asterisk - Debian Package Tracker

general

source: asterisk (main)
version: 1:22.10.1+dfsg+~cs6.17.60671434-1
maintainer: Debian VoIP Team (archive) (DMD)
uploaders: Jonas Smedegaard [DMD] – Tzafrir Cohen [DMD] – Mark Purcell [DMD] – Jeremy Lainé [DMD] – Chris Maj [DMD] – Benedikt Wildenhain [DMD]
arch: all any
std-ver: 4.7.4
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 1:16.28.0~dfsg-0+deb11u4
o-o-sec: 1:16.28.0~dfsg-0+deb11u10
testing: 1:22.10.1+dfsg+~cs6.17.60671434-1
unstable: 1:22.10.1+dfsg+~cs6.17.60671434-1
exp: 1:22.11.0-rc2+dfsg+~cs6.17.60671434-1

versioned links

1:16.28.0~dfsg-0+deb11u3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1:16.28.0~dfsg-0+deb11u4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1:16.28.0~dfsg-0+deb11u10: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1:22.10.1+dfsg+~cs6.17.60671434-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1:22.11.0-rc2+dfsg+~cs6.17.60671434-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

asterisk (30 bugs: 0, 22, 8, 0)
asterisk-config (1 bugs: 0, 0, 1, 0)
asterisk-dahdi
asterisk-dev
asterisk-doc
asterisk-mobile
asterisk-modules
asterisk-mp3
asterisk-mysql
asterisk-ooh323
asterisk-tests

action needed

Marked for autoremoval on 20 October: #1146891 high

Version 1:22.10.1+dfsg+~cs6.17.60671434-1 of asterisk is marked for autoremoval from testing on Tue 20 Oct 2026. It is affected by #1146891. The removal of asterisk will also cause the removal of (transitive) reverse dependencies: asterisk-espeak, asterisk-flite. You should try to prevent the removal by fixing these RC bugs.

Created: 2026-09-13 Last update: 2026-09-14 16:02

Debci reports failed tests high

unstable: pass (log)
The tests ran in 0:05:42
Last run: 2026-05-28T14:03:11.000Z
Previous status: unknown

testing: pass (log)
The tests ran in 0:06:03
Last run: 2026-07-22T18:47:20.000Z
Previous status: unknown

stable: fail (log)
The tests ran in 0:04:43
Last run: 2023-06-06T08:30:33.000Z
Previous status: unknown

Created: 2022-12-23 Last update: 2026-09-14 15:31

A new upstream version is available: 22.11.0+~cs6.17.60671434 high

A new upstream version 22.11.0+~cs6.17.60671434 is available, you should consider packaging it.

Created: 2026-08-10 Last update: 2026-09-14 15:30

8 security issues in sid high

There are 8 open security issues in sid.

8 important issues:

CVE-2026-57159: PJSIP is a free and open source multimedia communication library written in C. Prior to commit 673b978, a remote out-of-bounds read and write can occur in the SDP negotiator when the remote payload-type map maintenance feature is enabled. assign_pt_and_update_map() in pjmedia/src/pjmedia/sdp_neg.c uses payload-type numbers taken from a remote SDP offer or answer to index fixed-size internal tables without sufficient bounds validation, so a crafted remote SDP can cause memory access outside those tables. The practical impact is memory corruption and denial of service; code execution is not demonstrated. This path is only reached when PJMEDIA_SDP_NEG_MAINTAIN_REMOTE_PT_MAP is enabled. The default is disabled, so default builds are not affected; the feature is an interoperability option that integrating products may enable. This issue has been patched via commit 673b978.
CVE-2026-57160: PJSIP is a free and open source multimedia communication library written in C. Prior to commit d6a0e7f, a buffer overflow can occur in pjsip_generic_array_hdr_print() in pjsip/src/pjsip/sip_msg.c, the function that serializes generic array headers (such as Allow, Require, Supported, and Unsupported). Under certain output-buffer boundary conditions the function can write one byte past the end of the buffer. This is reachable mainly in applications that parse and re-serialize incoming SIP requests — for example a proxy, SBC, or B2BUA — where a remote peer can influence the serialized message. The out-of-bounds write is a single fixed byte; code execution and information disclosure are not demonstrated, and in typical pool-based allocations the byte falls within allocation slack. This issue has been patched via commit d6a0e7f.
CVE-2026-57161: PJSIP is a free and open source multimedia communication library written in C. Prior to commit acc03b5, a stack buffer overflow exists in PJSUA when processing Service-Route headers in a registration response (update_service_route() in pjsua_acc.c). This affects applications that register using the PJSUA/PJSUA2 account API (the default registration path). The Service-Route URIs from a 2xx response to REGISTER are stored into a fixed-size array without bounding the number of headers; a registrar that returns an excessive number of Service-Route headers can write past the end of the array on the stack. The values written are internal pointers rather than arbitrary data, so the most likely impact is unexpected application termination (denial of service), though memory corruption cannot be excluded. The malicious response may come from a compromised or malicious registrar, or — over unprotected transports — a spoofed response. This issue has been patched via commit acc03b5.
CVE-2026-57162: PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in the SRTP/SDES media transport when processing a=crypto attributes during SDP offer/answer (sdes_encode_sdp() in transport_srtp_sdes.c). This affects applications with SRTP enabled (use_srtp optional or mandatory, using SDES keying). During media negotiation, the crypto attributes from the remote SDP are collected into a fixed-size array without bounding their number; a remote peer that includes an excessive number of a=crypto attributes in a single media description can write past the end of that array on the stack. This is reachable from an incoming SIP INVITE during offer/answer, before application-level authentication. Impact may range from unexpected application termination to control flow hijack/memory corruption. Applications that do not enable SRTP are not affected. This issue has been patched via commit a1b707c.
CVE-2026-57163: PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when parsing the Subject Alternative Name extension of a peer certificate (tls_cert_get_info() in ssl_sock_gtls.c). Only GnuTLS builds are affected (--with-gnutls); OpenSSL and Apple SecureTransport/Network.framework builds are not affected. While extracting certificate information after a TLS handshake, an incorrect buffer-size value can cause an oversized SubjectAltName entry to be written past the end of a fixed-size stack buffer. A network-positioned attacker presenting a crafted certificate — a malicious server to a connecting client, or a malicious client to a server that requests certificates — can trigger this during the TLS handshake, before any SIP-level authentication. Impact may range from unexpected application termination to control flow hijack/memory corruption. This issue has been patched via commit c4a151a.
CVE-2026-57164: PJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d5956a, a heap buffer overflow exists in the PJLIB-UTIL HTTP client (http_client.c) when buffering an HTTP response body. This affects applications that use the PJLIB-UTIL HTTP client to receive a whole response body at once (a completion callback with no incremental on_data_read callback). When growing the response buffer, an incorrect size calculation based on the server-supplied Content-Length can leave the buffer too small, causing response data to be written past the end of the allocation. A malicious or man-in-the-middle HTTP server can trigger this with a crafted response; impact may range from unexpected application termination to memory corruption. Applications that consume the response incrementally (via on_data_read), or that only connect to trusted servers, are not affected. This issue has been patched via commit 8d5956a.
CVE-2026-57165: PJSIP is a free and open source multimedia communication library written in C. Prior to commit 628b716, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when redrawing the command line during history recall (handle_up_down() in cli_telnet.c). This affects only applications that enable the telnet CLI front-end (same gating as the related CLI issue). The line-redraw sequence for a recalled history entry can accumulate more data than a fixed-size stack buffer holds, which may lead to application termination. Exploitation requires access to the unauthenticated telnet CLI, which already permits arbitrary CLI commands, so the additional impact is limited. Applications that do not enable the telnet CLI front-end are not affected. This issue has been patched via commit 628b716.
CVE-2026-57166: PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when rendering feedback for an entered command line. Several command-line handling paths write an attacker-influenced amount of data into fixed-size buffers without sufficient bounds checking, so a long command line can overflow them. This affects only applications that enable the telnet CLI front-end (e.g. pj_cli_telnet_create() / --cli-telnet-port). The telnet CLI is an interactive administration interface with no authentication, so any client able to reach it can already issue arbitrary CLI commands. A malformed or overly long command line can overflow a fixed-size stack buffer while rendering command-line feedback, which may lead to application termination. Because reaching this code already requires access to the unauthenticated CLI, the impact beyond that existing access is limited. Applications that do not enable the telnet CLI front-end are not affected. This issue has been patched via commit 4472a31.

Created: 2026-09-06 Last update: 2026-09-06 22:17

8 security issues in forky high

There are 8 open security issues in forky.

