Log message:
Update to Asterisk 22.10.1:

## Change Log for Release asterisk-22.10.1

### Links:

 - [Full \ 
ChangeLog](https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-22.10.1.html)
 - [GitHub Diff](https://github.com/asterisk/asterisk/compare/22.10.0...22.10.1)

### Summary:

- Commits: 19
- Commit Authors: 6
- Issues Resolved: 0
- Security Advisories Resolved: 20
  - \ 
[GHSA-3g56-cgrh-95p5](https://github.com/asterisk/asterisk/security/advisories/GHSA-3g56-cgrh-95p5): \ 
chan_unistim DIALPAGE digit handling can overflow phone_number and crash \ 
Asterisk
  - \ 
[GHSA-3rhj-hhw7-m6fw](https://github.com/asterisk/asterisk/security/advisories/GHSA-3rhj-hhw7-m6fw): \ 
NULL Pointer Dereference in HTTP AMI Digest Authentication
  - \ 
[GHSA-4pgv-j3mr-3rcp](https://github.com/asterisk/asterisk/security/advisories/GHSA-4pgv-j3mr-3rcp): \ 
Reflected XSS in Phone Provisioning HTTP Error Pages
  - \ 
[GHSA-589g-qgf8-m6mx](https://github.com/asterisk/asterisk/security/advisories/GHSA-589g-qgf8-m6mx): \ 
Stack buffer overflow in MWI NOTIFY Message-Account parsing
  - \ 
[GHSA-746q-794h-cc7f](https://github.com/asterisk/asterisk/security/advisories/GHSA-746q-794h-cc7f): \ 
Out-of-Bounds Read in Q.931 Information Element Parser (H.323 Addon)
  - \ 
[GHSA-8jhw-m2hg-vp3h](https://github.com/asterisk/asterisk/security/advisories/GHSA-8jhw-m2hg-vp3h): \ 
Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)
  - \ 
[GHSA-8jw3-ccr9-xrmf](https://github.com/asterisk/asterisk/security/advisories/GHSA-8jw3-ccr9-xrmf): \ 
Buffer over-read in Asterisk PJSIP MWI body parser
  - \ 
[GHSA-g8q2-p36q-94f6](https://github.com/asterisk/asterisk/security/advisories/GHSA-g8q2-p36q-94f6): \ 
Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection \ 
closes during SDP processing
  - \ 
[GHSA-h5hv-jmgj-92q2](https://github.com/asterisk/asterisk/security/advisories/GHSA-h5hv-jmgj-92q2): \ 
CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser
  - \ 
[GHSA-j2mm-57pq-jh94](https://github.com/asterisk/asterisk/security/advisories/GHSA-j2mm-57pq-jh94): \ 
Possible RED T.140 Generation Accumulation OOB Write
  - \ 
[GHSA-mxgm-8c6f-5p8f](https://github.com/asterisk/asterisk/security/advisories/GHSA-mxgm-8c6f-5p8f): \ 
Stack buffer overflow in res_xmpp XMPP namespace prefix handling
  - \ 
[GHSA-ph27-3m5q-mj5m](https://github.com/asterisk/asterisk/security/advisories/GHSA-ph27-3m5q-mj5m): \ 
SQL Injection in cel_pgsql and cel_tds via CELGenUserEvent eventtype Field
  - \ 
[GHSA-q9fr-m7g8-6ph5](https://github.com/asterisk/asterisk/security/advisories/GHSA-q9fr-m7g8-6ph5): \ 
Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct \ 
buffers
  - \ 
[GHSA-qf8j-jp7h-c5hx](https://github.com/asterisk/asterisk/security/advisories/GHSA-qf8j-jp7h-c5hx): \ 
Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatch
  - \ 
[GHSA-r6c2-hwc2-j4mp](https://github.com/asterisk/asterisk/security/advisories/GHSA-r6c2-hwc2-j4mp): \ 
LDAP Filter Injection in res_config_ldap via SIP Username (Unauthenticated \ 
Information Disclosure)
  - \ 
[GHSA-vfhr-r9x9-c687](https://github.com/asterisk/asterisk/security/advisories/GHSA-vfhr-r9x9-c687): \ 
Possible RED T.140 Heap Buffer Overflow
  - \ 
[GHSA-vrfp-mg3q-3959](https://github.com/asterisk/asterisk/security/advisories/GHSA-vrfp-mg3q-3959): \ 
ARI setChannelVar bypasses live_dangerously and permits FILE() writes
  - \ 
[GHSA-wcvv-g26m-wx5c](https://github.com/asterisk/asterisk/security/advisories/GHSA-wcvv-g26m-wx5c): \ 
ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and \ 
conditional RCE
  - \ 
[GHSA-x348-j6c9-77f3](https://github.com/asterisk/asterisk/security/advisories/GHSA-x348-j6c9-77f3): \ 
Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed \ 
2048-byte Buffer
  - \ 
[GHSA-xgj6-2gc5-5x9c](https://github.com/asterisk/asterisk/security/advisories/GHSA-xgj6-2gc5-5x9c): \ 
ast_loggrabber executes python script in world writable directory(`/tmp`) \ 
leading to potential privilege escalation And RCE

