Debian Bug report logs -
#847668
asterisk: CVE-2016-9938
Reported by: Salvatore Bonaccorso <carnil@debian.org>
Date: Sat, 10 Dec 2016 14:57:05 UTC
Severity: normal
Tags: patch, security, upstream
Merged with 847635
Found in versions asterisk/1:11.13.1~dfsg-2, asterisk/1:11.13.1~dfsg-1
Fixed in versions asterisk/1:13.13.1~dfsg-1, asterisk/1:11.13.1~dfsg-2+deb8u2
Done: Bernhard Schmidt <berni@debian.org>
Bug is archived. No further changes may be made.
Toggle useless messages
Report forwarded
to debian-bugs-dist@lists.debian.org, carnil@debian.org, team@security.debian.org, secure-testing-team@lists.alioth.debian.org, Debian VoIP Team <pkg-voip-maintainers@lists.alioth.debian.org>:
Bug#847668; Package src:asterisk.
(Sat, 10 Dec 2016 14:57:07 GMT) (full text, mbox, link).
Acknowledgement sent
to Salvatore Bonaccorso <carnil@debian.org>:
New Bug report received and forwarded. Copy sent to carnil@debian.org, team@security.debian.org, secure-testing-team@lists.alioth.debian.org, Debian VoIP Team <pkg-voip-maintainers@lists.alioth.debian.org>.
(Sat, 10 Dec 2016 14:57:07 GMT) (full text, mbox, link).
Message #5 received at submit@bugs.debian.org (full text, mbox, reply):
Source: asterisk
Version: 1:11.13.1~dfsg-2
Severity: normal
Tags: security upstream
Hi
AST-2016-009 was announced:
http://downloads.asterisk.org/pub/security/AST-2016-009.html
No CVE has been assigned yet. AFAICT, this issue would not warrant a
DSA.
Regards,
Salvatore
Marked as found in versions asterisk/1:11.13.1~dfsg-1.
Request was from Salvatore Bonaccorso <carnil@debian.org>
to control@bugs.debian.org.
(Sat, 10 Dec 2016 15:12:05 GMT) (full text, mbox, link).
Added tag(s) patch.
Request was from Bernhard Schmidt <berni@debian.org>
to control@bugs.debian.org.
(Sat, 10 Dec 2016 20:57:09 GMT) (full text, mbox, link).
Merged 847635 847668
Request was from Bernhard Schmidt <berni@debian.org>
to control@bugs.debian.org.
(Sat, 10 Dec 2016 20:57:13 GMT) (full text, mbox, link).
Changed Bug title to 'asterisk: CVE-2016-9938' from 'asterisk: AST-2016-009'.
Request was from Salvatore Bonaccorso <carnil@debian.org>
to control@bugs.debian.org.
(Mon, 12 Dec 2016 20:45:02 GMT) (full text, mbox, link).
Reply sent
to Bernhard Schmidt <berni@debian.org>:
You have taken responsibility.
(Tue, 20 Dec 2016 22:36:11 GMT) (full text, mbox, link).
Notification sent
to Salvatore Bonaccorso <carnil@debian.org>:
Bug acknowledged by developer.
(Tue, 20 Dec 2016 22:36:11 GMT) (full text, mbox, link).
Message #18 received at 847668-close@bugs.debian.org (full text, mbox, reply):
Source: asterisk
Source-Version: 1:13.13.1~dfsg-1
We believe that the bug you reported is fixed in the latest version of
asterisk, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 847668@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Bernhard Schmidt <berni@debian.org> (supplier of updated asterisk package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 18 Dec 2016 14:48:07 +0100
Source: asterisk
Binary: asterisk asterisk-modules asterisk-dahdi asterisk-vpb asterisk-voicemail asterisk-voicemail-imapstorage asterisk-voicemail-odbcstorage asterisk-ooh423 asterisk-mp3 asterisk-mysql asterisk-mobile asterisk-doc asterisk-dev asterisk-config
Architecture: source
Version: 1:13.13.1~dfsg-1
Distribution: unstable
Urgency: medium
Maintainer: Debian VoIP Team <pkg-voip-maintainers@lists.alioth.debian.org>
Changed-By: Bernhard Schmidt <berni@debian.org>
Description:
asterisk - Open Source Private Branch Exchange (PBX)
asterisk-config - Configuration files for Asterisk
asterisk-dahdi - DAHDI devices support for the Asterisk PBX
asterisk-dev - Development files for Asterisk
asterisk-doc - Source code documentation for Asterisk
asterisk-mobile - Bluetooth phone support for the Asterisk PBX
asterisk-modules - loadable modules for the Asterisk PBX
asterisk-mp3 - MP3 playback support for the Asterisk PBX
asterisk-mysql - MySQL database protocol support for the Asterisk PBX
asterisk-ooh423 - H.323 protocol support for the Asterisk PBX - ooH323c
asterisk-voicemail - simple voicemail support for the Asterisk PBX
asterisk-voicemail-imapstorage - IMAP voicemail storage support for the Asterisk PBX
asterisk-voicemail-odbcstorage - ODBC voicemail storage support for the Asterisk PBX
asterisk-vpb - VoiceTronix devices support for the Asterisk PBX
Closes: 847666 847668
Changes:
asterisk (1:13.13.1~dfsg-1) unstable; urgency=medium
.
