asterisk - Debian Package Tracker

general

source: asterisk (main)
version: 1:22.10.1+dfsg+~cs6.17.60671434-1
maintainer: Debian VoIP Team (archive) (DMD)
uploaders: Jonas Smedegaard [DMD] – Tzafrir Cohen [DMD] – Mark Purcell [DMD] – Jeremy Lainé [DMD] – Chris Maj [DMD] – Benedikt Wildenhain [DMD]
arch: all any
std-ver: 4.7.4
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 1:16.28.0~dfsg-0+deb11u4
o-o-sec: 1:16.28.0~dfsg-0+deb11u10
testing: 1:22.10.1+dfsg+~cs6.17.60671434-1
unstable: 1:22.10.1+dfsg+~cs6.17.60671434-1
exp: 1:22.11.0-rc2+dfsg+~cs6.17.60671434-1

versioned links

1:16.28.0~dfsg-0+deb11u3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1:16.28.0~dfsg-0+deb11u4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1:16.28.0~dfsg-0+deb11u10: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1:22.10.1+dfsg+~cs6.17.60671434-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1:22.11.0-rc2+dfsg+~cs6.17.60671434-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

asterisk (32 bugs: 0, 24, 8, 0)
asterisk-config (1 bugs: 0, 0, 1, 0)
asterisk-dahdi
asterisk-dev
asterisk-doc
asterisk-mobile
asterisk-modules
asterisk-mp3
asterisk-mysql
asterisk-ooh323
asterisk-tests

action needed

Debci reports failed tests high

unstable: pass (log)
The tests ran in 0:05:42
Last run: 2026-05-28T14:03:11.000Z
Previous status: unknown

testing: pass (log)
The tests ran in 0:06:03
Last run: 2026-07-22T18:47:20.000Z
Previous status: unknown

stable: fail (log)
The tests ran in 0:04:43
Last run: 2023-06-06T08:30:33.000Z
Previous status: unknown

Created: 2022-12-23 Last update: 2026-10-24 15:30

Marked for autoremoval on 16 November: #1146891, #1148482 high

Version 1:22.10.1+dfsg+~cs6.17.60671434-1 of asterisk is marked for autoremoval from testing on Mon 16 Nov 2026. It is affected by #1146891, #1148482. The removal of asterisk will also cause the removal of (transitive) reverse dependencies: asterisk-espeak, asterisk-flite. You should try to prevent the removal by fixing these RC bugs.

Created: 2026-09-25 Last update: 2026-10-24 15:03

A new upstream version is available: 24.0.0-rc2+~cs6.17.60671434 high

A new upstream version 24.0.0-rc2+~cs6.17.60671434 is available, you should consider packaging it.

Created: 2026-10-21 Last update: 2026-10-24 13:32

10 security issues in sid high

There are 10 open security issues in sid.

10 important issues:

