[From nobody Sat Jun 27 07:51:05 2026
Received: (at submit) by bugs.debian.org; 10 Feb 2023 19:49:35 +0000
X-Spam-Checker-Version: SpamAssassin 3.4.6-bugs.debian.org_2005_01_02
 (2021-04-09) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-7.9 required=4.0 tests=BAYES_00,FROMDEVELOPER,
 RCVD_IN_DNSWL_MED,SPF_HELO_NONE,SPF_NONE,XMAILER_REPORTBUG
 autolearn=ham autolearn_force=no
 version=3.4.6-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 11; hammy, 91; neutral, 29; spammy, 0.
 spammytokens: hammytokens:0.000-+--bookworm,
 0.000-+--H*M:reportbug, 
 0.000-+--H*MI:reportbug, 0.000-+--H*RU:inutil.org, 0.000-+--H*r:jmm
Return-path: <jmm@debian.org>
Received: from inutil.org ([109.69.64.57]:48452
 helo=viruvalge.hosting.plutex.de) by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.94.2) (envelope-from <jmm@debian.org>) id 1pQZOp-00EMAv-Hw
 for submit@bugs.debian.org; Fri, 10 Feb 2023 19:49:35 +0000
Received: by viruvalge.hosting.plutex.de (Postfix, from userid 112)
 id B1D8C4035E; Fri, 10 Feb 2023 20:49:33 +0100 (CET)
Received: from hullmann.fritz.box (p548dc115.dip0.t-ipconnect.de
 [84.141.193.21])
 by viruvalge.hosting.plutex.de (Postfix) with ESMTPSA id 46AA440207;
 Fri, 10 Feb 2023 20:49:32 +0100 (CET)
Received: from jmm by hullmann.fritz.box with local (Exim 4.96)
 (envelope-from <jmm@debian.org>) id 1pQZOh-000U7d-1o;
 Fri, 10 Feb 2023 20:49:27 +0100
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Moritz Muehlenhoff <jmm@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: Only include in Bookworm with commitment to stable updates
Message-ID: <167605856754.115747.7672008336305256671.reportbug@hullmann.westfalen.local>
X-Mailer: reportbug 11.6.0
Date: Fri, 10 Feb 2023 20:49:27 +0100
Delivered-To: submit@bugs.debian.org

Source: asterisk
Version: 1:20.1.0~dfsg+~cs6.12.40431414-1
Severity: serious

Asterisk should only be included in Bookworm with a reliable commitment
by the maintainers to backport/test security fixes across the typical
three year life cycle (two years of stable-security and one year of
oldstable-security). (There have been 37 CVEs in 2021/2022)

Cheers,
        Moritz
]