asterisk (1:22.6.0~dfsg+~cs6.15.60671435-1) unstable; urgency=medium

  [ upstream ]
  * new release

  [ Bernhard Schmidt ]
  * remove myself as uploader

  [ Benedikt Wildenhain ]
  * add myself as uploader

  [ Jonas Smedegaard ]
  * drop patch cherry-picked upstream, obsoleted by upstream changes

 -- Jonas Smedegaard <dr@jones.dk>  Tue, 28 Oct 2025 20:20:21 +0100

asterisk (1:22.5.2~dfsg+~cs6.15.60671435-1) unstable; urgency=medium

  [ upstream ]
  * new release(s)
    + A specifically malformed Authorization header
      in an incoming SIP request can cause Asterisk to crash
      CVE-2025-57767;
      closes: bug#1112470, thanks to Salvatore Bonaccorso

  [ Jonas Smedegaard ]
  * update copyright info:
    + strip upstream-autogenerated file README.html
      from repackaged source
  * update watch file: use file format 5

 -- Jonas Smedegaard <dr@jones.dk>  Fri, 29 Aug 2025 22:00:21 +0200

asterisk (1:22.5.1~dfsg+~cs6.15.60671435-1) unstable; urgency=medium

  [ upstream ]
  * new release(s)
    + test for missing semicolon in res_stir_shaken Identity header;
      CVE-2025-49832;
      closes: bug#1110317, thanks to Salvatore Bonaccorso

 -- Jonas Smedegaard <dr@jones.dk>  Sun, 03 Aug 2025 11:18:38 +0200

asterisk (1:22.4.1~dfsg+~cs6.15.60671435-2) unstable; urgency=medium

  * build-depend on libcrypt-dev;
    closes: bug#1107016, thanks to Helmut Grohne

 -- Jonas Smedegaard <dr@jones.dk>  Sat, 31 May 2025 21:58:04 +0200

asterisk (1:22.4.1~dfsg+~cs6.15.60671435-1) unstable; urgency=medium

  [ upstream ]
  * new release(s)
    + add option to restrict shell access from remote consoles;
      CVE-2025-47780;
      closes: bug#1106530, thanks to Salvatore Bonaccorso
    + mask control characters in received From display name;
      CVE-2025-47779;
      closes: bug#1106528, thanks to Salvatore Bonaccorso

  [ Chris Maj ]
  * remove IMAP voicemail backend, because libc-client2007e is gone;
    stop build-depend on libc-client2007e-dev;
    closes: bug#1103048, thanks to Chris Hofstaedtler
  * add self as uploader

  [ Jonas Smedegaard ]
  * unfuzz patches
  * update copyright info: update coverage

 -- Jonas Smedegaard <dr@jones.dk>  Tue, 27 May 2025 14:36:46 +0200

asterisk (1:22.3.0~dfsg+~cs6.15.60671435-1) unstable; urgency=medium

  [ upstream ]
  * new release

 -- Jonas Smedegaard <dr@jones.dk>  Thu, 27 Mar 2025 16:58:35 +0100

asterisk (1:22.3.0~~rc1~dfsg+~cs6.15.60671435-1) unstable; urgency=medium

  [ upstream ]
  * new prerelease

  [ Jonas Smedegaard ]
  * unfuzz patches
  * declare compliance with Debian Policy 4.7.2

 -- Jonas Smedegaard <dr@jones.dk>  Wed, 26 Mar 2025 17:18:00 +0100

asterisk (1:22.2.0~dfsg+~cs6.15.60671435-2) unstable; urgency=medium

  * add patch cherry-picked upstream
    to fix res_config_pgsql regression that removed dbname config;
    closes: bug#1098486, thanks to Andrey N. Abelev
  * declare compliance with Debian Policy 4.7.1

 -- Jonas Smedegaard <dr@jones.dk>  Sat, 22 Feb 2025 08:54:51 +0100

asterisk (1:22.2.0~dfsg+~cs6.15.60671435-1) unstable; urgency=medium

  [ upstream ]
  * new release

  [ Jonas Smedegaard ]
  * update watch file: track pjproject 2.15.1
  * update and unfuzz patches
  * update copyright info: update coverage

