Bug#415466: asterisk: SIP INVITE DoS

Frédéric Brière fbriere at fbriere.net
Wed Apr 18 19:05:37 UTC 2007


On Wed, Apr 18, 2007 at 07:31:33PM +0200, Florian Weimer wrote:
> > Just thought I'd point out that this is CVE-2007-1561.  (Which
> > security-tracker strangely claims has been fixed in sarge/etch/lenny,
> > even though it apparently hasn't.)
> 
> Which security tracker do yo mean?

security-tracker.debian.net

Never mind what I said, though; it's the other CVE (2007-1594) which
appears to be wrong.  I already opened #419820 for it last night, so
I'll make a comment there.


-- 
Being overloaded is the sign of a true Debian maintainer.
		-- JHM on #Debian




More information about the Pkg-voip-maintainers mailing list