### Upgrade Notes:

### Developer Notes:

- #### ARI: Make ARI applications respect live_dangerously.
  ARI applications can no longer call "dangerous" dialplan
  functions like DB(), FILE(), SHELL(), CURL(), STAT(), etc. without
  enabling "live_dangerously" in asterisk.conf.
  Resolves: #GHSA-vrfp-mg3q-3959

### Commit Authors:

- George Joseph: (6)
- Mike Bradeen: (3)
- Milan Kyselica: (7)
- Pengpeng Hou: (1)
- Roberto Paleari: (1)
- ThatTotallyRealMyth: (1)

## Issue and Commit Detail:

### Closed Issues:

  - !GHSA-3g56-cgrh-95p5: chan_unistim DIALPAGE digit handling can overflow \ 
phone_number and crash Asterisk
  - !GHSA-3rhj-hhw7-m6fw: NULL Pointer Dereference in HTTP AMI Digest Authentication
  - !GHSA-4pgv-j3mr-3rcp: Reflected XSS in Phone Provisioning HTTP Error Pages
  - !GHSA-589g-qgf8-m6mx: Stack buffer overflow in MWI NOTIFY Message-Account parsing
  - !GHSA-746q-794h-cc7f: Out-of-Bounds Read in Q.931 Information Element Parser \ 
(H.323 Addon)
  - !GHSA-8jhw-m2hg-vp3h: Heap Buffer Overflow in OGG/Speex File Playback \ 
(format_ogg_speex)
  - !GHSA-8jw3-ccr9-xrmf: Buffer over-read in Asterisk PJSIP MWI body parser
  - !GHSA-g8q2-p36q-94f6: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling \ 
when TCP connection closes during SDP processing
  - !GHSA-h5hv-jmgj-92q2: CVE-2022-37325 fix is absent from current chan_ooh323 \ 
Q.931 party-number parser
  - !GHSA-j2mm-57pq-jh94: Possible RED T.140 Generation Accumulation OOB Write
  - !GHSA-mxgm-8c6f-5p8f: Stack buffer overflow in res_xmpp XMPP namespace \ 
prefix handling
  - !GHSA-ph27-3m5q-mj5m: SQL Injection in cel_pgsql and cel_tds via \ 
CELGenUserEvent eventtype Field
  - !GHSA-q9fr-m7g8-6ph5: Asterisk app_sms.c copies externally controlled SMS \ 
lengths into fixed in-struct buffers
  - !GHSA-qf8j-jp7h-c5hx: Out-of-Bounds Write in Codec2 Decoder Due to \ 
Floor/Ceil Sample Count Mismatch
  - !GHSA-r6c2-hwc2-j4mp: LDAP Filter Injection in res_config_ldap via SIP \ 
Username (Unauthenticated Information Disclosure)
  - !GHSA-vfhr-r9x9-c687: Possible RED T.140 Heap Buffer Overflow
  - !GHSA-vrfp-mg3q-3959: ARI setChannelVar bypasses live_dangerously and \ 
permits FILE() writes
  - !GHSA-wcvv-g26m-wx5c: ARI REST-over-WebSocket read-only bypass allows \ 
arbitrary module path load and conditional RCE
  - !GHSA-x348-j6c9-77f3: Stack Buffer Overflow in H.323 ooTrace() via Unbounded \ 
vsprintf into Fixed 2048-byte Buffer
  - !GHSA-xgj6-2gc5-5x9c: ast_loggrabber executes python script in world \ 
writable directory(`/tmp`) leading to potential privilege escalation And RCE

### Commit List:

-  ast_loggrabber: Install the ast_tsconvert.py script to a secure temp directory.
-  chan_unistim.c: Prevent overrun of phone_number field.
-  ooh323c: not checking for IE minimum length
-  res_ari: Ensure read-only users are properly authorized via REST Over WebSocket.
-  pjsip_message_filter: Use pj_strdup instead of pj_strassign to save local address.
-  ooh323c/ooq931.c: Ensure ooQ931Decode doesn't run out-of-bounds.
-  ARI: Make ARI applications respect live_dangerously.
-  res_rtp_asterisk.c: Address 2 potential T.140 RED buffer overruns.
-  res/res_pjsip_pubsub.c: Fix buffer over-read in MWI body parser
-  manager: Use remote address in user error logging
-  ooh323: Prevent potential buffer overflow in trace logging
-  app_sms: Bound protocol 1 SMS unpacking to fixed-size buffers
-  res_xmpp: Fix stack buffer overflow in namespace prefix handling
-  res_pjsip_pubsub: Add width limit to sscanf in MWI NOTIFY parser
-  res_config_ldap: Escape LDAP filter values per RFC 4515
-  cel_pgsql, cel_tds: Escape eventtype field to prevent SQL injection
-  http: Escape error page text to prevent reflected XSS
-  codec_codec2: Only process complete Codec2 frames in decoder
-  format_ogg_speex: Add bounds check to prevent heap buffer overflow

Log message:
Update to asterisk 22.10.0:

## Change Log for Release asterisk-22.10.0

### Links:

 - [Full \ 
ChangeLog](https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-22.10.0.html)
 - [GitHub Diff](https://github.com/asterisk/asterisk/compare/22.9.0...22.10.0)

### Summary:

- Commits: 53
- Commit Authors: 24
- Issues Resolved: 43
- Security Advisories Resolved: 0

### User Notes:

- #### res ari: Add attachable states to Channels and Bridges
  Bridge variables now can be set and retrieved via the following paths:
  `/bridges/{bridgeId}/variable`
  `/bridges/{bridgeId}/variables`
  Both Bridge and Channel variables can now be set with an optional 'report_events'
  boolean flag that will cause those variables to be included on all events on that
  object. The 'report_events' flag will default to False if not set to maintain
  backwards capability.
  To allow this, variables can now be either name value pairs (the current format):
  `<variable_name>: '<value_string>'`
   - or -
  `<variable_name>: {value: '<value_string>', report_events: \ 
[true|false]}`

- #### ARI: Added paths to get and set multiple channel variables.
  Added new ARI paths for getting and setting multiple channel
  variables at a time. For GET, this takes in a single string of
  comma-separated variable names, while POST takes in a dictionary of key
  value pairs. The behavior is the same as passing in variables when
  originating a channel.

- #### res_rtp_asterisk: Add option to control stun host resolution when TTL = 0
  A new `stunaddr_reresolve_ttl_0` parameter has been added to rtp.conf
  that allows control over what happens when a STUN server hostname lookup
  returns a TTL of 0.  The values can be set as follows:
  - 'no': This is the historical (and current default) behavior of not doing
  any further lookups and continuing to use the last successful result until
  Asterisk is restarted or rtp.conf is reloaded.
  - 'yes': Use the last cached result for the current call but trigger
  re-resolution in the background for the benefit of future calls.
  If the result of the background lookup is a ttl > 0, periodic resolution
  will be restarted otherwise the next call will use the new cached value
  and will trigger a background lookup again.
  A new CLI command `rtp resolve stun hostname` has been added
- #### app_dial: Properly handle callee hangup while sending digits.
  If a called channel sends progress or wink and the caller begins
  sending digits but the callee answers and then hangs up before digit
  sending can finish, the call is now answered before being disconnected.
  If the callee hangs up without answering, the call now continues in
  the dialplan.

- #### Upgrade bundled pjproject to 2.17.
  Bundled pjproject has been upgraded to 2.17. For more
  information about what is included in this release, see the
  pjproject Github page: https://github.com/pjsip/pjproject/releases/tag/2.17

- #### res_pjsip: Add per-endpoint RTP port range configuration
  PJSIP endpoints now support rtp_port_start and
  rtp_port_end options to configure a dedicated RTP port range per
  endpoint, overriding the global rtp.conf setting.

- #### stasis_broadcast: Add optional ARI broadcast with first-claim-wins
  New optional modules res_stasis_broadcast.so and
  app_stasis_broadcast.so enable broadcasting an incoming channel to multiple
  ARI applications. The first application to successfully claim (via
  POST /ari/events/claim) wins channel control. StasisBroadcast() dialplan
  application initiates broadcasts. CallBroadcast and CallClaimed events notify
  applications. When modules are not loaded, behavior is unchanged.

- #### chan_iax2: Add CHANNEL getter to retrieve auth method.
  CHANNEL(auth_method) can now be used to retrieve the
  auth method negotiated for a call on IAX2 channels.

- #### res_pjsip_maintenance: Add PJSIP endpoint maintenance mode
  New module res_pjsip_maintenance adds runtime maintenance
  mode for PJSIP endpoints. Use "pjsip set maintenance <on|off>
  <endpoint|all>" to enable or disable, and "pjsip show \ 
maintenance"
  to list affected endpoints. AMI actions PJSIPSetMaintenance and
  PJSIPShowMaintenance provide programmatic access. No configuration
  file changes required.

