-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 22 Jun 2023 14:47:22 +0200 Source: asterisk Binary: asterisk asterisk-dahdi asterisk-dahdi-dbgsym asterisk-dbgsym asterisk-mobile asterisk-mobile-dbgsym asterisk-modules asterisk-modules-dbgsym asterisk-mp3 asterisk-mp3-dbgsym asterisk-mysql asterisk-mysql-dbgsym asterisk-ooh323 asterisk-ooh323-dbgsym asterisk-tests asterisk-tests-dbgsym asterisk-voicemail asterisk-voicemail-dbgsym asterisk-voicemail-imapstorage asterisk-voicemail-imapstorage-dbgsym asterisk-voicemail-odbcstorage asterisk-voicemail-odbcstorage-dbgsym asterisk-vpb asterisk-vpb-dbgsym Architecture: mips64el Version: 1:16.28.0~dfsg-0+deb11u3 Distribution: bullseye-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-05) Changed-By: Markus Koschany Description: asterisk - Open Source Private Branch Exchange (PBX) asterisk-dahdi - DAHDI devices support for the Asterisk PBX asterisk-mobile - Bluetooth phone support for the Asterisk PBX asterisk-modules - loadable modules for the Asterisk PBX asterisk-mp3 - MP3 playback support for the Asterisk PBX asterisk-mysql - MySQL database protocol support for the Asterisk PBX asterisk-ooh323 - H.323 protocol support for the Asterisk PBX - ooH323c asterisk-tests - internal test modules of the Asterisk PBX asterisk-voicemail - simple voicemail support for the Asterisk PBX asterisk-voicemail-imapstorage - IMAP voicemail storage support for the Asterisk PBX asterisk-voicemail-odbcstorage - ODBC voicemail storage support for the Asterisk PBX asterisk-vpb - VoiceTronix devices support for the Asterisk PBX Changes: asterisk (1:16.28.0~dfsg-0+deb11u3) bullseye-security; urgency=high . * Non-maintainer upload. * Fix CVE-2023-27585: A flaw was found in Asterisk, an Open Source Private Branch Exchange. A buffer overflow vulnerability affects users that use PJSIP DNS resolver. This vulnerability is related to CVE-2022-24793. The difference is that this issue is in parsing the query record `parse_query()`, while the issue in CVE-2022-24793 is in `parse_rr()`. A workaround is to disable DNS resolution in PJSIP config (by setting `nameserver_count` to zero) or use an external resolver implementation instead. Checksums-Sha1: 6a2b915c3ce5bff67c5bfa88b5d4b10e652a59ac 690848 asterisk-dahdi-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb 082d0d7358b27cc50650ae5a59412219f05286a0 1546736 asterisk-dahdi_16.28.0~dfsg-0+deb11u3_mips64el.deb ac5c206801e76d296453c321b6f9ec7d3ede71c8 6809788 asterisk-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb 08e5b8c3deb8e6071a2afde22a29d10f225d60e3 93352 asterisk-mobile-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb fc468bdc87626f768f9e62ac8d7bb4346e3ae29e 1368532 asterisk-mobile_16.28.0~dfsg-0+deb11u3_mips64el.deb 1e7aadea90c89914c771214ed554a1ce173126cb 10712296 asterisk-modules-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb c6cacacbfe139d9391fd01a9a5c14c0031c2e005 3573020 asterisk-modules_16.28.0~dfsg-0+deb11u3_mips64el.deb 0eb7ac0bcf087c0e4cd9bfb26136f3aa635d25c7 53352 