CVE-2026-57159: PJSIP is a free and open source multimedia communication library written in C. Prior to commit 673b978, a remote out-of-bounds read and write can occur in the SDP negotiator when the remote payload-type map maintenance feature is enabled. assign_pt_and_update_map() in pjmedia/src/pjmedia/sdp_neg.c uses payload-type numbers taken from a remote SDP offer or answer to index fixed-size internal tables without sufficient bounds validation, so a crafted remote SDP can cause memory access outside those tables. The practical impact is memory corruption and denial of service; code execution is not demonstrated. This path is only reached when PJMEDIA_SDP_NEG_MAINTAIN_REMOTE_PT_MAP is enabled. The default is disabled, so default builds are not affected; the feature is an interoperability option that integrating products may enable. This issue has been patched via commit 673b978.
CVE-2026-57160: PJSIP is a free and open source multimedia communication library written in C. Prior to commit d6a0e7f, a buffer overflow can occur in pjsip_generic_array_hdr_print() in pjsip/src/pjsip/sip_msg.c, the function that serializes generic array headers (such as Allow, Require, Supported, and Unsupported). Under certain output-buffer boundary conditions the function can write one byte past the end of the buffer. This is reachable mainly in applications that parse and re-serialize incoming SIP requests — for example a proxy, SBC, or B2BUA — where a remote peer can influence the serialized message. The out-of-bounds write is a single fixed byte; code execution and information disclosure are not demonstrated, and in typical pool-based allocations the byte falls within allocation slack. This issue has been patched via commit d6a0e7f.
CVE-2026-57161: PJSIP is a free and open source multimedia communication library written in C. Prior to commit acc03b5, a stack buffer overflow exists in PJSUA when processing Service-Route headers in a registration response (update_service_route() in pjsua_acc.c). This affects applications that register using the PJSUA/PJSUA2 account API (the default registration path). The Service-Route URIs from a 2xx response to REGISTER are stored into a fixed-size array without bounding the number of headers; a registrar that returns an excessive number of Service-Route headers can write past the end of the array on the stack. The values written are internal pointers rather than arbitrary data, so the most likely impact is unexpected application termination (denial of service), though memory corruption cannot be excluded. The malicious response may come from a compromised or malicious registrar, or — over unprotected transports — a spoofed response. This issue has been patched via commit acc03b5.
CVE-2026-57162: PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in the SRTP/SDES media transport when processing a=crypto attributes during SDP offer/answer (sdes_encode_sdp() in transport_srtp_sdes.c). This affects applications with SRTP enabled (use_srtp optional or mandatory, using SDES keying). During media negotiation, the crypto attributes from the remote SDP are collected into a fixed-size array without bounding their number; a remote peer that includes an excessive number of a=crypto attributes in a single media description can write past the end of that array on the stack. This is reachable from an incoming SIP INVITE during offer/answer, before application-level authentication. Impact may range from unexpected application termination to control flow hijack/memory corruption. Applications that do not enable SRTP are not affected. This issue has been patched via commit a1b707c.
CVE-2026-57163: PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when parsing the Subject Alternative Name extension of a peer certificate (tls_cert_get_info() in ssl_sock_gtls.c). Only GnuTLS builds are affected (--with-gnutls); OpenSSL and Apple SecureTransport/Network.framework builds are not affected. While extracting certificate information after a TLS handshake, an incorrect buffer-size value can cause an oversized SubjectAltName entry to be written past the end of a fixed-size stack buffer. A network-positioned attacker presenting a crafted certificate — a malicious server to a connecting client, or a malicious client to a server that requests certificates — can trigger this during the TLS handshake, before any SIP-level authentication. Impact may range from unexpected application termination to control flow hijack/memory corruption. This issue has been patched via commit c4a151a.
CVE-2026-57164: PJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d5956a, a heap buffer overflow exists in the PJLIB-UTIL HTTP client (http_client.c) when buffering an HTTP response body. This affects applications that use the PJLIB-UTIL HTTP client to receive a whole response body at once (a completion callback with no incremental on_data_read callback). When growing the response buffer, an incorrect size calculation based on the server-supplied Content-Length can leave the buffer too small, causing response data to be written past the end of the allocation. A malicious or man-in-the-middle HTTP server can trigger this with a crafted response; impact may range from unexpected application termination to memory corruption. Applications that consume the response incrementally (via on_data_read), or that only connect to trusted servers, are not affected. This issue has been patched via commit 8d5956a.
CVE-2026-57165: PJSIP is a free and open source multimedia communication library written in C. Prior to commit 628b716, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when redrawing the command line during history recall (handle_up_down() in cli_telnet.c). This affects only applications that enable the telnet CLI front-end (same gating as the related CLI issue). The line-redraw sequence for a recalled history entry can accumulate more data than a fixed-size stack buffer holds, which may lead to application termination. Exploitation requires access to the unauthenticated telnet CLI, which already permits arbitrary CLI commands, so the additional impact is limited. Applications that do not enable the telnet CLI front-end are not affected. This issue has been patched via commit 628b716.
CVE-2026-57166: PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when rendering feedback for an entered command line. Several command-line handling paths write an attacker-influenced amount of data into fixed-size buffers without sufficient bounds checking, so a long command line can overflow them. This affects only applications that enable the telnet CLI front-end (e.g. pj_cli_telnet_create() / --cli-telnet-port). The telnet CLI is an interactive administration interface with no authentication, so any client able to reach it can already issue arbitrary CLI commands. A malformed or overly long command line can overflow a fixed-size stack buffer while rendering command-line feedback, which may lead to application termination. Because reaching this code already requires access to the unauthenticated CLI, the impact beyond that existing access is limited. Applications that do not enable the telnet CLI front-end are not affected. This issue has been patched via commit 4472a31.
CVE-2026-77396: PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the PJSIP AVI parser in pjmedia/src/pjmedia/avi_player.c uses an input-file video chunk length as the number of bytes copied into a frame buffer whose capacity is derived from the declared media dimensions. A crafted AVI file can therefore cause an attacker-controlled out-of-bounds write past the heap allocation when an application plays the file or pulls its frames. The existing size assertion does not protect production release builds, where assertions are disabled. Typical local playback can crash the process, while applications that accept untrusted AVI sources expose a stronger memory-corruption condition. No fixed version is available as of this review.
CVE-2026-84975: PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the OpenSSL and GnuTLS backends in pjlib/src/pj/ssl_sock_ossl.c and pjlib/src/pj/ssl_sock_gtls.c copy DNS SubjectAltName values with string functions that recalculate their length and truncate an embedded NUL byte. With server verification enabled through --tls-verify-server for the PJSIP TLS/SIPS transport, a certificate containing a DNS SubjectAltName formed from the target hostname prefix followed by an embedded NUL and an attacker-controlled suffix can therefore be accepted for the prefix hostname. An attacker who possesses such a certificate from a trusted issuer and can intercept the connection can impersonate the target server, complete the SIP session, and receive REGISTER credentials. The mbedTLS backend is not affected because it preserves the explicit string length. No fixed version is available as of this review.

