CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

net/asterisk22 22.11.0

Open Source PBX and telephony toolkit

0
unaddressed
0
VuXML only
0
fixed
1
open problem reports

Port info

Maintainer
o.kryvulia@flex-it.com.ua
Packages
latest: 22.11.0
Upstream
up to date
Last update
to 22.11.0 · a2bad65a40
Quarterly
2026Q4: 22.11.0
WWW
https://www.asterisk.org
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install asterisk22
installs 22.11.0 from latest; from quarterly (2026Q4) 22.11.0
Port
# cd /usr/ports/net/asterisk22 && make install clean
# make -C /usr/ports/net/asterisk22 config  # change options first
Size
22 MiB download · 41 MiB installed
Depends on
archivers/zstd 1.5.7_2, audio/gsm 1.0.24, audio/libogg 1.3.6,4, audio/libvorbis 1.3.7_2,3, audio/mpg123 1.33.7, audio/opus 1.6.1, audio/portaudio 19.6.0_8,1, audio/speex 1.2.1_1,1, audio/speexdsp 1.2.1, comms/spandsp 3.0.0.g20211014_2, databases/freetds 1.5.19,1, databases/mysql84-client 8.4.11_1, databases/postgresql18-client 18.6, databases/sqlite3 3.53.4,1, databases/unixODBC 2.3.12_2, devel/jansson 2.15.1_1, devel/libedit 3.1.20260512,1, devel/libltdl 2.6.2, devel/libunwind 20250904, devel/newt 0.52.25, ftp/curl 8.23.0, graphics/tiff 4.7.2, lang/lua54 5.4.8, misc/dahdi 2.4.0rc5_8, misc/libpri 1.6.1, misc/libuuid 2.42.4, misc/openr2 1.3.3_1, net-mgmt/net-snmp 5.9.5.2,1, net/libsrtp2 2.8.1, net/radiusclient 0.5.6_3, net/uriparser 1.0.2, ports-mgmt/pkg 2.8.4, security/gnutls 3.8.13, textproc/iksemel 1.5, textproc/libxml2 2.15.4
License
GPLv2
Creates
user asterisk, group asterisk, dahdi
Options
22 of 34 on in the package: CURL DAHDI FREETDS GSM LUA MP3PLAYER MYSQL NEWT ODBC OPUS PGSQL PJSIP PORTAUDIO RADIUS SNMP SPANDSP SPEEX SRTP URIPARSER VORBIS XMLDOC XMPP
Show the 12 options that are off
ASTVERSION BACKTRACE EXCHANGE G729 GEOLOCATION LDAP NCURSES NEWG711 OOH323 OPTIMIZED_CFLAGS SYSINFO UNBOUND
pkg-message
Shown after installing
This port supports custom Asterisk configurations using a *user-supplied*
  menuselect.makeopt file.

  This feature is of most value for users that want to disable or override
  default functionality that they dont want or need, particular in space
  and/or resource constrained, or embedded environments.

  If a file named ".asterisk.makeopts" is found in the ports files/
  directory, its contents will be used to configure Asterisk at the
  post-configure stage.

  If the file is *not* found, the port will default to a 'normal' Asterisk
  menuselect configuration, and only execute menuselect commands according
  to what port OPTIONS the user has selected.

  The format of this file is the same as the output of a standard
  `make menuselect` command, as per standard build instructions for
  Asterisk.

  NOTE: The contents of this file *MUST* be syntactically and semantically
        valid, as the port does *NOT* perform validation of this file.

        In particular, ensure that all Asterisk options have their
        dependencies met, using the corresponding port OPTIONS dependencies.

