Accepted pjproject 2.5.5~dfsg-6+deb9u2 (source amd64) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 22 Apr 2021 19:03:02 +0200
Source: pjproject
Binary: libpjlib-util2 libpjmedia-audiodev2 libpjmedia-codec2 libpjmedia-videodev2 libpjmedia2 libpjnath2 libpjsip-simple2 libpjsip-ua2 libpjsip2 libpjsua2 libpjsua2-2v5 libpj2 libpjproject-dev python-pjproject
Architecture: source amd64
Version: 2.5.5~dfsg-6+deb9u2
Distribution: stretch-security
Urgency: high
Maintainer: Debian VoIP Team <pkg-voip-maintainers@lists.alioth.debian.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Description:
libpj2 - PJ Project - PJProject core libraries
libpjlib-util2 - PJ Project - helper utilities
libpjmedia-audiodev2 - PJ Project - Audio devices
libpjmedia-codec2 - PJ Project - Multimedia codecs handling
libpjmedia-videodev2 - SIP handling library - video devices
libpjmedia2 - PJ Project - VoIP media
libpjnath2 - PJ Project - NAT handling
libpjproject-dev - PJ Project - development headers
libpjsip-simple2 - PJ Project - SIP SIMPLE instant messaging
libpjsip-ua2 - SIP handling library - SIP user agent library
libpjsip2 - PJ Project - SIP handling library
libpjsua2 - PJ Project - Basic VoIP client library
libpjsua2-2v5 - PJ Project - Basic VoIP client library
python-pjproject - PJ Project - Python bindings
Changes:
pjproject (2.5.5~dfsg-6+deb9u2) stretch-security; urgency=high
.
* Non-maintainer upload by the LTS Team.
* CVE-2021-21375
Due to bad handling of two consecutive crafted answers to an INVITE,
the attacker is able to crash the server resulting in a denial of
service.
Checksums-Sha1:
6443ad97b557cfee9fe44edbfb960a15023aefe6 3468 pjproject_2.5.5~dfsg-6+deb9u2.dsc
d130318466a02e5734b069ed0e343a5d78c06a5c 3506099 pjproject_2.5.5~dfsg.orig.tar.bz2
11c2ca79cf8a944c99de912e0de366fb7c893a20 51676 pjproject_2.5.5~dfsg-6+deb9u2.debian.tar.xz
ad8d29e6c539c60aa426f1366cd5025228c23d98 198460 libpj2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
a38af9e48073899ecbd35ff08e42f983c1fe5087 72250 libpj2_2.5.5~dfsg-6+deb9u2_amd64.deb
a38f9bb48dcaf3d1867361bf1db10b0e42fcf7f9 173048 libpjlib-util2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
02e5524fece1e6733b8394188d82537c2e0c44c3 73606 libpjlib-util2_2.5.5~dfsg-6+deb9u2_amd64.deb
9dbb5fcfb90c40cff12d21404a14cdc36c03ce6b 29204 libpjmedia-audiodev2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
353afd004943095fcccb6d0958808f7fa677d6e2 16434 libpjmedia-audiodev2_2.5.5~dfsg-6+deb9u2_amd64.deb
0e9760c43d6ce4349cdbcfa4971a6dd785077529 124990 libpjmedia-codec2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
f0cd1329a47de14c9650946e4e1ad839dcbc8b5c 47048 libpjmedia-codec2_2.5.5~dfsg-6+deb9u2_amd64.deb
777034b72cb65d53c1e0e6b53a83d4c260a495c1 78456 libpjmedia-videodev2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
b3aea961caeecd98bfc331b82063b534fde2df9f 26304 libpjmedia-videodev2_2.5.5~dfsg-6+deb9u2_amd64.deb
fab8d0c1bd9ab0bcb32a9bb485a37db510907f1e 455256 libpjmedia2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