Created: 2026-09-06 Last update: 2026-10-04 22:00

10 security issues in forky high

There are 10 open security issues in forky.

10 important issues:

CVE-2026-57159: PJSIP is a free and open source multimedia communication library written in C. Prior to commit 673b978, a remote out-of-bounds read and write can occur in the SDP negotiator when the remote payload-type map maintenance feature is enabled. assign_pt_and_update_map() in pjmedia/src/pjmedia/sdp_neg.c uses payload-type numbers taken from a remote SDP offer or answer to index fixed-size internal tables without sufficient bounds validation, so a crafted remote SDP can cause memory access outside those tables. The practical impact is memory corruption and denial of service; code execution is not demonstrated. This path is only reached when PJMEDIA_SDP_NEG_MAINTAIN_REMOTE_PT_MAP is enabled. The default is disabled, so default builds are not affected; the feature is an interoperability option that integrating products may enable. This issue has been patched via commit 673b978.
CVE-2026-57160: PJSIP is a free and open source multimedia communication library written in C. Prior to commit d6a0e7f, a buffer overflow can occur in pjsip_generic_array_hdr_print() in pjsip/src/pjsip/sip_msg.c, the function that serializes generic array headers (such as Allow, Require, Supported, and Unsupported). Under certain output-buffer boundary conditions the function can write one byte past the end of the buffer. This is reachable mainly in applications that parse and re-serialize incoming SIP requests — for example a proxy, SBC, or B2BUA — where a remote peer can influence the serialized message. The out-of-bounds write is a single fixed byte; code execution and information disclosure are not demonstrated, and in typical pool-based allocations the byte falls within allocation slack. This issue has been patched via commit d6a0e7f.
CVE-2026-57161: PJSIP is a free and open source multimedia communication library written in C. Prior to commit acc03b5, a stack buffer overflow exists in PJSUA when processing Service-Route headers in a registration response (update_service_route() in pjsua_acc.c). This affects applications that register using the PJSUA/PJSUA2 account API (the default registration path). The Service-Route URIs from a 2xx response to REGISTER are stored into a fixed-size array without bounding the number of headers; a registrar that returns an excessive number of Service-Route headers can write past the end of the array on the stack. The values written are internal pointers rather than arbitrary data, so the most likely impact is unexpected application termination (denial of service), though memory corruption cannot be excluded. The malicious response may come from a compromised or malicious registrar, or — over unprotected transports — a spoofed response. This issue has been patched via commit acc03b5.
CVE-2026-57162: PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in the SRTP/SDES media transport when processing a=crypto attributes during SDP offer/answer (sdes_encode_sdp() in transport_srtp_sdes.c). This affects applications with SRTP enabled (use_srtp optional or mandatory, using SDES keying). During media negotiation, the crypto attributes from the remote SDP are collected into a fixed-size array without bounding their number; a remote peer that includes an excessive number of a=crypto attributes in a single media description can write past the end of that array on the stack. This is reachable from an incoming SIP INVITE during offer/answer, before application-level authentication. Impact may range from unexpected application termination to control flow hijack/memory corruption. Applications that do not enable SRTP are not affected. This issue has been patched via commit a1b707c.
CVE-2026-57163: PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when parsing the Subject Alternative Name extension of a peer certificate (tls_cert_get_info() in ssl_sock_gtls.c). Only GnuTLS builds are affected (--with-gnutls); OpenSSL and Apple SecureTransport/Network.framework builds are not affected. While extracting certificate information after a TLS handshake, an incorrect buffer-size value can cause an oversized SubjectAltName entry to be written past the end of a fixed-size stack buffer. A network-positioned attacker presenting a crafted certificate — a malicious server to a connecting client, or a malicious client to a server that requests certificates — can trigger this during the TLS handshake, before any SIP-level authentication. Impact may range from unexpected application termination to control flow hijack/memory corruption. This issue has been patched via commit c4a151a.