  The `menuselect --check-deps` command can be used to verify the
  configuration

  The following related documentation resources are also available:

    * https://wiki.asterisk.org/wiki/display/AST/Using+Menuselect+to+Select+Asterisk+Options
    * http://www.asteriskdocs.org/en/3rd_Edition/asterisk-book-html-chunk/installing_base_configuration.html#Installing_id293213

  NOTE: To get color output in the asterisk console you need to install
        the misc/terminfo-db port

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 1622.11.022.11.0–
FreeBSD 1522.11.022.11.0–
FreeBSD 1422.11.022.11.0✗

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 1522.11.022.11.0–
FreeBSD 1422.11.022.11.0✗

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 22.11.0.

Fixed (0)

No VuXML entries for this package.

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
294816maintainer-feedback? net/asterisk20 net/asterisk22 --- feature - add usecallmanagerNew2026-04-30

Commits (23)

Yusuf Yaman (nxjoseph) · 22.11.0 MFH 2026Q3 ✓
net/asterisk{20,22}: Fix build with WITH_PIE

Upstream commit f82393d brokes build options handling for
bundled pjproject. That was fixed later by 78b7c4e.
Temporary use this patch in our ports until next release.

PR:		298207
Co-authored-by:	Marek Zarychta <zarychtam@plan-b.pwste.edu.pl>
Sponsored by:	FLEX-IT LLC
MFH:		2026Q3
a2bad65a40
Yusuf Yaman (nxjoseph) · 22.11.0 MFH 2026Q3 ✓
net/asterisk22: Update 22.10.1 => 22.11.0

Changelog:
https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-22.11.0.html

PR:		298207
Reported by:	Oleksandr Kryvulia <o.kryvulia@flex-it.com.ua> (maintainer)
Approved by:	osa, vvd (Mentors, implicit)
Sponsored by:	FLEX-IT LLC
MFH:		2026Q3
59a57a0fac
Vladimir Druzenko (vvd) · 22.10.1
net/asterisk22: Update 22.9.0 => 22.10.1

Changelogs:
https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-22.10.0.html
https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-22.10.1.html

PR:		296326
Approved by:	Oleksandr Kryvulia <o.kryvulia@flex-it.com.ua> (maintainer)
Security:	GHSA-3g56-cgrh-95p5
Security:	GHSA-3rhj-hhw7-m6fw
Security:	GHSA-4pgv-j3mr-3rcp
Security:	GHSA-589g-qgf8-m6mx
Security:	GHSA-746q-794h-cc7f
Security:	GHSA-8jhw-m2hg-vp3h
Security:	GHSA-8jw3-ccr9-xrmf
Security:	GHSA-g8q2-p36q-94f6
Security:	GHSA-h5hv-jmgj-92q2 CVE-2022-37325
Security:	GHSA-j2mm-57pq-jh94
Security:	GHSA-mxgm-8c6f-5p8f
Security:	GHSA-ph27-3m5q-mj5m
Security:	GHSA-q9fr-m7g8-6ph5
Security:	GHSA-qf8j-jp7h-c5hx
Security:	GHSA-r6c2-hwc2-j4mp
Security:	GHSA-vfhr-r9x9-c687
Security:	GHSA-vrfp-mg3q-3959
Security:	GHSA-wcvv-g26m-wx5c
Security:	GHSA-x348-j6c9-77f3
Security:	GHSA-xgj6-2gc5-5x9c
Sponsored by:	PANS Jarosław
Sponsored by:	UNIS Labs
MFH:		2026Q2
92c35ebd9e
Rene Ladan (rene) · 22.9.0
all: drop support for FreeBSD 13, mips and risc64sf

Reviewed by:            many (*)
Differential Revision:  https://reviews.freebsd.org/D55624
Differential Revision:  https://reviews.freebsd.org/D55642 (merged in from bofh)

many (*)
  acm arrowd brooks cmt dch decke dinoex eduardo fluffy fuz gahr garga
  jbeich joerg jrm kai kenrap martymac matthew mfechner michaelo mizhka
  nobutaka pkubaj se tagattie thj

