-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 22 Jun 2023 14:47:22 +0200 Source: asterisk Binary: asterisk asterisk-dahdi asterisk-dahdi-dbgsym asterisk-dbgsym asterisk-mobile asterisk-mobile-dbgsym asterisk-modules asterisk-modules-dbgsym asterisk-mp3 asterisk-mp3-dbgsym asterisk-mysql asterisk-mysql-dbgsym asterisk-ooh323 asterisk-ooh323-dbgsym asterisk-tests asterisk-tests-dbgsym asterisk-voicemail asterisk-voicemail-dbgsym asterisk-voicemail-imapstorage asterisk-voicemail-imapstorage-dbgsym asterisk-voicemail-odbcstorage asterisk-voicemail-odbcstorage-dbgsym asterisk-vpb asterisk-vpb-dbgsym Architecture: arm64 Version: 1:16.28.0~dfsg-0+deb11u3 Distribution: bullseye-security Urgency: high Maintainer: arm Build Daemon (arm-arm-04) Changed-By: Markus Koschany Description: asterisk - Open Source Private Branch Exchange (PBX) asterisk-dahdi - DAHDI devices support for the Asterisk PBX asterisk-mobile - Bluetooth phone support for the Asterisk PBX asterisk-modules - loadable modules for the Asterisk PBX asterisk-mp3 - MP3 playback support for the Asterisk PBX asterisk-mysql - MySQL database protocol support for the Asterisk PBX asterisk-ooh323 - H.323 protocol support for the Asterisk PBX - ooH323c asterisk-tests - internal test modules of the Asterisk PBX asterisk-voicemail - simple voicemail support for the Asterisk PBX asterisk-voicemail-imapstorage - IMAP voicemail storage support for the Asterisk PBX asterisk-voicemail-odbcstorage - ODBC voicemail storage support for the Asterisk PBX asterisk-vpb - VoiceTronix devices support for the Asterisk PBX Changes: asterisk (1:16.28.0~dfsg-0+deb11u3) bullseye-security; urgency=high . * Non-maintainer upload. * Fix CVE-2023-27585: A flaw was found in Asterisk, an Open Source Private Branch Exchange. A buffer overflow vulnerability affects users that use PJSIP DNS resolver. This vulnerability is related to CVE-2022-24793. The difference is that this issue is in parsing the query record `parse_query()`, while the issue in CVE-2022-24793 is in `parse_rr()`. A workaround is to disable DNS resolution in PJSIP config (by setting `nameserver_count` to zero) or use an external resolver implementation instead. Checksums-Sha1: 1d072cde7dc55964c15bd8acd525b2c4a31bc402 667568 asterisk-dahdi-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb 8e57d29c5386dd8c2e8e706199b0074506094166 1562512 asterisk-dahdi_16.28.0~dfsg-0+deb11u3_arm64.deb 75b5b73da9911a6f4170ec3ca45b89f1fcfad524 6524204 asterisk-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb 11fa4a1314aead53f56395e3350974e4cbcf69af 88624 asterisk-mobile-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb 5cb00b416a4d2b56dfa5ef54c01ab2810786e0ad 1371448 asterisk-mobile_16.28.0~dfsg-0+deb11u3_arm64.deb 4d13019a0d583f9868ba8b7773dd6a8ac253bffb 10325400 asterisk-modules-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb d7c34d3715b6ff4984756f312ed6f97136fc4af7 3757152 asterisk-modules_16.28.0~dfsg-0+deb11u3_arm64.deb a0ea99ed36dfe620071e17fa5b0e3f958441753c 50720 asterisk-mp3-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb f1939f0584d41ba5672a5e57f2c426caa93fa34f 1358876 asterisk-mp3_16.28.0~dfsg-0+deb11u3_arm64.deb eccb93b5d796280a253f1f5861bf4dd4bbfc703f 135740 asterisk-mysql-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb 1a47f1dbc2e0c9ad4728e333989b23bbe950c8a3 1372136 asterisk-mysql_16.28.0~dfsg-0+deb11u3_arm64.deb 4141181f50c5039b577c9b510fe8c359e114486c 1494272 asterisk-ooh323-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb abb7cdef15b803a9e16d8539ae955f1bcd67f07c 1651892 asterisk-ooh323_16.28.0~dfsg-0+deb11u3_arm64.deb c02687c4083a3349d6626242f015a07e3c531f08 1442408 asterisk-tests-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb af41238751c6bd9596afdf70969daa715294be8b 1762772 asterisk-tests_16.28.0~dfsg-0+deb11u3_arm64.deb b46ccd121e520af7dc5d8aa92e1af666fbb9c2b2 276664 asterisk-voicemail-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb 5142fe34c85649db75d34529a6c7e105f482b2ab 327328 asterisk-voicemail-imapstorage-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb 568e6bbf900639a32e0a8303f03a4ae93f5b9673 1444864 asterisk-voicemail-imapstorage_16.28.0~dfsg-0+deb11u3_arm64.deb ba4bcdcb9542e0ef5d6fb49c15474dabfbc16f5a 290484 asterisk-voicemail-odbcstorage-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb b8ddd84f99c26cef4335c100a8dcbf173bf09316 1433308 asterisk-voicemail-odbcstorage_16.28.0~dfsg-0+deb11u3_arm64.deb d0f6b45cc9e8118a7752b3461ad743580954d864 1428576 asterisk-voicemail_16.28.0~dfsg-0+deb11u3_arm64.deb 979cb13d347c9e995224de3616985f071c09ce0e 71056 asterisk-vpb-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb 36269bc8719ead5aaba1e0edaa881137b3534106 1361272 asterisk-vpb_16.28.0~dfsg-0+deb11u3_arm64.deb 79d03990c1ff9ac451d6a3ab285a406dc4f81f33 27596 asterisk_16.28.0~dfsg-0+deb11u3_arm64-buildd.buildinfo 14e2f92facc19461ea78e0b0aa285b329ba64b36 2256460 asterisk_16.28.0~dfsg-0+deb11u3_arm64.deb Checksums-Sha256: 4f406fe57dc2228548e9cedf96c44cfe49388ab4145cec452178437a7d43e5f1 667568 asterisk-dahdi-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb 72819dfec43201c4d8934045b57053ac9befdce8a3c54c035ce62c85dc6b9413 1562512 asterisk-dahdi_16.28.0~dfsg-0+deb11u3_arm64.deb 28289db2a1d972510ea9255df3e09f8834f5acd5ed287504c289d384fda6d896 6524204 asterisk-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb c25174d139d9963ca4e1ae522f55c69f87295301a0c1f2b11f5005f45a7649a2 88624 asterisk-mobile-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb ed7b160c75b9233a0ff3dabd470a9ada5033e0905dc7e612e62c81ec11c035d6 1371448 asterisk-mobile_16.28.0~dfsg-0+deb11u3_arm64.deb 733c88e9bd82d020b0ee3c81a66959596e5f25752db1e239e99198e09923965d 10325400 asterisk-modules-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb bef6fa9feeed8084866c4be6357aab6f2f924d301f9baece5f41e6dc28265a2c 3757152 asterisk-modules_16.28.0~dfsg-0+deb11u3_arm64.deb 61651c6d91e761665c8cce5171896cf709d2dff024883571ddb72ca2524d6f0d 50720 asterisk-mp3-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb 21f733d8fae36a0940e9efcf5a914dfff1068d2202207ca751f6a517ec70d559 1358876 asterisk-mp3_16.28.0~dfsg-0+deb11u3_arm64.deb 788a5ee47ea52db9c39dbafd2d599c0d1963a880326edeeb0bc0bb5d675c7217 135740 asterisk-mysql-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb f7159ff024fe5f9ef95a7bab41ad272fe2fffe09ccdcdb2e926b5cb2e61881a5 1372136 asterisk-mysql_16.28.0~dfsg-0+deb11u3_arm64.deb 5f221184044ba85e59428702d6b691313a268495c4689d8296f6937d0656ded1 1494272 asterisk-ooh323-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb 9c65970669edea98946b90f78c1fc6171ae67507fbd0d8e7b4f67dcfc7cb9c2b 1651892 asterisk-ooh323_16.28.0~dfsg-0+deb11u3_arm64.deb 44d9dd574520cfeaafacf80fc4397fd95f6df2f06b935161a4ad766ab9801d93 1442408 asterisk-tests-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb 19fba4d41efbbba526e5c0e181d0fb7fa7d9d9bbca0a22bff8cad34b2ece7a59 1762772 asterisk-tests_16.28.0~dfsg-0+deb11u3_arm64.deb 9fda01d772a2f7326dad456927a1ac24e70332b79d9e9ed15410d476a4d5c7b2 276664 asterisk-voicemail-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb 8c54ad45f4f88ac0257f2321f42fa034aa37a22a2f5ef754502ebcfc40f62e3f 327328 asterisk-voicemail-imapstorage-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb 1f295a31e69729cd5f6b4b3a85551a2c0cc6d3070e5839896268288d6c837bd3 1444864 asterisk-voicemail-imapstorage_16.28.0~dfsg-0+deb11u3_arm64.deb 0a6686ecee3d96ea3ee8a5940152d54a9bcc83e8d76a718518cbc13ba6572278 290484 asterisk-voicemail-odbcstorage-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb c04520694167e7c9b37e2861c9135475cb445cdc946a92ca86338d00e899f333 1433308 asterisk-voicemail-odbcstorage_16.28.0~dfsg-0+deb11u3_arm64.deb b0f4b0ce2098db031f755e7580b0c4673b40376b5cb9649ec75cd5a131558527 1428576 asterisk-voicemail_16.28.0~dfsg-0+deb11u3_arm64.deb eaed0db5ee10ffaea1d574e18bd0136d015697cc4930c4d97426302343aa38e8 71056 asterisk-vpb-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb 31050ed37bb234d5bce891cde3c45e9108a88ac20b442df81eb1b79d586f35a1 1361272 asterisk-vpb_16.28.0~dfsg-0+deb11u3_arm64.deb d1d7e4fad9972c21e63867a5f1d7ec517d59acbaf037e0c7d46e15fd7d19621f 27596 asterisk_16.28.0~dfsg-0+deb11u3_arm64-buildd.buildinfo 62d0fed16f290f86bba82c37c01226b4499e934f01274624bc8d739457c20868 2256460 asterisk_16.28.0~dfsg-0+deb11u3_arm64.deb Files: aa7cb512fe69d1413e72cdfdb9b70d6d 667568 debug optional asterisk-dahdi-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb ff68a21fa9c73bf47f805bd0aba96c89 1562512 comm optional asterisk-dahdi_16.28.0~dfsg-0+deb11u3_arm64.deb 02be3cf52758eda8506dd3ea77559592 6524204 debug optional asterisk-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb f7643aef3eac337602bade834c183819 88624 debug optional asterisk-mobile-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb 9d39cc09e0b1447cf48d21dc875452b8 1371448 comm optional asterisk-mobile_16.28.0~dfsg-0+deb11u3_arm64.deb 85c1d35b82e93cb4f6a8f4a8b637a6de 10325400 debug optional asterisk-modules-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb 15b251059437802167b67148ea47e726 3757152 libs optional asterisk-modules_16.28.0~dfsg-0+deb11u3_arm64.deb 7804b26fe8f136b6b0acbd4e2ab22304 50720 debug optional asterisk-mp3-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb 2e03879bd51ff1d976e3df9f9370f9f3 1358876 comm optional asterisk-mp3_16.28.0~dfsg-0+deb11u3_arm64.deb 13846edbee004a491c9c6687f6113109 135740 debug optional asterisk-mysql-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb 717b06beafff179754ea617161af65bd 1372136 comm optional asterisk-mysql_16.28.0~dfsg-0+deb11u3_arm64.deb 893f073ddfda5f7b8cb5e83a01b562b2 1494272 debug optional asterisk-ooh323-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb b2b85d4cbd7c441e75d53301e01d5599 1651892 comm optional asterisk-ooh323_16.28.0~dfsg-0+deb11u3_arm64.deb b28d08cde24ad66b859e7a5b2032c94a 1442408 debug optional asterisk-tests-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb 2ffe6f9d0dc74b88070c81bfb843b284 1762772 comm optional asterisk-tests_16.28.0~dfsg-0+deb11u3_arm64.deb c4807f276d83d5b4127cdd7291aeb87a 276664 debug optional asterisk-voicemail-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb f5e395783cf928447e2bb746d0181ff4 327328 debug optional asterisk-voicemail-imapstorage-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb b33d63df107af879fb5cede07a32a983 1444864 comm optional asterisk-voicemail-imapstorage_16.28.0~dfsg-0+deb11u3_arm64.deb 0d41af0c89e2a3e9bc72cce9a1a5bb48 290484 debug optional asterisk-voicemail-odbcstorage-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb 45cabd69f005a82cdf69ee9a9d222ffa 1433308 comm optional asterisk-voicemail-odbcstorage_16.28.0~dfsg-0+deb11u3_arm64.deb 9eea47d5faefe08b70d8f8ba95e6ffa1 1428576 comm optional asterisk-voicemail_16.28.0~dfsg-0+deb11u3_arm64.deb 7c8dd078716dd1f6ad9163201eb6df9d 71056 debug optional asterisk-vpb-dbgsym_16.28.0~dfsg-0+deb11u3_arm64.deb 03b336c990c0655635aeead8b7a9f715 1361272 comm optional asterisk-vpb_16.28.0~dfsg-0+deb11u3_arm64.deb cb8aad2cfb9d77a2b2fe837fbe6c1c21 27596 comm optional asterisk_16.28.0~dfsg-0+deb11u3_arm64-buildd.buildinfo 1b683506ed7dc63f31cf06fa7d330284 2256460 comm optional asterisk_16.28.0~dfsg-0+deb11u3_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEmUDOxnfDwdc47jJKqoc2e3yvTA0FAmSUUqgACgkQqoc2e3yv TA2zjRAArCfp9xfGs0BZvo8lnloLeN5Ap5LE+KPhO19CoWFUYk57KL4sb8Wp7yhM tf9vpNSXb3Z/GGrGRowVXjUJ/L8WgUYkIa4NNVf6CVjGpRYJKER0FRKgUkDgl/LS l/5RSNyLayF9RNO+13nIoIbHn6KTVxysafi/96EwLwPjC7b2O+uWE2sZOnWoTUcd 7yvZ+2oqUNGOGql9qJSW/Zo1YNwexXcs5NGgLJHRvIUnbc7GILXw3sW6p219GH2r fnIq+Z3o6Xu7Xj4mQWdDrAfwx58nG89cvPRGSVmq+KKD5h1VMme5kpS6+hVyc/ny c/YQffIl1JgLuX1dlJ8SE2u2s7a4eQ99cN7xzw5G7DouFnVcHgXwvKDfuKvMI5rK KuAfS6XbjrtXPxRZ2bgInxjgRVB8d1olYUKLI0d6oLw6WBZrI7b1dVWepFr+uIQV Tblx9jslvHcKLH2byevOsKh2lbrB5xT+G+/aAlclM9EDHXkzlsKkJYksmhnkvTjc V0KLukncFn25cxZWuF+TLuVn5IrUy0GCMpW8esnyQc3MiJaGWSDMT7GHeNdBHTrN l2nVnV642M/7pMPo577E3MivyI2jr0LswPl2ZtnKWtKfIfpno4msJzQL4wrj3y4W zttQMhyCtE6or9/Sade2lAVIralNQW5DaNj3ATf0FXpsK7yKbWc= =N87q -----END PGP SIGNATURE-----