CVE-2026-57164: PJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d5956a, a heap buffer overflow exists in the PJLIB-UTIL HTTP client (http_client.c) when buffering an HTTP response body. This affects applications that use the PJLIB-UTIL HTTP client to receive a whole response body at once (a completion callback with no incremental on_data_read callback). When growing the response buffer, an incorrect size calculation based on the server-supplied Content-Length can leave the buffer too small, causing response data to be written past the end of the allocation. A malicious or man-in-the-middle HTTP server can trigger this with a crafted response; impact may range from unexpected application termination to memory corruption. Applications that consume the response incrementally (via on_data_read), or that only connect to trusted servers, are not affected. This issue has been patched via commit 8d5956a.
CVE-2026-57165: PJSIP is a free and open source multimedia communication library written in C. Prior to commit 628b716, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when redrawing the command line during history recall (handle_up_down() in cli_telnet.c). This affects only applications that enable the telnet CLI front-end (same gating as the related CLI issue). The line-redraw sequence for a recalled history entry can accumulate more data than a fixed-size stack buffer holds, which may lead to application termination. Exploitation requires access to the unauthenticated telnet CLI, which already permits arbitrary CLI commands, so the additional impact is limited. Applications that do not enable the telnet CLI front-end are not affected. This issue has been patched via commit 628b716.
CVE-2026-57166: PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when rendering feedback for an entered command line. Several command-line handling paths write an attacker-influenced amount of data into fixed-size buffers without sufficient bounds checking, so a long command line can overflow them. This affects only applications that enable the telnet CLI front-end (e.g. pj_cli_telnet_create() / --cli-telnet-port). The telnet CLI is an interactive administration interface with no authentication, so any client able to reach it can already issue arbitrary CLI commands. A malformed or overly long command line can overflow a fixed-size stack buffer while rendering command-line feedback, which may lead to application termination. Because reaching this code already requires access to the unauthenticated CLI, the impact beyond that existing access is limited. Applications that do not enable the telnet CLI front-end are not affected. This issue has been patched via commit 4472a31.
CVE-2026-77396: PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the PJSIP AVI parser in pjmedia/src/pjmedia/avi_player.c uses an input-file video chunk length as the number of bytes copied into a frame buffer whose capacity is derived from the declared media dimensions. A crafted AVI file can therefore cause an attacker-controlled out-of-bounds write past the heap allocation when an application plays the file or pulls its frames. The existing size assertion does not protect production release builds, where assertions are disabled. Typical local playback can crash the process, while applications that accept untrusted AVI sources expose a stronger memory-corruption condition. No fixed version is available as of this review.
CVE-2026-84975: PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the OpenSSL and GnuTLS backends in pjlib/src/pj/ssl_sock_ossl.c and pjlib/src/pj/ssl_sock_gtls.c copy DNS SubjectAltName values with string functions that recalculate their length and truncate an embedded NUL byte. With server verification enabled through --tls-verify-server for the PJSIP TLS/SIPS transport, a certificate containing a DNS SubjectAltName formed from the target hostname prefix followed by an embedded NUL and an attacker-controlled suffix can therefore be accepted for the prefix hostname. An attacker who possesses such a certificate from a trusted issuer and can intercept the connection can impersonate the target server, complete the SIP session, and receive REGISTER credentials. The mbedTLS backend is not affected because it preserves the explicit string length. No fixed version is available as of this review.

