Your message dated Mon, 16 Apr 2018 19:02:16 +0000
with message-id <e1f89ok-0007zp...@fasolo.debian.org>
and subject line Bug#881362: fixed in pjproject 2.5.5~dfsg-6+deb9u1
has caused the Debian Bug report #881362,
regarding libpjlib-util2: resolution of DNS SRV targets fails if target has no
AAAA record
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
881362: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=881362
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: libpjlib-util2
Version: 2.5.5~dfsg-6
Severity: important
Tags: patch upstream
While trying to use Asterisk with its newer PJSIP-based SIP channel
support, it turned out that registering to a SIP server fails if the SRV
targets do not have an AAAA record, but only an A record.
The effect, which can be seen via Wireshark, is that essentially no SIP
registration is taking place at all, after all necessary DNS requests
have been sent out. Asterisk then just says:
No response received from 'sip:xxx' on registration attempt to
'sip:xxx@xxx', retrying in '30'
After some debugging it became clear, that the DNS resolution is
successful as far as resolving the A records of the SRV targets. However
in case a SIP server does not have an AAAA record, libpjlib-util2
skips/aborts the whole resolution and treats it as failed, no matter if
an A record has been found or not.
Applying upstream's GitHub commit 4ab1838 (part of pjproject 2.6) onto
Debian stable's version 2.5.5 solves the problem.
https://github.com/pjsip/pjproject/commit/4ab1838
Conclusion: Please apply the mentioned patch and release a new stable
version.
-- System Information:
Debian Release: 9.2
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.9.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages libpjlib-util2 depends on:
ii libavcodec57 7:3.2.8-1~deb9u1
ii libavdevice57 7:3.2.8-1~deb9u1
ii libavformat57 7:3.2.8-1~deb9u1
ii libavutil55 7:3.2.8-1~deb9u1
ii libc6 2.24-11+deb9u1
ii libopencore-amrnb0 0.1.3-2.1+b2
ii libpj2 2.5.5~dfsg-6
ii libsdl2-2.0-0 2.0.5+dfsg1-2
ii libswscale4 7:3.2.8-1~deb9u1
ii libv4l-0 1.12.3-1
libpjlib-util2 recommends no packages.
libpjlib-util2 suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: pjproject
Source-Version: 2.5.5~dfsg-6+deb9u1
We believe that the bug you reported is fixed in the latest version of
pjproject, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 881...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Bernhard Schmidt <be...@debian.org> (supplier of updated pjproject package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 03 Apr 2018 10:02:31 +0200
Source: pjproject
Binary: libpjlib-util2 libpjmedia-audiodev2 libpjmedia-codec2
libpjmedia-videodev2 libpjmedia2 libpjnath2 libpjsip-simple2 libpjsip-ua2
libpjsip2 libpjsua2 libpjsua2-2v5 libpj2 libpjproject-dev python-pjproject
Architecture: source
Version: 2.5.5~dfsg-6+deb9u1
Distribution: stretch-security
Urgency: high
Maintainer: Debian VoIP Team <pkg-voip-maintain...@lists.alioth.debian.org>
Changed-By: Bernhard Schmidt <be...@debian.org>
Description:
libpj2 - PJ Project - PJProject core libraries
libpjlib-util2 - PJ Project - helper utilities
libpjmedia-audiodev2 - PJ Project - Audio devices
libpjmedia-codec2 - PJ Project - Multimedia codecs handling
libpjmedia-videodev2 - SIP handling library - video devices
libpjmedia2 - PJ Project - VoIP media
libpjnath2 - PJ Project - NAT handling
libpjproject-dev - PJ Project - development headers
libpjsip-simple2 - PJ Project - SIP SIMPLE instant messaging
libpjsip-ua2 - SIP handling library - SIP user agent library
libpjsip2 - PJ Project - SIP handling library
libpjsua2 - PJ Project - Basic VoIP client library
libpjsua2-2v5 - PJ Project - Basic VoIP client library
python-pjproject - PJ Project - Python bindings
Closes: 881362
Changes:
pjproject (2.5.5~dfsg-6+deb9u1) stretch-security; urgency=high
.
[ Bernhard Schmidt ]
* Fix various security issues
- CVE-2017-16872: Overflow when parsing numeric fileds in SIP messages
- CVE-2017-16875: Double key unregistration in ioqueue component
- CVE-2018-1000098: Integer overflow in SDP parsing
(also reported by the Asterisk project as AST-2018-002)
- CVE-2018-1000099: Null Pointer vulnerability in pjmedia SDP parsing
(also reported by the Asterisk project as AST-2018-003)
* Fix resolution of DNS SRV targets that do not have an AAAA record
(Closes: #881362)
Checksums-Sha1:
687cb848cf173982000af75b631f6afd9195b403 3334 pjproject_2.5.5~dfsg-6+deb9u1.dsc
d130318466a02e5734b069ed0e343a5d78c06a5c 3506099
pjproject_2.5.5~dfsg.orig.tar.bz2
da937d31afcee01677e25c98325cb57dfa81a73a 51216
pjproject_2.5.5~dfsg-6+deb9u1.debian.tar.xz
a5e82a2faf4626ebe4c778c372d035f0576f6698 6092
pjproject_2.5.5~dfsg-6+deb9u1_source.buildinfo
Checksums-Sha256:
266b57626d36d1d4d950d8f10783c235fcc48fbd45377f5c5b8aa005dd544d45 3334
pjproject_2.5.5~dfsg-6+deb9u1.dsc
09457ad674083211ae3b6c7e8e44b8ef33b454dc85dbf5674d06e49dc1ea9437 3506099
pjproject_2.5.5~dfsg.orig.tar.bz2
e427789462e5b50db3b1afd433d69caa61fcf4bf85101434af65981cefd09356 51216
pjproject_2.5.5~dfsg-6+deb9u1.debian.tar.xz
b9f829f904b3278533a381acd84080dc315ac7d10f8f482b07b6ac0dcc9875cb 6092
pjproject_2.5.5~dfsg-6+deb9u1_source.buildinfo
Files:
80f1f2131d0e97d5541257341cd96497 3334 comm optional
pjproject_2.5.5~dfsg-6+deb9u1.dsc
7186301d3987908b8b8cc5e84da48153 3506099 comm optional
pjproject_2.5.5~dfsg.orig.tar.bz2
25bc2f90d40d26ceefc5d2b3640e3b9a 51216 comm optional
pjproject_2.5.5~dfsg-6+deb9u1.debian.tar.xz
479e43af1d5abaf3a8395507b550d3e6 6092 comm optional
pjproject_2.5.5~dfsg-6+deb9u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=M3AV
-----END PGP SIGNATURE-----
--- End Message ---
