<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<tt>Hi all,<br>
please find here the official CVE from debian: </tt><tt><b
style="box-sizing: border-box; font-weight: 700; color: rgb(57,
57, 57); font-family: "Open Sans"; font-size: 13px;
font-style: normal; font-variant-ligatures: normal;
font-variant-caps: normal; letter-spacing: normal; orphans: 2;
text-align: start; text-indent: 0px; text-transform: none;
white-space: normal; widows: 2; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255, 255,
255); text-decoration-style: initial; text-decoration-color:
initial;"><a
href="https://security-tracker.debian.org/tracker/CVE-2018-8828"
style="box-sizing: border-box; background-color: transparent;
color: rgb(35, 82, 124); text-decoration: underline; outline:
0px;">https://security-tracker.debian.org/tracker/CVE-2018-8828</a><br>
<br>
<br>
</b></tt>
<pre class="moz-signature" cols="72">--
Daniel Grotti
Head of Customer Support
Sipwise GmbH, Campus 21/Europaring F15
AT-2345 Brunn am Gebirge
Office: +43(0)130120332
Email: <a class="moz-txt-link-abbreviated" href="mailto:dgrotti@sipwise.com">dgrotti@sipwise.com</a>
Website: <a class="moz-txt-link-freetext" href="https://www.sipwise.com">https://www.sipwise.com</a>
</pre>
<div class="moz-cite-prefix">On 03/19/2018 01:16 PM, Daniel Grotti
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:2037251f-4939-16df-0abe-ed0bb59c7b28@sipwise.com">
<meta http-equiv="content-type" content="text/html; charset=utf-8">
<tt>Dear SPCE users,</tt><tt><br>
</tt><tt>we would like to highlight that the last stable versions
of kamailio (for the latest 3</tt><tt> </tt><tt>release series:
4.4, 5.0 and 5.1) include fixes for two issues that can</tt><tt>
</tt><tt>crash a running instance of Kamailio, therefore it is
strongly</tt><tt><br>
</tt><tt>recommended to upgrade the kamailio packages on your C5
systems.<br>
<br>
</tt><tt>A detailed description of the security issue is reported
here: CVE link not yet assigned.</tt><tt><br>
</tt><tt>The fix does not include any functional changes, so the
call functionality and features will remain intact.</tt><tt><br>
</tt><tt><br>
</tt><tt><br>
</tt><tt>1. SPCE releases affected</tt><tt><br>
</tt><tt>The following list shows you which SPCE supported
releases are affected:</tt><tt><br>
</tt><tt><br>
</tt><tt><br>
</tt><tt>mr3.8.x -> fixed in mr3.8.12 with package version
mr3.8.12.2</tt><tt><br>
</tt><tt>mr4.5.1 -> fixed with package version mr4.5.1.2</tt><tt><br>
</tt><tt>mr4.5.2 -> fixed with package version mr4.5.2.4</tt><tt><br>
</tt><tt>mr4.5.3 -> fixed with package version mr4.5.3.3</tt><tt><br>
</tt><tt>mr4.5.4 -> fixed with package version mr4.5.4.6</tt><tt><br>
</tt><tt>mr4.5.5 -> fixed with package version mr4.5.5.2</tt><tt><br>
</tt><tt>mr4.5.6 -> fixed with package version mr4.5.6.2</tt><tt><br>
</tt><tt>mr4.5.7 -> fixed with package version mr4.5.7.2</tt><tt><br>
</tt><tt>mr5.5.1 -> fixed with package version mr5.5.1.2</tt><tt><br>
</tt><tt>mr5.5.2 -> fixed with package version mr5.5.2.2</tt><tt><br>
</tt><tt>mr5.5.3 -> fixed with package version mr5.5.3.2</tt><tt><br>
</tt><tt>mr6.0.1 -> fixed with package version mr6.0.1.2</tt><tt><br>
</tt><tt>mr6.0.2 -> fixed with package version mr6.0.2.2</tt><tt><br>
</tt><tt>mr6.1.1 -> fixed with package version mr6.1.1.2</tt><tt><br>
</tt><tt><br>
</tt><tt><br>
</tt><tt>Releases older than mr3.8 are *NOT* supported anymore and
will not be hotfixed.</tt><tt><br>
</tt><br style="box-sizing: border-box; color: rgb(57, 57, 57);
font-family: "Open Sans"; font-size: 13px; font-style:
normal; font-variant-ligatures: normal; font-variant-caps:
normal; font-weight: 400; letter-spacing: normal; orphans: 2;
text-align: start; text-indent: 0px; text-transform: none;
white-space: normal; widows: 2; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255, 255,
255); text-decoration-style: initial; text-decoration-color:
initial;">
<tt><br>
</tt><tt><br>
</tt><tt>2. How to apply the security fix</tt><tt><br>
</tt><tt>Here you find the steps how install the security fix,
depending on your current release.</tt><tt><br>
</tt><tt><br>
</tt><tt>2.1 SPCE release older than mr3.8.12</tt><tt><br>
</tt><tt>If you are running a release mr3.8.x, with x less than
12, then you should upgrade to mr3.8.12 in order to get the
security fix.</tt><tt><br>
</tt><tt>You can follow the usual upgrade procedure described in
the handbook:</tt><tt><br>
</tt><tt><br>
</tt><tt> [1] SPCE:
<a class="moz-txt-link-freetext"
href="https://www.sipwise.com/doc/mr3.8.12/spce/ar01s03.html#_upgrade_from_previous_release"
moz-do-not-send="true">https://www.sipwise.com/doc/mr3.8.12/spce/ar01s03.html#_upgrade_from_previous_release</a></tt><tt><br>
</tt><tt><br>
</tt><tt><br>
</tt><tt>Even though the issue affecting mr3.8.x is not so
critical, we recommend to upgrade in any case to mr3.8.12.</tt><tt><br>
</tt><tt><br>
</tt><tt><br>
</tt><tt>2.2 SPCE release greater or equal to mr4.5.1</tt><tt><br>
</tt><tt>In this case the fix is provided as a hotfix, within your
current release.</tt><tt><br>
</tt><tt>In order to install the fix you should upgrade your
packages to the latest hotfixes.</tt><tt><br>
</tt><tt><br>
</tt><tt><br>
Best Regards,<br>
</tt><tt><br>
</tt>
<pre class="moz-signature" cols="72">--
Daniel Grotti
Head of Customer Support
Sipwise GmbH, Campus 21/Europaring F15
AT-2345 Brunn am Gebirge
Office: +43(0)130120332
Email: <a class="moz-txt-link-abbreviated" href="mailto:dgrotti@sipwise.com" moz-do-not-send="true">dgrotti@sipwise.com</a>
Website: <a class="moz-txt-link-freetext" href="https://www.sipwise.com" moz-do-not-send="true">https://www.sipwise.com</a>
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Spce-user mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Spce-user@lists.sipwise.com">Spce-user@lists.sipwise.com</a>
<a class="moz-txt-link-freetext" href="https://lists.sipwise.com/listinfo/spce-user">https://lists.sipwise.com/listinfo/spce-user</a>
</pre>
</blockquote>
<br>
</body>
</html>