[Git][security-tracker-team/security-tracker][master] Process new asterisk issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1013e981 by Salvatore Bonaccorso at 2026-10-27T21:15:49+01:00
Process new asterisk issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -160,17 +160,29 @@ CVE-2026-57201 (Asterisk is an open source private branch exchange and telephony
 	NOTE: https://github.com/asterisk/asterisk/security/advisories/GHSA-x348-j6c9-77f3
 	NOTE: Fixed by: https://github.com/asterisk/asterisk/commit/875ac7413de0b7068cd12d0da2f140cd06ba9357 (22.10.1)
 CVE-2026-57198 (Asterisk is an open source private branch exchange and telephony toolk ...)
-	TODO: check
+	- asterisk 1:22.10.1+dfsg+~cs6.17.60671434-1
+	NOTE: https://github.com/asterisk/asterisk/security/advisories/GHSA-vfhr-r9x9-c687
+	NOTE: Fixed by: https://github.com/asterisk/asterisk/commit/eef894282be203cb9e6d8e9692e9c360a0b569b4 (22.10.1)
 CVE-2026-57197 (Asterisk is an open source private branch exchange and telephony toolk ...)
-	TODO: check
+	- asterisk 1:22.10.1+dfsg+~cs6.17.60671434-1
+	NOTE: https://github.com/asterisk/asterisk/security/advisories/GHSA-8jhw-m2hg-vp3h
+	NOTE: Fixed by: https://github.com/asterisk/asterisk/commit/0a2c1d9e910f7c4dfffa05e328accb8a96990df8 (22.10.1)
 CVE-2026-57194 (Asterisk is an open source private branch exchange and telephony toolk ...)
-	TODO: check
+	- asterisk 1:22.10.1+dfsg+~cs6.17.60671434-1
+	NOTE: https://github.com/asterisk/asterisk/security/advisories/GHSA-3g56-cgrh-95p5
+	NOTE: Fixed by: https://github.com/asterisk/asterisk/commit/6da8e10c210d8e014c27c67235252e1dfc794446 (22.10.1)
 CVE-2026-57189 (Asterisk is an open source private branch exchange and telephony toolk ...)
-	TODO: check
+	- asterisk 1:22.10.1+dfsg+~cs6.17.60671434-1
+	NOTE: https://github.com/asterisk/asterisk/security/advisories/GHSA-j2mm-57pq-jh94
+	NOTE: Fixed by: https://github.com/asterisk/asterisk/commit/eef894282be203cb9e6d8e9692e9c360a0b569b4 (22.10.1)
 CVE-2026-57188 (Asterisk is an open source private branch exchange and telephony toolk ...)
-	TODO: check
+	- asterisk 1:22.10.1+dfsg+~cs6.17.60671434-1
+	NOTE: https://github.com/asterisk/asterisk/security/advisories/GHSA-mxgm-8c6f-5p8f
+	NOTE: Fixed by: https://github.com/asterisk/asterisk/commit/d570a85e45153a36919ace5d0ab06a195b30f9d1 (22.10.1)
 CVE-2026-57185 (Asterisk is an open source private branch exchange and telephony toolk ...)
-	TODO: check
+	- asterisk 1:22.10.1+dfsg+~cs6.17.60671434-1
+	NOTE: https://github.com/asterisk/asterisk/security/advisories/GHSA-8jw3-ccr9-xrmf
+	NOTE: Fixed by: https://github.com/asterisk/asterisk/commit/3100a0d331affbf0995b8c57aaddb31cf3971f6e (22.10.1)
 CVE-2026-56084 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
 	NOT-FOR-US: Dell / EMC
 CVE-2026-54462 (Knative pkg provides common packages shared across Knative repositorie ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1013e981291411acdd245290955e9487b1d838ba

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1013e981291411acdd245290955e9487b1d838ba
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261027/87e2fc41/attachment.htm>