Log message:
Update to Asterisk 11.22.0: this is mostly a bug fix release.

----- 11.22.0

The Asterisk Development Team has announced the release of Asterisk 11.22.0.

The release of Asterisk 11.22.0 resolves several issues reported by the
community and would have not been possible without your participation.
Thank you!

The following are the issues resolved in this release:

Bugs fixed in this release:
-----------------------------------
 * ASTERISK-25857 - func_aes: incorrect use of strlen() leads to
      data corruption (Reported by Gianluca Merlo)
 * ASTERISK-25321 - [patch]DeadLock ChanSpy with call over Local
      channel (Reported by Filip Frank)
 * ASTERISK-25800 - [patch] Calculate talktime when is first call
      answered (Reported by Rodrigo Ramirez Norambuena)
 * ASTERISK-25272 - [patch]The ICONV dialplan function sometimes
      returns garbage (Reported by Etienne Lessard)
 * ASTERISK-20987 - non-admin users, who join muted conference are
      not being muted (Reported by hristo)
 * ASTERISK-24972 - Transport Layer Security (TLS) Protocol BEAST
      Vulnerability - Investigate vulnerability of HTTP server
      (Reported by Alex A. Welzl)
 * ASTERISK-25603 - [patch]udptl: Uninitialized lengths and bufs in
      udptl_rx_packet cause ast_frdup crash (Reported by Walter
      Doekes)
 * ASTERISK-25742 - Secondary IFP Packets can result in accessing
      uninitialized pointers and a crash (Reported by Torrey Searle)
 * ASTERISK-25397 - [patch]chan_sip: File descriptor leak with
      non-default timert1 (Reported by Alexander Traud)
 * ASTERISK-25730 - build:  make uninstall after make distclean
      tries to remove root (Reported by George Joseph)
 * ASTERISK-25722 - ASAN & testsute: stack-buffer-overflow in
      sip_sipredirect (Reported by Badalian Vyacheslav)
 * ASTERISK-25714 - ASAN:heap-buffer-overflow in logger.c (Reported
      by Badalian Vyacheslav)
 * ASTERISK-24801 - ASAN: ast_el_read_char stack-buffer-overflow
      (Reported by Badalian Vyacheslav)
 * ASTERISK-25701 - core: Endless loop in "core show
      taskprocessors" (Reported by ibercom)
 * ASTERISK-25700 - main/config: Clean config maps on shutdown.
      (Reported by Corey Farrell)
 * ASTERISK-25690 - Hanging up when executing connected line sub
      does not cause hangup (Reported by Joshua Colp)
 * ASTERISK-25687 - res_musiconhold: Concurrent invocations of 'moh
      reload' cause a crash (Reported by Sean Bright)
 * ASTERISK-25394 - pbx: Incorrect device and presence state when
      changing hint details (Reported by Joshua Colp)
 * ASTERISK-25640 - pbx: Deadlock on features reload and state
      change hint. (Reported by Krzysztof Trempala)
 * ASTERISK-25681 - devicestate: Engine thread is not shut down
      (Reported by Corey Farrell)
 * ASTERISK-25680 - manager: manager_channelvars is not cleaned at
      shutdown (Reported by Corey Farrell)
 * ASTERISK-25679 - res_calendar leaks scheduler. (Reported by
      Corey Farrell)
 * ASTERISK-25677 - pbx_dundi: leaks during failed load. (Reported
      by Corey Farrell)
 * ASTERISK-25673 - res_crypto leaks CLI entries (Reported by Corey
      Farrell)
 * ASTERISK-25647 - bug of cel_radius.c: wrong point of
      ADD_VENDOR_CODE (Reported by Aaron An)
 * ASTERISK-25614 - DTLS negotiation delays (Reported by Dade
      Brandon)
 * ASTERISK-25442 - using realtime (mysql) queue members are never
      updated in wait_our_turn function (app_queue.c)  (Reported by
      Carlos Oliva)
 * ASTERISK-25624 - AMI Event OriginateResponse bug (Reported by
      sungtae kim)

