Univention Bugzilla – Bug 53636
asterisk: Multiple issues (4.4)
Last modified: 2021-08-11 16:48:33 CEST
New Debian asterisk 1:13.14.1~dfsg-2+deb9u5 fixes: This update addresses the following issue: * An issue was discovered in Sangoma Asterisk 13.x before 13.38.3, 16.x before 16.19.1, 17.x before 17.9.4, and 18.x before 18.5.1, and Certified Asterisk before 16.8-cert10. If the IAX2 channel driver receives a packet that contains an unsupported media format, a crash can occur. (CVE-2021-32558)
--- mirror/ftp/4.3/unmaintained/4.3-3/source/asterisk_13.14.1~dfsg-2+deb9u4.dsc +++ apt/ucs_4.4-0-errata4.4-8/source/asterisk_13.14.1~dfsg-2+deb9u5.dsc @@ -1,3 +1,9 @@ +1:13.14.1~dfsg-2+deb9u5 [Wed, 04 Aug 2021 10:53:20 +0100] Chris Lamb <lamby@debian.org>: + + * CVE-2021-32558 / AST-2021-008: Prevent an issue where, if the IAX2 channel + driver receives a packet that contains an unsupported media format, a crash + can occur. (Closes: #991710) + 1:13.14.1~dfsg-2+deb9u4 [Sun, 30 Sep 2018 23:24:10 +0200] Bernhard Schmidt <berni@debian.org>: * AST-2018-004 / CVE-2018-7284: Crash when receiving SUBSCRIBE request <http://piuparts.knut.univention.de/4.4-8/#6741352584251621591>
OK: yaml OK: announce_errata OK: patch ~OK: piuparts Installation and purging test failes on files owned by asterisk-config [4.4-8] 7ee75f5bf1 Bug #53636: asterisk 1:13.14.1~dfsg-2+deb9u5 doc/errata/staging/asterisk.yaml | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) [4.4-8] 70f7d0570a Bug #53636: asterisk 1:13.14.1~dfsg-2+deb9u5 doc/errata/staging/asterisk.yaml | 16 ++++++++++++++++ 1 file changed, 16 insertions(+)
<https://errata.software-univention.de/#/?erratum=4.4x1021>