8 important issues:

CVE-2026-57159: PJSIP is a free and open source multimedia communication library written in C. Prior to commit 673b978, a remote out-of-bounds read and write can occur in the SDP negotiator when the remote payload-type map maintenance feature is enabled. assign_pt_and_update_map() in pjmedia/src/pjmedia/sdp_neg.c uses payload-type numbers taken from a remote SDP offer or answer to index fixed-size internal tables without sufficient bounds validation, so a crafted remote SDP can cause memory access outside those tables. The practical impact is memory corruption and denial of service; code execution is not demonstrated. This path is only reached when PJMEDIA_SDP_NEG_MAINTAIN_REMOTE_PT_MAP is enabled. The default is disabled, so default builds are not affected; the feature is an interoperability option that integrating products may enable. This issue has been patched via commit 673b978.
CVE-2026-57160: PJSIP is a free and open source multimedia communication library written in C. Prior to commit d6a0e7f, a buffer overflow can occur in pjsip_generic_array_hdr_print() in pjsip/src/pjsip/sip_msg.c, the function that serializes generic array headers (such as Allow, Require, Supported, and Unsupported). Under certain output-buffer boundary conditions the function can write one byte past the end of the buffer. This is reachable mainly in applications that parse and re-serialize incoming SIP requests — for example a proxy, SBC, or B2BUA — where a remote peer can influence the serialized message. The out-of-bounds write is a single fixed byte; code execution and information disclosure are not demonstrated, and in typical pool-based allocations the byte falls within allocation slack. This issue has been patched via commit d6a0e7f.
CVE-2026-57161: PJSIP is a free and open source multimedia communication library written in C. Prior to commit acc03b5, a stack buffer overflow exists in PJSUA when processing Service-Route headers in a registration response (update_service_route() in pjsua_acc.c). This affects applications that register using the PJSUA/PJSUA2 account API (the default registration path). The Service-Route URIs from a 2xx response to REGISTER are stored into a fixed-size array without bounding the number of headers; a registrar that returns an excessive number of Service-Route headers can write past the end of the array on the stack. The values written are internal pointers rather than arbitrary data, so the most likely impact is unexpected application termination (denial of service), though memory corruption cannot be excluded. The malicious response may come from a compromised or malicious registrar, or — over unprotected transports — a spoofed response. This issue has been patched via commit acc03b5.
CVE-2026-57162: PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in the SRTP/SDES media transport when processing a=crypto attributes during SDP offer/answer (sdes_encode_sdp() in transport_srtp_sdes.c). This affects applications with SRTP enabled (use_srtp optional or mandatory, using SDES keying). During media negotiation, the crypto attributes from the remote SDP are collected into a fixed-size array without bounding their number; a remote peer that includes an excessive number of a=crypto attributes in a single media description can write past the end of that array on the stack. This is reachable from an incoming SIP INVITE during offer/answer, before application-level authentication. Impact may range from unexpected application termination to control flow hijack/memory corruption. Applications that do not enable SRTP are not affected. This issue has been patched via commit a1b707c.
CVE-2026-57163: PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when parsing the Subject Alternative Name extension of a peer certificate (tls_cert_get_info() in ssl_sock_gtls.c). Only GnuTLS builds are affected (--with-gnutls); OpenSSL and Apple SecureTransport/Network.framework builds are not affected. While extracting certificate information after a TLS handshake, an incorrect buffer-size value can cause an oversized SubjectAltName entry to be written past the end of a fixed-size stack buffer. A network-positioned attacker presenting a crafted certificate — a malicious server to a connecting client, or a malicious client to a server that requests certificates — can trigger this during the TLS handshake, before any SIP-level authentication. Impact may range from unexpected application termination to control flow hijack/memory corruption. This issue has been patched via commit c4a151a.
CVE-2026-57164: PJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d5956a, a heap buffer overflow exists in the PJLIB-UTIL HTTP client (http_client.c) when buffering an HTTP response body. This affects applications that use the PJLIB-UTIL HTTP client to receive a whole response body at once (a completion callback with no incremental on_data_read callback). When growing the response buffer, an incorrect size calculation based on the server-supplied Content-Length can leave the buffer too small, causing response data to be written past the end of the allocation. A malicious or man-in-the-middle HTTP server can trigger this with a crafted response; impact may range from unexpected application termination to memory corruption. Applications that consume the response incrementally (via on_data_read), or that only connect to trusted servers, are not affected. This issue has been patched via commit 8d5956a.
CVE-2026-57165: PJSIP is a free and open source multimedia communication library written in C. Prior to commit 628b716, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when redrawing the command line during history recall (handle_up_down() in cli_telnet.c). This affects only applications that enable the telnet CLI front-end (same gating as the related CLI issue). The line-redraw sequence for a recalled history entry can accumulate more data than a fixed-size stack buffer holds, which may lead to application termination. Exploitation requires access to the unauthenticated telnet CLI, which already permits arbitrary CLI commands, so the additional impact is limited. Applications that do not enable the telnet CLI front-end are not affected. This issue has been patched via commit 628b716.
CVE-2026-57166: PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when rendering feedback for an entered command line. Several command-line handling paths write an attacker-influenced amount of data into fixed-size buffers without sufficient bounds checking, so a long command line can overflow them. This affects only applications that enable the telnet CLI front-end (e.g. pj_cli_telnet_create() / --cli-telnet-port). The telnet CLI is an interactive administration interface with no authentication, so any client able to reach it can already issue arbitrary CLI commands. A malformed or overly long command line can overflow a fixed-size stack buffer while rendering command-line feedback, which may lead to application termination. Because reaching this code already requires access to the unauthenticated CLI, the impact beyond that existing access is limited. Applications that do not enable the telnet CLI front-end are not affected. This issue has been patched via commit 4472a31.

