two CVE in pjproject

[Emmanuel Dreyfus <manu%netbsd.org@localhost>]

Hello

There are two outstanding CVE in pjproject that is used by Asterisk:
CVE-2026-29068 and CVE-2026-28799.

I created two patches for comms/asterisk23 and tested it, it did 
not break anything obvious.
https://dl.espci.fr/ticket/194cb36aeb8556c7c655a4d8f7583cbe

What should I do with it? I can live with it as a local change, but
perhaps it could be intersting for others.

-- 
Emmanuel Dreyfus
manu%netbsd.org@localhost