Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker
Commits:
3dd091ab by Chris Lamb at 2023-04-18T18:21:44+01:00
Triage CVE-2023-27585 in asterisk for buster LTS.
- - - - -
2 changed files:
- data/CVE/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -9563,6 +9563,7 @@ CVE-2023-27586 (CairoSVG is an SVG converter based on
Cairo, a 2D graphics libra
NOTE: Introduced in
https://github.com/Kozea/CairoSVG/commit/1ee0889f4015ebaddcf9976d43222e673155797c
(0.3)
CVE-2023-27585 (PJSIP is a free and open source multimedia communication
library writt ...)
- asterisk <unfixed>
+ [buster] - asterisk <not-affected> (Vulnerable code not present)
- pjproject <removed>
- ring <unfixed>
NOTE:
https://github.com/pjsip/pjproject/security/advisories/GHSA-q9cp-8wcq-7pfr
=====================================
data/dla-needed.txt
=====================================
@@ -26,10 +26,6 @@ apache2
NOTE: 20230312: Special attention: Double check an update! Package is used
by many customers and users!.
NOTE: 20230326: VCS: https://salsa.debian.org/apache-team/apache2. Yadd is
ok for using apache2 salsa tree
--
-asterisk (Chris Lamb)
- NOTE: 20230416: Programming language: C.
- NOTE: 20230416: VCS: https://salsa.debian.org/lts-team/packages/asterisk.git
---
cairosvg (dleidert)
NOTE: 20230323: Programming language: Python.
NOTE: 20230411: Proposed solution for CVE-2023-27586 in Buster to backport
the --unsafe switch, introduced in 1.0.21, might work (dleidert)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3dd091abd8c30efc593306aaa23cd2da5e841e8d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3dd091abd8c30efc593306aaa23cd2da5e841e8d
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