  Anton Saietskii
  GenericRikka
  Gert Doering
  Jan Bramkamp
  Oleh Hushchenkov
  Oleksandr Kryvulia
  Ralf van der Enden
  Yamagi

  desktop kde python tcltk office
2a7c056120
Vladimir Druzenko (vvd) · 22.9.0
net/asterisk22: Update 22.8.2 → 22.9.0

Changelog:
https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-22.9.0.html

PR:		294412
Sponsored by:	FLEX-IT LLC
Sponsored by:	UNIS Labs
78346040cf
Vladimir Druzenko (vvd) · 22.8.2_1
net/asterisk22: Add MP3 Decoder Code for Format_MP3 support

Format_MP3, used to play MP3 encoded voicemail and music on hold, relies
on decoder library files that are not included in the main Asterisk
distribution.

PR:		292715
Tested by:	Marek Zarychta <zarychtam@plan-b.pwste.edu.pl>
Approved by:	Oleksandr Kryvulia <o.kryvulia@flex-it.com.ua>
Co-authored-by:	Justin T. Gibbs <gibbs@FreeBSD.org>
185fea963c
Vladimir Druzenko (vvd) · 22.8.2
net/asterisk22: Update 22.8.1 => 22.8.2

Security Advisories Resolved: 4
- GHSA-85x7-54wr-vh42: Asterisk xml.c uses unsafe XML_PARSE_NOENT
  leading to potential XXE Injection.
- GHSA-rvch-3jmx-3jf3: ast_coredumper running as root sources
  ast_debug_tools.conf from /etc/asterisk; potentially leading to
  privilege escalation.
- GHSA-v6hp-wh3r-cwxh: The Asterisk embedded web server's /httpstatus
  page echos user supplied values(cookie and query string) without
  sanitization.
- GHSA-xpc6-x892-v83c: ast_coredumper runs as root, and writes gdb init
  file to world writeable folder; leading to potential privilege
  escalation.

Changelog:
https://downloads.asterisk.org/pub/telephony/asterisk/old-releases/ChangeLog-22.8.2.html

PR:		293361
Approved by:	Oleksandr Kryvulia <o.kryvulia@flex-it.com.ua>
Security:	GHSA-85x7-54wr-vh42
Security:	GHSA-rvch-3jmx-3jf3
Security:	GHSA-v6hp-wh3r-cwxh
Security:	GHSA-xpc6-x892-v83c
MFH:		2026Q1
28d3feb42c
Vladimir Druzenko (vvd) · 22.8.1
net/asterisk22: Update 22.8.0 => 22.8.1

Changelog:
https://downloads.asterisk.org/pub/telephony/asterisk/old-releases/ChangeLog-22.8.1.html

PR:		292814
Approved by:	Oleksandr Kryvulia <o.kryvulia@flex-it.com.ua> (maintainer)
Sponsored by:	PANS Jarosław
MFH:		2026Q1
7a605cde70
Vladimir Druzenko (vvd) · 22.8.0
net/asterisk22: Update 22.7.0 => 22.8.0

Changelog:
https://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-22.8.0.html

This update incorporates an important fix for FreeBSD users:
- rtp/rtcp: Configure dual-stack behavior via IPV6_V6ONLY

PR: 		262386 292712
Approved by:	Oleksandr Kryvulia <o.kryvulia@flex-it.com.ua> (maintainer)
Sponsored by: 	PANS Jarosław
MFH:		2026Q1
a2afefa7cc
Vladimir Druzenko (vvd) · 22.7.0
net/asterisk22: Update 22.6.0 → 22.7.0

Changelog:
https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-22.7.0.html

Add non-default option UNBOUND to prevent silent grab of libunbound.so
from dns/unbound.

PR:		291177
Sponsored by:	FLEX-IT LLC
Co-authored-by:	Vladimir Druzenko <vvd@FreeBSD.org>
be2a8e3d56
Vladimir Druzenko (vvd) · 22.6.0_1
net/asterisk22: Fix Endianness detection

After update to 22.6.0 asterisk misbehahave, see
https://github.com/asterisk/asterisk/issues/1536
The patch submitted in https://github.com/asterisk/asterisk/pull/1541
fixes that.

