Neil Williams pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
417f97fc by Neil Williams at 2022-04-26T10:02:49+01:00
CVE-2022-24793 and CVE-2022-24792 for asterisk, CVE-2022-24793 for ring
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -13698,15 +13698,18 @@ CVE-2022-24795 (yajl-ruby is a C binding to the YAJL
JSON parsing and generation
CVE-2022-24794 (Express OpenID Connect is an Express JS middleware
implementing sign o ...)
NOT-FOR-US: Express OpenID Connect
CVE-2022-24793 (PJSIP is a free and open source multimedia communication
library writt ...)
+ - asterisk <unfixed>
- pjproject <removed>
+ - ring <unfixed>
NOTE:
https://github.com/pjsip/pjproject/security/advisories/GHSA-p6g5-v97c-w5q4
NOTE:
https://github.com/pjsip/pjproject/commit/9fae8f43accef8ea65d4a8ae9cdf297c46cfe29a
- TODO: check, might impact src:asterisk and src:ring
CVE-2022-24792 (PJSIP is a free and open source multimedia communication
library writt ...)
+ - asterisk <unfixed>
- pjproject <removed>
+ - ring <not-affected> (Vulnerable code not accessed)
NOTE:
https://github.com/pjsip/pjproject/security/advisories/GHSA-rwgw-vwxg-q799
NOTE:
https://github.com/pjsip/pjproject/commit/947bc1ee6d05be10204b918df75a503415fd3213
- TODO: check, might impact src:asterisk and src:ring
+ NOTE: should only affect 32bit builds.
CVE-2022-24791 (Wasmtime is a standalone JIT-style runtime for WebAssembly,
using Cran ...)
NOT-FOR-US: wasmtime
CVE-2022-24790 (Puma is a simple, fast, multi-threaded, parallel HTTP 1.1
server for R ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/417f97fc946e1584ac41e1430b3634c6f87bcf52
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/417f97fc946e1584ac41e1430b3634c6f87bcf52
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
