Abhijith PA pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
022be0ce by Abhijith PA at 2022-04-03T11:17:57+05:30
Reserve DLA-2969-1 for asterisk
- - - - -
3 changed files:
- data/CVE/list
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -99736,7 +99736,6 @@ CVE-2020-28243 (An issue was discovered in SaltStack
Salt before 3002.5. The min
CVE-2020-28242 (An issue was discovered in Asterisk Open Source 13.x before
13.37.1, 1 ...)
- asterisk 1:16.15.0~dfsg-1 (bug #974713)
[buster] - asterisk <no-dsa> (Minor issue)
- [stretch] - asterisk <no-dsa> (Minor issue)
NOTE: https://issues.asterisk.org/jira/browse/ASTERISK-29013
NOTE: http://downloads.asterisk.org/pub/security/AST-2020-002.html
CVE-2020-28241 (libmaxminddb before 1.4.3 has a heap-based buffer over-read in
dump_en ...)
@@ -169452,7 +169451,6 @@ CVE-2019-18977
RESERVED
CVE-2019-18976 (An issue was discovered in res_pjsip_t38.c in Sangoma Asterisk
through ...)
- asterisk 1:16.1.1~dfsg-1
- [stretch] - asterisk <no-dsa> (Minor issue)
[jessie] - asterisk <not-affected> (Vulnerable code not present)
NOTE: https://downloads.asterisk.org/pub/security/AST-2019-008.html
NOTE: https://issues.asterisk.org/jira/browse/ASTERISK-28612
@@ -169984,7 +169982,6 @@ CVE-2019-18790 (An issue was discovered in
channels/chan_sip.c in Sangoma Asteri
{DLA-2017-1}
- asterisk 1:16.10.0~dfsg-1 (bug #947381)
[buster] - asterisk 1:16.2.1~dfsg-1+deb10u2
- [stretch] - asterisk <no-dsa> (Minor issue)
NOTE: https://downloads.asterisk.org/pub/security/AST-2019-006.html
NOTE: https://issues.asterisk.org/jira/browse/ASTERISK-28589
CVE-2019-18789
@@ -172608,7 +172605,6 @@ CVE-2019-18610 (An issue was discovered in manager.c
in Sangoma Asterisk through
{DLA-2017-1}
- asterisk 1:16.10.0~dfsg-1 (bug #947377)
[buster] - asterisk 1:16.2.1~dfsg-1+deb10u2
- [stretch] - asterisk <no-dsa> (Minor issue)
NOTE: https://downloads.asterisk.org/pub/security/AST-2019-007.html
NOTE: https://issues.asterisk.org/jira/browse/ASTERISK-28580
CVE-2019-18609 (An issue was discovered in amqp_handle_input in
amqp_connection.c in r ...)
@@ -191090,7 +191086,6 @@ CVE-2019-13162
CVE-2019-13161 (An issue was discovered in Asterisk Open Source through
13.27.0, 14.x ...)
- asterisk 1:16.2.1~dfsg-2 (low; bug #931981)
[buster] - asterisk 1:16.2.1~dfsg-1+deb10u1
- [stretch] - asterisk <no-dsa> (Minor issue)
[jessie] - asterisk <postponed> (Minor issue)
NOTE: http://downloads.digium.com/pub/security/AST-2019-003.html
NOTE: https://issues.asterisk.org/jira/browse/ASTERISK-28465
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[03 Apr 2022] DLA-2969-1 asterisk - security update
+ {CVE-2019-13161 CVE-2019-18610 CVE-2019-18790 CVE-2019-18976
CVE-2020-28242}
+ [stretch] - asterisk 1:13.14.1~dfsg-2+deb9u6
[02 Apr 2022] DLA-2968-1 zlib - security update
{CVE-2018-25032}
[stretch] - zlib 1:1.2.8.dfsg-5+deb9u1
=====================================
data/dla-needed.txt
=====================================
@@ -20,10 +20,6 @@ ansible
NOTE: 20210411: after that LTS. (apo)
NOTE: 20210426: https://people.debian.org/~apo/lts/ansible/
--
-asterisk (Abhijith PA)
- NOTE: 20220314: Looking on back log no-dsa (abhijith)
- NOTE: 20220322:
https://people.debian.org/~abhijith/upload/vda/asterisk_13.14.1~dfsg-2+deb9u6.dsc
(abhijith)
---
ckeditor
NOTE: 20220402: multiple pendings vulnerabilities (Beuc)
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/022be0cee759f7f86e657013407b26dc9af49eb7
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/022be0cee759f7f86e657013407b26dc9af49eb7
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