Created: 2026-09-06 Last update: 2026-09-06 22:17

lintian reports 20 warnings high

Lintian reports 20 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2026-06-28 Last update: 2026-07-22 12:00

1 security issue in trixie high

There is 1 open security issue in trixie.

1 important issue:

CVE-2023-38703: PJSIP is a free and open source multimedia communication library written in C with high level API in C, C++, Java, C#, and Python languages. SRTP is a higher level media transport which is stacked upon a lower level media transport such as UDP and ICE. Currently a higher level transport is not synchronized with its lower level transport that may introduce use-after-free issue. This vulnerability affects applications that have SRTP capability (`PJMEDIA_HAS_SRTP` is set) and use underlying media transport other than UDP. This vulnerability’s impact may range from unexpected application termination to control flow hijack/memory corruption. The patch is available as a commit in the master branch.

Created: 2023-10-22 Last update: 2023-10-22 12:54

3 security issues in bookworm high

There are 3 open security issues in bookworm.

3 important issues:

CVE-2022-23537: PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. Buffer overread is possible when parsing a specially crafted STUN message with unknown attribute. The vulnerability affects applications that uses STUN including PJNATH and PJSUA-LIB. The patch is available as a commit in the master branch (2.13.1).
CVE-2022-23547: PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. This issue is similar to GHSA-9pfh-r8x4-w26w. Possible buffer overread when parsing a certain STUN message. The vulnerability affects applications that uses STUN including PJNATH and PJSUA-LIB. The patch is available as commit in the master branch.
CVE-2022-39269: PJSIP is a free and open source multimedia communication library written in C. When processing certain packets, PJSIP may incorrectly switch from using SRTP media transport to using basic RTP upon SRTP restart, causing the media to be sent insecurely. The vulnerability impacts all PJSIP users that use SRTP. The patch is available as commit d2acb9a in the master branch of the project and will be included in version 2.13. Users are advised to manually patch or to upgrade. There are no known workarounds for this vulnerability.

Created: 2022-08-11 Last update: 2023-03-27 11:06

2 bugs tagged patch in the BTS normal

The BTS contains patches fixing 2 bugs (6 if counting merged bugs), consider including or untagging them.

Created: 2026-09-02 Last update: 2026-09-14 16:00

Fails to build during reproducibility testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2026-08-23 Last update: 2026-09-14 15:30

debian/patches: 4 patches to forward upstream low

Among the 15 debian patches available in version 1:22.10.1+dfsg+~cs6.17.60671434-1 of the package, we noticed the following issues:

4 patches where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2023-02-26 Last update: 2026-07-21 09:20

Issues found with some translations low

Automatic checks made by the Debian l10n team found some issues with the translations contained in this package. You should check the l10n status report for more information.

Issues can be things such as missing translations, problematic translated strings, outdated PO files, unknown languages, etc.

Created: 2020-02-26 Last update: 2020-02-26 10:49

testing migrations

This package will soon be part of the auto-openssl transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.

news

[rss feed]

