
<html><head></head><body>

The Asterisk Development Team would like to announce the release of Asterisk 16.26.0.<br>

This release is available for immediate download at<br>

<a href='https://downloads.asterisk.org/pub/telephony/asterisk'>https://downloads.asterisk.org/pub/telephony/asterisk</a>

<p>

The release of Asterisk 16.26.0 resolves several issues reported by the<br>

community and would have not been possible without your participation.<br>

<p>

<b>Thank you!</b><br>

<p>

The following issues are resolved in this release:<br>

<p>

<b>Security bugs fixed in this release:</b><br>

-----------------------------------<br>

<table border=0 padding=3>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29476'>ASTERISK-29476</a>] - <td><td>res_stir_shaken: Blind SSRF vulnerabilities<br>(Reported by Clint Ruoho)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29838'>ASTERISK-29838</a>] - <td><td>${SQL_ESC()} not correctly escaping a terminating \<br>(Reported by Leandro Dardini)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29872'>ASTERISK-29872</a>] - <td><td>res_stir_shaken: Resource exhaustion with large files<br>(Reported by Benjamin Keith Ford)</li></td></tr>

</table>

<p>

<b>New Features made in this release:</b><br>

-----------------------------------<br>

<table border=0 padding=3>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29931'>ASTERISK-29931</a>] - <td><td>Option to allow a user to not hear the join sound on enter but everyone else can<br>(Reported by Michael Cargile)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29968'>ASTERISK-29968</a>] - <td><td>func_db: Add a function to return cardinality of keys at prefix<br>(Reported by N A)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29486'>ASTERISK-29486</a>] - <td><td>Hint-like extension value lookup function without device state<br>(Reported by N A)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29941'>ASTERISK-29941</a>] - <td><td>chan_pjsip: Add ability to send flash events<br>(Reported by N A)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29820'>ASTERISK-29820</a>] - <td><td>cli: Add command to evaluate a function<br>(Reported by N A)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29876'>ASTERISK-29876</a>] - <td><td>app_queue: Add music on hold option<br>(Reported by N A)</li></td></tr>