25a8b4bcd158e3578544ee786e03db2a47354a07 143664 libpjmedia2_2.5.5~dfsg-6+deb9u2_amd64.deb
c7aa06ab0fa698dccaed7cb45bcc7ea113147b68 168384 libpjnath2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
5ecb771858dedb8052d9297d216b18cdc02ae0e3 68256 libpjnath2_2.5.5~dfsg-6+deb9u2_amd64.deb
583d613cefdf877d8ce9c34505541c6e660350b6 1249324 libpjproject-dev_2.5.5~dfsg-6+deb9u2_amd64.deb
ed8bd3146940095078ccf6e1cb49aa3b14fa8371 112250 libpjsip-simple2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
7a91104434302fde73603bd98fd71eeb2dc48d24 35280 libpjsip-simple2_2.5.5~dfsg-6+deb9u2_amd64.deb
48b5ea8d80a57b898df0b55707228f0915101ac6 129904 libpjsip-ua2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
97d4dfe03490006283ca2c49565970d5e7d8d6a2 44522 libpjsip-ua2_2.5.5~dfsg-6+deb9u2_amd64.deb
c65f0fec1fc34dcbb211be3dcf54d8679b796d75 349906 libpjsip2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
3f67066dc004c8abb38d56e672fdf64a45389743 110756 libpjsip2_2.5.5~dfsg-6+deb9u2_amd64.deb
3eb7360e6a5aac922b0080d39677d13bbf089732 1224568 libpjsua2-2v5-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
0930e3b0d9a6e61f3c627ea10c7f4aaf15e26882 134670 libpjsua2-2v5_2.5.5~dfsg-6+deb9u2_amd64.deb
4814ba2f35867f702098378b27b6d809facf2e61 413014 libpjsua2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
49c79df478c9639006416facbc2a5adacdd8df83 116568 libpjsua2_2.5.5~dfsg-6+deb9u2_amd64.deb
8538188cab39a2d64e4d59f17f4a65345efc8261 23735 pjproject_2.5.5~dfsg-6+deb9u2_amd64.buildinfo
78e304e37a649dab98ac70e877ebc4a0b9e0ffc8 90684 python-pjproject-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
8b0f75f750c4b398ccd983b613c75fceef0ca42d 56678 python-pjproject_2.5.5~dfsg-6+deb9u2_amd64.deb
Checksums-Sha256:
12528b8cec2431a24d51c52c431d400ec9ef7444a17cdeb8dfe0981bffe8a91d 3468 pjproject_2.5.5~dfsg-6+deb9u2.dsc
09457ad674083211ae3b6c7e8e44b8ef33b454dc85dbf5674d06e49dc1ea9437 3506099 pjproject_2.5.5~dfsg.orig.tar.bz2
60ae6d5074ba22f6e0edb8598633df9ef9410a43d73bd7296ae2df3de58d552c 51676 pjproject_2.5.5~dfsg-6+deb9u2.debian.tar.xz
000616b4bb6520bd2b8dd6d5788053f8e51f780233d9737bbe8f87186505f6d2 198460 libpj2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
d989ef9a0663cf82e51f9adf4c1e784b5526deb3c9b68fcdbf0d8125c0c8d893 72250 libpj2_2.5.5~dfsg-6+deb9u2_amd64.deb
55e76093e5ddc4a444d8d383150a2fa1e6296714062e9d72a90d23e2b8ce79cd 173048 libpjlib-util2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
d0b9dfe9c7108c65fb9a3c94351809b04d0f73ced380f3612bcce099049c8524 73606 libpjlib-util2_2.5.5~dfsg-6+deb9u2_amd64.deb
b9bdb51137d29fdde8e78570c7e0613d901328800f25d183456a95370416df6e 29204 libpjmedia-audiodev2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
a70468f98dea96e3251689c5ec20e3dae39b913188efb2456b7843cd19331652 16434 libpjmedia-audiodev2_2.5.5~dfsg-6+deb9u2_amd64.deb
aeacdb3eba0975a9bb7976deef567f98b82469bd0909a44066a0e5223a062704 124990 libpjmedia-codec2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