[2026-08-27] Accepted asterisk 1:22.11.0-rc2+dfsg+~cs6.17.60671434-1 (source) into experimental (Jonas Smedegaard)
[2026-07-26] asterisk 1:22.10.1+dfsg+~cs6.17.60671434-1 MIGRATED to testing (Debian testing watch)
[2026-07-20] Accepted asterisk 1:22.10.1+dfsg+~cs6.17.60671434-1 (source) into unstable (Jonas Smedegaard)
[2026-07-13] asterisk 1:22.10.0+dfsg+~cs6.17.60671434-3 MIGRATED to testing (Debian testing watch)
[2026-07-07] Accepted asterisk 1:22.10.0+dfsg+~cs6.17.60671434-3 (source) into unstable (Jonas Smedegaard)
[2026-06-26] Accepted asterisk 1:22.10.0+dfsg+~cs6.17.60671434-2 (source) into unstable (Jonas Smedegaard)
[2026-06-16] Accepted asterisk 1:16.28.0~dfsg-0+deb11u10 (source) into oldoldstable-security (Thorsten Alteholz)
[2026-06-15] Accepted asterisk 1:22.10.0+dfsg+~cs6.17.60671434-1 (source) into unstable (Jonas Smedegaard)
[2026-04-11] Accepted asterisk 1:22.9.0+dfsg+~cs6.16.60671434-1 (source) into unstable (Jonas Smedegaard)
[2026-03-30] Accepted asterisk 1:16.28.0~dfsg-0+deb11u9 (source) into oldoldstable-security (Lukas Märdian)
[2026-02-08] Accepted asterisk 1:22.8.2+dfsg+~cs6.15.60671435-1 (source) into unstable (Jonas Smedegaard)
[2026-02-01] Accepted asterisk 1:22.8.0+dfsg+~cs6.15.60671435-1 (source) into unstable (Jonas Smedegaard)
[2025-12-02] Accepted asterisk 1:22.7.0~dfsg+~cs6.15.60671435-1 (source) into unstable (Jonas Smedegaard)
[2025-10-28] Accepted asterisk 1:22.6.0~dfsg+~cs6.15.60671435-1 (source) into unstable (Jonas Smedegaard)
[2025-10-10] Accepted asterisk 1:16.28.0~dfsg-0+deb11u8 (source) into oldoldstable-security (Markus Koschany)
[2025-08-29] Accepted asterisk 1:22.5.2~dfsg+~cs6.15.60671435-1 (source) into unstable (Jonas Smedegaard)
[2025-08-03] Accepted asterisk 1:22.5.1~dfsg+~cs6.15.60671435-1 (source) into unstable (Jonas Smedegaard)
[2025-06-04] Accepted asterisk 1:22.4.1~dfsg+~cs6.15.60671435-2 (source) into unstable (Jonas Smedegaard)
[2025-06-02] Accepted asterisk 1:16.28.0~dfsg-0+deb11u7 (source) into oldstable-security (Markus Koschany)
[2025-05-27] Accepted asterisk 1:22.4.1~dfsg+~cs6.15.60671435-1 (source) into unstable (Jonas Smedegaard)
[2025-03-28] Accepted asterisk 1:22.3.0~dfsg+~cs6.15.60671435-1 (source) into unstable (Jonas Smedegaard)
[2025-03-26] Accepted asterisk 1:22.3.0~~rc1~dfsg+~cs6.15.60671435-1 (source) into unstable (Jonas Smedegaard)
[2025-02-22] Accepted asterisk 1:22.2.0~dfsg+~cs6.15.60671435-2 (source) into unstable (Jonas Smedegaard)
[2025-02-11] Accepted asterisk 1:22.2.0~dfsg+~cs6.15.60671435-1 (source) into unstable (Jonas Smedegaard)
[2025-02-05] Accepted asterisk 1:16.28.0~dfsg-0+deb11u6 (source) into oldstable-security (Daniel Leidert)
[2025-01-12] Accepted asterisk 1:22.1.1~dfsg+~cs6.14.60671435-1 (source) into unstable (Jonas Smedegaard)
[2024-11-27] Accepted asterisk 1:22.1.0~dfsg+~cs6.14.60671435-1 (source) into unstable (Jonas Smedegaard)
[2024-10-23] Accepted asterisk 1:22.0.0~dfsg+~cs6.14.60671435-1 (source) into unstable (Jonas Smedegaard)
[2024-10-20] Accepted asterisk 1:16.28.0~dfsg-0+deb11u5 (source) into oldstable-security (Thorsten Alteholz)
[2024-10-05] Accepted asterisk 1:22.0.0~~rc2~dfsg+~cs6.14.60671435-1 (source) into experimental (Jonas Smedegaard)

bugs [bug history graph]

all: 32 36
RC: 1
I&N: 21 25
M&W: 10
F&P: 0
patch: 2 6

links

homepage
lintian (0, 20)
buildd: logs, exp, reproducibility, cross
popcon
browse source code
other distros
security tracker
screenshots
l10n (-, 98)
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1:22.10.0+dfsg+~cs6.17.60671434-1ubuntu3
17 bugs
patches for 1:22.10.0+dfsg+~cs6.17.60671434-1ubuntu3