</table>

<p>

<b>Bugs fixed in this release:</b><br>

-----------------------------------<br>

<table border=0 padding=3>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-28518'>ASTERISK-28518</a>] - <td><td>chan_dahdi: Caller ID FSK Erroneously Sent when Picking Up Dahdi Call On Hold<br>(Reported by Josh Alberts)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29990'>ASTERISK-29990</a>] - <td><td>chan_dahdi: adding ring cadences is not idempotent on dahdi restart<br>(Reported by N A)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-30007'>ASTERISK-30007</a>] - <td><td>chan_iax2: Prevent crashes due to attempted encryption with missing secrets<br>(Reported by N A)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29728'>ASTERISK-29728</a>] - <td><td>menuselect: Disabled by default modules that are enabled are always recompiled<br>(Reported by N A)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-30002'>ASTERISK-30002</a>] - <td><td>app_meetme: Don't erroneously set global variables when channel is NULL<br>(Reported by N A)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29994'>ASTERISK-29994</a>] - <td><td>chan_dahdi: Round robin array size is too small for max number of groups<br>(Reported by N A)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-22246'>ASTERISK-22246</a>] - <td><td>Asterisk's "T" flag is ignored when used with "r" or "R" flags. (documentation bug)<br>(Reported by Rusty Newton)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-26582'>ASTERISK-26582</a>] - <td><td>Asterisk seems to ignore the "n" parameter for "disable console colorization"<br>(Reported by Sebastian Gutierrez)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29843'>ASTERISK-29843</a>] - <td><td>Session timers get removed on UPDATE<br>(Reported by Mark Petersen)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29943'>ASTERISK-29943</a>] - <td><td>file.c: seeking to negative file offset is not prevented<br>(Reported by N A)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29955'>ASTERISK-29955</a>] - <td><td>chan_sip: SIP route header is missing on UPDATE<br>(Reported by Mark Petersen)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29842'>ASTERISK-29842</a>] - <td><td>Do not change 180 Ringing to 183 Progress even if early_media already enabled<br>(Reported by Mark Petersen)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29948'>ASTERISK-29948</a>] - <td><td>iostream: Infinite TCP timeout writing data<br>(Reported by N A)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29253'>ASTERISK-29253</a>] - <td><td>Incorrect bridging on transfer<br>(Reported by Yury Kirsanov)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-30024'>ASTERISK-30024</a>] - <td><td>Failed to sign STIR/SHAKEN payload with functionality not enabled<br>(Reported by Claude Diderich)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-30006'>ASTERISK-30006</a>] - <td><td>res_pjsip: UDP transport does not work when async_operations is greater than 1<br>(Reported by Ross Beer)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29655'>ASTERISK-29655</a>] - <td><td>res_pjsip_session: No video to caller if no camera available<br>(Reported by Michael Auracher)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29638'>ASTERISK-29638</a>] - <td><td>res_pjsip_session: No video after early media<br>(Reported by Michael Auracher)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-30015'>ASTERISK-30015</a>] - <td><td>pjsip / WebRTC: Chrome creating large number of SDP attributes<br>(Reported by Josh Hogan)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-30021'>ASTERISK-30021</a>] - <td><td>ast_variable_list_replace_variable uses variable with new keyword<br>(Reported by Jasper Hafkenscheid)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-30023'>ASTERISK-30023</a>] - <td><td>cdr_adaptive_odbc: does not support DATETIME database columns<br>(Reported by Gregory Massel)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29411'>ASTERISK-29411</a>] - <td><td>Crash in pjsip_msg_find_hdr_by_name<br>(Reported by LA)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29535'>ASTERISK-29535</a>] - <td><td>Segmentation fault in libasteriskpj.so.2<br>(Reported by Daniel Bonazzi)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-26719'>ASTERISK-26719</a>] - <td><td>pbx: Only up to 127 includes in a dialplan context (AST_PBX_MAX_STACK - 1)<br>(Reported by Tzafrir Cohen)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29988'>ASTERISK-29988</a>] - <td><td>REGRESSION: The build process is requiring xmllint or xmlstarlet ro be installed when it shouldn't<br>(Reported by George Joseph)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29986'>ASTERISK-29986</a>] - <td><td>build: Asterisk 18.11.0 doesn't compile when wget isn't available<br>(Reported by Stefan Ruijsenaars)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29895'>ASTERISK-29895</a>] - <td><td>chan_iax2: Fix misaligned spacing in iax2 show netstats printout<br>(Reported by N A)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29939'>ASTERISK-29939</a>] - <td><td>agi: Fix xmldoc bug with set music<br>(Reported by N A)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-28891'>ASTERISK-28891</a>] - <td><td>documentation: AGICommand_set+music documentation arguments displayed incorreclty<br>(Reported by Jonathan Harris)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29048'>ASTERISK-29048</a>] - <td><td>chan_iax2: "iax2 show registry" shows host for perceived<br>(Reported by David Herselman)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-26689'>ASTERISK-26689</a>] - <td><td>res_pjsip_sdp_rtp: 183 Session in Progress. Disconnecting channel for lack of RTP activity<br>(Reported by Dmitriy Serov)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29929'>ASTERISK-29929</a>] - <td><td>res_pjsip_sdp_rtp: Disconnecting channel for lack of RTP activity in one way sessions<br>(Reported by Boris P. Korzun)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29674'>ASTERISK-29674</a>] - <td><td>Adjust for 64bit time_t<br>(Reported by Andre Heider)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29961'>ASTERISK-29961</a>] - <td><td>RLS: domain part of 'uri' list attribute mismatch with SUBSCRIBE request<br>(Reported by Alexei Gradinari)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29950'>ASTERISK-29950</a>] - <td><td>SayNumber can handle '01' to '07', but not '08' or '09'<br>(Reported by Jim Van Meggelen)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29928'>ASTERISK-29928</a>] - <td><td>logging messages truncated when using MUSL runtime<br>(Reported by Philip Prindeville)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29960'>ASTERISK-29960</a>] - <td><td>ari: Retrieving stored recording can returns wrong file<br>(Reported by Arix)</li></td></tr>

</table>

<p>

<b>Improvements made in this release:</b><br>

-----------------------------------<br>

<table border=0 padding=3>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-24827'>ASTERISK-24827</a>] - <td><td>Missing documentation for chan_dahdi dial string ring cadences<br>(Reported by Scott Griepentrog)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29940'>ASTERISK-29940</a>] - <td><td>general: Add since tags to xmldocs<br>(Reported by N A)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29951'>ASTERISK-29951</a>] - <td><td>app_mf, app_sf: Return -1 on hangup<br>(Reported by N A)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29954'>ASTERISK-29954</a>] - <td><td>app_meetme: Emit warning if conference not found<br>(Reported by N A)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29351'>ASTERISK-29351</a>] - <td><td>Qualify pjproject 2.12 for Asterisk<br>(Reported by George Joseph)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29877'>ASTERISK-29877</a>] - <td><td>app_mf: Allow reading a maximum number of digits<br>(Reported by N A)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29976'>ASTERISK-29976</a>] - <td><td>Should Readme include information about install_prereq script?<br>(Reported by Marcel Wagner)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29970'>ASTERISK-29970</a>] - <td><td>Use pkg-config to find libxml2 headers and libraries<br>(Reported by Hugh McMaster)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-25716'>ASTERISK-25716</a>] - <td><td>Documentation: Document explanations and examples for possible values of DIALSTATUS<br>(Reported by Rusty Newton)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29980'>ASTERISK-29980</a>] - <td><td>build: External binary modules don't use https<br>(Reported by INVADE International Ltd.)</li></td></tr>

<tr><td valign=top nowrap='nowrap'><li>[<a href='https://issues.asterisk.org/jira/browse/ASTERISK-29967'>ASTERISK-29967</a>] - <td><td>pbx_builtins: Add missing documentation<br>(Reported by N A)</li></td></tr>

</table>

<p>

For a full list of changes in this release, please see the ChangeLog:<br>

<a href='https://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-16.26.0'>https://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-16.26.0</a>

<p>

<b>Thank you for your continued support of Asterisk!</b><br>

</body></html>