7224e34936256d13565ff976c7906bbb2abcfed2cd8ed9aefa03a62174fe76d2 47048 libpjmedia-codec2_2.5.5~dfsg-6+deb9u2_amd64.deb
7bfe52987c5e747c7559dd879dda8c93ee4b0815832f57f775fcf009180a42bb 78456 libpjmedia-videodev2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
f5dccc11ba52dc7ce1f41bdda3dfe5c801944ce219b49608564a472d18830713 26304 libpjmedia-videodev2_2.5.5~dfsg-6+deb9u2_amd64.deb
11ccdfde327ff8ce5e03c45466ea95c78c7e4aed6e435b24e86f3663c9b584de 455256 libpjmedia2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
fd96c684e5d445ec31bb321a129e2c5a7e7bda2e930a7c2cddb6c3acf8b12dfd 143664 libpjmedia2_2.5.5~dfsg-6+deb9u2_amd64.deb
39175f2a4ca65005adf3b46da8c5195bfbf9c064620876b0ccdddb28cc6b9030 168384 libpjnath2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
953d47b3dbef982db73f071644acf4c883f20489103d3eef6c9f76893a508986 68256 libpjnath2_2.5.5~dfsg-6+deb9u2_amd64.deb
eb5579a9e50f876f8f1ab8e6a753449e63ab46d7122daf3cb6910b47439636ea 1249324 libpjproject-dev_2.5.5~dfsg-6+deb9u2_amd64.deb
c8aa0748c50d5299d3b285801df99f991adb8a6194ee96b95500a887bbe467c4 112250 libpjsip-simple2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
2a30c0ba707637a7772b808b0f4e265542548d484d34c0bf7764672c49f8a3d3 35280 libpjsip-simple2_2.5.5~dfsg-6+deb9u2_amd64.deb
387f9cc769c38ca3414425e4de6a37902ae534ba121cc766d432d12b11fe464e 129904 libpjsip-ua2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
17a7317812f7cce0dfbe072baa8621a69bb33ce0d6247717c809a4282249a84e 44522 libpjsip-ua2_2.5.5~dfsg-6+deb9u2_amd64.deb
66e5e36f20801073e32c9b3036e6090567a83ca9ae9dfaa89d1e2495b42c7775 349906 libpjsip2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
56822780c182865d43a34564e331cf313507fd167303a17831b5330cc957a655 110756 libpjsip2_2.5.5~dfsg-6+deb9u2_amd64.deb
79ece7442bbafc371334c19e27daab4541e9e0faa7a7c830943deea4d7577498 1224568 libpjsua2-2v5-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
eb03e61e0c185f7db0826357473e05268121a2d311f112eae019c3747bc48174 134670 libpjsua2-2v5_2.5.5~dfsg-6+deb9u2_amd64.deb
1f22ce0a0e48376e6f3d852acf869ca3ec0c28ddcdfee4aef8ec38bed24ee0b1 413014 libpjsua2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
6e6e2e0ce847be72c3ed2c8080b5876c6742105294a96d875c3df5b0097c836e 116568 libpjsua2_2.5.5~dfsg-6+deb9u2_amd64.deb
989caf8212c03bacf20e49a4bb15dbb5922bc7b1b41cb1b1ca36b303c6755755 23735 pjproject_2.5.5~dfsg-6+deb9u2_amd64.buildinfo
48269f564cf3087a9bc0094525e683f88cf2731302ccce73386b0b48fbb3e8b0 90684 python-pjproject-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
0499acebc6274610fc22968dbd41259cb584bd190f91103b454fc6bd6875d2ff 56678 python-pjproject_2.5.5~dfsg-6+deb9u2_amd64.deb
Files:
787da9447a7cd6385ac083baf1d1b138 3468 comm optional pjproject_2.5.5~dfsg-6+deb9u2.dsc
7186301d3987908b8b8cc5e84da48153 3506099 comm optional pjproject_2.5.5~dfsg.orig.tar.bz2
405f75d4342cc2a75aac98f0928ef8a9 51676 comm optional pjproject_2.5.5~dfsg-6+deb9u2.debian.tar.xz
8ee292d27be9ec54991e4b7c99b98616 198460 debug extra libpj2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
