Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/asterisk@1:16.28.0~dfsg-0%2Bdeb11u8?distro=sid
purl pkg:deb/debian/asterisk@1:16.28.0~dfsg-0%2Bdeb11u8?distro=sid
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-43ff-97jw-hkce Multiple vulnerabilities have been discovered in Asterisk, the worst of which can lead to arbitrary code execution. CVE-2025-1131
VCID-63fe-saga-13ct Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 18.26.4 and 18.9-cert17, RTP UDP ports and internal resources can leak due to a lack of session termination. This could result in leaks and resource exhaustion. This issue has been patched in versions 18.26.4 and 18.9-cert17. CVE-2025-54995

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T09:50:05.843588+00:00 Debian Importer Fixing VCID-63fe-saga-13ct https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:28:25.872356+00:00 Debian Importer Fixing VCID-43ff-97jw-hkce https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-12T17:46:43.318446+00:00 Debian Importer Fixing VCID-63fe-saga-13ct https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-12T17:46:43.158772+00:00 Debian Importer Fixing VCID-43ff-97jw-hkce https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-02T17:14:44.867963+00:00 Debian Importer Fixing VCID-63fe-saga-13ct https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:07:25.872393+00:00 Debian Importer Fixing VCID-43ff-97jw-hkce https://security-tracker.debian.org/tracker/data/json 38.1.0