 -- Jonas Smedegaard <dr@jones.dk>  Tue, 11 Feb 2025 20:53:26 +0100

asterisk (1:22.1.1~dfsg+~cs6.14.60671435-1) unstable; urgency=medium

  [ upstream ]
  * new release
    + Restrict ListCategories to the configuration directory;
      CVE-2024-53566

  [ Jonas Smedegaard ]
  * update git-buildpackage config:
    + avoid variable abstraction in usage comment

 -- Jonas Smedegaard <dr@jones.dk>  Mon, 13 Jan 2025 00:01:35 +0100

asterisk (1:22.1.0~dfsg+~cs6.14.60671435-1) unstable; urgency=medium

  [ upstream ]
  * new release

  [ Jonas Smedegaard ]
  * update and trust only upstream team signing key 5D984BE337191CE7
  * update copyright info: update coverage

 -- Jonas Smedegaard <dr@jones.dk>  Wed, 27 Nov 2024 12:37:42 +0100

asterisk (1:22.0.0~dfsg+~cs6.14.60671435-1) unstable; urgency=medium

  [ upstream ]
  * new release

 -- Jonas Smedegaard <dr@jones.dk>  Wed, 23 Oct 2024 13:39:34 +0200

asterisk (1:22.0.0~~rc2~dfsg+~cs6.14.60671435-1) experimental; urgency=medium

  [ upstream ]
  * new prerelease(s)

  [ Jonas Smedegaard ]
  * update and unfuzz patches
  * adapt build routines and add NEWS entry
    related to no longer provided modules app_macro chan_sip
  * stop build-depend on libasound2-dev;
    stop mention ALSA in long description
    (module chan_alsa not provided for some time)
  * update copyright info: update coverage
  * cleanup new upstream hint file .lastclean
  * fix handle prerelease changelog file

 -- Jonas Smedegaard <dr@jones.dk>  Sat, 05 Oct 2024 11:28:05 +0200

asterisk (1:20.9.3~dfsg+~cs6.14.60671435-1) unstable; urgency=high

  [ upstream ]
  * new release(s)
    + add entries to Originate blacklist;
      CVE-2024-42365;
      closes: bug#1078574, thanks to Salvatore Bonaccorso
    + test for NULL ub_result in unbound_resolver_callback;
      CVE-2024-42491

  [ Jonas Smedegaard ]
  * fix minor privilege escalation; thanks to Niels Galjaard
  * update watch file: track mp3 component from git clone
  * unfuzz patch 2012
  * set urgency=high due to security-related bugfixes

 -- Jonas Smedegaard <dr@jones.dk>  Sat, 07 Sep 2024 22:14:21 +0200

asterisk (1:20.8.1~dfsg+~cs6.14.40431414-1) unstable; urgency=medium

  [ upstream ]
  * new release
    + use PJProject 2.14.1,
      which fixes Use-after-free in SRTP media transport;
      CVE-2023-37457 CVE-2023-38703;
      closes: bug#1059303, thanks to Moritz Mühlenhoff
    + fix regression issues with DTLS client check;
      closes: bug#1068296, thanks to Oleksandr Kozmenko

  [ Jonas Smedegaard ]
  * update watch file:
    + track only LTS releases
    + bump to track pjproject 2.14.1
  * unfuzz patches
  * update copyright info: update coverage
  * declare compliance with Debian Policy 4.7.0
  * create and restrict access to cache dir;
    closes: bug#1072739, thanks to Bastian Triller
  * fix rotate main logfiles,
    as logfiles use suffix .log since Asterisk 19;
    thanks to James Bottomley (see bug#1024822)

 -- Jonas Smedegaard <dr@jones.dk>  Fri, 07 Jun 2024 14:10:19 +0200

asterisk (1:20.6.0~dfsg+~cs6.13.40431414-2) unstable; urgency=medium

  * update patch 2016 to avoid excessive logging;
    closes: bug#1060275, thanks to Daniel

 -- Jonas Smedegaard <dr@jones.dk>  Tue, 30 Jan 2024 11:42:08 +0100

asterisk (1:20.6.0~dfsg+~cs6.13.40431414-1) unstable; urgency=medium

  [ upstream ]
  * new release

  [ Jonas Smedegaard ]
  * unfuzz patches
  * update copyright info: update coverage
  * build-depend on libjwt-dev

