Re: Bug#415466: asterisk: SIP INVITE DoS

[Steve Langasek <vorlon@debian.org>]

Hi Mark,

On Mon, Mar 19, 2007 at 09:55:22PM +0000, Mark Purcell wrote:

> Would you like the pkg-voip team to upload asterisk 1.2.13 with the DoS
> patch to 1.2.17 backported to etch?

Could you coordinate this with the security team?  AFAICS this bug is not
'grave' by the security team's own standards, so the release team isn't
going to make exceptions for its handling in etch -- but the security team
can release an update via security.d.o for inclusion in a future point
release (or even in r0 if the security team oks it).

Thanks,
-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
vorlon@debian.org                                   http://www.debian.org/