgit import orig kamailio_6.0.1.orig.tar.gz]