Created: 2026-09-06 Last update: 2026-10-04 22:00

lintian reports 20 warnings high

Lintian reports 20 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2026-06-28 Last update: 2026-07-22 12:00

1 security issue in trixie high

There is 1 open security issue in trixie.

1 important issue:

CVE-2023-38703: PJSIP is a free and open source multimedia communication library written in C with high level API in C, C++, Java, C#, and Python languages. SRTP is a higher level media transport which is stacked upon a lower level media transport such as UDP and ICE. Currently a higher level transport is not synchronized with its lower level transport that may introduce use-after-free issue. This vulnerability affects applications that have SRTP capability (`PJMEDIA_HAS_SRTP` is set) and use underlying media transport other than UDP. This vulnerability’s impact may range from unexpected application termination to control flow hijack/memory corruption. The patch is available as a commit in the master branch.

Created: 2023-10-22 Last update: 2023-10-22 12:54

3 security issues in bookworm high

There are 3 open security issues in bookworm.

3 important issues:

CVE-2022-23537: PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. Buffer overread is possible when parsing a specially crafted STUN message with unknown attribute. The vulnerability affects applications that uses STUN including PJNATH and PJSUA-LIB. The patch is available as a commit in the master branch (2.13.1).
CVE-2022-23547: PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. This issue is similar to GHSA-9pfh-r8x4-w26w. Possible buffer overread when parsing a certain STUN message. The vulnerability affects applications that uses STUN including PJNATH and PJSUA-LIB. The patch is available as commit in the master branch.
CVE-2022-39269: PJSIP is a free and open source multimedia communication library written in C. When processing certain packets, PJSIP may incorrectly switch from using SRTP media transport to using basic RTP upon SRTP restart, causing the media to be sent insecurely. The vulnerability impacts all PJSIP users that use SRTP. The patch is available as commit d2acb9a in the master branch of the project and will be included in version 2.13. Users are advised to manually patch or to upgrade. There are no known workarounds for this vulnerability.

Created: 2022-08-11 Last update: 2023-03-27 11:06

4 bugs tagged patch in the BTS normal

The BTS contains patches fixing 4 bugs (8 if counting merged bugs), consider including or untagging them.

Created: 2026-09-02 Last update: 2026-10-24 15:00

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 1:22.11.0-rc2+dfsg+~cs6.17.60671434-2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 09f9efd63b316fe3c6184244111390e450fbab77
Author: Martin Rampersad <martin.rampersad@emkal.ca>
Date:   Sat Oct 17 14:36:13 2026 -0400

    update changelog

commit f52552d5a11d69b5795f9454f7bd95c8d0ac6a01
Author: Martin Rampersad <martin.rampersad@emkal.ca>
Date:   Sat Oct 17 14:14:12 2026 -0400

    add patch 0009 to fix pjproject TLS server identity verification bypass

commit 750dcde5fc5f2ddf9f23ed33b59f9cd35c43de2a
Author: Martin Rampersad <martin.rampersad@emkal.ca>
Date:   Sat Oct 17 14:02:50 2026 -0400

