-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 22 Jun 2023 14:47:22 +0200 Source: asterisk Binary: asterisk asterisk-dahdi asterisk-dahdi-dbgsym asterisk-dbgsym asterisk-mobile asterisk-mobile-dbgsym asterisk-modules asterisk-modules-dbgsym asterisk-mp3 asterisk-mp3-dbgsym asterisk-mysql asterisk-mysql-dbgsym asterisk-ooh323 asterisk-ooh323-dbgsym asterisk-tests asterisk-tests-dbgsym asterisk-voicemail asterisk-voicemail-dbgsym asterisk-voicemail-imapstorage asterisk-voicemail-imapstorage-dbgsym asterisk-voicemail-odbcstorage asterisk-voicemail-odbcstorage-dbgsym asterisk-vpb asterisk-vpb-dbgsym Architecture: armel Version: 1:16.28.0~dfsg-0+deb11u3 Distribution: bullseye-security Urgency: high Maintainer: arm Build Daemon (arm-arm-04) Changed-By: Markus Koschany Description: asterisk - Open Source Private Branch Exchange (PBX) asterisk-dahdi - DAHDI devices support for the Asterisk PBX asterisk-mobile - Bluetooth phone support for the Asterisk PBX asterisk-modules - loadable modules for the Asterisk PBX asterisk-mp3 - MP3 playback support for the Asterisk PBX asterisk-mysql - MySQL database protocol support for the Asterisk PBX asterisk-ooh323 - H.323 protocol support for the Asterisk PBX - ooH323c asterisk-tests - internal test modules of the Asterisk PBX asterisk-voicemail - simple voicemail support for the Asterisk PBX asterisk-voicemail-imapstorage - IMAP voicemail storage support for the Asterisk PBX asterisk-voicemail-odbcstorage - ODBC voicemail storage support for the Asterisk PBX asterisk-vpb - VoiceTronix devices support for the Asterisk PBX Changes: asterisk (1:16.28.0~dfsg-0+deb11u3) bullseye-security; urgency=high . * Non-maintainer upload. * Fix CVE-2023-27585: A flaw was found in Asterisk, an Open Source Private Branch Exchange. A buffer overflow vulnerability affects users that use PJSIP DNS resolver. This vulnerability is related to CVE-2022-24793. The difference is that this issue is in parsing the query record `parse_query()`, while the issue in CVE-2022-24793 is in `parse_rr()`. A workaround is to disable DNS resolution in PJSIP config (by setting `nameserver_count` to zero) or use an external resolver implementation instead. Checksums-Sha1: 4c2269280be09a430b9d166e00fa8c42d423a673 634368 asterisk-dahdi-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb 6b055bd9f51f854fe50f189621421aeb1907987b 1572024 asterisk-dahdi_16.28.0~dfsg-0+deb11u3_armel.deb 615e473afb5c34188f41882eaaed54c1ad615b0c 6291596 asterisk-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb aac4a23516fc0a35f3c7b3247c2258757a004c37 84292 asterisk-mobile-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb f55a8a8f57ee008a5f891ccf81b6975aef9ae041 1373964 asterisk-mobile_16.28.0~dfsg-0+deb11u3_armel.deb 87f88d4c46f7783c4856934faafb6573934644b6 10010940 asterisk-modules-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb bb2255d8a385d2594e4748b7ed7e7ad429828330 3768700 asterisk-modules_16.28.0~dfsg-0+deb11u3_armel.deb dc905870d41a8addc12ae363067b870624b1036f 