 -- Jonas Smedegaard <dr@jones.dk>  Fri, 26 Jan 2024 14:53:47 +0100

asterisk (1:20.5.2~dfsg+~cs6.13.40431414-1) unstable; urgency=medium

  [ upstream ]
  * new release

  [ Jonas Smedegaard ]
  * use systemd.pc to place systemd service unit;
    build-depend on systemd-dev;
    closes: bug#1059180, thanks to Chris Hofstaedtler

 -- Jonas Smedegaard <dr@jones.dk>  Fri, 22 Dec 2023 13:58:28 +0100

asterisk (1:20.5.1~dfsg+~cs6.13.40431414-1) unstable; urgency=high

  [ upstream ]
  * new release
    + fixes these upstream bugs:
      CVE-2023-49294 CVE-2023-49786;
      closes: bug#1059032, #1059033, thanks to Salvatore Bonaccorso

  [ Jonas Smedegaard ]
  * fix enable opus codec;
    build-depend on libopusenc-dev;
    closes: bug#1025165,
    thanks to Paweł Bogusławski, Faidon Liambotis and Athos Ribeiro
  * set urgency=high due to multiple security bugfixes

 -- Jonas Smedegaard <dr@jones.dk>  Tue, 19 Dec 2023 17:38:11 +0100

asterisk (1:20.5.0~dfsg+~cs6.13.40431414-1) unstable; urgency=medium

  [ upstream ]
  * new release

  [ Jonas Smedegaard ]
  * unfuzz patches

 -- Jonas Smedegaard <dr@jones.dk>  Sat, 25 Nov 2023 12:25:03 +0100

asterisk (1:20.4.0~dfsg+~cs6.13.40431414-2) unstable; urgency=medium

  * build-depend on liblua5.1-dev (not liblua5.2-dev);
    closes: bug#1050625, thanks to Bastian Germann and David
  * update DEP-3 patch headers

 -- Jonas Smedegaard <dr@jones.dk>  Sun, 27 Aug 2023 17:23:31 +0200

asterisk (1:20.4.0~dfsg+~cs6.13.40431414-1) unstable; urgency=medium

  [ upstream ]
  * new release

  [ Jonas Smedegaard ]
  * stop depend on lsb-base
  * update watch file:
    + fixate component pjproject at upstream release 2.13.1;
      fixes these upstream bugs:
      CVE-2022-23537 CVE-2022-23547 CVE-2022-39269 CVE-2023-27585
  * unfuzz patches
  * update copyright info: update coverage

 -- Jonas Smedegaard <dr@jones.dk>  Fri, 04 Aug 2023 21:53:23 +0200

asterisk (1:20.3.0~dfsg+~cs6.13.40431413-1) unstable; urgency=medium

  [ upstream ]
  * new release

  [ Jonas Smedegaard ]
  * unfuzz patches
  * fix cleanup to support double build;
    thanks to ideal.bowl5022
  * generate core documentation from markdown sources;
    skip generate manpage when nodoc is set;
    build-depend on cmark-cfm

 -- Jonas Smedegaard <dr@jones.dk>  Wed, 21 Jun 2023 08:35:49 +0200

asterisk (1:20.2.1~dfsg+~cs6.13.40431413-1) unstable; urgency=medium

  [ upstream ]
  * new release

  [ Jonas Smedegaard ]
  * update watch file:
    + fixate component pjproject at upstream release 2.13
  * update copyright info: update coverage
  * unfuzz patches

 -- Jonas Smedegaard <dr@jones.dk>  Thu, 20 Apr 2023 20:31:59 +0200

asterisk (1:20.1.0~dfsg+~cs6.12.40431414-1) unstable; urgency=medium

  [ upstream ]
  * new release

 -- Jonas Smedegaard <dr@jones.dk>  Fri, 13 Jan 2023 00:26:47 +0100

asterisk (1:20.1.0~~rc2~dfsg+~cs6.12.40431414-1) experimental; urgency=medium

  [ upstream ]
  * new pre-release

  [ Jonas Smedegaard ]
  * update copyright info: update coverage
  * declare compliance with Debian Policy 4.6.2

