Re: Vulnerability Reporting and Resolution Process for Kamailio
Henning Westerholt via sr-users <[email protected]> Tue, 30 Jun 2026 17:02:19 +0000
| Newsgroups | gmane.comp.voip.ser |
|---|---|
| Message-ID | <PA4PR07MB72294ED4628BA1B683F647D8BFF72@PA4PR07MB7229.eurprd07.prod.outlook.com> |
--===============2114115511== Content-Language: en-GB Content-Type: multipart/alternative; boundary="_000_PA4PR07MB72294ED4628BA1B683F647D8BFF72PA4PR07MB7229eurp_" --_000_PA4PR07MB72294ED4628BA1B683F647D8BFF72PA4PR07MB7229eurp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGVsbG8sDQoNClBsZWFzZSBoYXZlIGxvb2sgdG8gdGhlIGRvY3VtZW50ZWQgc2VjdXJpdHkgcG9s aWN5IG9mIHRoZSBwcm9qZWN0OiBodHRwczovL3d3dy5rYW1haWxpby5vcmcvd2lraWRvY3Mvc2Vj dXJpdHkvcG9saWN5Lw0KDQpDaGVlcnMsDQoNCkhlbm5pbmcgV2VzdGVyaG9sdA0KDQpGcm9tOiBD aGFuZHJhbW91bGkgUCB2aWEgc3ItdXNlcnMgPHNyLXVzZXJzQGxpc3RzLmthbWFpbGlvLm9yZz4N ClNlbnQ6IERpZW5zdGFnLCAzMC4gSnVuaSAyMDI2IDE4OjQ5DQpUbzogbWljb25kYUBnbWFpbC5j b207IEthbWFpbGlvIChTRVIpIC0gVXNlcnMgTWFpbGluZyBMaXN0IDxzci11c2Vyc0BsaXN0cy5r YW1haWxpby5vcmc+DQpDYzogQ2hhbmRyYW1vdWxpIFAgPG1vdWxpY3RvQGdtYWlsLmNvbT4NClN1 YmplY3Q6IFtTUi1Vc2Vyc10gVnVsbmVyYWJpbGl0eSBSZXBvcnRpbmcgYW5kIFJlc29sdXRpb24g UHJvY2VzcyBmb3IgS2FtYWlsaW8NCg0KRGVhciBNci4gRGFuaWVsLA0KDQpJIGhvcGUgdGhpcyBl bWFpbCBmaW5kcyB5b3Ugd2VsbC4NCg0KV2UgaGF2ZSBzdWNjZXNzZnVsbHkgZGVwbG95ZWQgdGhl IEthbWFpbGlvIGZyYW1ld29yayBpbiBvdXIgcHJvZHVjdGlvbiBlbnZpcm9ubWVudCwgYW5kIGl0 IGhhcyBiZWVuIGluc3RydW1lbnRhbCBpbiBoZWxwaW5nIHVzIG1lZXQgb3VyIG9wZXJhdGlvbmFs IHJlcXVpcmVtZW50cy4gV2UgdHJ1bHkgYXBwcmVjaWF0ZSB0aGUgcm9idXN0bmVzcyBhbmQgZmxl eGliaWxpdHkgdGhhdCBLYW1haWxpbyBvZmZlcnMuDQoNCkFzIHBhcnQgb2Ygb3VyIG9yZ2FuaXph dGlvbidzIHNlY3VyaXR5IHBvbGljaWVzLCB3ZSBjb25kdWN0IHBlcmlvZGljIHNvZnR3YXJlIHNj YW5zIHVzaW5nIGluZHVzdHJ5LXN0YW5kYXJkIHRvb2xzIHRvIGlkZW50aWZ5IHBvdGVudGlhbCB2 dWxuZXJhYmlsaXRpZXMgYWNyb3NzIG91ciB0ZWNobm9sb2d5IHN0YWNrLCBpbmNsdWRpbmcgS2Ft YWlsaW8uDQoNCkluIHRoaXMgcmVnYXJkLCBJIHdvdWxkIGxpa2UgdG8gdW5kZXJzdGFuZCB0aGUg Zm9sbG93aW5nOg0KDQoxLiBJZiB3ZSBpZGVudGlmeSBhbnkgdnVsbmVyYWJpbGl0aWVzIGluIHRo ZSBLYW1haWxpbyBmcmFtZXdvcmsgZHVyaW5nIG91ciBzY2FucywgaXMgdGhlcmUgYSBwcm9jZXNz IHRocm91Z2ggd2hpY2ggdGhlc2UgY2FuIGJlIHJlcG9ydGVkIHRvIHRoZSBLYW1haWxpbyBkZXZl bG9wbWVudCB0ZWFtIGZvciByZXNvbHV0aW9uPw0KMi4gV291bGQgc3VjaCB2dWxuZXJhYmlsaXRp ZXMgYmUgYWRkcmVzc2VkIGFuZCBwYXRjaGVkIGJ5IHRoZSBjb3JlIHRlYW0sIG9yIGlzIHRoZXJl IGEgY29tbXVuaXR5LWRyaXZlbiBwcm9jZXNzIHdlIHNob3VsZCBiZSBhd2FyZSBvZj8NCjMuIElm IHRoZXJlIGlzIGEgZGVmaW5lZCBkaXNjbG9zdXJlIG9yIGVzY2FsYXRpb24gcHJvY2VzcyAoZS5n LiwgYSBzZWN1cml0eSBtYWlsaW5nIGxpc3QsIGlzc3VlIHRyYWNrZXIsIG9yIHJlc3BvbnNpYmxl IGRpc2Nsb3N1cmUgcG9saWN5KSwgY291bGQgeW91IGtpbmRseSBwb2ludCB1cyB0byB0aGUgcmVs ZXZhbnQgcmVzb3VyY2U/DQoNClVuZGVyc3RhbmRpbmcgdGhpcyBwcm9jZXNzIHdpbGwgaGVscCB1 cyBhbGlnbiBvdXIgaW50ZXJuYWwgY29tcGxpYW5jZSByZXF1aXJlbWVudHMgd2l0aCB0aGUgYXBw