52604 asterisk-mp3-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb 805f2a479f50312e66b09e81ac37c64aed1da938 1361688 asterisk-mp3_16.28.0~dfsg-0+deb11u3_armel.deb ac4e14aee0b27ab327e65849133d9022ec706d0e 131600 asterisk-mysql-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb 374b390904f22a141b9dd553977bf919fb49f67b 1374904 asterisk-mysql_16.28.0~dfsg-0+deb11u3_armel.deb d69567f6fcf9663dd240a78cd0bb0af65745831c 1441116 asterisk-ooh323-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb 0ce8b66d686f732e22994c92f12c10f84dfe5290 1619800 asterisk-ooh323_16.28.0~dfsg-0+deb11u3_armel.deb 29b98aa059f9f8f0fd7b8242b1fb127a8005aeee 1399660 asterisk-tests-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb 66834d469a24bb54ce2ff619bf0274216dc7336b 1795392 asterisk-tests_16.28.0~dfsg-0+deb11u3_armel.deb c36ef07237f4df04d8215d2f8498c8c513a4d322 266212 asterisk-voicemail-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb 1312604928dbd112cfb09c5a6a69dd7093b2964f 313816 asterisk-voicemail-imapstorage-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb 4ceb363a044af239ab827b9015e5aac6ad0df42a 1454396 asterisk-voicemail-imapstorage_16.28.0~dfsg-0+deb11u3_armel.deb 26b9996badcfad2892a9667965d3988d88f45f1d 279536 asterisk-voicemail-odbcstorage-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb 500743a934c39beff6fbdfbec2b0286ebbdfc80e 1441148 asterisk-voicemail-odbcstorage_16.28.0~dfsg-0+deb11u3_armel.deb 118cc39fbbb67a908523a9738d23b1c407c01d4a 1435748 asterisk-voicemail_16.28.0~dfsg-0+deb11u3_armel.deb 8b7fff18b70a8665bff5b909f4304efec8e3a5bf 68876 asterisk-vpb-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb 58517f5dfef7e108e177f719de6ea4d347804ff0 1362316 asterisk-vpb_16.28.0~dfsg-0+deb11u3_armel.deb 58ac79a63f8f9631ccc8256a28c2ef777e524830 27498 asterisk_16.28.0~dfsg-0+deb11u3_armel-buildd.buildinfo 453e862449dce7b70d5fcdde4ae4eb7bab407d03 2185560 asterisk_16.28.0~dfsg-0+deb11u3_armel.deb Checksums-Sha256: 5e8711cbf2a0f41f6a56aa7c07197236e11f181361bbe7c6e0de0d27542484d9 634368 asterisk-dahdi-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb d92cc5ac1e13c6c009330f91e9959ae52a0c69eaf79a228182c0fce7f8bab564 1572024 asterisk-dahdi_16.28.0~dfsg-0+deb11u3_armel.deb 0dc988f7695c73ecd88ba09ad7219317f3702afbd20a0ad9981590198060002d 6291596 asterisk-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb 4e16d1bade0b8d66800a02d5d5b54e87a616c0fd822dc4a3d09fef703be71fba 84292 asterisk-mobile-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb 54eae9f84079aa92856f7a6df375a505f0bdeaf7efb23fbdba072ec8d17e11b3 1373964 asterisk-mobile_16.28.0~dfsg-0+deb11u3_armel.deb 34a64bdb34b7be21aa1aa25336481023536845bc9b1ca2360bf574b625965a47 10010940 asterisk-modules-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb 3cd37405610582719d97dd9ab3abc8dd5c880e6aa731047aaaedd9743ed690a0 3768700 asterisk-modules_16.28.0~dfsg-0+deb11u3_armel.deb 60d3e240991c05a8201e4f269f43bac83e79c5a389da2b76e1fd2e6d5bd9aa74 52604 asterisk-mp3-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb 23c6e4ae19a078a21a23aefe6f8a2c337e507f1ce5490d18ec86547b80c25d9d 1361688 asterisk-mp3_16.28.0~dfsg-0+deb11u3_armel.deb 2a591d2fda4456f2035c435470f7f25e5b14be6c8c1aa7ae0c312ac6198c30e5 131600 asterisk-mysql-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb 7bdfc5d1150612dae57a1c9d22e7a2337f59c76db3ae523e11b7ebdc20af7e8f 1374904 asterisk-mysql_16.28.0~dfsg-0+deb11u3_armel.deb 5e8cacb11a07d4318d856f19dc14c00f7553b574817fdb24e18b224e4dbfbe4c 1441116 asterisk-ooh323-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb 67ff8810b57b84f7410935f40f1c95e5075d725182e727e3b6766e78398d5ec3 1619800 asterisk-ooh323_16.28.0~dfsg-0+deb11u3_armel.deb db2370e0875c9b867c1aca0edecac6cd0c086abf0b2d30dd952cb25bf27f59d9 1399660 asterisk-tests-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb 3c04b0bd5cbe98fa5cf8d32339cb76a4b4c2e17f3c908d091042de3b827a30f7 1795392 asterisk-tests_16.28.0~dfsg-0+deb11u3_armel.deb fa29966fdfc106dfa39140d767c4893a436d95d947497a35ca0b974621c70a59 266212 asterisk-voicemail-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb ec15a2b3b51a4b061256285a7d8e04a1e5f905206f8e0bd872aa4072e98a3349 313816 asterisk-voicemail-imapstorage-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb 1d2136750e9757be23e6c74713d209bafcb61d029d6177fbf7057a358cc5b2af 1454396 asterisk-voicemail-imapstorage_16.28.0~dfsg-0+deb11u3_armel.deb a7b373b43f815d05d8319a502a4b6d27ba7200db48d0fdb5e4b9f65442d27e6d 279536 asterisk-voicemail-odbcstorage-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb 876e1bb756f8915f511286866bd77b0b0d4c2d48827aafc3cb2cf787d69fa80b 1441148 asterisk-voicemail-odbcstorage_16.28.0~dfsg-0+deb11u3_armel.deb 7fc3d03e7b2e9e1e25a06cd25f24edf232629ae1e08a5e51f014c5761303dc5b 1435748 asterisk-voicemail_16.28.0~dfsg-0+deb11u3_armel.deb 0bb538b2325e3a5871b1bb598d320a2fca652db6415438e51f178d7183db4152 68876 asterisk-vpb-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb ca5f748fcbb8292be32cff690681e0b2c8be1242e90bcb2a11f4fec2938eb662 1362316 asterisk-vpb_16.28.0~dfsg-0+deb11u3_armel.deb 0d21cc42882a5f667ef70cc812865fe20b00cccdebac96eb12eea1964daa0e61 27498 asterisk_16.28.0~dfsg-0+deb11u3_armel-buildd.buildinfo 613306fcba1e5bf9635805e29ce36059ecd17942b592c6fe4574461eb55f229c 2185560 asterisk_16.28.0~dfsg-0+deb11u3_armel.deb Files: 2d8ecf2e4f023f461db724c5dc552c3c 634368 debug optional asterisk-dahdi-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb 9a487ffed11fa2e9a38dd28df5c415ee 1572024 comm optional asterisk-dahdi_16.28.0~dfsg-0+deb11u3_armel.deb 350768d53209bd2fd1cee2dcabacae33 6291596 debug optional asterisk-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb 752d91a61a1be17601515eaeb1a7ec6e 84292 debug optional asterisk-mobile-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb c729cd7adfa8db3f4fb60fec5b6df62a 1373964 comm optional asterisk-mobile_16.28.0~dfsg-0+deb11u3_armel.deb 76693a2564c8b628e34c5f5702de8073 10010940 debug optional asterisk-modules-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb 0baf348365b8dc37e6e4eeff942afb1e 3768700 libs optional asterisk-modules_16.28.0~dfsg-0+deb11u3_armel.deb e9c788263c42eafde2b672e5e25a6efe 52604 debug optional asterisk-mp3-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb 6c8695e6fb781b031c357916a35f17e2 1361688 comm optional asterisk-mp3_16.28.0~dfsg-0+deb11u3_armel.deb 5587c6f7afce2d684e53e5844f2fa04d 131600 debug optional asterisk-mysql-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb 92034ccb0ef1143ab384d7f5c10ebf95 1374904 comm optional asterisk-mysql_16.28.0~dfsg-0+deb11u3_armel.deb ce67a5f59d1c277719483b458fa12e77 1441116 debug optional asterisk-ooh323-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb 40834bced97bccde3a89487ae18379f3 1619800 comm optional asterisk-ooh323_16.28.0~dfsg-0+deb11u3_armel.deb 6bbb04624a8407a0f7a0157b0b205d4c 1399660 debug optional asterisk-tests-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb d3eea3629538f4b6f547d6504bfa3643 1795392 comm optional asterisk-tests_16.28.0~dfsg-0+deb11u3_armel.deb e549d254758c2e9fa22b4a3e444d668f 266212 debug optional asterisk-voicemail-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb 1d3210a0d3dbf8eae137fac9cdb4274b 313816 debug optional asterisk-voicemail-imapstorage-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb 953f39f760a53235c83734d33b12488f 1454396 comm optional asterisk-voicemail-imapstorage_16.28.0~dfsg-0+deb11u3_armel.deb c2676eda62a95b9054c9198041b47d84 279536 debug optional asterisk-voicemail-odbcstorage-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb 33a322af9a67387c2843da7cb1d43012 1441148 comm optional asterisk-voicemail-odbcstorage_16.28.0~dfsg-0+deb11u3_armel.deb 4ec1dd0a77be1725af33cdbab627caab 1435748 comm optional asterisk-voicemail_16.28.0~dfsg-0+deb11u3_armel.deb b67e46ec26aa6cc86b8624b41b17666d 68876 debug optional asterisk-vpb-dbgsym_16.28.0~dfsg-0+deb11u3_armel.deb cd1296f5049c9f10d3f1ea0019a4accf 1362316 comm optional asterisk-vpb_16.28.0~dfsg-0+deb11u3_armel.deb 95295f08e4aa1584a62d799acf4e10d5 27498 comm optional asterisk_16.28.0~dfsg-0+deb11u3_armel-buildd.buildinfo 2a794e48126c391f67e2376441153fa4 2185560 comm optional asterisk_16.28.0~dfsg-0+deb11u3_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEmUDOxnfDwdc47jJKqoc2e3yvTA0FAmSUVOEACgkQqoc2e3yv TA1xdxAAh//MhhbxQqkgMidb6PTnBQPWVdHx3mbN9IWN013qSbmbg7nAMwzXuzzI TtKeYGGvxF/d7m3uMj+qCvfCQsU+pJLHJSk+4D4P/IXfnWMXl5feO/XaHZ+24YwP K8tLiQpd9moJKjaAkzk0knhdt9dOAQzsRJeCYHbkFb9tmsO50SRVq/dnkM2aTs6z F3TSUJ5OTKRaZt3xt1b0VcVPATriIdIhwSFUc5gGrpxDXXGNTCTrzUvNlw/+QXka gSofauds0Bc5LtzI/YzRXera+9MzCoBFKMmQR2XmD/94FgN9G7LpeP4p6exGuVk7 DS9Axm1Obti5zyz08R1NEB1Bt5xqgeZkM2QZDT+T0hC0N/Fc8IrKf59PUD7fSbUG edhQ7MQ2sfLeSrlAd0eXOg2MEzHzKMvg+ZfVHvZsQYWk1N/SztzrbcKNrrG8a+SV g3oToS3o8xwuxwpeabGYSnamMROqZcA1eGjIGeTQQ7YsciToKSSbSS23zdTpw9yL v+3RCop/CEqqT+Fx7ZF8bEaJ3K8Gn2YgCTLbuLjXrSFWANyx3VbPbSjyyrAS2bjR JYP58lN15dkbVuL5EzCJSlssD7iVLRfKM/q5FaAI/EmBJjbJ1TvMjtWw6Ne9ohwK g0wROERuF2nGXzoWUtu3I00JaTm3dZi5wm2Zhwij561R2pBcrhw= =0o6J -----END PGP SIGNATURE-----