### Upgrade Notes:

- #### jansson: Upgrade version to jansson 2.15.0
  jansson has been upgraded to 2.15.0. For more
  information visit jansson Github page: \ 
https://github.com/akheron/jansson/releases/tag/v2.15.0

- #### res_pjsip: Add per-endpoint RTP port range configuration
  An alembic database migration has been added to add
  the rtp_port_start and rtp_port_end columns to the ps_endpoints
  table. Run "alembic upgrade head" to apply the schema change.

### Developer Notes:

- #### res_pjsip: Add per-endpoint RTP port range configuration
  New public API: ast_rtp_instance_new_with_port_range()
  creates an RTP instance with a per-instance port range.
  ast_rtp_instance_get_port_start() and ast_rtp_instance_get_port_end()
  allow RTP engines to query the override. Third-party RTP engines can
  use these getters to support per-instance port ranges.

- #### stasis_broadcast: Add optional ARI broadcast with first-claim-wins
  New public APIs in stasis_app_broadcast.h:
  stasis_app_broadcast_channel(), stasis_app_claim_channel(),
  stasis_app_broadcast_winner(), and stasis_app_broadcast_wait(). New ARI event
  types (CallBroadcast, CallClaimed) added to events.json. All code is isolated;
  no existing ABI modified.

- #### res_pjsip_maintenance: Add PJSIP endpoint maintenance mode
  ast_sip_session_supplement gains a new optional
  callback - int (*session_create)(struct ast_sip_endpoint *endpoint,
  const char *destination). It is called from the global supplement
  list (not per-session) at the start of ast_sip_session_create_outgoing()
  via ast_sip_session_check_supplement_create(). Returning non-zero
  blocks the outgoing session. Modules that need to gate outbound
  SIP session creation should register a supplement with this callback
  set rather than hooking into chan_pjsip directly.

- #### build: remove pjsua, pjsystest, Python bindings and asterisk_malloc_debug \ 
stubs from pjproject dev build
  The pjsua and pjsystest application binaries, the deprecated
  Python pjsua bindings (`_pjsua.so`), and the `asterisk_malloc_debug.c` stub
  implementations are no longer built or installed as part of the bundled
  pjproject dev mode build. The `PYTHONDEV` (python2.7-dev) build dependency
  is also removed. Developers who relied on the pjsua binary for Test Suite
  SIP simulation should use SIPp instead, which is the current Asterisk Test
  Suite standard.
  Fixes: #1840

## Issue and Commit Detail:

### Closed Issues:

  - 1217: [bug]: INSERT INTO cdr query prepare statement issue on \ 
cdr_adaptive_odbc to control statement preparation manually
  - 1357: [bug]: MessageSend WARNING “not a valid SIP/SIPS URI” when using \ 
endpoint not URI
  - 1653: [bug]: Asterisk ODBC Voicemail Crash Caused by Voicemail Re-entry Loop \ 
and Unsafe BLOB Retrieval
  - 1736: app_queue: update_queue() may double-increment member->calls with \ 
shared_lastcall=yes (regression observed after 20.17; impacts fewestcalls \ 
routing)
  - 1761: func_talkdetect.c: TALK_DETECT docs wording mistake
  - 1762: [bug]: 100% CPU usage when entering BridgeWait after \ 
JITTERBUFFER(disabled)=
  - 1807: [new-feature]: translate.c: implement different types of sample frame \ 
inputs
  - 1812: [new-feature]: add tests/test_codec_translations.c
  - 1818: [bug]: func_odbc: possible use-after-free crash during reload with \ 
active calls
  - 1839: Crash in MDMF Caller ID parser due to signed char length field on \ 
DAHDI channels
  - 1840: [bug]: Asterisk fails to compile with --enable-dev-mode=yes due to \ 
INIT_RETURN undeclared in bundled pjproject Python bindings
  - 1855: [bug]: core reload deadlocks Asterisk (pjsip, CLI, etc.)
  - 1858: [bug]: DNS records with a TTL of zero are permanently cached
  - 1859: [bug]: res_pjsip_outbound_registration: No expires header set when \ 
triggered via CLI
  - 1861: [bug]: Possible heap corruption in audiohook/translate write path \ 
during bridged media
  - 1862: [bug]: Build fails with Building Documentation: line 210: \ 
/tmp/xmldoc.tmp.xml: Permission denied
  - 1865: [bug]: chan_iax2: Another code path that causes crashes on negative \ 
data lengths
  - 1867: [bug]: Massive [eventpoll] file-descriptor leak (hundreds of epoll \ 
fds) when TURN is enabled in rtp.conf
  - 1872: [bug]:  Deadlock in chan_pjsip_new when endpoint set_var invokes \ 
PJSIP_HEADER
  - 1878: [new-feature]: chan_iax2: Allow retrieving the auth method using the \ 
CHANNEL function
  - 1883: [bug]: fix: stdatomic.h false positive on GCC 4.8
  - 1885: [bug]: cdrel_custom :SQLite version too old: sqlite3_prepare_v3 / \ 
SQLITE_PREPARE_PERSISTENT undeclared
  - 1888: [improvement]: pjsip: Upgrade bundled version to pjproject 2.17
  - 1892: [bug]: Build failure with bundled pjproject on OpenSSL 1.0.x: \ 
undefined reference to TLS_method and SSL_CTX_set_ciphersuites
  - 1894: [bug]: Outbound ARI websockets don't always clean up completely
  - 1896: [bug]: asterisk.c fails to compile when HAVE_LIBEDIT_IS_UNICODE isn't \ 
defined
  - 1901: [bug]: QUEUE_RAISE_PENALTY=rN ignored when set via queue rules
  - 1903: [bug]: g++ 16 no longer defines __STDC_VERSION__ causing \ 
channelstorage_cpp_map_name_id.cc to fail
  - 1907: [bug]: Deadlock between bridge and setting of RTP stats variables at hangup
  - 1910: [improvement]: Add attachable state variables to Channels and Bridges.
  - 1915: [bug]: app_dial: Channel not handled properly if callee disconnects \ 
while caller is sending it digits prior to answer
  - 1921: [bug]: Memory error in crypto_get_cert_subject when using malloc_debug
  - 1928: [bug]: Calling ast_softhangup with channel lock held can cause deadlock
  - 1931: [improvement]: jansson: Upgrade version to jansson 2.15.0
  - 1936: [bug]: Calling set_variable on PJSIP channel when originating with ARI \ 
with PJSIP_HEADER can result in deadlock
  - 1938: [bug]: res_rtp_asterisk: Copy/paste error in ast_rtp_get_stat()
  - 1941: [bug]: chan_websocket doesn't handle CONTINUATION websocket frames
  - 1947: [bug]: chan_dahdi fails to build with gcc-16 when openr2 is installed
  - 1950: [bug]: app_record does not detect channel hangup during beep playback
  - 1952: [bug]: OpenSSL 4.0.0
  - 1957: [bug]: Calendar module fails to build with libical 4.X
  - 1970: [bug]: Startup or shutdown segfault in res_ari_model under certain \ 
conditions with DEVMODE and persistent outbound websockets.

