Author: carnil
Date: 2017-06-02 10:45:08 +0000 (Fri, 02 Jun 2017)
New Revision: 52231

Modified:
   data/CVE/list
Log:
pjproject issues fixed in unstable

Modified: data/CVE/list
===================================================================
--- data/CVE/list       2017-06-02 10:16:46 UTC (rev 52230)
+++ data/CVE/list       2017-06-02 10:45:08 UTC (rev 52231)
@@ -21,9 +21,12 @@
        [wheezy] - asterisk <not-affected> (Vulnerable code not present)
        NOTE: http://downloads.asterisk.org/pub/security/AST-2017-004.txt
 CVE-2017-9359 (The multi-part body parser in PJSIP, as used in Asterisk Open 
Source ...)
-       - pjproject <unfixed> (bug #863902)
+       - pjproject 2.5.5~dfsg-6 (bug #863902)
        NOTE: http://downloads.asterisk.org/pub/security/AST-2017-003.txt
        NOTE: https://issues.asterisk.org/jira/browse/ASTERISK-26939
+CVE-2017-XXXX [AST-2017-002: Buffer Overrun in PJSIP transaction layer]
+       - pjproject 2.5.5~dfsg-6 (bug #863901)
+       NOTE: http://downloads.asterisk.org/pub/security/AST-2017-002.txt
 CVE-2017-9355
        RESERVED
 CVE-2017-9354 (In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the RGMP 
dissector ...)


_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

Reply via email to