Author: carnil Date: 2017-06-02 10:45:08 +0000 (Fri, 02 Jun 2017) New Revision: 52231
Modified: data/CVE/list Log: pjproject issues fixed in unstable Modified: data/CVE/list =================================================================== --- data/CVE/list 2017-06-02 10:16:46 UTC (rev 52230) +++ data/CVE/list 2017-06-02 10:45:08 UTC (rev 52231) @@ -21,9 +21,12 @@ [wheezy] - asterisk <not-affected> (Vulnerable code not present) NOTE: http://downloads.asterisk.org/pub/security/AST-2017-004.txt CVE-2017-9359 (The multi-part body parser in PJSIP, as used in Asterisk Open Source ...) - - pjproject <unfixed> (bug #863902) + - pjproject 2.5.5~dfsg-6 (bug #863902) NOTE: http://downloads.asterisk.org/pub/security/AST-2017-003.txt NOTE: https://issues.asterisk.org/jira/browse/ASTERISK-26939 +CVE-2017-XXXX [AST-2017-002: Buffer Overrun in PJSIP transaction layer] + - pjproject 2.5.5~dfsg-6 (bug #863901) + NOTE: http://downloads.asterisk.org/pub/security/AST-2017-002.txt CVE-2017-9355 RESERVED CVE-2017-9354 (In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the RGMP dissector ...) _______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits