Bug#415466: asterisk: SIP INVITE DoS

Steve Langasek vorlon at debian.org
Tue Mar 20 23:39:03 UTC 2007


Hi Mark,

On Mon, Mar 19, 2007 at 09:55:22PM +0000, Mark Purcell wrote:

> Would you like the pkg-voip team to upload asterisk 1.2.13 with the DoS
> patch to 1.2.17 backported to etch?

Could you coordinate this with the security team?  AFAICS this bug is not
'grave' by the security team's own standards, so the release team isn't
going to make exceptions for its handling in etch -- but the security team
can release an update via security.d.o for inclusion in a future point
release (or even in r0 if the security team oks it).

Thanks,
-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
vorlon at debian.org                                   http://www.debian.org/




More information about the Pkg-voip-maintainers mailing list