### Commit List:

-  res_ari: Add res_ari_model as an optional_module.
-  res ari: Add attachable states to Channels and Bridges
-  ARI: Added paths to get and set multiple channel variables.
-  res_stir_shaken: avoid direct ASN1_STRING accesses
-  tcptls.c: fix build with OpenSSL 4
-  res_calendar: Fix build with libical 4.X
-  app_record: Fix hangup handling during beep playback
-  odbc: Don't use prepared statements for distinct SQL statements
-  abstract_jb.c: Remove timerfd from channel when disabling jitter buffer
-  res_pjsip: Don't allow a leading period when wildcard matching
-  Ensure channel locks aren't held while calling ast_set_variables.
-  app_queue: fix double increment of member->calls with shared_lastcall
-  chan_dahdi: Fix set but not used in mfcr2_show_links_of().
-  tests: add tests/test_codec_translations.c
-  install_prereq: Add a 'minimal' mode for basic build dependencies
-  chan_websocket: Handle incoming CONTINUATION frames.
-  res_rtp_asterisk: Fix incorrect reference in ast_rtp_get_stat().
-  jansson: Upgrade version to jansson 2.15.0
-  channel.c: Move setting RTP stats from ast_softhangup to ast_ari_channels_hangup.
-  res_rtp_asterisk: Add option to control stun host resolution when TTL = 0
-  pjsip_configuration: Show actual dtls_verify config.
-  app_dial: Properly handle callee hangup while sending digits.
-  res_pjsip_messaging: Update To URI only if it is a SIP(S) URI
-  Upgrade bundled pjproject to 2.17.
-  res_stir_shaken: fix memory free crash when Asterisk is built with malloc_debug
-  manager: Eliminate unnecessary code, simplify sessions in stasis callbacks
-  res_stasis/resource_bridges: Split bridge playback control and wrapper cleanup
-  res_pjsip_outbound_publish.c: Add more verbose documentation for \ 
outbound_proxy usage
-  channel.c: Don't lock the channel in ast_softhangup while setting rtp \ 
instance vars
-  chan_pjsip: Fix deadlock when endpoint set_var uses PJSIP_HEADER
-  res_pjsip: Add per-endpoint RTP port range configuration
-  app_queue: Fix raise_respect_min lost in copy_rules() breaking rN queue rules
-  app_voicemail_odbc: fix msgnum race and crash on failed STORE
-  ari_websockets: Fix two issues in the cleanup of outbound websockets.
-  compat.h: Ensure check for `__STDC_VERSION__` is not attempted for c++.
-  pjproject: Backport fix for OpenSSL < 1.1.0 build failure in ssl_sock_ossl.c
-  asterisk.c: Fix #if HAVE_LIBEDIT_IS_UNICODE.
-  cdrel_custom: fix SQLite compatibility for versions < 3.20.0
-  translate.c: implement different sample_types for translation computation.
-  stasis_broadcast: Add optional ARI broadcast with first-claim-wins
-  res_audiosocket: Tolerate non-audio frame types
-  pbx_functions: Save module pointer before calling read and write callbacks.
-  chan_iax2: Add CHANNEL getter to retrieve auth method.
-  fix: backport pjproject stdatomic.h GCC 4.8 build failure patch
-  res_rtp_asterisk: Destroy ioqueue in rtp_ioqueue_thread_destroy.
-  res_pjsip_maintenance: Add PJSIP endpoint maintenance mode
-  chan_iax2: Add another check to abort frame handling if datalen < 0.
-  res_pjsip_outbound_registration: only update the Expires header if the value \ 
has changed
-  func_talkdetect.c: Clarify dsp_talking_threshold documentation.
-  make_xml_documentation: Remove temporary file on script exit.
-  res_pjsip_config_wizard: Trigger reloads from a pjsip servant thread
-  build: remove pjsua, pjsystest, Python bindings and asterisk_malloc_debug \ 
stubs from pjproject dev build
-  callerid: fix signed char causing crash in MDMF parser

