two CVE in pjproject
Emmanuel Dreyfus <[email protected]> Fri, 20 Mar 2026 08:54:55 +0000
| Newsgroups | gmane.os.netbsd.devel.packages |
|---|---|
| Message-ID | <[email protected]> |
Hello There are two outstanding CVE in pjproject that is used by Asterisk: CVE-2026-29068 and CVE-2026-28799. I created two patches for comms/asterisk23 and tested it, it did not break anything obvious. https://dl.espci.fr/ticket/194cb36aeb8556c7c655a4d8f7583cbe What should I do with it? I can live with it as a local change, but perhaps it could be intersting for others. -- Emmanuel Dreyfus [email protected]