Get Gentoo!
gentoo.org sites
gentoo.org Wiki Bugs Forums Packages
Planet Archives Sources
Infra Status

PJSIP: Multiple vulnerabilities — GLSA 202107-42

Multiple vulnerabilities have been found in PJSIP, the worst of which could result in a Denial of Service condition.

Affected packages

Package net-libs/pjproject on all architectures
Affected versions < 2.10-r1
Unaffected versions >= 2.10-r1

Background

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE.

Description

Multiple vulnerabilities have been discovered in PJSIP. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All PJSIP users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=net-libs/pjproject-2.10-r1"

References

Release date
July 20, 2021

Latest revision
July 20, 2021: 1

Severity
low

Exploitable
remote

Bugzilla entries