Ubuntu
libosip2 package

libosip2 4.1.0-2.1 source package in Ubuntu

Changelog

libosip2 (4.1.0-2.1) unstable; urgency=medium

  * Non-maintainer upload to fix security issues (Closes: #860287)
  * CVE-2016-10324: In libosip2 in GNU oSIP 4.1.0, a malformed SIP message
    can lead to a heap buffer overflow in the osip_clrncpy() function
    defined in osipparser2/osip_port.c.
  * CVE-2016-10325: In libosip2 in GNU oSIP 4.1.0, a malformed SIP message
    can lead to a heap buffer overflow in the _osip_message_to_str()
    function defined in osipparser2/osip_message_to_str.c, resulting in a
    remote DoS.
  * CVE-2016-10326: In libosip2 in GNU oSIP 4.1.0, a malformed SIP message
    can lead to a heap buffer overflow in the osip_body_to_str() function
    defined in osipparser2/osip_body.c, resulting in a remote DoS.
  * CVE-2017-7853: In libosip2 in GNU oSIP 5.0.0, a malformed SIP message
    can lead to a heap buffer overflow in the msg_osip_body_parse()
    function defined in osipparser2/osip_message_parse.c, resulting in a
    remote DoS.

 -- Antoine Beaupré <email address hidden>  Fri, 14 Apr 2017 16:21:21 -0400

Upload details

Uploaded by:
Debian VoIP Team
Uploaded to:
Sid
Original maintainer:
Debian VoIP Team
Architectures:
any
Section:
comm
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Jammy release universe comm
Focal release universe comm
Bionic release universe comm

Downloads

File Size SHA-256 Checksum
libosip2_4.1.0-2.1.dsc 2.0 KiB 6cedcf2f341489312905b77d6f9a9b32da0d469a0aadc85006d1a13a4744190d
libosip2_4.1.0.orig.tar.gz 621.5 KiB 996aa0363316a871915b6f12562af53853a9962bb93f6abe1ae69f8de7008504
libosip2_4.1.0-2.1.debian.tar.xz 7.5 KiB 418d64e2e27483d5fd96d2aae1b600d11778aa08b3064cd9f636c6838aed1cfa

Available diffs

No changes file available.

Binary packages built by this source

libosip2-11: Session Initiation Protocol (SIP) library

 oSIP is an implementation of SIP.
 .
 SIP stands for the Session Initiation Protocol and is described by the
 RFC3261. This library aims to provide multimedia and telecom software
 developers an easy and powerful interface to initiate and control SIP
 based sessions in their applications.
 .
 SIP is the IETF replacement for the ITU's H323. Example programs using this
 library are partysip and linphone.

libosip2-11-dbgsym: No summary available for libosip2-11-dbgsym in ubuntu cosmic.

No description available for libosip2-11-dbgsym in ubuntu cosmic.

libosip2-dev: No summary available for libosip2-dev in ubuntu disco.

No description available for libosip2-dev in ubuntu disco.