Bug#1016974: sofia-sip: CVE-2022-31001 CVE-2022-31002 CVE-2022-31003

2022-08-13 Thread Evangelos Ribeiro Tzaras
control -1 tags patch Hi, I'm not quite sure which is the preferred form to supply a patch, so I'll attach a `git format-patch` based on my `wip/cve` branch on salsa [0]. If for further discussions should be needed before this can be uploaded or the patch in a different form is preffered,

Bug#1016974: sofia-sip: CVE-2022-31001 CVE-2022-31002 CVE-2022-31003

2022-08-12 Thread Evangelos Ribeiro Tzaras
control -1 tags pending Hi again, On Thu, 2022-08-11 at 23:52 +0200, Moritz Muehlenhoff wrote: > On Thu, Aug 11, 2022 at 11:08:49PM +0200, Evangelos Ribeiro Tzaras wrote: > > > > > If you fix the vulnerabilities please also make sure to include the > > > CVE (Common Vulnerabilities & Exposures)

Bug#1016974: sofia-sip: CVE-2022-31001 CVE-2022-31002 CVE-2022-31003

2022-08-11 Thread Moritz Muehlenhoff
On Thu, Aug 11, 2022 at 11:08:49PM +0200, Evangelos Ribeiro Tzaras wrote: > Hi Moritz, > > On Wed, 2022-08-10 at 22:08 +0200, Moritz Mühlenhoff wrote: > > Source: sofia-sip > > X-Debbugs-CC: t...@security.debian.org > > Severity: grave > > Tags: security > > > > Hi, > > > > The following

Bug#1016974: sofia-sip: CVE-2022-31001 CVE-2022-31002 CVE-2022-31003

2022-08-11 Thread Evangelos Ribeiro Tzaras
Hi Moritz, On Wed, 2022-08-10 at 22:08 +0200, Moritz Mühlenhoff wrote: > Source: sofia-sip > X-Debbugs-CC: t...@security.debian.org > Severity: grave > Tags: security > > Hi, > > The following vulnerabilities were published for sofia-sip. I will try to apply the patches and prepare a release!

Bug#1016974: sofia-sip: CVE-2022-31001 CVE-2022-31002 CVE-2022-31003

2022-08-10 Thread Moritz Mühlenhoff
Source: sofia-sip X-Debbugs-CC: t...@security.debian.org Severity: grave Tags: security Hi, The following vulnerabilities were published for sofia-sip. CVE-2022-31001[0]: | Sofia-SIP is an open-source Session Initiation Protocol (SIP) User- | Agent library. Prior to version 1.13.8, an attacker