-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 22 Apr 2021 19:03:02 +0200 Source: ring Binary: ring ring-daemon Architecture: all Version: 20190215.1.f152c98~ds1-1+deb10u1 Distribution: buster Urgency: high Maintainer: all Build Daemon (x86-grnet-02) Changed-By: Thorsten Alteholz Description: ring - transitional package for jami ring-daemon - transitional package for jami-daemon Closes: 986815 Changes: ring (20190215.1.f152c98~ds1-1+deb10u1) buster; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2021-21375 (Closes: #986815) The embedded copy of pjproject is affected by this CVE. Due to bad handling of two consecutive crafted answers to an INVITE, the attacker is able to crash the server resulting in a denial of service. Checksums-Sha1: 9eb63430c22208258e85427a7b23c676851e374c 9696 ring-daemon_20190215.1.f152c98~ds1-1+deb10u1_all.deb 2c02531cbd7ccc02bb92bd176444323044c05c2a 24476 ring_20190215.1.f152c98~ds1-1+deb10u1_all-buildd.buildinfo 55074503bcd73ae8126597bdf0c8214143619924 9680 ring_20190215.1.f152c98~ds1-1+deb10u1_all.deb Checksums-Sha256: 034cd5df297e139eef73ac5de8580ac747698f0572e96b0816ccfcd98b86d458 9696 ring-daemon_20190215.1.f152c98~ds1-1+deb10u1_all.deb d60f8ae8e7b5ad6e5d20e8f4c623eb2137e2c3531f5be4b8f90bddca962b5774 24476 ring_20190215.1.f152c98~ds1-1+deb10u1_all-buildd.buildinfo 37078a5bcdb00fcb856a9f91077fa8f00b56669ef5aca84cce8203b59fd7fc68 9680 ring_20190215.1.f152c98~ds1-1+deb10u1_all.deb Files: 19cc4f443a3e2fc5a01bf3f58a3e6d6a 9696 oldlibs optional ring-daemon_20190215.1.f152c98~ds1-1+deb10u1_all.deb c7337a176e5f8bfff276cbf1c822fe8f 24476 comm optional ring_20190215.1.f152c98~ds1-1+deb10u1_all-buildd.buildinfo e772fd48a97251d2e7c3ce35ac2f65f7 9680 oldlibs optional ring_20190215.1.f152c98~ds1-1+deb10u1_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEqQcRQHTGP4qt3opGks26TWZ8cfMFAmDsppIACgkQks26TWZ8 cfNViQ//RpybsSci7c0CKm6WRMZeG69wMGSvItwjlXGnnDB/Fjzh0teUrsh0D+m/ ea08/ggqVq4NKw6wvqCQCQLPhlqsnpOVybDgw0v4f+FeEvA2OywgNeAhhvXpQ3uW pU3Bd73VhJLaWU2HKzgOJrtNM+nbr+E/Vdd482MKAGN1tKPXidgmb/jsjIm4Q/0Q Kmvj1e++FLcqxF+jD/3KIgpXPV/92JXHgg7sPcM2EtBfbJMwy3nooswSt/PFsJ/t IHkv5BMlQvOMxsOgBR9tEsKWBcrDtN4MSXj7ouX3JbYLz5GeTJwnpZkOJNXmL18X XSvdUCZclJKW4tn97sCB//mb+tN9Ih7NW1WKkVUYuu+FNnZdtXtNLNKsOt0xNCCu EgkAA1VBtQFPVkUIJXdxk4e2R8Jvb0vb/CIKLotarhGB4hN4dPmKG7a+VynC5xxm kHR2/R1i+RZ5YxkLUBOiLqTUB2oVqX8aWT1G5QT++Lyf1SS0meEDFfd7P7FoHn2P rwAKgrQGAgLgV9qu0e6uHKaALxQ54JIuGCVK4gEmFnumxej5Qw6U6lA7mJDZ/chJ NtKAvPYX4g+Wz7iodUUb7jqg5JhHkMtW+U9B//YYavz/APCiHUR0FiGIZYl3sI0n icVN9RfNy21GlVCzERhK1UBIx/saLMGQR/S53e0dgKtkVMD4ilw= =EwQN -----END PGP SIGNATURE-----