Log message:
*: Recursive revbump from security/nettle-4.0

Log message:
Update to Asterisk 22.9.0:

## Change Log for Release asterisk-22.9.0

### Links:

 - [Full \ 
ChangeLog](https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-22.9.0.html)
 - [GitHub Diff](https://github.com/asterisk/asterisk/compare/22.8.2...22.9.0)

### Summary:

- Commits: 50
- Commit Authors: 21
- Issues Resolved: 34
- Security Advisories Resolved: 0

### User Notes:

- #### acl: Add ACL support to http and ari
  A new section, type=restriction has been added to http.conf
  to allow an uri prefix based acl to be configured. See
  http.conf.sample for examples and more information.
  The user section of ari.conf can now contain an acl configuration
  to restrict users access. See ari.conf.sample for examples and more
  information

- #### res_rtp_asterisk.c: Fix DTLS packet drop when TURN loopback re-injection \ 
occurs before ICE candidate check
  WebRTC calls using TURN configured in rtp.conf (turnaddr,
  turnusername, turnpassword) will now correctly complete DTLS/SRTP
  negotiation. Previously all DTLS packets were silently dropped due to
  the loopback re-injection address not being in the ICE active candidate
  list.

- #### docs: Add "Provided-by" to doc XML and CLI output.
  The CLI help for applications, functions, manager commands and
  manager events now shows the module that provides its functionality.

- #### CDR/CEL Custom Performance Improvements
  Significant performance improvements have been made to the
  cdr_custom, cdr_sqlite3_custom, cel_custom and cel_sqlite3_custom modules.
  See the new sample config files for those modules to see how to benefit
  from them.

- #### chan_websocket: Add media direction.
  WebSocket now supports media direction, allowing for
  unidirectional media. This is done from the perspective of the
  application and can be set via channel origination, external media, or
  commands sent from the application. Check out
  https://docs.asterisk.org/Configuration/Channel-Drivers/WebSocket/ for
  more.

- #### app_queue: Add 'prio' setting to the 'force_longest_waiting_caller' option
  The 'force_longest_waiting_caller' option now supports a 'prio' setting.
  When set to 'prio', calls are offered by priority first, then by wait time.

- #### Upgrade bundled pjproject to 2.16.
  Bundled pjproject has been upgraded to 2.16. For more
  information on what all is included in this change, check out the
  pjproject Github page: https://github.com/pjsip/pjproject/releases

- #### res_pjsip_header_funcs: Add new PJSIP_INHERITABLE_HEADER dialplan function
  A new PJSIP_HEADER option has been added that allows
  inheriting pjsip headers from the inbound to the outbound bridged
  channel.
  Example- same => n,Set(PJSIP_INHERITABLE_HEADER(add,X-custom-1)=alpha)
  will add X-custom-1: alpha to the outbound pjsip channel INVITE
  upon Dial.

- #### app_queue: Fix rN raise_penalty ignoring min_penalty in calc_metric
  Fixes an issue where QUEUE_RAISE_PENALTY=rN could raise a member’s penalty \ 
below QUEUE_MIN_PENALTY during member selection. This could allow members \ 
intended to be excluded to be selected. The queue now consistently respects the \ 
minimum penalty when raising penalties, aligning member selection behavior with \ 
queue empty checks and documented rN semantics.