[ Bernhard Schmidt ]
* New upstream version 13.13.1~dfsg
- Fix AST-2016-008 (Closes: #847666, but the Debian package was most
likely not vulnerable due to a patched Opus implementation)
- Fix AST-2016-009 / CVE-2016-9938 (Closes: #847668)
* Drop fix_libedit_unicode.patch, applied upstream
* Drop HURD patches, applied upstream
* Drop changes to res/res_format_attr_opus.c from opus.patch
* Add pjsip_unresolved_symbol.patch to fix unresolved symbol in chan_pjsip
Checksums-Sha1:
88bf860ab8ba59e6bb04ce526807e9e619e4f1ed 4118 asterisk_13.13.1~dfsg-1.dsc
62f32faaa226b545758a84a5d4bc26921d4ced9b 6119588 asterisk_13.13.1~dfsg.orig.tar.xz
39345648acf581c695d58a9ce70b4634798e0567 127348 asterisk_13.13.1~dfsg-1.debian.tar.xz
Checksums-Sha256:
11002a3a5197424854193a8d91e902d9e2d17d6a73aa544f26128d133e78c99d 4118 asterisk_13.13.1~dfsg-1.dsc
9d5ba8e4356b6b16cd022fa587a4500464c45168f8f50292cef15c0777ea2a10 6119588 asterisk_13.13.1~dfsg.orig.tar.xz
1ca53e2f9abf23ff37d35a2083d89146df9ec4bd424d8c06eedabe5d843419e7 127348 asterisk_13.13.1~dfsg-1.debian.tar.xz
Files:
18f2292f2db2dfedb21f518b63245746 4118 comm optional asterisk_13.13.1~dfsg-1.dsc
5b6a3a90b9763e0d6700e09a607ed77c 6119588 comm optional asterisk_13.13.1~dfsg.orig.tar.xz
52aa52de5ab1beb6f904cb19aea5c419 127348 comm optional asterisk_13.13.1~dfsg-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=tJzI
-----END PGP SIGNATURE-----
Reply sent
to Bernhard Schmidt <berni@debian.org>:
You have taken responsibility.
(Tue, 20 Dec 2016 22:36:12 GMT) (full text, mbox, link).
Notification sent
to Dara Adib <daradib@ocf.berkeley.edu>:
Bug acknowledged by developer.
(Tue, 20 Dec 2016 22:36:12 GMT) (full text, mbox, link).
Reply sent
to Bernhard Schmidt <berni@debian.org>:
You have taken responsibility.
(Fri, 06 Jan 2017 23:51:05 GMT) (full text, mbox, link).
Notification sent
to Salvatore Bonaccorso <carnil@debian.org>:
Bug acknowledged by developer.
(Fri, 06 Jan 2017 23:51:05 GMT) (full text, mbox, link).
