#1024353 asterisk: segfault with the latest security update

Package:
asterisk
Source:
asterisk
Description:
Open Source Private Branch Exchange (PBX)
Submitter:
sergio
Date:
2026-07-11 07:37:02 UTC
Severity:
normal
Tags:
#1024353#5
Date:
2022-11-18 07:49:20 UTC
From:
To:
Dear Maintainer,

after update from 1:16.16.1~dfsg-1+deb11u1 to 1:16.28.0~dfsg-0+deb11u1
asterisk segfaults trying to place a call:

asterisk console:
    -- Executing [<EXTN>@localpeers:1] ExecIf("PJSIP/client-00000000", "1?Dial(Local/<EXTEN>@go-local)") in new stack
    -- Call accepted by IP:4569 (format g722)
coupler*CLI>
Disconnected from Asterisk server

dmesg:
segfault at 920 ip 0000560961edcbd0 sp 00007fc3379aa4d8 error 4 in asterisk[560961e66000+1cf000]


I can send the dumped core.zst (3.2M) personally.
#1024353#12
Date:
2022-11-18 13:32:44 UTC
From:
To:
Hello,

thanks for reporting. I wonder if the segfault is related to the extra package
asterisk-opus. What happens if you remove this package and start asterisk
without it? Please send all your debug files tar compressed to apo@debian.org
please.

Regards,

Markus
#1024353#17
Date:
2022-11-19 12:14:29 UTC
From:
To:
Commeting out codec_opus_open_source, format_ogg_opus_open_source and
format_vp8
in modules.conf (autoload=no) changes nothing.

How to get them? I have a dumped core file, is it enough?
#1024353#22
Date:
2022-11-19 14:37:46 UTC
From:
To:
Am Samstag, dem 19.11.2022 um 16:14 +0400 schrieb sergio:

I believe the problem here is that the opus codec is embedded in Asterisk
itself now and asterisk-opus conflicts with the new setup. Did you remove
asterisk-opus as well?

https://wiki.asterisk.org/wiki/display/AST/Collecting+Debug+Information

I need more details how you trigger the segfault, a step by step explanation,
because I cannot reproduce the problem with a new installation of Asterisk. You
have to turn on verbose or debug logging and send me your log files.

Regards,

Markus
#1024353#27
Date:
2022-12-19 13:25:56 UTC
From:
To:
This problem is not related to asterisk-opus, removeing asterisk-opus
package chagnes nothing.

The problem is related to IAX2, incoming SIP calls work fine.

this is console on asterisk 1:16.28.0~dfsg-0+deb11u1 that segfaults:
#1024353#32
Date:
2023-06-29 06:33:20 UTC
From:
To:
https://github.com/asterisk/asterisk/issues/180
#1024353#41
Date:
2023-07-23 03:07:52 UTC
From:
To:
https://github.com/asterisk/asterisk/pull/198

Please, apply this for the broken packages.