Get Gentoo!
gentoo.org sites
gentoo.org Wiki Bugs Forums Packages
Planet Archives Sources
Infra Status

Sofia-SIP: Multiple Vulnerabilities — GLSA 202210-18

Multiple vulnerabilities have been discovered in Sofia-SIP, the worst of which could result in remote code execution.

Affected packages

Package net-libs/sofia-sip on all architectures
Affected versions < 1.13.8
Unaffected versions >= 1.13.8

Background

Sofia-SIP is an RFC3261 compliant SIP User-Agent library.

Description

Multiple vulnerabilities have been discovered in Sofia-SIP. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Sofia-SIP users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=net-libs/sofia-sip-1.13.8"

References

Release date
October 31, 2022

Latest revision
October 31, 2022: 1

Severity
high

Exploitable
remote

Bugzilla entries