[gentoo-announce] [ GLSA 202101-10 ] Asterisk: Multiple vulnerabilities - gentoo-announce

From:	Aaron Bauman <bman@g.o>
To:	gentoo-announce@l.g.o
Subject:	[gentoo-announce] [ GLSA 202101-10 ] Asterisk: Multiple vulnerabilities
Date:	Tue, 12 Jan 2021 18:06:12
Message-Id:	`X/3jc/T6MnNkWkP5@samurai`

1

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

2

Gentoo Linux Security Advisory                           GLSA 202101-10

3

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

4

                                           https://security.gentoo.org/

5

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

6

7

 Severity: Normal

8

    Title: Asterisk: Multiple vulnerabilities

9

     Date: January 12, 2021

10

     Bugs: #753269, #761313

11

       ID: 202101-10

12

13

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

14

15

Synopsis

16

========

17

18

Multiple vulnerabilities have been found in Asterisk, the worst of

19

which could result in a Denial of Service condition.

20

21

Background

22

==========

23

24

A Modular Open Source PBX System.

25

26

Affected packages

27

=================

28

29

    -------------------------------------------------------------------

30

     Package              /     Vulnerable     /            Unaffected

31

    -------------------------------------------------------------------

32

  1  net-misc/asterisk           < 13.38.1                 >= 13.38.1

33

34

Description

35

===========

36

37

Multiple vulnerabilities have been discovered in Asterisk. Please

38

review the security advisories referenced below for details.

39

40

Impact

41

======

42

43

An attacker could cause a possible Denial of Service condition.

44

45

Workaround

46

==========

47

48

There is no known workaround at this time.

49

50

Resolution

51

==========

52

53

All Asterisk users should upgrade to the latest version:

54

55

  # emerge --sync

56

  # emerge --ask --oneshot --verbose ">=net-misc/asterisk-13.38.1"

57

58

References

59

==========

60

61

[ 1 ] AST-2020-001

62

      https://downloads.asterisk.org/pub/security/AST-2020-001.html

63

[ 2 ] AST-2020-002

64

      https://downloads.asterisk.org/pub/security/AST-2020-002.html

65

[ 3 ] AST-2020-003

66

      https://downloads.asterisk.org/pub/security/AST-2020-003.html

67

[ 4 ] AST-2020-004

68

      https://downloads.asterisk.org/pub/security/AST-2020-004.html

69

70

Availability

71

============

72

73

This GLSA and any updates to it are available for viewing at

74

the Gentoo Security Website:

75

76

 https://security.gentoo.org/glsa/202101-10

77

78

Concerns?

79

=========

80

81

Security is a primary focus of Gentoo Linux and ensuring the

82

confidentiality and security of our users' machines is of utmost

83

importance to us. Any security concerns should be addressed to

84

security@g.o or alternatively, you may file a bug at

85

https://bugs.gentoo.org.

86

87

License

88

=======

89

90

Copyright 2021 Gentoo Foundation, Inc; referenced text

91

belongs to its owner(s).

92

93

The contents of this document are licensed under the

94

Creative Commons - Attribution / Share Alike license.

95

96

https://creativecommons.org/licenses/by-sa/2.5

Gentoo Archives: gentoo-announce

Attachments

1	- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
2	Gentoo Linux Security Advisory GLSA 202101-10
3	- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
4	https://security.gentoo.org/
5	- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
6
7	Severity: Normal
8	Title: Asterisk: Multiple vulnerabilities
9	Date: January 12, 2021
10	Bugs: #753269, #761313
11	ID: 202101-10
12
13	- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
14
15	Synopsis
16	========
17
18	Multiple vulnerabilities have been found in Asterisk, the worst of
19	which could result in a Denial of Service condition.
20
21	Background
22	==========
23
24	A Modular Open Source PBX System.
25
26	Affected packages
27	=================
28
29	-------------------------------------------------------------------
30	Package / Vulnerable / Unaffected
31	-------------------------------------------------------------------
32	1 net-misc/asterisk < 13.38.1 >= 13.38.1
33
34	Description
35	===========
36
37	Multiple vulnerabilities have been discovered in Asterisk. Please
38	review the security advisories referenced below for details.
39
40	Impact
41	======
42
43	An attacker could cause a possible Denial of Service condition.
44
45	Workaround
46	==========
47
48	There is no known workaround at this time.
49
50	Resolution
51	==========
52
53	All Asterisk users should upgrade to the latest version:
54
55	# emerge --sync
56	# emerge --ask --oneshot --verbose ">=net-misc/asterisk-13.38.1"
57
58	References
59	==========
60
61	[ 1 ] AST-2020-001
62	https://downloads.asterisk.org/pub/security/AST-2020-001.html
63	[ 2 ] AST-2020-002
64	https://downloads.asterisk.org/pub/security/AST-2020-002.html
65	[ 3 ] AST-2020-003
66	https://downloads.asterisk.org/pub/security/AST-2020-003.html
67	[ 4 ] AST-2020-004
68	https://downloads.asterisk.org/pub/security/AST-2020-004.html
69
70	Availability
71	============
72
73	This GLSA and any updates to it are available for viewing at
74	the Gentoo Security Website:
75
76	https://security.gentoo.org/glsa/202101-10
77
78	Concerns?
79	=========
80
81	Security is a primary focus of Gentoo Linux and ensuring the
82	confidentiality and security of our users' machines is of utmost
83	importance to us. Any security concerns should be addressed to
84	security@g.o or alternatively, you may file a bug at
85	https://bugs.gentoo.org.
86
87	License
88	=======
89
90	Copyright 2021 Gentoo Foundation, Inc; referenced text
91	belongs to its owner(s).
92
93	The contents of this document are licensed under the
94	Creative Commons - Attribution / Share Alike license.
95
96	https://creativecommons.org/licenses/by-sa/2.5