[Git][security-tracker-team/security-tracker][master] Triage CVE-2021-32686 in asterisk for stretch LTS.

[Chris Lamb (@lamby)]

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7921ee66 by Chris Lamb at 2021-08-13T15:00:55+01:00
Triage CVE-2021-32686 in asterisk for stretch LTS.

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -13614,7 +13614,9 @@ CVE-2021-32687
 	RESERVED
 CVE-2021-32686 (PJSIP is a free and open source multimedia communication library writt ...)
 	- asterisk 1:16.16.1~dfsg-2 (bug #991931)
+	[stretch] - asterisk <not-affected> (Vulnerable code not present)
 	- pjproject <removed>
+	[stretch] - pjproject <no-dsa> (Minor issue)
 	NOTE: https://downloads.asterisk.org/pub/security/AST-2021-009.html
 	NOTE: https://github.com/pjsip/pjproject/security/advisories/GHSA-cv8x-p47p-99wr
 	NOTE: https://github.com/pjsip/pjproject/commit/d5f95aa066f878b0aef6a64e60b61e8626e664cd


=====================================
data/dla-needed.txt
=====================================
@@ -21,9 +21,6 @@ ansible
   NOTE: 20210411: after that LTS. (apo)
   NOTE: 20210426: https://people.debian.org/~apo/lts/ansible/
 --
-asterisk (Chris Lamb)
-  NOTE: 20210807: Double-check it applies; upstream's patch is actually a patch to an embedded code copy. (lamby)
---
 exiv2 (Utkarsh Gupta)
   NOTE: 20210801: check further; some no-dsa issues have piled up, too. (utkarsh)
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7921ee6653f44ba34c04740e330240fc575ccb8f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7921ee6653f44ba34c04740e330240fc575ccb8f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210813/fc068d6a/attachment-0001.htm>