Improvements made in this release:
-----------------------------------
 * ASTERISK-24813 - asterisk.c: #if statement in listener()
      confuses code folding editors (Reported by Corey Farrell)
 * ASTERISK-25767 - [patch] Add check to configure for sanitizes
      (Reported by Badalian Vyacheslav)
 * ASTERISK-25068 - Move commonly used FreePBX extra sounds to the
      core set (Reported by Rusty Newton)

For a full list of changes in this release, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.22.0

Thank you for your continued support of Asterisk!

----- 11.21.2

The Asterisk Development Team has announced the release of Asterisk 11.21.2.

The release of Asterisk 11.21.2 resolves an issue reported by the
community and would have not been possible without your participation.
Thank you!

The following is the issue resolved in this release:

Bugs fixed in this release:
-----------------------------------
 * ASTERISK-25770 - Check for OpenSSL defines before trying to use
      them. (Reported by Kevin Harwell)

For a full list of changes in this release, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.21.2

Thank you for your continued support of Asterisk!

Log message:
Recursive revbump from textproc/icu 57.1

Log message:
Bump PKGREVISION for security/openssl ABI bump.

Log message:
Use OPSYSVARS.

Log message:
Update to Asterisk 11.21.1:  this is mainly a bug patch update plus
fixes for AST-2016-001, AST-2016-002, and AST-2016-003.  Also some
pkglinting.

----- 11.21.1

The Asterisk Development Team has announced security releases for Certified
Asterisk 11.6 and 13.1 and Asterisk 11 and 13. The available security releases
are released as versions 11.6-cert12, 11.21.1, 13.1-cert3, and 13.7.1.

The release of these versions resolves the following security vulnerabilities:

* AST-2016-001: BEAST vulnerability in HTTP server

  The Asterisk HTTP server currently has a default configuration which allows
  the BEAST vulnerability to be exploited if the TLS functionality is enabled.
  This can allow a man-in-the-middle attack to decrypt data passing through it.

* AST-2016-002: File descriptor exhaustion in chan_sip

  Setting the sip.conf timert1 value to a value higher than 1245 can cause an
  integer overflow and result in large retransmit timeout times. These large
  timeout values hold system file descriptors hostage and can cause the system
  to run out of file descriptors.

* AST-2016-003: Remote crash vulnerability receiving UDPTL FAX data.

  If no UDPTL packets are lost there is no problem. However, a lost packet
  causes Asterisk to use the available error correcting redundancy packets. If
  those redundancy packets have zero length then Asterisk uses an uninitialized
  buffer pointer and length value which can cause invalid memory accesses later
  when the packet is copied.

For a full list of changes in the current releases, please see the ChangeLogs:

http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.21.1

The security advisories are available at:

 * http://downloads.asterisk.org/pub/security/AST-2016-001.pdf
 * http://downloads.asterisk.org/pub/security/AST-2016-002.pdf
 * http://downloads.asterisk.org/pub/security/AST-2016-003.pdf

Thank you for your continued support of Asterisk!

----- 11.21.0

The Asterisk Development Team has announced the release of Asterisk 11.21.0.

The release of Asterisk 11.21.0 resolves several issues reported by the
community and would have not been possible without your participation.
Thank you!

