pjproject_2.5.5~dfsg-6+deb9u1_source.changes ACCEPTED into proposed-updates->stable-new

[Debian FTP Masters]

Mapping stable-security to proposed-updates.

Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 03 Apr 2018 10:02:31 +0200
Source: pjproject
Binary: libpjlib-util2 libpjmedia-audiodev2 libpjmedia-codec2 libpjmedia-videodev2 libpjmedia2 libpjnath2 libpjsip-simple2 libpjsip-ua2 libpjsip2 libpjsua2 libpjsua2-2v5 libpj2 libpjproject-dev python-pjproject
Architecture: source
Version: 2.5.5~dfsg-6+deb9u1
Distribution: stretch-security
Urgency: high
Maintainer: Debian VoIP Team <pkg-voip-maintainers at lists.alioth.debian.org>
Changed-By: Bernhard Schmidt <berni at debian.org>
Description:
 libpj2     - PJ Project - PJProject core libraries
 libpjlib-util2 - PJ Project - helper utilities
 libpjmedia-audiodev2 - PJ Project - Audio devices
 libpjmedia-codec2 - PJ Project - Multimedia codecs handling
 libpjmedia-videodev2 - SIP handling library - video devices
 libpjmedia2 - PJ Project - VoIP media
 libpjnath2 - PJ Project - NAT handling
 libpjproject-dev - PJ Project - development headers
 libpjsip-simple2 - PJ Project - SIP SIMPLE instant messaging
 libpjsip-ua2 - SIP handling library - SIP user agent library
 libpjsip2  - PJ Project - SIP handling library
 libpjsua2  - PJ Project - Basic VoIP client library
 libpjsua2-2v5 - PJ Project - Basic VoIP client library
 python-pjproject - PJ Project - Python bindings
Closes: 881362
Changes:
 pjproject (2.5.5~dfsg-6+deb9u1) stretch-security; urgency=high
 .
   [ Bernhard Schmidt ]
   * Fix various security issues
     - CVE-2017-16872: Overflow when parsing numeric fileds in SIP messages
     - CVE-2017-16875: Double key unregistration in ioqueue component
     - CVE-2018-1000098: Integer overflow in SDP parsing
       (also reported by the Asterisk project as AST-2018-002)
     - CVE-2018-1000099: Null Pointer vulnerability in pjmedia SDP parsing
       (also reported by the Asterisk project as AST-2018-003)
   * Fix resolution of DNS SRV targets that do not have an AAAA record
     (Closes: #881362)
Checksums-Sha1:
 687cb848cf173982000af75b631f6afd9195b403 3334 pjproject_2.5.5~dfsg-6+deb9u1.dsc
 d130318466a02e5734b069ed0e343a5d78c06a5c 3506099 pjproject_2.5.5~dfsg.orig.tar.bz2
 da937d31afcee01677e25c98325cb57dfa81a73a 51216 pjproject_2.5.5~dfsg-6+deb9u1.debian.tar.xz
 a5e82a2faf4626ebe4c778c372d035f0576f6698 6092 pjproject_2.5.5~dfsg-6+deb9u1_source.buildinfo
Checksums-Sha256:
 266b57626d36d1d4d950d8f10783c235fcc48fbd45377f5c5b8aa005dd544d45 3334 pjproject_2.5.5~dfsg-6+deb9u1.dsc
 09457ad674083211ae3b6c7e8e44b8ef33b454dc85dbf5674d06e49dc1ea9437 3506099 pjproject_2.5.5~dfsg.orig.tar.bz2
 e427789462e5b50db3b1afd433d69caa61fcf4bf85101434af65981cefd09356 51216 pjproject_2.5.5~dfsg-6+deb9u1.debian.tar.xz
 b9f829f904b3278533a381acd84080dc315ac7d10f8f482b07b6ac0dcc9875cb 6092 pjproject_2.5.5~dfsg-6+deb9u1_source.buildinfo
Files:
 80f1f2131d0e97d5541257341cd96497 3334 comm optional pjproject_2.5.5~dfsg-6+deb9u1.dsc
 7186301d3987908b8b8cc5e84da48153 3506099 comm optional pjproject_2.5.5~dfsg.orig.tar.bz2
 25bc2f90d40d26ceefc5d2b3640e3b9a 51216 comm optional pjproject_2.5.5~dfsg-6+deb9u1.debian.tar.xz
 479e43af1d5abaf3a8395507b550d3e6 6092 comm optional pjproject_2.5.5~dfsg-6+deb9u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=M3AV
-----END PGP SIGNATURE-----


Thank you for your contribution to Debian.