Sofia-SIP: Multiple Vulnerabilities — GLSA 202407-10

Multiple vulnerabilities have been discovered in Sofia-SIP, the worst of which can lead to remote code execution.

Affected packages

net-libs/sofia-sip on all architectures
Affected versions < 1.13.16
Unaffected versions

Background

Sofia-SIP is an RFC3261 compliant SIP User-Agent library.

Description

Multiple vulnerabilities have been discovered in Sofia-SIP. Please review the CVE identifiers referenced below for details.

Impact

Multiple vulnerabilities have been discovered in Sofia-SIP. Please review the CVE identifiers referenced below for details.

Workaround

There is no known workaround at this time.

Resolution

Gentoo has discontinued support for the Sofia-SIP package. We recommend that users unmerge it:

 # emerge --ask --depclean "net-libs/sofia-sip"
 

References

Release date
July 05, 2024

Latest revision
July 05, 2024: 1

Severity
high

Exploitable
remote

Bugzilla entries