Bug#1134884: asterisk: CVE-2025-65102 CVE-2026-25994 CVE-2026-41415 CVE-2026-40614 CVE-2026-40892 CVE-2026-41416 CVE-2026-26203 CVE-2026-26967 CVE-2026-32942 CVE-2026-28799 CVE-2026-29068 CVE-2026-32945 CVE-2026-33069 CVE-2026-34235

[Jonas Smedegaard]

Quoting Rob van der Putten via Pkg-voip-maintainers (2026-04-26 20:19:25)
> On 25/04/2026 13:04, Moritz Mühlenhoff wrote:
> > Multiple security issues were reported against pjsip and fixed
> > in 2.17. Asterisk bundles 2.16 in unstable:
> 
> Is it possible that these bugs don't effect Asterisk 22.9.0?
> There are a bunch of patches in the Asterisk source pjproject
> directory

Someone needs to ensure that those patches get applied.

Anyone volunteering for that task?

 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/
 * Sponsorship: https://ko-fi.com/drjones

 [x] quote me freely  [ ] ask before reusing  [ ] keep private
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260426/c6374eaf/attachment-0001.sig>