Bug#869404: resiprocate: CVE-2017-11521: Adding too many media connections may lead to memory exhaustion

Petter Reinholdtsen pere at hungry.com
Wed Oct 18 07:19:43 UTC 2017


Control: tags -1 + patch

This issue has caused resiprocate to be thrown out of testing.  This is
unfortunate, as it is used by the FreedomBox, and thus it is no
longer possible to set up a Buster based Freedombox with SIP support.

According to the upstream git repo, the 5 line patch in
<URL: https://github.com/resiprocate/resiprocate/commit/881cb0c80e23193ea2bdaf720de9b3310f52a0a6 >
solve the problem.  Perhaps it should be pulled from upstream
until they find time to make a new release?

-- 
Happy hacking
Petter Reinholdtsen



More information about the Pkg-voip-maintainers mailing list