[Git][security-tracker-team/security-tracker][master] CVE-2022-24793 and CVE-2022-24792 for asterisk, CVE-2022-24793 for ring

[Neil Williams (@codehelp)]

Neil Williams pushed to branch master at Debian Security Tracker / security-tracker


Commits:
417f97fc by Neil Williams at 2022-04-26T10:02:49+01:00
CVE-2022-24793 and CVE-2022-24792 for asterisk, CVE-2022-24793 for ring

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -13698,15 +13698,18 @@ CVE-2022-24795 (yajl-ruby is a C binding to the YAJL JSON parsing and generation
 CVE-2022-24794 (Express OpenID Connect is an Express JS middleware implementing sign o ...)
 	NOT-FOR-US: Express OpenID Connect
 CVE-2022-24793 (PJSIP is a free and open source multimedia communication library writt ...)
+	- asterisk <unfixed>
 	- pjproject <removed>
+	- ring <unfixed>
 	NOTE: https://github.com/pjsip/pjproject/security/advisories/GHSA-p6g5-v97c-w5q4
 	NOTE: https://github.com/pjsip/pjproject/commit/9fae8f43accef8ea65d4a8ae9cdf297c46cfe29a
-	TODO: check, might impact src:asterisk and src:ring
 CVE-2022-24792 (PJSIP is a free and open source multimedia communication library writt ...)
+	- asterisk <unfixed>
 	- pjproject <removed>
+	- ring <not-affected> (Vulnerable code not accessed)
 	NOTE: https://github.com/pjsip/pjproject/security/advisories/GHSA-rwgw-vwxg-q799
 	NOTE: https://github.com/pjsip/pjproject/commit/947bc1ee6d05be10204b918df75a503415fd3213
-	TODO: check, might impact src:asterisk and src:ring
+	NOTE: should only affect 32bit builds.
 CVE-2022-24791 (Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cran ...)
 	NOT-FOR-US: wasmtime
 CVE-2022-24790 (Puma is a simple, fast, multi-threaded, parallel HTTP 1.1 server for R ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/417f97fc946e1584ac41e1430b3634c6f87bcf52

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/417f97fc946e1584ac41e1430b3634c6f87bcf52
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220426/934deb60/attachment.htm>