 -- Jonas Smedegaard <dr@jones.dk>  Sat, 07 Jan 2023 00:24:00 +0100

asterisk (1:20.0.1~dfsg+~cs6.12.40431414-1) unstable; urgency=high

  [ upstream ]
  * new release
    * closes: bug#1017004, thanks to Neil Williams;
      also fixes these upstream bugs:
      ASTERISK-30103 ASTERISK-30176 ASTERISK-30244 ASTERISK-30338
      CVE-2022-37325 CVE-2022-42706 CVE-2022-42705 CVE-2022-39244
      CVE-2022-31031
      GHSA-26j7-ww69-c4qj GHSA-fq45-m3f7-3mhj

  [ Jonas Smedegaard ]
  * fix build module chan_sip;
    closes: bug#1024443, thanks to James Bottomley
  * add NEWS entry about new AMI live_dangerously option
  * set urgency=high due to multiple security bugfixes

 -- Jonas Smedegaard <dr@jones.dk>  Thu, 08 Dec 2022 09:51:21 +0100

asterisk (1:20.0.0~dfsg+~cs6.12.40431414-2) unstable; urgency=medium

  * re-release for building with auto-builder

 -- Jonas Smedegaard <dr@jones.dk>  Thu, 10 Nov 2022 15:21:24 +0100

asterisk (1:20.0.0~dfsg+~cs6.12.40431414-1) unstable; urgency=medium

  [ upstream ]
  * new release

 -- Jonas Smedegaard <dr@jones.dk>  Wed, 19 Oct 2022 18:49:49 +0200

asterisk (1:20.0.0~~rc2~dfsg+~cs6.12.40431414-1) experimental; urgency=medium

  [ upstream ]
  * new pre-release

 -- Jonas Smedegaard <dr@jones.dk>  Sat, 08 Oct 2022 10:07:27 +0200

asterisk (1:20.0.0~~rc1~dfsg+~cs6.12.40431414-1) experimental; urgency=medium

  [ upstream ]
  * new pre-release

  [ Jonas Smedegaard ]
  * update lintian overrides
  * update copyright info:
    + fix separate License section from corresponding Files section
  * update watch file:
    + track upstream branch 20 (not 18)
    + fix avoid secondary capture groups,
      apparently significant nowadays
    + simplify uversionmangle
  * drop patch cherry-picked upstream now applied
  * unfuzz patches
  * set Rules-Requires-Root: no
  * stop install modules dropped upstream:
    app_dahdiras app_mysql cdr_mysql

 -- Jonas Smedegaard <dr@jones.dk>  Tue, 20 Sep 2022 15:29:13 +0200

asterisk (1:18.14.0~dfsg+~cs6.12.40431414-1) unstable; urgency=medium

  [ upstream ]
  * new release

  [ Jonas Smedegaard ]
  * update watch file: simplify regex
  * relax to build-depend on default-libmysqlclient-dev
    for all architectures
  * unfuzz patches

 -- Jonas Smedegaard <dr@jones.dk>  Tue, 23 Aug 2022 17:40:49 +0200

asterisk (1:18.14.0~~rc1~dfsg+~cs6.12.40431414-1) unstable; urgency=medium

  [ upstream ]
  * new pre-release;
    embeds an updated PJProject, fixing multiple security issues;
    CVE-2022-24764 CVE-2022-24763 CVE-2022-24786
    CVE-2022-24792 CVE-2022-24793;
    closes: bug#1014976

  [ Jonas Smedegaard ]
  * update watch file:
    + fixate component pjproject at upstream release 2.12.1
    + track pre-releases
  * update copyright info:
    + update primary Source URI
    + update coverage

 -- Jonas Smedegaard <dr@jones.dk>  Sat, 30 Jul 2022 10:16:47 +0200

asterisk (1:18.12.0~dfsg+~cs6.12.40431413-1) unstable; urgency=medium

  [ upstream ]
  * new release

  [ Jonas Smedegaard ]
  * update watch file:
    + fixate component pjproject at upstream release 2.12
      (not asterisk fork of 2.10)
  * update copyright info: update coverage
  * update and unfuzz patches
  * declare compliance with Debian Policy 4.6.1