The following are the issues resolved in this release:

Bugs fixed in this release:
-----------------------------------
 * ASTERISK-25640 - pbx: Deadlock on features reload and state
      change hint. (Reported by Krzysztof Trempala)
 * ASTERISK-25364 - [patch]Issue a TCP connection(kernel) and
      thread of asterisk is not released (Reported by Hiroaki Komatsu)
 * ASTERISK-25569 - app_meetme: Audio quality issues (Reported by
      Corey Farrell)
 * ASTERISK-25609 - [patch]Asterisk may crash when calling
      ast_channel_get_t38_state(c) (Reported by Filip Jenicek)
 * ASTERISK-24146 - [patch]No audio on WebRtc caller side when
      answer waiting time is more than ~7sec (Reported by Aleksei
      Kulakov)
 * ASTERISK-25599 - [patch] SLIN Resampling Codec only 80 msec
      (Reported by Alexander Traud)
 * ASTERISK-25616 - Warning with a Codec Module which supports PLC
      with FEC (Reported by Alexander Traud)
 * ASTERISK-25610 - Asterisk crash during "sip reload" (Reported by
      Dudás József)
 * ASTERISK-25498 - Asterisk crashes when negotiating g729 without
      that module installed (Reported by Ben Langfeld)
 * ASTERISK-25476 - chan_sip loses registrations after a while
      (Reported by Michael Keuter)
 * ASTERISK-25593 - fastagi: record file closed after sending
      result (Reported by Kevin Harwell)
 * ASTERISK-25585 - [patch]rasterisk never hits most of main(), but
      it's assumed to (Reported by Walter Doekes)
 * ASTERISK-25552 - hashtab: Improve NULL tolerance (Reported by
      Joshua Colp)
 * ASTERISK-25449 - main/sched: Regression introduced by
      5c713fdf18f causes erroneous duplicate RTCP messages; other
      potential scheduling issues in chan_sip/chan_skinny (Reported by
      Matt Jordan)
 * ASTERISK-25537 - [patch] format-attribute module: RFC or
      internal defaults? (Reported by Alexander Traud)
 * ASTERISK-25373 -  add documentation for CALLERID(pres) and also
      the CONNECTEDLINE and REDIRECTING variants (Reported by Walter
      Doekes)
 * ASTERISK-25527 - Quirky xmldoc description wrapping (Reported by
      Walter Doekes)
 * ASTERISK-25434 - Compiler flags not reported in 'core show
      settings' despite usage during compilation (Reported by Rusty
      Newton)
 * ASTERISK-25494 - build:  GCC 5.1.x catches some new const, array
      bounds and missing paren issues (Reported by George Joseph)
 * ASTERISK-7803 - [patch] Update the maximum packetization values
      in frame.c (Reported by dea)
 * ASTERISK-25461 - Nested dialplan #includes don't work as
      expected. (Reported by Richard Mudgett)
 * ASTERISK-25455 - Deadlock of PJSIP realtime over
      res_config_pgsql  (Reported by mdu113)
 * ASTERISK-25135 - [patch]RTP Timeout hangup cause code missing
      (Reported by Olle Johansson)
 * ASTERISK-25400 - Hints broken when "CustomPresence" doesn't
      exist in AstDB (Reported by Andrew Nagy)
 * ASTERISK-25443 - [patch]IPv6 - Potential issue in via header
      parsing (Reported by ffs)
 * ASTERISK-25391 - AMI GetConfigJSON returns invalid JSON
      (Reported by Bojan Nemčić)
 * ASTERISK-25438 - res_rtp_asterisk: ICE role message even when
      ICE is not enabled (Reported by Joshua Colp)

Improvements made in this release:
-----------------------------------
 * ASTERISK-24718 - [patch]Add inital support of "sanitize" to
      configure (Reported by Badalian Vyacheslav)

For a full list of changes in this release, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.21.0

Thank you for your continued support of Asterisk!

Log message:
add information about the version, requested by gdt@

Log message:
Add SHA512 digests for distfiles for comms category

Existing SHA1 digests verified, all found to be the same on the
machine holding the existing distfiles (morden).  Existing SHA1
digests retained for now as an audit trail.

Log message:
extraneous parenthesis crept in in Darwin conditional

Log message:
appease pkglint

Log message:
Use ${COMPILER_INCLUDE_DIRS} instead of hardcoded /usr/include