Software Update: Asterisk 15.5.0 / 13.22.0

Asterisk is a comprehensive pbx for BSD, Linux, and macOS. The program offers all the functions you would expect from a telephone exchange. For example, it has options for voicemail, conferencing and call-queueing. In addition, support for caller id services, adsi, sip and h323 is present. For a complete overview of all possibilities, we refer to this page. The developers have released Asterisk 15.5.0 and 13.22.0 with the following announcements:

Asterisk 15.5.0 Now Available

The release of Asterisk 15.5.0 resolves several issues reported by the community and would have not been possible without your participation.

Security bugs fixed in this release:

• ASTERISK-27818 – Username bruteforce is possible when using ACL with PJSIP
• ASTERISK-27807 – iostreams: Potential DoS when client connection closed prematurely

Bugs fixed in this release:

• ASTERISK-27783 – res_pjsip_pubsub: apparent crash on shutdown
• ASTERISK-27870 – app_confbridge: Conference bridge and announcer channels are not removed if conference is ended as soon as it starts
• ASTERISK-27943 – AMI: Action SendText needs to use the correct thread.
• ASTERISK-27942 – res_pjsip_messaging doesn’t accept application/* content-types.
• ASTERISK-27909 – cdr: Deadlock with submit_scheduled_batch and submit_unscheduled_batch
• ASTERISK-27936 – res_pjsip_session doesn’t update media when a 200 comes in with a different port than a 183
• ASTERISK-26987 – pbx_dundi: Asterisk crashes when unloading module pbx_dundi.so with dundi peers
• ASTERISK-27933 – [patch] uuid: Enable UUID in Solaris 11.
• ASTERISK-27625 – channels: CHECK_BLOCKING is ineffective
• ASTERISK-27931 – [patch] BuildSystem: Enable ./configure in Solaris 11.
• ASTERISK-27926 – [patch] bootstrap.sh: find -maxdepth is not POSIX compatible.
• ASTERISK-27903 – menuselect: GCC 8: restrict-qualified parameter passed and aliased.
• ASTERISK-27914 – [patch] tests/test_utils: Repair ./configure –with-ssl=PATH.
• ASTERISK-27705 – chan_iax2: Stops listening for traffic
• ASTERISK-27908 – [patch] crypto.h: Repair ./configure –with-ssl=PATH.
• ASTERISK-27905 – [patch] res_srtp: Repair ./configure –with-ssl=PATH.
• ASTERISK-27888 – SQL fetch error on query which return 0 columns
• ASTERISK-27902 – chan_pjsip isn’t updating hangupcause on 4XX responses
• ASTERISK-27901 – [patch] ooh323c: GCC 8: output truncated before terminating null.
• ASTERISK-27872 – res_pjsip: Modified qualify_frequency doesn’t effect until pjsip reload
• ASTERISK-27094 – res_fax: Deadlock when using Local channels and fax gateway
• ASTERISK-27848 – rtp: DTMF Breaks With telephony-event/16000
• ASTERISK-25261 – Manager events for MeetMe have incorrectly documented key name ‘Usernum’ – should be ‘User’
• ASTERISK-27878 – [patch] tcptls.h: Repair ./configure –with-ssl=PATH.
• ASTERISK-27876 – [patch] tcptls: Allow OpenSSL configured with no-dh.
• ASTERISK-27874 – [patch] tcptls: Allow OpenSSL 1.1.x configured with enable-ssl3-method no-deprecated.
• ASTERISK-27845 – Codec-Change Re-INVITE during DTMF can cause marker bit error
• ASTERISK-27831 – res_rtp_asterisk: Add support for abs-send-time RTP extension
• ASTERISK-27863 – config/ast_destroy_realtime_fields: successful DELETE is treated as failed
• ASTERISK-27865 – [patch]: tcptls: Repair ./configure –with-ssl=PATH.
• ASTERISK-27760 – Asterisk ODBC Voicemail Prompt storage fails with recent MariaDB version.
• ASTERISK-27853 – Incorrect error reported when leaving/retrieving a ODBC voicemail
• ASTERISK-27726 – chan_mobile: presents incorrect inbound Caller ID names
• ASTERISK-27861 – [patch] res_pjsip_endpoint_identifier_ip: Unregister the module for headers.
• ASTERISK-27860 – [patch] res_pjsip: Register pjsip_transport_management not externally but internally.
• ASTERISK-27852 – cli: “manager show settings” mislabels HTTP timeout as being minutes.
• ASTERISK-27824 – Fix issues exposed by GCC 8
• ASTERISK-27850 – [patch] rtp_engine: Allow Media Formats with add_static_payload(-1) on egress again.
• ASTERISK-27811 – [patch] sip_to_pjsip: Enable python3 compatibility.
• ASTERISK-27841 – digest over for manager (ami) over http fails on too long uris
• ASTERISK-26570 – Macro allows an infinite loop of dialplan inclusion resulting in a crash
• ASTERISK-27801 – Asterisk got stuck while enabling “ari set debug all on”
• ASTERISK-27795 – chan_sip: one way / no audio with srtp
• ASTERISK-27800 – One way audio when calling from Asterisk(sip trunk) to another number where both are connected to a SBC using TLS+SRTP
• ASTERISK-26806 – pjsip_options: rework to make more efficient
• ASTERISK-27814 – translate: interpolated frames are not passed through
• ASTERISK-27812 – When the ooh323 debug is on there is no ringing signal to incoming calls via H323 trunk.
• ASTERISK-26893 – No “alert” or “progress” in chan_ooh323 if debug is enabled only on the module
• ASTERISK-27639 – [patch] BuildSystem: Enable IMAP storage on FreeBSD and DragonFly BSD.
• ASTERISK-27804 – bridge_softmix / app_confbridge: Add support for combining REMB reports
• ASTERISK-27418 – app_confbridge: “core show profile bridge” does not output “sfu” when video_mode is sfu
• ASTERISK-27808 – [patch] chan_vpb: Avoid GNU old-style field designator extension.

Improvements made in this release:

• ASTERISK-27929 – [patch] BuildSystem: Enable autotools in Solaris 11.
• ASTERISK-27752 – Ten seconds of silence after mp3 playback
• ASTERISK-27910 – [patch] res_rtp_asterisk: Allow OpenSSL configured with no-deprecated.
• ASTERISK-27906 – [patch] res_crypto: Allow OpenSSL configured with no-deprecated.
• ASTERISK-27877 – app_confbridge: Add talking indicator for ConfBridgeList AMI response
• ASTERISK-27873 – documentation: Error on wiki description of Asterisk 13 “MeetmeMute” event
• ASTERISK-27846 – ast_coredumper: Fix OUTPUT directory
• ASTERISK-27867 – [patch] libasterisssl: Allow OpenSSL 1.0.2 configured with no-deprecated.
• ASTERISK-27796 – res_hep: Allow create_address to resolve a provided hostname
• ASTERISK-27820 – [patch] Add DragonFly BSD.
• ASTERISK-27793 – cppcheck identifies redundant “if”

For a full list of changes in this release, please see the ChangeLog.