 -- Jonas Smedegaard <dr@jones.dk>  Thu, 12 May 2022 22:37:38 +0200

asterisk (1:18.11.2~dfsg+~cs6.10.40431413-1) unstable; urgency=medium

  [ upstream ]
  * new release

  [ Jonas Smedegaard ]
  * update copyright info: update coverage

 -- Jonas Smedegaard <dr@jones.dk>  Sun, 17 Apr 2022 15:59:40 +0200

asterisk (1:18.11.1~dfsg+~cs6.10.40431413-1) unstable; urgency=medium

  [ upstream ]
  * new release

  [ Jonas Smedegaard ]
  * use semantic newlines in long description and copyright fields
  * stop provide module chan_vpb failing to build:
    + add patch cherry-picked upstream
      to remove deprecated module chan_vpb
    + drop binary package asterisk-vpb
    + stop build-depend on libvpb-dev
    + add notice in NEWS
  * update and unfuzz patches

 -- Jonas Smedegaard <dr@jones.dk>  Wed, 06 Apr 2022 15:22:41 +0200

asterisk (1:18.10.1~dfsg+~cs6.10.40431411-1) unstable; urgency=medium

  [ upstream ]
  * new release

 -- Jonas Smedegaard <dr@jones.dk>  Mon, 07 Mar 2022 19:02:16 +0100

asterisk (1:18.10.0~dfsg+~cs6.10.40431411-2) unstable; urgency=medium

  * fix teardown function in autopkgtest
  * fix build module app_macro, and simplify build configuration:
    + revert build rules to explicitly set menuselect target file
    + reduce and rename patch 2004
    + drop related obsolete patches 2003 2005 2007 2009 2017
    closes: bug#1005381, thanks to James Bottomley
  * drop unused obsolete h323 patches 1002 1003 1005
  * omit build-depending on default-libmysqlclient-dev
    for architectures where the package is unavailable

 -- Jonas Smedegaard <dr@jones.dk>  Sat, 12 Feb 2022 19:24:51 +0100

asterisk (1:18.10.0~dfsg+~cs6.10.40431411-1) unstable; urgency=medium

  [ upstream ]
  * new release

  [ Jonas Smedegaard ]
  * drop patches cherry-picked upstream now applied
  * unfuzz patches
  * update TODOs

 -- Jonas Smedegaard <dr@jones.dk>  Fri, 11 Feb 2022 10:41:21 +0100

asterisk (1:18.9.0~dfsg+~cs6.10.40431411-1) experimental; urgency=medium

  [ upstream ]
  * new release(s)

  [ Jonas Smedegaard ]
  * update watch file: track upstream branch 18 (not 16)
  * unfuzz patches
  * update copyright info: update coverage
  * package asterisk-modules now include modules
    app_voicemail app_voicemail_imap app_voicemail_odbc;
    drop packages asterisk-voicemail
    asterisk-voicemail-imapstorage asterisk-voicemail-odbcstorage;
    add NEWS entry that users of imap or odbc variant
    need to adjust configuration
  * adjust rules to explicitly install library headers

 -- Jonas Smedegaard <dr@jones.dk>  Fri, 04 Feb 2022 21:59:09 +0100

asterisk (1:16.23.0~dfsg+~cs6.10.40431411-1) unstable; urgency=medium

  * embed project asterisk-opus as component;
    add patches 2015 2016 to integrate opus module with asterisk;
    integrate opus module with build rules;
    have asterisk-modules replace and break asterisk-opus
  * update copyright info: update coverage
  * relax to build-depend unversioned on libjansson-dev:
    required version satisfied in all supported Debian releases
  * build-depend on libneon27-dev
    (not libneon27-gnutls-dev, with libneon27-dev only as fallback);
    drop fallback build-dependencies
    for libcurl4-openssl-dev libradcli-dev
  * build-depend on liblua5.2-dev (not liblua5.1-0-dev)
  * build-depend on libcodec2-dev libfftw3-dev libsndfile1-dev

