[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Two asterisk issues fixed in unstable

Salvatore Bonaccorso carnil at debian.org
Tue Apr 3 13:46:55 BST 2018


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
db6c62be by Salvatore Bonaccorso at 2018-04-03T14:46:22+02:00
Two asterisk issues fixed in unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -5005,7 +5005,7 @@ CVE-2018-7287 (An issue was discovered in res_http_websocket.c in Asterisk 15.x 
 	NOTE: downloads.digium.com/pub/security/AST-2018-006.html
 	NOTE: https://issues.asterisk.org/jira/browse/ASTERISK-27658
 CVE-2018-7286 (An issue was discovered in Asterisk through 13.19.1, 14.x through ...)
-	- asterisk <unfixed> (bug #891228)
+	- asterisk 1:13.20.0~dfsg-1 (bug #891228)
 	[jessie] - asterisk <not-affected> (Vulnerable code not present)
 	[wheezy] - asterisk <not-affected> (Vulnerable code not present)
 	NOTE: http://downloads.asterisk.org/pub/security/AST-2018-005.html
@@ -5015,7 +5015,7 @@ CVE-2018-7285 (A NULL pointer access issue was discovered in Asterisk 15.x throu
 	- asterisk <not-affected> (Only affects Asterisk 15.x)
 	NOTE: http://downloads.asterisk.org/pub/security/AST-2018-001.html
 CVE-2018-7284 (A Buffer Overflow issue was discovered in Asterisk through 13.19.1, ...)
-	- asterisk <unfixed> (bug #891227)
+	- asterisk 1:13.20.0~dfsg-1 (bug #891227)
 	[jessie] - asterisk <not-affected> (Vulnerable code not present)
 	[wheezy] - asterisk <not-affected> (Vulnerable code not present)
 	NOTE: http://downloads.asterisk.org/pub/security/AST-2018-004.html



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/db6c62be7e0200c2df7103dfe36a20de9a4c022b

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/db6c62be7e0200c2df7103dfe36a20de9a4c022b
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180403/dc0a64a8/attachment.html>


More information about the debian-security-tracker-commits mailing list