Message #27 received at 847668-close@bugs.debian.org (full text, mbox, reply):
Source: asterisk
Source-Version: 1:11.13.1~dfsg-2+deb8u2
We believe that the bug you reported is fixed in the latest version of
asterisk, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 847668@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Bernhard Schmidt <berni@debian.org> (supplier of updated asterisk package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 03 Jan 2017 23:54:39 +0100
Source: asterisk
Binary: asterisk asterisk-modules asterisk-dahdi asterisk-vpb asterisk-voicemail asterisk-voicemail-imapstorage asterisk-voicemail-odbcstorage asterisk-ooh423 asterisk-mp3 asterisk-mysql asterisk-mobile asterisk-doc asterisk-dev asterisk-dbg asterisk-config
Architecture: source amd64 all
Version: 1:11.13.1~dfsg-2+deb8u2
Distribution: jessie
Urgency: medium
Maintainer: Debian VoIP Team <pkg-voip-maintainers@lists.alioth.debian.org>
Changed-By: Bernhard Schmidt <berni@debian.org>
Description:
asterisk - Open Source Private Branch Exchange (PBX)
asterisk-config - Configuration files for Asterisk
asterisk-dahdi - DAHDI devices support for the Asterisk PBX
asterisk-dbg - Debugging symbols for Asterisk
asterisk-dev - Development files for Asterisk
asterisk-doc - Source code documentation for Asterisk
asterisk-mobile - Bluetooth phone support for the Asterisk PBX
asterisk-modules - loadable modules for the Asterisk PBX
asterisk-mp3 - MP3 playback support for the Asterisk PBX
asterisk-mysql - MySQL database protocol support for the Asterisk PBX
asterisk-ooh423 - H.323 protocol support for the Asterisk PBX - ooH323c
asterisk-voicemail - simple voicemail support for the Asterisk PBX
asterisk-voicemail-imapstorage - IMAP voicemail storage support for the Asterisk PBX
asterisk-voicemail-odbcstorage - ODBC voicemail storage support for the Asterisk PBX
asterisk-vpb - VoiceTronix devices support for the Asterisk PBX
Closes: 847668
Changes:
asterisk (1:11.13.1~dfsg-2+deb8u2) jessie; urgency=medium
.
* AST-2016-009: non-printable ASCII chars treated as whitespace (CVE-2016-9938)
(Closes: #847668)
Checksums-Sha1:
aa4081dc022625ff320ba3e5f6b233d008f746bd 4050 asterisk_11.13.1~dfsg-2+deb8u2.dsc
d091e4b85b67072d37c978307dfb7254978a48c4 108532 asterisk_11.13.1~dfsg-2+deb8u2.debian.tar.xz
09e9768317b1835f505fdbd56272e230d23f067e 1666340 asterisk_11.13.1~dfsg-2+deb8u2_amd64.deb
58c3c0de526aa6c092a549daf778f5af2cf39987 2126510 asterisk-modules_11.13.1~dfsg-2+deb8u2_amd64.deb
6aa70cc310dc3f92013528eb87180a41dd070bc9 703720 asterisk-dahdi_11.13.1~dfsg-2+deb8u2_amd64.deb
40780700ac9df763a370123ef798838552c69aa1 508082 asterisk-vpb_11.13.1~dfsg-2+deb8u2_amd64.deb
af2b662944116a8413adfa34b6d99fe6331be30b 563806 asterisk-voicemail_11.13.1~dfsg-2+deb8u2_amd64.deb
3c3a3b8e34dd6b78572a21a9389cad30a898a4cc 579678 asterisk-voicemail-imapstorage_11.13.1~dfsg-2+deb8u2_amd64.deb
bc7d1eed951fcfb263b61aa585cff50b83263c66 569918 asterisk-voicemail-odbcstorage_11.13.1~dfsg-2+deb8u2_amd64.deb
2d3500d913d52950bbd70577f4b31d8dee8fb491 818794 asterisk-ooh423_11.13.1~dfsg-2+deb8u2_amd64.deb