asterisk-mp3-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb 445fb592ee988c7389ad871b96e682979789d9ae 1360236 asterisk-mp3_16.28.0~dfsg-0+deb11u3_mips64el.deb e8483b45cb67da1ce97ca47d572d86a83e0327bf 141320 asterisk-mysql-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb 9a0aafcc3178d72339014754b880a48a0bbcdc73 1370116 asterisk-mysql_16.28.0~dfsg-0+deb11u3_mips64el.deb 3a27a999558cabc4582176b5fb9d49e18e00d5b3 1560592 asterisk-ooh323-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb 634441dd13ffa0b48ceb898999c752f589d8618d 1589204 asterisk-ooh323_16.28.0~dfsg-0+deb11u3_mips64el.deb e2033465e1752741835ad8edd6efa3c8aa2f2b76 1444664 asterisk-tests-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb 8cd7d7dad179d88c91cc7fb21775b115cc5dfc98 1699000 asterisk-tests_16.28.0~dfsg-0+deb11u3_mips64el.deb f178710594c6b7ec10c84124cedd6013255a135b 289184 asterisk-voicemail-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb aaa45065927414fa290bc3157da506d67d9db856 342172 asterisk-voicemail-imapstorage-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb ba76813a7830f6f5e149e505b2c69d8218dc588c 1437416 asterisk-voicemail-imapstorage_16.28.0~dfsg-0+deb11u3_mips64el.deb 259f580edc18dba306c8b2e7c14c7f6c71633a57 303460 asterisk-voicemail-odbcstorage-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb c487b81bf75b5cc727f8739809b71b01fce0fa0f 1427000 asterisk-voicemail-odbcstorage_16.28.0~dfsg-0+deb11u3_mips64el.deb 9210480539e8126466c916c336b59483533dd68f 1422824 asterisk-voicemail_16.28.0~dfsg-0+deb11u3_mips64el.deb 357a91bcb86426814d0f4c4cf3bf6a6597388c5b 73044 asterisk-vpb-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb d5f054c25096699ef56084e81e0f549d9e643046 1361832 asterisk-vpb_16.28.0~dfsg-0+deb11u3_mips64el.deb 887be2a270a4f08d32a0dfdacce5129081609316 27546 asterisk_16.28.0~dfsg-0+deb11u3_mips64el-buildd.buildinfo 32ce25509e3b4c4f0dcdb3f90662f6b972f4ffed 2123424 asterisk_16.28.0~dfsg-0+deb11u3_mips64el.deb Checksums-Sha256: a0987bfc5daeb8e54e6f3135d8482ea3b67dc044f4250fc7b6fc265e984afd85 690848 asterisk-dahdi-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb 806d81d9ccf3aacd6be77811c4679032bd7c6aa4260bd7b6d45306e8e2c7b868 1546736 asterisk-dahdi_16.28.0~dfsg-0+deb11u3_mips64el.deb a69df6951c34849177a4c5b3d83f67789e83a79ffc48848316533deec1f615ed 6809788 asterisk-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb cdc2e5b3c0796df2337518250f4b8285a5f97bf84508f46c7a0c01e96f968dc4 93352 asterisk-mobile-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb 1fc1c3e6d4c4c9d9285efaa65ddabc03161bf67b7fa6220ed228814dc3304c87 1368532 asterisk-mobile_16.28.0~dfsg-0+deb11u3_mips64el.deb b24995dd46e1b8a40772b4e11ea1b445683b158ad93cd77f02c42d31b3894a4d 10712296 asterisk-modules-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb ad9c5858f3073d31867ed4644e2d986383bf07dda4798636a917bebcb9fac67c 3573020 asterisk-modules_16.28.0~dfsg-0+deb11u3_mips64el.deb 70c143c61eeb9044c04d389c1a7144854f976117a4e9e5be2dc465cbacd97551 53352 asterisk-mp3-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb a289f508b9ed1271dbbf270dc474f949b9c7591e80cc1fc5b0ff993c4b0c43e9 1360236 asterisk-mp3_16.28.0~dfsg-0+deb11u3_mips64el.deb d0d6eefc8b535e1a4580531736de996e400e45c3ce5c42fd5e0c4eddb045e9f5 141320 asterisk-mysql-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb 5674772c2b72b126d3256214209e405e2ae268982440926c2de278ebef89c3f0 1370116 asterisk-mysql_16.28.0~dfsg-0+deb11u3_mips64el.deb a9304beafc2995195be0156c8a79820b0f6f205757add840242f76a9fcceac5e 1560592 asterisk-ooh323-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb e63c07dcf368f2a3c6fec67bac646695c1baeb240d6df0dcd25bdd3084fae3ce 1589204 asterisk-ooh323_16.28.0~dfsg-0+deb11u3_mips64el.deb d20349e2c502bbbbe6ed588a7b61e9dd896f0292960373c438f402862cc5065d 1444664 asterisk-tests-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb 2fd096d903d54f936a14759a5bc5f391280c86e1ca4749277d2c61e5ad83dcd5 1699000 asterisk-tests_16.28.0~dfsg-0+deb11u3_mips64el.deb eb02d3c621a03feb91f8763dd26f004993482207ebf784e05cb742635b8f4a1a 289184 asterisk-voicemail-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb cee984bdb55bb0ce85d7d782a13f8ee3a53cd80dbef33b9c1fffeabc7a7a7533 342172 asterisk-voicemail-imapstorage-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb bd5dad39bac72904ffa78d165c5166012b2f2b9ec931a85cdf296c959ed65613 1437416 asterisk-voicemail-imapstorage_16.28.0~dfsg-0+deb11u3_mips64el.deb e0664221021fe746048075822c1340f310a094218cbdc22f6e0bc97355666b97 303460 asterisk-voicemail-odbcstorage-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb eb99a77d104015bc22fd65b08249d3973c8f9c284a8a735ec5c9af67f43a4126 1427000 asterisk-voicemail-odbcstorage_16.28.0~dfsg-0+deb11u3_mips64el.deb 12543a497701800df11914a588126794135c31a78e7b3e633ae3205d97c22fd3 1422824 asterisk-voicemail_16.28.0~dfsg-0+deb11u3_mips64el.deb 794d6244598e1ef3477f8111a26ae959a656bf37ab1eccc73cffee84c595603b 73044 asterisk-vpb-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb 2e2c98ad7eb9ebb8cee9fc8ae32a6c7119dbbfe208b790c9021adfe2efb745a4 1361832 asterisk-vpb_16.28.0~dfsg-0+deb11u3_mips64el.deb 9a670fcf10521da0c2bf2923e8af9e802b84bcea321dacd2b4c83881d3dd9c9a 27546 asterisk_16.28.0~dfsg-0+deb11u3_mips64el-buildd.buildinfo db32dd1b18b982cc262605be0dcfd234f1bc33f4b30270d1b54bc79f4470cabe 2123424 asterisk_16.28.0~dfsg-0+deb11u3_mips64el.deb Files: eb3604b8ffbc8f1a033e37389a0dba61 690848 debug optional asterisk-dahdi-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb 82697ed12692522ed90be9524c2545e4 1546736 comm optional asterisk-dahdi_16.28.0~dfsg-0+deb11u3_mips64el.deb a0b87a101ccd43554d09a2270986dd48 6809788 debug optional asterisk-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb 54040ae971b7ba4cff4b64e958e27180 93352 debug optional asterisk-mobile-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb 3ad48e029bc901de745ce8a52e138b64 1368532 comm optional asterisk-mobile_16.28.0~dfsg-0+deb11u3_mips64el.deb 317748147885d5d46358d3b2e4be6735 10712296 debug optional asterisk-modules-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb 76f5686d280f5d3049a276c739fe202e 3573020 libs optional asterisk-modules_16.28.0~dfsg-0+deb11u3_mips64el.deb a1f5699b7a62b914a8d1c6c5b72b32e8 53352 debug optional asterisk-mp3-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb 6c2c2e6e43f78251304ea0a10a1162c7 1360236 comm optional asterisk-mp3_16.28.0~dfsg-0+deb11u3_mips64el.deb ecfa5f3162acc865cdfbedb437cf8628 141320 debug optional asterisk-mysql-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb ef3634cc6b531dc3bed8f58491cb477e 1370116 comm optional asterisk-mysql_16.28.0~dfsg-0+deb11u3_mips64el.deb 9a5fb8780be387ac5de35856e66d7344 1560592 debug optional asterisk-ooh323-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb 58065ead86d3abb0d7104fc6842f50a3 1589204 comm optional asterisk-ooh323_16.28.0~dfsg-0+deb11u3_mips64el.deb 24b04faaad16445c02d69ca8788ac6de 1444664 debug optional asterisk-tests-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb 42f3da0f99d92697213a7e658bd85900 1699000 comm optional asterisk-tests_16.28.0~dfsg-0+deb11u3_mips64el.deb b90ab13fcad93d9d5e81dc70d6865944 289184 debug optional asterisk-voicemail-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb aa87d8e72ec88f5438acb9cce942d0d5 342172 debug optional asterisk-voicemail-imapstorage-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb 9edb82b39a7b98e22e9fa7723ccb1374 1437416 comm optional asterisk-voicemail-imapstorage_16.28.0~dfsg-0+deb11u3_mips64el.deb d1ff39545bd3add593c482e330a6626c 303460 debug optional asterisk-voicemail-odbcstorage-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb f9338b74083c52f4419a4a923d70498d 1427000 comm optional asterisk-voicemail-odbcstorage_16.28.0~dfsg-0+deb11u3_mips64el.deb a22740918acbc884089296cfd745f57d 1422824 comm optional asterisk-voicemail_16.28.0~dfsg-0+deb11u3_mips64el.deb 997636dc2d7c09ea3db505533f7ba1fc 73044 debug optional asterisk-vpb-dbgsym_16.28.0~dfsg-0+deb11u3_mips64el.deb be3eeefe4716ee01c40a0370892a3677 1361832 comm optional asterisk-vpb_16.28.0~dfsg-0+deb11u3_mips64el.deb 6246ce47109e023746e6fb2900f6826f 27546 comm optional asterisk_16.28.0~dfsg-0+deb11u3_mips64el-buildd.buildinfo c882df705c1a0ccd9d036eedf465c55f 2123424 comm optional asterisk_16.28.0~dfsg-0+deb11u3_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7FUbSrfgk+qhJhySoQbzkdO+xGgFAmSUbMEACgkQoQbzkdO+ xGi80xAAvUKHerW2B2MF32iLZNQUyCp97xDeN2MllWTJG03+nt6rt5UqjPALzraU Xh+9uo9xNPzj5SDcjDlFZRfTUTdAyEhxj11poCCGMktL6AAJN4AEjvNfkDAI2Gzm VkJUdZUukX5/Tka1xolOk0aQ5yPyMSHM+lRB3aA5bv3WbQJCUu83y6m/QrXA8Zz6 Bkj9516Rysg/WTu5I2g8j3KDm/z2eizmXIsGEB7UOetlopNid1Qt2EAIcpi/MKIP y05uT55ZW8wmIuxTd1d2qJIDO4CGA1NzerEch7FrjaGHqbNMK4+RaEanlmYj+P+F K3U/uYIUkYyL9z8Myo3hIbEPNF9USlA2UTPJWooaZhrrWGNJDvYqg8i4c4cZyeZF QbkZj9XDxTLJ00G3j6ynvH1SjTK3dZtz9400mxsVb+pomtpurCa4q6KKgv5+KDhn ymMDITOJJ1Rd4Z2YSJeZppW1UMLZAVhOm46v06pH0xgd2vvt3LEjMikzRoRw/wph oCaSYSSvAOLT421aQ0z6W/j9imVq+csv4qUjnO/CKqxoWMwxaTSj0jp6jkoahwR2 j5u0brZxz19FNFEFC7EC3Fmf9WYfKiAy/doRyvwPCpRMVFgez5A5JDdb/5SC9tro +7ZvM9PiOXLCaIrUck133vqkMjgzhVQsReKZas8txJziL0oWShI= =vyvM -----END PGP SIGNATURE-----