 -- Jonas Smedegaard <dr@jones.dk>  Fri, 04 Feb 2022 00:40:53 +0100

asterisk (1:16.23.0~dfsg+~cs6.10.20220309-2) unstable; urgency=medium

  * update debhelper script dh_asterisk:
    + fix move excess paragraphs from POD section NAME to DESCRIPTION
    + fix reference man page debhelper(7) (not bogus debhelper(1)
    + add POD section COPYRIGHT AND LICENSE
    + simplify POD section SYNOPSIS
    + drop POD sections OPTIONS (superfluous) and NOTES (bogus)
    + fix typo in POD section DESCRIPTION
    + extend POD section DESCRIPTION
      to mention dh-sequence-asterisk (inspired by POD of dh_perl_openssl)
  * provide virtual package asterisk-abi-* (not asterisk-*),
    and have dh_asterisk generate matching package variable
    ${asterisk:Depends} (not the core less intuitive ${asterisk:ABI})
  * generate and install manpage for dh_asterisk;
    build-depend on perl
  * cherry-pick bugfix patches upstream; unfuzz remaining patches

 -- Jonas Smedegaard <dr@jones.dk>  Sun, 23 Jan 2022 15:33:47 +0100

asterisk (1:16.23.0~dfsg+~cs6.10.20220309-1) unstable; urgency=medium

  * finalize and install debhelper script dh_asterisk;
    have asterisk-dev depend on debhelper perl:any,
    and provide virtual package dh-sequence-asterisk
  * relax to generate temporary PJPROJECT tarball sloppily:
    reproducibility or stable md5sum unneeded
  * fix avoid insecure hardcoded path below /tmp during build
  * rename and renumber patches;
    add file debian/patches/README to source
    documenting patch naming micro policy
  * drop vp8 patch, superseded by package asterisk-opus
  * embed project asterisk-amr as component;
    drop patch amr
  * embed project mp3 as component;
    drop patch mpglib
  * update copyright info:
    + fix avoid bdimad files from embedded PJPROJECT
      when repackaging upstream source:
      not freely licensed
    + update coverage
  * unfuzz patches
  * integrated embedded project mp3 with build rules
  * add patches 2011 2012 to integrate module amr with asterisk;
    update build rules to integrate module amr code files
  * add patch 2013 to integrate mp3 module with asterisk;
    update build rules to integrate mp3 module
  * add/update DEP-3 patch headers
  * add patch 2014
    to avoid non-free PJPROJECT audio device driver bdimad

 -- Jonas Smedegaard <dr@jones.dk>  Sun, 23 Jan 2022 00:08:30 +0100

asterisk (1:16.23.0~dfsg+~2.10-1) unstable; urgency=medium

  [ upstream ]
  * new release(s)

  [ Jonas Smedegaard ]
  * update git-buildpackage config:
    + filter-out any .git* file
    + use DEP14 branch naming scheme
    + add usage comment
  * resolve PJPROJECT version from embedded source
  * update copyright info: update coverage
  * drop patches cherry-picked upstream now applied
  * update and unfuzz patches
  * fix relax autopkgtest: set allow-stderr
  * stop set obsolete menuselect option codec_opus_open_source