bde2af6e264b3c65cdbc48e9a3b721e9850c82d3 503830 asterisk-mp3_11.13.1~dfsg-2+deb8u2_amd64.deb
60bdb66836094601d8e0b6fc21bc0f8310068f45 521780 asterisk-mysql_11.13.1~dfsg-2+deb8u2_amd64.deb
3bd08629615fb1ab3a9ee95aa61fab7599fb270d 514048 asterisk-mobile_11.13.1~dfsg-2+deb8u2_amd64.deb
45e8337653085718edb3214a0e74c1f9b51e8b48 2358740 asterisk-doc_11.13.1~dfsg-2+deb8u2_all.deb
f84395d443beec4919642dd9c1bc2a0052e98b9c 791374 asterisk-dev_11.13.1~dfsg-2+deb8u2_all.deb
e83cabce91ea1f23238f146e172ad1dbc97d535a 6457464 asterisk-dbg_11.13.1~dfsg-2+deb8u2_amd64.deb
50d10b82cddcdcb32614de6c701698a6e12b1127 837512 asterisk-config_11.13.1~dfsg-2+deb8u2_all.deb
Checksums-Sha256:
ad1b74fc8c1246d58ee3e61491b896994a0492908eaf14d1942fc0f63e6cf8f0 4050 asterisk_11.13.1~dfsg-2+deb8u2.dsc
f96c1bb9a3ce4c256deba377601711c6fe73ba5305119f7e39c5148a7991f651 108532 asterisk_11.13.1~dfsg-2+deb8u2.debian.tar.xz
d54da9faaae73304e139490e0498f7328d9f6cd70e1c3b0f3258b9079bce66c3 1666340 asterisk_11.13.1~dfsg-2+deb8u2_amd64.deb
c89cd88d8f58cc0a25cde1fca81c4a33570145ee012d024f095ac939de1a2039 2126510 asterisk-modules_11.13.1~dfsg-2+deb8u2_amd64.deb
99eb995dc42282fd38bedb2203280e6ed6923944ece702226c22cdfd01bfd6b5 703720 asterisk-dahdi_11.13.1~dfsg-2+deb8u2_amd64.deb
9422186b49a0d0b9adfd3fadfbdab0fef639a4803d290f32bca0eaf827fb4863 508082 asterisk-vpb_11.13.1~dfsg-2+deb8u2_amd64.deb
6388e66f20cd686fa5d119c0c389e3ec0d519bff0bdd39b8ab6463e802bea737 563806 asterisk-voicemail_11.13.1~dfsg-2+deb8u2_amd64.deb
c0f7be03c349bffbcd57fd56deb361bb9f9f6149db8e249c329c8eed0ce0e6c6 579678 asterisk-voicemail-imapstorage_11.13.1~dfsg-2+deb8u2_amd64.deb
b73519f8a9dd2e40531a011634bd4bc4ada34672a42cb9f4a6043ac72e023b23 569918 asterisk-voicemail-odbcstorage_11.13.1~dfsg-2+deb8u2_amd64.deb
4b510177ca43922acec7da5d4397bc8b182402c227eec05a10ed9d935e0f1720 818794 asterisk-ooh423_11.13.1~dfsg-2+deb8u2_amd64.deb
f3e3b7429e9229aaad484cc7e835cefa0139431cda4b586f1be91d2f443f127b 503830 asterisk-mp3_11.13.1~dfsg-2+deb8u2_amd64.deb
2ea226fa5478f9286d7816cc60b4828bdebdaaf324dff207ba3839bc2269a4c4 521780 asterisk-mysql_11.13.1~dfsg-2+deb8u2_amd64.deb
d49984bfac61b85fa7a44ce47f070fd28e898c1fef2b18fe72d222915baab6c6 514048 asterisk-mobile_11.13.1~dfsg-2+deb8u2_amd64.deb
dfcee6f5d750878dc864d6a154f66e1314fcc9d00c086750bb0c839a7133ff47 2358740 asterisk-doc_11.13.1~dfsg-2+deb8u2_all.deb
cb675d8283313ba178312d23aac5641351e0cd0e2e52dc3121be7dba8b966241 791374 asterisk-dev_11.13.1~dfsg-2+deb8u2_all.deb
b712d79f282df4f983dd9bba3908f04c39f488d827c41a54ffdc640d148e4459 6457464 asterisk-dbg_11.13.1~dfsg-2+deb8u2_amd64.deb
a2459cf2afbaaaebb73003b9632a36cb8bcd625c6e86b48ee485bbfce3504212 837512 asterisk-config_11.13.1~dfsg-2+deb8u2_all.deb
Files:
2276499c2ae02cdfb66038b171baafa5 4050 comm optional asterisk_11.13.1~dfsg-2+deb8u2.dsc
47c707b23d1d2d511152f5683812b3cb 108532 comm optional asterisk_11.13.1~dfsg-2+deb8u2.debian.tar.xz
a02236e516ccde655c5fece83ddd4c50 1666340 comm optional asterisk_11.13.1~dfsg-2+deb8u2_amd64.deb
cdb102cc8d9182be2667df18070cfe24 2126510 libs optional asterisk-modules_11.13.1~dfsg-2+deb8u2_amd64.deb