## Issue and Commit Detail:

### Closed Issues:

  - 449: [bug]:  PJSIP confuses media address after INVITE requiring authentication
  - 566: [bug]: core: SIGSEGV on DTMF when no timing modules loaded
  - 1356: [bug]: MESSAGE requests should not contain a Contact header
  - 1524: [bug]: PJSIP if sdp_session is blank the initial INVITE doesn't attach \ 
an SDP offer, worked in chan_sip
  - 1611: [bug]: asterisk deadlocked on start sometimes
  - 1612: [improvement]: pjsip: Upgrade bundled version to pjproject 2.16
  - 1637: [improvement]: force_longest_waiting_caller should also consider \ 
caller priority
  - 1641: [bug]: res_pjsip_config_wizard: Endpoints fail to update when Named \ 
ACLs change after reload
  - 1651: [bug]: Asterisk crashes with munmap_chunk() when using sorcery \ 
realtime for PJSIP registration objects
  - 1657: [bug]: Wrong dtmf payload is used when inbound invite contains 8K and \ 
16K, and outgoing leg is using G722 and SRTP
  - 1670: [new-feature]: Add new option to PJSIP_HEADER to pass headers from the \ 
inbound to outbound channel.
  - 1691: [bug]: force_longest_waiting_caller stops offering calls if a call \ 
joins at the first position
  - 1703: [bug]: res_pjsip_pubsub: ao2 reference leak of subscription tree in \ 
ast_sip_subscription
  - 1707: [bug]: chan_iax2: Crash when processing video frames with negative length
  - 1716: [bug]: Ghost call when UAC didn't respond with 487 for a cancel \ 
request from server even after original call hangup.
  - 1724: [improvement]: say.c - added language support for pashto and dari
  - 1730: [bug]: CPP channel storage get_by_name_prefix does not check prefix match
  - 1755: [bug]: app_dial, utils.h: Compilation failure with \ 
-Wold-style-declaration and -Wdiscarded-qualifiers
  - 1781: [bug]: More discarded-qualifiers errors with gcc 15.2.1
  - 1783: [bug]: Several unused-but-set-variable warnings with gcc 16
  - 1785: [bug]: chan_websocket doesn’t work with genericplc and transcoding
  - 1786: [bug]: chan_dahdi: A few more discarded-qualifiers errors not caught \ 
previously
  - 1795: [bug]: DTLS packets dropped when TURN configured in rtp.conf due to \ 
loopback re-injection occurring before ICE candidate source check
  - 1797: [bug]: Potential logic issue in translated frame write loop (main/file.c)
  - 1802: [improvement]: app_dial: Channel name should be included in warnings \ 
during wait_for_answer
  - 1804: [new-feature]: dsp.c: Add support for R2 signaling
  - 1814: [bug]: A pjsip transport with an invalid config can cause issues with \ 
other transports
  - 1816: [bug]: ARI: RTPAUDIO channel vars aren't set if call hung up by ARI.
  - 1819: [bug]: When a 302 is received from a UAS, the cause and tech_cause \ 
codes set on the channel are incorrect.
  - 1831: [bug]:raise_exception() and EXCEPTION() read use channel datastores \ 
without holding ast_channel_lock
  - 1833: [bug]: Address security vulnerabilities in pjproject
  - 1844: [bug]: cdrel_custom isn't respecting the default time format for CEL \ 
records
  - 1845: [bug]:res_cdrel_custom produces wrong float timestamps
  - 1852: [bug]: res_cdrel_custom: connection to the sqlite3 database closes \ 
from time to time

