On 30/03/22 12:05 PM, Bastian Triller wrote: > Hello, > > we upgraded to 2.5.5~dfsg-6+deb9u3 and we're seeing crashes in > Asterisk. It seems the patch for CVE-2022-23608 is faulty. In your > patch, the hash table key is assigned twice in hunk #2 but not in hunk > #4. > Please see attached patch CVE-2022-23608_fixed.patch. Thank you for the regression report. I am taking a look. --abhijith