net-libs/pjproject-2.16-r2 — Security Advisories

▸ GLSA 202409-05 PJSIP: Heap Buffer Overflow this version unaffected normal local and remote 2024-09-22

A vulnerability has been discovered in PJSIP, which could lead to arbitrary code execution.

Announced: 2024-09-22
Revised: 2024-09-22
Access: local and remote
Bugs: #917463
Advisory: https://security.gentoo.org/glsa/202409-05

Affected packages

Package	Arch	Vulnerable	Unaffected
net-libs/pjproject	*	< 2.13.1	>= 2.13.1

Background

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE.

Description

Please review the CVE identifier referenced below for details.

Impact

Please review the CVE identifier referenced below for details.

Workaround

There is no known workaround at this time.

Resolution

All PJSIP users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-libs/pjproject-2.13.1"

References

CVE-2023-27585

▸ GLSA 202210-37 PJSIP: Multiple Vulnerabilities this version unaffected normal remote 2022-10-31

Multiple vulnerabilities have been found in PJSIP, the worst of which could result in arbitrary code execution.

Announced: 2022-10-31
Revised: 2022-10-31
Access: remote
Bugs: #803614 #829894 #875863
Advisory: https://security.gentoo.org/glsa/202210-37

Affected packages

Package	Arch	Vulnerable	Unaffected
net-libs/pjproject	*	< 2.12.1	>= 2.12.1

Background

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE.

Description

Multiple vulnerabilities have been discovered in PJSIP. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All PJSIP users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-libs/pjproject-2.12.1"

References

▸ GLSA 202107-42 PJSIP: Multiple vulnerabilities this version unaffected low remote 2021-07-20

Multiple vulnerabilities have been found in PJSIP, the worst of which could result in a Denial of Service condition.

Announced: 2021-07-20
Revised: 2021-07-20
Access: remote
Bugs: #775359
Advisory: https://security.gentoo.org/glsa/202107-42

Affected packages

Package	Arch	Vulnerable	Unaffected
net-libs/pjproject	*	< 2.10-r1	>= 2.10-r1

Background

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE.

Description

Multiple vulnerabilities have been discovered in PJSIP. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All PJSIP users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-libs/pjproject-2.10-r1"