ea30972a32d8873bb2fba414de4ce188 703720 comm optional asterisk-dahdi_11.13.1~dfsg-2+deb8u2_amd64.deb
7cb5b1b0a95cb3f3b5770146da5c48d0 508082 comm optional asterisk-vpb_11.13.1~dfsg-2+deb8u2_amd64.deb
5d695c448e2c92e0c3635d0f0b19bb69 563806 comm optional asterisk-voicemail_11.13.1~dfsg-2+deb8u2_amd64.deb
d9077c096a99b9b16f7a9772d9b29e27 579678 comm optional asterisk-voicemail-imapstorage_11.13.1~dfsg-2+deb8u2_amd64.deb
dcce34a30db5a686d63091881c4fdcc8 569918 comm optional asterisk-voicemail-odbcstorage_11.13.1~dfsg-2+deb8u2_amd64.deb
c77d08aa736e507ce4455fc5ec62f50a 818794 comm optional asterisk-ooh423_11.13.1~dfsg-2+deb8u2_amd64.deb
bd39baf0cd946b9782117b5a39f2d109 503830 comm optional asterisk-mp3_11.13.1~dfsg-2+deb8u2_amd64.deb
cdb76a49b7c8d6f52d05ac0067828b74 521780 comm optional asterisk-mysql_11.13.1~dfsg-2+deb8u2_amd64.deb
b3deb7dfae9c34751d33aa01c0dfeefd 514048 comm optional asterisk-mobile_11.13.1~dfsg-2+deb8u2_amd64.deb
217d1de008ddd8e35ecb077b4a9c7b10 2358740 doc extra asterisk-doc_11.13.1~dfsg-2+deb8u2_all.deb
a3c07f37b472824ba5218714e24ae91f 791374 devel extra asterisk-dev_11.13.1~dfsg-2+deb8u2_all.deb
20af0e36591cee0bbf0de9af5455b106 6457464 debug extra asterisk-dbg_11.13.1~dfsg-2+deb8u2_amd64.deb
3d2513aabd847734837d4a03abd4c342 837512 comm optional asterisk-config_11.13.1~dfsg-2+deb8u2_all.deb
-----BEGIN PGP SIGNATURE-----
iQJFBAEBCAAvFiEE1uAexRal3873GVbTd1B55bhQvJMFAlhwEcERHGJlcm5pQGRl
Ymlhbi5vcmcACgkQd1B55bhQvJNmLA//b4ewN81K+/iraM7v5CwEX8j4bCourXtA
soGvjuwHLz4vNcmYZltSlFjdLegRGW9idqZz4i+6HMmEF1A7JTjGeQ9SLAICgnrV
LyZ9VpiNXSkg1c66lUCm5cL/B+dNWG/V8pNZFcXnRAFeWOnp2dgiwP1HeaG9EA0D
W2U53JCRg4DNaTUHHbla57Np3t9s6AxwRYT3/jyQM1huTIGloDLShBcOaevUfeJ2
83zsKG4Ri7z6XEW62qfFHhvW/JF/WpuR3g9MKnC0snkbD4HkwL4gLqs46VMz+LkZ
BmXTYXgS8r/3lSV4+mXUQSjuGQ0bMnr3cFSvctIqspG2qi+DUJ6Ltm07sGITARrO
idbClbnadcAeQ0nonFeep/8FuS5XEz9apxrhKausyImdPoICcOsjzJ0AkUpC/b3y
XWN11dpRMCDo3DPA4xfgEB+jjgkAJFQl1UWboHkVd9yXMhimk8/dEBvuphpRdfGN
nVbeFMEfmtDlv1yuRI+eoMcNEd5/QeVqQw0IL0B7QzY0fZ+s1ZQsZZ/oRaPht2AN
VhVbWszhu4BCj+bm4MloK5DMEQp8ABxx3GxNd2P9cNLZ3FFm+dt5Hi/QMhnJpOh4
GepptdER8JJ9/SV3wUeTWrvfhUD+UxyihFzMPgAfNx4F4UjX8Qsi6FcH+ZghHwK9
ljMr7PJLge8=
=paUA
-----END PGP SIGNATURE-----
Reply sent
to Bernhard Schmidt <berni@debian.org>:
You have taken responsibility.
(Fri, 06 Jan 2017 23:51:07 GMT) (full text, mbox, link).
Notification sent
to Dara Adib <daradib@ocf.berkeley.edu>:
Bug acknowledged by developer.
(Fri, 06 Jan 2017 23:51:07 GMT) (full text, mbox, link).
Bug archived.
Request was from Debbugs Internal Request <owner@bugs.debian.org>
to internal_control@bugs.debian.org.
(Tue, 14 Feb 2017 07:28:42 GMT) (full text, mbox, link).
Send a report that this bug log contains spam.
Debian bug tracking system administrator <owner@bugs.debian.org>.
Last modified:
Wed Jun 19 14:05:42 2019;
Machine Name:
buxtehude
Debian Bug tracking system
Debbugs is free software and licensed under the terms of the GNU
Public License version 2. The current version can be obtained
from https://bugs.debian.org/debbugs-source/.
Copyright © 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson,
2005-2017 Don Armstrong, and many other contributors.
Vulmon