46442e0520786219c79af2d4998e1e28 72250 comm optional libpj2_2.5.5~dfsg-6+deb9u2_amd64.deb
f8bffcb4a641dab0065b5402fa06684a 173048 debug extra libpjlib-util2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
58c2611c44557328ca72bf1102e6d133 73606 comm optional libpjlib-util2_2.5.5~dfsg-6+deb9u2_amd64.deb
f2b53c18a2b7a4f301521c02d8acb448 29204 debug extra libpjmedia-audiodev2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
9069a3161ebce432ae1e7e9cac1ff637 16434 comm optional libpjmedia-audiodev2_2.5.5~dfsg-6+deb9u2_amd64.deb
6cd824ad8a9de448bf19afc8603ffbb8 124990 debug extra libpjmedia-codec2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
265239507a1fc68394bb83b7633738bb 47048 comm optional libpjmedia-codec2_2.5.5~dfsg-6+deb9u2_amd64.deb
2258a257f1ba65f7bb8d2897e0e84d98 78456 debug extra libpjmedia-videodev2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
5fb3a5ddd16f092ac262055589670cb1 26304 comm optional libpjmedia-videodev2_2.5.5~dfsg-6+deb9u2_amd64.deb
32fef565d04c1b9b782a1adce5abba34 455256 debug extra libpjmedia2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
0e7e2969091bd0fde9bf076f83861459 143664 comm optional libpjmedia2_2.5.5~dfsg-6+deb9u2_amd64.deb
b4358c8058ab9c6434d090d8179caaee 168384 debug extra libpjnath2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
46fafca5c5022075fddaf5f74622e637 68256 comm optional libpjnath2_2.5.5~dfsg-6+deb9u2_amd64.deb
2fff1ccc4b213d402b9f1a7479da5cca 1249324 libdevel optional libpjproject-dev_2.5.5~dfsg-6+deb9u2_amd64.deb
d5e8fdcba549e3bf23e4d59d4ebf38a9 112250 debug extra libpjsip-simple2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
1b65146349138ccf9a026751a86b755a 35280 comm optional libpjsip-simple2_2.5.5~dfsg-6+deb9u2_amd64.deb
32fc3dd0ef068117d04e00d446455bec 129904 debug extra libpjsip-ua2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
6d160f24d3c232f0108764676e6b88aa 44522 comm optional libpjsip-ua2_2.5.5~dfsg-6+deb9u2_amd64.deb
8074191f71750ac49be86a9248793f11 349906 debug extra libpjsip2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
397f56c870fb5a8716f3e42668894b5b 110756 comm optional libpjsip2_2.5.5~dfsg-6+deb9u2_amd64.deb
437dc1c7a57031d3dc7028480456774e 1224568 debug extra libpjsua2-2v5-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
263a70f27b6b4e391c629018c260a9e2 134670 comm optional libpjsua2-2v5_2.5.5~dfsg-6+deb9u2_amd64.deb
7f63f81e644044ef54616a68821a8106 413014 debug extra libpjsua2-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
14c41cc9845eb5c383afa9363e07fd70 116568 comm optional libpjsua2_2.5.5~dfsg-6+deb9u2_amd64.deb
ecf60a60c2ce3c396e0553b9d52536d2 23735 comm optional pjproject_2.5.5~dfsg-6+deb9u2_amd64.buildinfo
ea78e92a15d683900daecaac8d42d8d8 90684 debug extra python-pjproject-dbgsym_2.5.5~dfsg-6+deb9u2_amd64.deb
02292dba0a623e764c309324dbc5d0fe 56678 python optional python-pjproject_2.5.5~dfsg-6+deb9u2_amd64.deb
-----BEGIN PGP SIGNATURE-----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=LcTt
-----END PGP SIGNATURE-----