[Git][security-tracker-team/security-tracker][master] Add CVE-2026-29068/pjproject

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
98d3595c by Salvatore Bonaccorso at 2026-03-06T21:58:16+01:00
Add CVE-2026-29068/pjproject

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -281,7 +281,9 @@ CVE-2026-29074 (SVGO, short for SVG Optimizer, is a Node.js library and command-
 CVE-2026-29073 (SiYuan is a personal knowledge management system. Prior to version 3.6 ...)
 	NOT-FOR-US: SiYuan
 CVE-2026-29068 (PJSIP is a free and open source multimedia communication library writt ...)
-	TODO: check
+	- pjproject <removed>
+	NOTE: https://github.com/pjsip/pjproject/security/advisories/GHSA-pqww-jrxr-457f
+	NOTE: https://github.com/pjsip/pjproject/commit/6c9024511bf5307ff72efde1f90c9a2a226d8967
 CVE-2026-29065 (changedetection.io is a free open source web page change detection too ...)
 	NOT-FOR-US: changedetection.io
 CVE-2026-29062 (jackson-core contains core low-level incremental ("streaming") parser  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/98d3595caf550b8792475262d04749297dc7755b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/98d3595caf550b8792475262d04749297dc7755b
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260306/d90c037c/attachment.htm>