 -- Jonas Smedegaard <dr@jones.dk>  Fri, 21 Jan 2022 03:25:41 +0100

asterisk (1:16.16.1~dfsg+~2.10-2) unstable; urgency=medium

  * fix sysV init file to align with mariadb (not mysql);
    closes: bug#1003925, thanks to Roel van Meer
  * fix silently broken patch systemd;
    closes: bug#985314, thanks to Sergio Durigan Junior
  * unfuzz patches, with shortening quilt options
  * Trim trailing whitespace.
  * Use secure URI in Homepage field.
  * Update renamed lintian tag names in lintian overrides.
  * Drop transition for old debug package migration.
  * stop set CFLAGS=-fgnu89-inline,
    as GCC 5.x was supported upstream since late 2015
    (see also bug#777782)
  * explicitly disable BUILD_NATIVE,
    and stop set CFLAGS and LDFLAGS in configure
    (only in make menuselect)
  * tighten bug closures in changelog,
    for slightly better readability
    and to avoid confusing lintian-brush
  * stop export build flags: they are passed as arguments
  * let dh_auto_config resolve core configure options
  * revive upstream optimization flags
    unless DEB_BUILD_OPTIONS=noopt
  * support DEB_BUILD_OPTIONS=terse
  * fix install file CHANGES as upstream changelog,
    and more detailed ChangeLog only with asterisk-doc
  * use debhelper compatibility level 13 (not 10);
    stop install duplicates in package asterisk-doc
    now that its install path coincide with package asterisk;
    build-depend on debhelper-compat (not debhelper)
  * adapt install routines and helper scripts to use multiarch paths;
    add NEWS entry about this change
  * fix install phoneprov XML files
  * explicitly list a few images, contrib scripts and sample website
    as not-installed
  * fix install a manpage (not corresponding script)
    into manpage directory
  * install main header file only below /usr/include
    (i.e. drop transitional symlinking done in 2008)
  * install most possible manpages from upstream-installed locations,
    to ease detecting missed install files
  * update copyright info:
    + use SPDX shortname Apache-2.0
    + drop unused License section LGPL-2.1
    + fix Files section for codecs/gsm,
      covering both left-truncating wildcard
      and an explicit file overriding right-truncating wildcard,
      to list it _after_ right-truncating wildcard Files sections
  * fix have asterisk pre-depend on misc:Pre-Depends,
    needed by systemd calls in maintainer scripts

 -- Jonas Smedegaard <dr@jones.dk>  Thu, 20 Jan 2022 10:33:17 +0100

asterisk (1:16.16.1~dfsg+~2.10-1) unstable; urgency=medium

  * update copyright info:
    + use Reference field (not License-Reference);
      tighten lintian overrides
    + fix add License fields GPL-2+ GPL-3+
    + fix interpret unversioned GPL/LGPL to mean any version
    + add comment about ambiguous statement
      for file include/jitterbuf.h
    + normalize copyright holders lists
    + fix list all wildcard directories (i.e. right truncation)
      before wildcard files (i.e. left truncation)
    + normalize files lists
    + add coverage for my packaging contributions
    + update coverage
    + refine source repackaging hints:
      stop avoid files no longer included upstream
      exclude non-DFSG pjproject files
    + use more SPDX(ish) shortnames
    + sort License sections alphabetically
    + fix cover pjproject files;
      drop non-autoritative file debian/copyright.pjproject
    + update coverage
    + declare pjproject source URI
  * update watch file:
    + stop force repackaging; stop set compression
    + set dversionmangle=auto
    + set pgpmode=auto (and stop set pgpsigurlmangle)
    + tighten match pattern
    + update usage comment
  * embed pjproject:
    + define as component with git-buildpackage and uscan
    + build from embedded files
    + stop include manually prepared embedded tarball
    + drop obsolete patch autoreconf-pjproject
  * simplify source helper script copyright-check
  * drop file README.source from source:
    packaging no longer non-standard

 -- Jonas Smedegaard <dr@jones.dk>  Sun, 16 Jan 2022 23:17:14 +0100

asterisk (1:16.16.1~dfsg-4) unstable; urgency=medium

  [ Utkarsh Gupta ]
  * Set default systemd config to avoid console output to syslog.
    (Closes: #985314, #971090)

 -- Bernhard Schmidt <berni@debian.org>  Mon, 01 Nov 2021 23:16:15 +0100

asterisk (1:16.16.1~dfsg-3) unstable; urgency=medium

  [ Bernhard Schmidt ]
  * Cherry-Pick app_mp3: Force output to 16 bits in mpg123.
    Thanks to Jens Bürger <jbuerger@arcor.de> (Closes: #996402)

  [ Athos Ribeiro ]
  * Fix missing build of the AMR codec, add autopkgtest (Closes: #986013)

  [ Hugh McMaster ]
  * Cherry-pick an upstream patch to remove the AC_HEADER_STDC macro from
    configure.ac. The macro is obsolete and a no-op with autoconf 2.70
    (Closes: #997136)

