[Git][security-tracker-team/security-tracker][master] Add new asterisk issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2a7b60aa by Salvatore Bonaccorso at 2026-10-28T09:54:03+01:00
Add new asterisk issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -42,21 +42,37 @@ CVE-2026-58255 (Cronicle is a multi-server task scheduler and runner, with a web
 CVE-2026-58205 (GRR is a resource management and reservation application. Prior to ver ...)
 	TODO: check
 CVE-2026-57203 (Asterisk is an open source private branch exchange and telephony toolk ...)
-	TODO: check
+	- asterisk 1:22.10.1+dfsg+~cs6.17.60671434-1
+	NOTE: https://github.com/asterisk/asterisk/security/advisories/GHSA-xgj6-2gc5-5x9c
+	NOTE: Fixed by: https://github.com/asterisk/asterisk/commit/bd63fe121d0e86867863bd98b5771e592273b035 (22.10.1)
 CVE-2026-57200 (Asterisk is an open source private branch exchange and telephony toolk ...)
-	TODO: check
+	- asterisk 1:22.10.1+dfsg+~cs6.17.60671434-1
+	NOTE: https://github.com/asterisk/asterisk/security/advisories/GHSA-wcvv-g26m-wx5c
+	NOTE: Fixed by: https://github.com/asterisk/asterisk/commit/87641e9b2cd62c998c5283400ba77b61b5b07dd4 (22.10.1)
 CVE-2026-57199 (Asterisk is an open source private branch exchange and telephony toolk ...)
-	TODO: check
+	- asterisk 1:22.10.1+dfsg+~cs6.17.60671434-1
+	NOTE: https://github.com/asterisk/asterisk/security/advisories/GHSA-q9fr-m7g8-6ph5
+	NOTE: Fixed by: https://github.com/asterisk/asterisk/commit/7048a3841df99e090b9d87246600373581629c98 (22.10.1)
 CVE-2026-57195 (Asterisk is an open source private branch exchange and telephony toolk ...)
-	TODO: check
+	- asterisk 1:22.10.1+dfsg+~cs6.17.60671434-1
+	NOTE: https://github.com/asterisk/asterisk/security/advisories/GHSA-3rhj-hhw7-m6fw
+	NOTE: Fixed by: https://github.com/asterisk/asterisk/commit/fff89162cdd702e8a143701f138edd8dceab154f (22.10.1)
 CVE-2026-57192 (Asterisk is an open source private branch exchange and telephony toolk ...)
-	TODO: check
+	- asterisk 1:22.10.1+dfsg+~cs6.17.60671434-1
+	NOTE: https://github.com/asterisk/asterisk/security/advisories/GHSA-qf8j-jp7h-c5hx
+	NOTE: Fixed by: https://github.com/asterisk/asterisk/commit/a2f1cc611f7d0f21faa03e8535009df3041c434c (22.10.1)
 CVE-2026-57191 (Asterisk is an open source private branch exchange and telephony toolk ...)
-	TODO: check
+	- asterisk 1:22.10.1+dfsg+~cs6.17.60671434-1
+	NOTE: https://github.com/asterisk/asterisk/security/advisories/GHSA-589g-qgf8-m6mx
+	NOTE: Fixed by: https://github.com/asterisk/asterisk/commit/b5281828dad7d44658439ba6393fe6be3328a4bd (22.10.1)
 CVE-2026-57190 (Asterisk is an open source private branch exchange and telephony toolk ...)
-	TODO: check
+	- asterisk 1:22.10.1+dfsg+~cs6.17.60671434-1
+	NOTE: https://github.com/asterisk/asterisk/security/advisories/GHSA-ph27-3m5q-mj5m
+	NOTE: Fixed by: https://github.com/asterisk/asterisk/commit/8bf7746d01221d6d2bcfcd46ba7a1cff066a1a8b (22.10.1)
 CVE-2026-57186 (Asterisk is an open source private branch exchange and telephony toolk ...)
-	TODO: check
+	- asterisk 1:22.10.1+dfsg+~cs6.17.60671434-1
+	NOTE: https://github.com/asterisk/asterisk/security/advisories/GHSA-h5hv-jmgj-92q2
+	NOTE: Fixed by: https://github.com/asterisk/asterisk/commit/0e776a837106d5d0d14503a53388337931045164 (22.10.1)
 CVE-2026-50571 (WebSub is a W3C recommendation produced by the Social Web Working Grou ...)
 	TODO: check
 CVE-2026-39928



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2a7b60aa9dbb40ad06eb6be7022ca1be757692fe

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2a7b60aa9dbb40ad06eb6be7022ca1be757692fe
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261028/b674c234/attachment.htm>