cm9wcmlhdGUgc3VwcG9ydCBjaGFubmVscyBhbmQgZW5zdXJlIHdlIGZvbGxvdyB0aGUgY29ycmVj dCBwcm9jZWR1cmUgd2hlbiByZXBvcnRpbmcgYW55IGZpbmRpbmdzLg0KDQpUaGFuayB5b3UgZm9y IHlvdXIgdGltZSwgYW5kIEkgbG9vayBmb3J3YXJkIHRvIHlvdXIgZ3VpZGFuY2UuDQoNCkJlc3Qg cmVnYXJkcywNCkNoYW5kcmFtb3VsaS4NCg== --_000_PA4PR07MB72294ED4628BA1B683F647D8BFF72PA4PR07MB7229eurp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpBcHRvczt9DQovKiBTdHlsZSBEZWZpbml0 aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJn aW46MGNtOw0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IkFwdG9zIixzYW5zLXNl cmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5 Ow0KCWNvbG9yOiM0Njc4ODY7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpzcGFuLkVt YWlsU3R5bGUxOA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWls eToiQXB0b3MiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQouTXNvQ2hwRGVmYXVs dA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTEuMHB0Ow0KCW1z by1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTO30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYx Mi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzIuMHB0IDcyLjBwdCA3Mi4wcHQgNzIuMHB0O30NCmRp di5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lm IGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9 IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxv OnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIx IiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkg bGFuZz0iRU4tR0IiIGxpbms9IiM0Njc4ODYiIHZsaW5rPSIjOTY2MDdEIiBzdHlsZT0id29yZC13 cmFwOmJyZWFrLXdvcmQiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O21zby1mYXJlYXN0LWxhbmd1 YWdlOkVOLVVTIj5IZWxsbyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDttc28tZmFyZWFzdC1sYW5ndWFnZTpF Ti1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMi PlBsZWFzZSBoYXZlIGxvb2sgdG8gdGhlIGRvY3VtZW50ZWQgc2VjdXJpdHkgcG9saWN5IG9mIHRo ZSBwcm9qZWN0Og0KPGEgaHJlZj0iaHR0cHM6Ly93d3cua2FtYWlsaW8ub3JnL3dpa2lkb2NzL3Nl Y3VyaXR5L3BvbGljeS8iPmh0dHBzOi8vd3d3LmthbWFpbGlvLm9yZy93aWtpZG9jcy9zZWN1cml0 eS9wb2xpY3kvPC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVT Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+Q2hl ZXJzLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+SGVubmluZyBXZXN0 ZXJob2x0PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1s ZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzowY20gMGNtIDBjbSA0LjBwdCI+DQo8ZGl2Pg0K PGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3Bh ZGRpbmc6My4wcHQgMGNtIDBjbSAwY207Zm9udC1zaXplOnB0Ij4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWYiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmIj4gQ2hhbmRyYW1vdWxpIFAgdmlhIHNyLXVzZXJzICZsdDtz ci11c2Vyc0BsaXN0cy5rYW1haWxpby5vcmcmZ3Q7DQo8YnI+DQo8Yj5TZW50OjwvYj4gRGllbnN0 YWcsIDMwLiBKdW5pIDIwMjYgMTg6NDk8YnI+DQo8Yj5Ubzo8L2I+IG1pY29uZGFAZ21haWwuY29t OyBLYW1haWxpbyAoU0VSKSAtIFVzZXJzIE1haWxpbmcgTGlzdCAmbHQ7c3ItdXNlcnNAbGlzdHMu a2FtYWlsaW8ub3JnJmd0Ozxicj4NCjxiPkNjOjwvYj4gQ2hhbmRyYW1vdWxpIFAgJmx0O21vdWxp Y3RvQGdtYWlsLmNvbSZndDs8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gW1NSLVVzZXJzXSBWdWxuZXJh YmlsaXR5IFJlcG9ydGluZyBhbmQgUmVzb2x1dGlvbiBQcm9jZXNzIGZvciBLYW1haWxpbzxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWYiPkRl YXIgTXIuIERhbmllbCw8YnI+DQo8YnI+DQpJIGhvcGUgdGhpcyBlbWFpbCBmaW5kcyB5b3Ugd2Vs bC48YnI+DQo8YnI+DQpXZSBoYXZlIHN1Y2Nlc3NmdWxseSBkZXBsb3llZCB0aGUgS2FtYWlsaW8g ZnJhbWV3b3JrIGluIG91ciBwcm9kdWN0aW9uIGVudmlyb25tZW50LCBhbmQgaXQgaGFzIGJlZW4g aW5zdHJ1bWVudGFsIGluIGhlbHBpbmcgdXMgbWVldCBvdXIgb3BlcmF0aW9uYWwgcmVxdWlyZW1l bnRzLiBXZSB0cnVseSBhcHByZWNpYXRlIHRoZSByb2J1c3RuZXNzIGFuZCBmbGV4aWJpbGl0eSB0 aGF0IEthbWFpbGlvIG9mZmVycy48YnI+DQo8YnI+DQpBcyBwYXJ0IG9mIG91ciBvcmdhbml6YXRp b24ncyBzZWN1cml0eSBwb2xpY2llcywgd2UgY29uZHVjdCBwZXJpb2RpYyBzb2Z0d2FyZSBzY2Fu cyB1c2luZyBpbmR1c3RyeS1zdGFuZGFyZCB0b29scyB0byBpZGVudGlmeSBwb3RlbnRpYWwgdnVs bmVyYWJpbGl0aWVzIGFjcm9zcyBvdXIgdGVjaG5vbG9neSBzdGFjaywgaW5jbHVkaW5nIEthbWFp bGlvLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNl cmlmIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDss c2Fucy1zZXJpZiI+SW4gdGhpcyByZWdhcmQsIEkgd291bGQgbGlrZSB0byB1bmRlcnN0YW5kIHRo ZSBmb2xsb3dpbmc6PGJyPg0KPGJyPg0KMS4gSWYgd2UgaWRlbnRpZnkgYW55IHZ1bG5lcmFiaWxp dGllcyBpbiB0aGUgS2FtYWlsaW8gZnJhbWV3b3JrIGR1cmluZyBvdXIgc2NhbnMsIGlzIHRoZXJl IGEgcHJvY2VzcyB0aHJvdWdoIHdoaWNoIHRoZXNlIGNhbiBiZSByZXBvcnRlZCB0byB0aGUgS2Ft YWlsaW8gZGV2ZWxvcG1lbnQgdGVhbSBmb3IgcmVzb2x1dGlvbj88YnI+DQoyLiBXb3VsZCBzdWNo IHZ1bG5lcmFiaWxpdGllcyBiZSBhZGRyZXNzZWQgYW5kIHBhdGNoZWQgYnkgdGhlIGNvcmUgdGVh bSwgb3IgaXMgdGhlcmUgYSBjb21tdW5pdHktZHJpdmVuIHByb2Nlc3Mgd2Ugc2hvdWxkIGJlIGF3 YXJlIG9mPzxicj4NCjMuIElmIHRoZXJlIGlzIGEgZGVmaW5lZCBkaXNjbG9zdXJlIG9yIGVzY2Fs YXRpb24gcHJvY2VzcyAoZS5nLiwgYSBzZWN1cml0eSBtYWlsaW5nIGxpc3QsIGlzc3VlIHRyYWNr ZXIsIG9yIHJlc3BvbnNpYmxlIGRpc2Nsb3N1cmUgcG9saWN5KSwgY291bGQgeW91IGtpbmRseSBw b2ludCB1cyB0byB0aGUgcmVsZXZhbnQgcmVzb3VyY2U/PGJyPg0KPGJyPg0KVW5kZXJzdGFuZGlu ZyB0aGlzIHByb2Nlc3Mgd2lsbCBoZWxwIHVzIGFsaWduIG91ciBpbnRlcm5hbCBjb21wbGlhbmNl IHJlcXVpcmVtZW50cyB3aXRoIHRoZSBhcHByb3ByaWF0ZSBzdXBwb3J0IGNoYW5uZWxzIGFuZCBl bnN1cmUgd2UgZm9sbG93IHRoZSBjb3JyZWN0IHByb2NlZHVyZSB3aGVuIHJlcG9ydGluZyBhbnkg ZmluZGluZ3MuPGJyPg0KPGJyPg0KVGhhbmsgeW91IGZvciB5b3VyIHRpbWUsIGFuZCBJIGxvb2sg Zm9yd2FyZCB0byB5b3VyIGd1aWRhbmNlLjxicj4NCjxicj4NCkJlc3QgcmVnYXJkcyw8YnI+DQpD aGFuZHJhbW91bGkuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_PA4PR07MB72294ED4628BA1B683F647D8BFF72PA4PR07MB7229eurp_-- --===============2114115511== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions -- [email protected] To unsubscribe send an email to [email protected] Important: keep the mailing list in the recipients, do not reply only to the sender! --===============2114115511==--