PR:		290318
Approved by:	Oleksandr Kryvulia <o.kryvulia@flex-it.com.ua> (maintainer)
31712534fb
Vladimir Druzenko (vvd) · 22.6.0
net/asterisk22: Update 22.5.2 => 22.6.0

Changelog:
https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-22.6.0.html

PR:		290318
Sponsored by:	FLEX-IT LLC
e879a5ae33
Vladimir Druzenko (vvd) · 22.5.2
net/asterisk22: Update 22.5.1 => 22.5.2 (fix security)

Changelog:
https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-22.5.2.html

GHSA-64qc-9x89-rx5j: A specifically malformed Authorization header in
an incoming SIP request can cause Asterisk to crash.

PR:		289185
Security:	GHSA-64qc-9x89-rx5j
Sponsored by:	FLEX-IT LLC
MFH:		2025Q3
2b0657b4df
Älven (alven) · 22.5.1
net/asterisk22: Update 22.5.0 => 22.5.1 (fix security issues)

ChangeLog:
https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-22.5.1.html

Security:	GHSA-mrq5-74j5-f5cr
Security:	GHSA-v9q8-9j8m-5xwp
Sponsored by:	FLEX-IT LLC

PR:		288614
Approved by:	yuri@ (Mentor)

MFH:	 	2025Q3
aa9c929387
Piotr Kubaj (pkubaj) · 22.5.0
net/asterisk{18,20,22}: allow GEOLOCATION on powerpc*
a7f4260710
Vladimir Druzenko (vvd) · 22.5.0
net/asterisk22: Update 22.4.1 → 22.5.0 (security fix)

GHSA-c7p6-7mvq-8jq2: cli_permissions.conf: deny option does not work
for disallowing shell commands

Change Log:
https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-22.5.0.html

PR:		288430
Security:	GHSA-c7p6-7mvq-8jq2
Sponsored by:	FLEX-IT LLC
MFH:		2025Q3
0d8134c5e6
Matthias Andree (mandree) · 22.4.1_1
*/*: Switch to misc/libuuid and misc/libblkid

PR:		221293
PR:		251489
PR:		257070
e81eda36a8
Baptiste Daroussin (bapt) · 22.4.1_1
libxml2: chase libxml soversion bump
3068854dd0
Vladimir Druzenko (vvd) · 22.4.1
net/asterisk22: Update 22.4.0 → 22.4.1 (fix security issues)

Changelog:
https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-22.4.1.html

PR:		287012
Security:	GHSA-2grh-7mhv-fcfw
Security:	GHSA-c7p6-7mvq-8jq2
MFH:		2025Q2
d9b9651272
Vladimir Druzenko (vvd) · 22.4.0
net/asterisk22: Update 22.3.0 → 22.4.0

ChangeLog:
https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-22.4.0.html

Fix loading pjsip modules on CURRENT

PR:		285736
Sponsored by:	FLEX-IT LLC
MFH:		2025Q2
c320ebd915
Vladimir Druzenko (vvd) · 22.3.0
net/asterisk22: Update 22.2.0 → 22.3.0

ChangeLog:
https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-22.3.0.html

PR:		285736
Sponsored by:	FLEX-IT LLC
c5d8e17b67
Joel Bodenmann (jbo) · 22.2.0
net/asterisk22: Update 22.1.1 → 22.2.0

Changelog: https://www.asterisk.org/asterisk-news/asterisk-22-2-0-now-available

PR:		284706
Sponsored by:	FLEX-IT LLC
8a24d190eb
Li-Wen Hsu (lwhsu) · 22.1.1
Add net/asterisk22: LTS version of Asterisk PBX software

PR:		284056
Sponsored by:	FLEX-IT LLC
d2de2e1ecf