### Commit List:

-  res_cdrel_custom: do not free config when no new config was loaded
-  res_cdrel_custom: Resolve several formatting issues.
-  res_pjsip: Address pjproject security vulnerabilities
-  pbx: Hold channel lock for exception datastore access
-  xmldoc.c: Fix memory leaks in handling of provided_by.
-  SECURITY.md: Update with additional instructions.
-  res_audiosocket: Fix header read loop to use correct buffer offset
-  manager.c : Fix CLI event display
-  chan_pjsip: Set correct cause codes for non-2XX responses.
-  res_pjsip_config_wizard: Force reload on Named ACL change events
-  rtp: Set RTPAUDIOQOS variables when ast_softhangup is called.
-  channel: Prevent crash during DTMF emulation when no timing module is loaded
-  res_pjsip: Remove temp transport state when a transport fails to load.
-  res_pjsip_messaging: Remove Contact header from out-of-dialog MESSAGE as per \ 
RFC3428
-  acl: Add ACL support to http and ari
-  res_rtp_asterisk.c: Fix DTLS packet drop when TURN loopback re-injection \ 
occurs before ICE candidate check
-  dsp.c: Add support for detecting R2 signaling tones.
-  app_dial: Include channel name in warnings during wait_for_answer.
-  main/file: fix translated-frame write loop to use current frame
-  docs: Add "Provided-by" to doc XML and CLI output.
-  chan_websocket_doc.xml: Add d(media_direction) option.
-  resource_channels.c: Fix validation response for externalMedia with AudioSockets
-  CDR/CEL Custom Performance Improvements
-  chan_websocket: Remove silence generation and frame padding.
-  chan_websocket: Add media direction.
-  fix: Add macOS (Darwin) compatibility for building Asterisk
-  astconfigparser.py: Fix regex pattern error by properly escaping string
-  res_rtp_asterisk: use correct sample rate lookup to account for g722
-  res_pjsip_outbound_registration.c: Prevent crash if load_module() fails
-  pjsip_configuration: Ensure s= and o= lines in SDP are never empty
-  res_pjsip_session: Make sure NAT hook runs when packet is retransmitted for \ 
whatever reason.
-  chan_dahdi: Fix discarded-qualifiers errors.
-  build: Fix unused-but-set-variable warnings with gcc 16.
-  build: Fix another GCC discarded-qualifiers const error.
-  chan_iax2: Fix crash due to negative length frame lengths.
-  build: Fix GCC discarded-qualifiers const errors.
-  endpoints: Allow access to latest snapshot directly.
-  app_dial, utils.h: Avoid old style declaration and discarded qualifier.
-  app_queue: Add 'prio' setting to the 'force_longest_waiting_caller' option
-  Upgrade bundled pjproject to 2.16.
-  res_pjsip_header_funcs: Add new PJSIP_INHERITABLE_HEADER dialplan function
-  app_queue: Queue Timing Parity with Dial() and Accurate Wait Metrics
-  stasis.c: Fix deadlock in stasis_topic_pool_get_topic during module load
-  app_queue: Fix rN raise_penalty ignoring min_penalty in calc_metric
-  app_queue: Only compare calls at 1st position across queues when forcing \ 
longest waiting caller.
-  channelstorage_cpp_map_name_id: Fix get_by_name_prefix prefix match
-  app_amd: Remove errant space in documentation for totalAnalysisTime.
-  say.c: added language support for pashto and dari
-  res_pjsip_session.c: Prevent INVITE failover when session is cancelled
-  res_pjsip_pubsub: Fix ao2 reference leak of subscription tree in \ 
ast_sip_subscription

Log message:
*: remove OWNER definition

OWNER, when it was introduced, was to protect packages deep in the
infrastructure by emphasizing that they should not be touched by
non-MAINTAINERs.

No infrastructure package still sets OWNER.

Note: non-trivial change to packages should be passed by MAINTAINERs.

As discussed on tech-pkg.

Log message:
update to Asterisk 22.8.2:

## Change Log for Release asterisk-22.8.2

### Links:

 - [Full \ 
ChangeLog](https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-22.8.2.html)
 - [GitHub Diff](https://github.com/asterisk/asterisk/compare/22.8.1...22.8.2)

### Summary:

- Commits: 4
- Commit Authors: 2
- Issues Resolved: 0
- Security Advisories Resolved: 4
  - \ 
[GHSA-85x7-54wr-vh42](https://github.com/asterisk/asterisk/security/advisories/GHSA-85x7-54wr-vh42): \ 
Asterisk xml.c uses unsafe XML_PARSE_NOENT leading to potential XXE Injection
  - \ 
[GHSA-rvch-3jmx-3jf3](https://github.com/asterisk/asterisk/security/advisories/GHSA-rvch-3jmx-3jf3): \ 
ast_coredumper running as root sources ast_debug_tools.conf from /etc/asterisk; \ 
potentially leading to privilege escalation
  - \ 
[GHSA-v6hp-wh3r-cwxh](https://github.com/asterisk/asterisk/security/advisories/GHSA-v6hp-wh3r-cwxh): \ 
The Asterisk embedded web server's /httpstatus page echos user supplied \ 
values(cookie and query string) without sanitization
  - \ 
[GHSA-xpc6-x892-v83c](https://github.com/asterisk/asterisk/security/advisories/GHSA-xpc6-x892-v83c): \ 
ast_coredumper runs as root, and writes gdb init file to world writeable folder; \ 
leading to potential privilege escalation

### User Notes:

- #### ast_coredumper: check ast_debug_tools.conf permissions
  ast_debug_tools.conf must be owned by root and not be
  writable by other users or groups to be used by ast_coredumper or
  by ast_logescalator or ast_loggrabber when run as root.

### Upgrade Notes:

- #### http.c: Change httpstatus to default disabled and sanitize output.
  To prevent possible security issues, the `/httpstatus` page
  served by the internal web server is now disabled by default.  To explicitly
  enable it, set `enable_status=yes` in http.conf.

Log message:
*: recursive bump for nettle 4.0 shlib major bump

Log message:
*: recursive bump for icu 78.1