    add patch 0008 to fix pjproject telnet CLI command line overflow

commit 894742dd80878b9726f439610e5aaf22410abbf1
Author: Martin Rampersad <martin.rampersad@emkal.ca>
Date:   Sat Oct 17 13:54:30 2026 -0400

    add patch 0007 to fix pjproject telnet CLI history overflow

commit a0dde629a27c2edd2f3aec1ff1a57f4aaccd522d
Author: Martin Rampersad <martin.rampersad@emkal.ca>
Date:   Sat Oct 17 11:35:29 2026 -0400

    add patch 0006 to fix pjproject Heap overflow in the HTTP client

commit fde6d385bb4bb02467de143d10c1ff6a6fdfd4f4
Author: Martin Rampersad <martin.rampersad@emkal.ca>
Date:   Sat Oct 17 11:13:51 2026 -0400

    add patch 0005 to fix pjproject TLS peer certificate parsing

commit 1a28d2c10fdfc55ecd76203ab500090323ac45dd
Author: Martin Rampersad <martin.rampersad@emkal.ca>
Date:   Sat Oct 17 11:05:18 2026 -0400

    add patch 0004 to fix pjproject SDP a=crypto attributes parsing

commit 39bbce74e914409d48b5598d85c427a601efd012
Author: Martin Rampersad <martin.rampersad@emkal.ca>
Date:   Sat Oct 17 10:58:47 2026 -0400

    add patch 0003 to fix pjproject Service-Route headers handling

commit 3f592bf63149b307b68c0f9bfb05bd45a4596c5b
Author: Martin Rampersad <martin.rampersad@emkal.ca>
Date:   Sat Oct 17 10:47:16 2026 -0400

    add patch 0002 to fix pjproject SIP message header buffer overflow

commit 5cb584cd52552278bba674f0f2f1e238b5ea51c1
Author: Martin Rampersad <martin.rampersad@emkal.ca>
Date:   Sat Oct 17 09:36:34 2026 -0400

    add patch 0001 to fix pjproject SDP parser out-of-bounds write

Created: 2026-10-17 Last update: 2026-10-24 07:33

debian/patches: 4 patches to forward upstream low

Among the 15 debian patches available in version 1:22.10.1+dfsg+~cs6.17.60671434-1 of the package, we noticed the following issues:

4 patches where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2023-02-26 Last update: 2026-07-21 09:20

Issues found with some translations low

Automatic checks made by the Debian l10n team found some issues with the translations contained in this package. You should check the l10n status report for more information.

Issues can be things such as missing translations, problematic translated strings, outdated PO files, unknown languages, etc.

Created: 2020-02-26 Last update: 2020-02-26 10:49

testing migrations

This package will soon be part of the auto-openssl transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.

news

[rss feed]