 -- Bernhard Schmidt <berni@debian.org>  Mon, 01 Nov 2021 22:40:39 +0100

asterisk (1:16.16.1~dfsg-2) unstable; urgency=high

  * CVE-2021-32558 / AST-2021-008 (Closes: #991710)
    If the IAX2 channel driver receives a packet that contains an unsupported
    media format it can cause a crash to occur in Asterisk
  * CVE-2021-32686 / AST-2021-009 (Closes: #991931)
    pjproject/pjsip: crash when SSL socket destroyed during handshake

 -- Bernhard Schmidt <berni@debian.org>  Fri, 06 Aug 2021 15:35:20 +0200

asterisk (1:16.16.1~dfsg-1) unstable; urgency=medium

  * New minor upstream version 16.16.1~dfsg
    - CVE-2020-35776 / AST-2021-001 (Closes: #983158)
      Remote crash in res_pjsip_diversion
    - CVE-2021-26717 / AST-2021-002 (Closes: #983157)
      Remote crash possible when negotiating T.38
    - CVE-2021-26712 / AST-2021-003
      Remote attacker could prematurely tear down SRTP calls
    - CVE-2021-26713 / AST-2021-004
      An unsuspecting WebRTC user could crash Asterisk with multiple
      hold/unhold requests
    - CVE-2021-26906 / AST-2021-005 (Closes: #983159)
      Remote Crash Vulnerability in PJSIP channel driver

 -- Bernhard Schmidt <berni@debian.org>  Mon, 22 Feb 2021 21:45:24 +0100

asterisk (1:16.15.1~dfsg-1) unstable; urgency=medium

  * New upstream version 16.15.1~dfsg
    - CVE-2020-35652 / AST-2020-003 + AST-2020-004 (Closes: #979372)
      Remote crash in res_pjsip_diversion

 -- Bernhard Schmidt <berni@debian.org>  Sun, 17 Jan 2021 15:56:22 +0100

asterisk (1:16.15.0~dfsg-1) unstable; urgency=medium

  * New upstream version 16.15.0~dfsg. fixes two CVEs
    - CVE-2020-28327 / AST-2020-001 (Closes: #974712)
      Remote crash in res_pjsip_session
    - CVE-2020-28242 / AST-2020-002 (Closes: #974713)
      Outbound INVITE loop on challenge with different nonce

 -- Bernhard Schmidt <berni@debian.org>  Mon, 23 Nov 2020 13:19:33 +0100

asterisk (1:16.12.0~dfsg-1) unstable; urgency=medium

  * Add new upstream signing key
    F2FC93DB7587BD1FB49E045A5D984BE337191CE7
    Asterisk Development Team <asteriskteam@digium.com>
  * New upstream version 16.12.0~dfsg (Closes: #882145)
  * Update to pjproject 2.10
  * Also update d/source/include-binaries
  * Update Uploaders (Closes: #953442)
  * Fix setting the version number

 -- Bernhard Schmidt <berni@debian.org>  Tue, 01 Sep 2020 01:15:39 +0200

asterisk (1:16.10.0~dfsg-1) unstable; urgency=medium

  * Team upload.
  * d/watch: use https instead of http, it is more secure
  * New upstream version 16.10.0~dfsg
  * Remove patches applied by upstream and refresh the remaining ones
    - Patches applied by upstream: AST-2019-002.patch and AST-2019-003.patch
  * Repack pjproject version 2.9
  * d/TODO.Debian: rename to d/TODO, thanks to lintian
  * d/README.Debian: fix a typo, thanks to lintian
  * d/rules: do not use dpkg-parsechangelog to get source package version
  * d/copyright:
    - Update years of the upstream copyright
    - Remove unused paragraphs and files dropped by upstream
    - Use https instead of http in Format and Source fields

 -- Lucas Kanashiro <kanashiro@debian.org>  Mon, 18 May 2020 19:50:39 -0300

asterisk (1:16.2.1~dfsg-2) unstable; urgency=high

  * AST-2019-002 / CVE-2019-12827
    Buffer overflow in res_pjsip_messaging (Closes: #931980)
  * AST-2019-003 / CVE-2019-13161
    Remote Crash Vulnerability in chan_sip (Closes: #931981)

 -- Bernhard Schmidt <berni@debian.org>  Sat, 13 Jul 2019 23:47:36 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog asterisk-config`.
