[Pkg-voip-commits] [asterisk] 02/02: Changelog for 1:11.13.1~dfsg-2+deb8u3

[Bernhard Schmidt]

This is an automated email from the git hooks/post-receive script.

berni pushed a commit to branch jessie
in repository asterisk.

commit 363060a5f1042abc2d394976f1005fffaf96b93f
Author: Bernhard Schmidt <berni at debian.org>
Date:   Sat Sep 2 22:48:06 2017 +0200

    Changelog for 1:11.13.1~dfsg-2+deb8u3
---
 debian/changelog | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index 0dd377b..e6d8d99 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,12 @@
+asterisk (1:11.13.1~dfsg-2+deb8u3) jessie-security; urgency=high
+
+  * CVE-2017-14099 / AST-2017-005
+    Media takeover in RTP stack ("RTP bleed") (Closes: #873907)
+  * CVE-2017-14100 / AST-2017-006
+    Shell access command injection in app_minivm (Closes: #873908)
+
+ -- Bernhard Schmidt <berni at debian.org>  Sat, 02 Sep 2017 22:46:15 +0200
+
 asterisk (1:11.13.1~dfsg-2+deb8u2) jessie; urgency=medium
 
   * AST-2016-009: non-printable ASCII chars treated as whitespace (CVE-2016-9938)

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-voip/asterisk.git