[2026-08-27] Accepted asterisk 1:22.11.0-rc2+dfsg+~cs6.17.60671434-1 (source) into experimental (Jonas Smedegaard)
[2026-07-26] asterisk 1:22.10.1+dfsg+~cs6.17.60671434-1 MIGRATED to testing (Debian testing watch)
[2026-07-20] Accepted asterisk 1:22.10.1+dfsg+~cs6.17.60671434-1 (source) into unstable (Jonas Smedegaard)
[2026-07-13] asterisk 1:22.10.0+dfsg+~cs6.17.60671434-3 MIGRATED to testing (Debian testing watch)
[2026-07-07] Accepted asterisk 1:22.10.0+dfsg+~cs6.17.60671434-3 (source) into unstable (Jonas Smedegaard)
[2026-06-26] Accepted asterisk 1:22.10.0+dfsg+~cs6.17.60671434-2 (source) into unstable (Jonas Smedegaard)
[2026-06-16] Accepted asterisk 1:16.28.0~dfsg-0+deb11u10 (source) into oldoldstable-security (Thorsten Alteholz)
[2026-06-15] Accepted asterisk 1:22.10.0+dfsg+~cs6.17.60671434-1 (source) into unstable (Jonas Smedegaard)
[2026-04-11] Accepted asterisk 1:22.9.0+dfsg+~cs6.16.60671434-1 (source) into unstable (Jonas Smedegaard)
[2026-03-30] Accepted asterisk 1:16.28.0~dfsg-0+deb11u9 (source) into oldoldstable-security (Lukas Märdian)
[2026-02-08] Accepted asterisk 1:22.8.2+dfsg+~cs6.15.60671435-1 (source) into unstable (Jonas Smedegaard)
[2026-02-01] Accepted asterisk 1:22.8.0+dfsg+~cs6.15.60671435-1 (source) into unstable (Jonas Smedegaard)
[2025-12-02] Accepted asterisk 1:22.7.0~dfsg+~cs6.15.60671435-1 (source) into unstable (Jonas Smedegaard)
[2025-10-28] Accepted asterisk 1:22.6.0~dfsg+~cs6.15.60671435-1 (source) into unstable (Jonas Smedegaard)
[2025-10-10] Accepted asterisk 1:16.28.0~dfsg-0+deb11u8 (source) into oldoldstable-security (Markus Koschany)
[2025-08-29] Accepted asterisk 1:22.5.2~dfsg+~cs6.15.60671435-1 (source) into unstable (Jonas Smedegaard)
[2025-08-03] Accepted asterisk 1:22.5.1~dfsg+~cs6.15.60671435-1 (source) into unstable (Jonas Smedegaard)
[2025-06-04] Accepted asterisk 1:22.4.1~dfsg+~cs6.15.60671435-2 (source) into unstable (Jonas Smedegaard)
[2025-06-02] Accepted asterisk 1:16.28.0~dfsg-0+deb11u7 (source) into oldstable-security (Markus Koschany)
[2025-05-27] Accepted asterisk 1:22.4.1~dfsg+~cs6.15.60671435-1 (source) into unstable (Jonas Smedegaard)
[2025-03-28] Accepted asterisk 1:22.3.0~dfsg+~cs6.15.60671435-1 (source) into unstable (Jonas Smedegaard)
[2025-03-26] Accepted asterisk 1:22.3.0~~rc1~dfsg+~cs6.15.60671435-1 (source) into unstable (Jonas Smedegaard)
[2025-02-22] Accepted asterisk 1:22.2.0~dfsg+~cs6.15.60671435-2 (source) into unstable (Jonas Smedegaard)
[2025-02-11] Accepted asterisk 1:22.2.0~dfsg+~cs6.15.60671435-1 (source) into unstable (Jonas Smedegaard)
[2025-02-05] Accepted asterisk 1:16.28.0~dfsg-0+deb11u6 (source) into oldstable-security (Daniel Leidert)
[2025-01-12] Accepted asterisk 1:22.1.1~dfsg+~cs6.14.60671435-1 (source) into unstable (Jonas Smedegaard)
[2024-11-27] Accepted asterisk 1:22.1.0~dfsg+~cs6.14.60671435-1 (source) into unstable (Jonas Smedegaard)
[2024-10-23] Accepted asterisk 1:22.0.0~dfsg+~cs6.14.60671435-1 (source) into unstable (Jonas Smedegaard)
[2024-10-20] Accepted asterisk 1:16.28.0~dfsg-0+deb11u5 (source) into oldstable-security (Thorsten Alteholz)
[2024-10-05] Accepted asterisk 1:22.0.0~~rc2~dfsg+~cs6.14.60671435-1 (source) into experimental (Jonas Smedegaard)

bugs [bug history graph]

all: 36 40
RC: 2
I&N: 24 28
M&W: 10
F&P: 0
patch: 4 8

links

homepage
lintian (0, 20)
buildd: logs, exp, reproducibility, cross
popcon
browse source code
other distros
security tracker
screenshots
l10n (-, 98)
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1:22.10.0+dfsg+~cs6.17.60671434-1ubuntu3
17 bugs
patches for 1:22.10.0+dfsg+~cs6.17.60671434-1ubuntu3