-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 20 Jul 2026 14:16:51 -0700 Source: rtpengine Architecture: source Version: 10.5.3.5-1+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: Debian VoIP Team <pkg-voip-maintainers@lists.alioth.debian.org> Changed-By: Chris Lamb <lamby@debian.org> Closes: 1110316 Changes: rtpengine (10.5.3.5-1+deb12u1) bookworm-security; urgency=high . * Non-maintainer upload by the Debian LTS team. * CVE-2025-53399: Fix an origin-validation error. The endpoint-learning logic of the media-relay core could have allowed an remote attacker to inject or intercept media streams via malicious RTP packets. (Closes: #1110316) Checksums-Sha1: efa3fc4701c0c50619a07f20bf28ae8c7c1fe05a 3237 rtpengine_10.5.3.5-1+deb12u1.dsc 11d8de965400f8efa680b9ffa52ff304589bbce5 810407 rtpengine_10.5.3.5.orig.tar.gz 3e2f10d7935e9960c8d9d67f540f15892d0891a2 9556 rtpengine_10.5.3.5-1+deb12u1.debian.tar.xz 37c99987f2652d108778b0768f15850f64e9165c 6286 rtpengine_10.5.3.5-1+deb12u1_source.buildinfo Checksums-Sha256: 29834b592e3970ec0012a9ed12e242ce35232227df243fe61156f160644e72f0 3237 rtpengine_10.5.3.5-1+deb12u1.dsc 5fa31f11ab54c8d503c799ec2bd21561abf110bc238892dc79c4a2e603775923 810407 rtpengine_10.5.3.5.orig.tar.gz 535b5160ac591df0b24a6dfd0ce1ab133ad756c5580442f99918b37c8f41c69a 9556 rtpengine_10.5.3.5-1+deb12u1.debian.tar.xz 7f6f7d021f26cd1efb79ad0ee293871c8b342d699c2f3968c92f28be82afb950 6286 rtpengine_10.5.3.5-1+deb12u1_source.buildinfo Files: c94df7b774acd396f2314a3a061800ee 3237 net optional rtpengine_10.5.3.5-1+deb12u1.dsc 0a2331fc0969dbf7f23b6919df0bd17b 810407 net optional rtpengine_10.5.3.5.orig.tar.gz a419fed7ff856a1107d3611c1c992708 9556 net optional rtpengine_10.5.3.5-1+deb12u1.debian.tar.xz 06f189a4d34691c3fdfbd304f2fa51f5 6286 net optional rtpengine_10.5.3.5-1+deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAmpfmE8ACgkQHpU+J9Qx HlhqTQ/+Jgm8rfFT6x1eAeUOVM3EUDVoI1W5leu6N/4t38HWs4LClNQcWqVM7hrA riN7OX/8nU3Cyma0sJn5H0Nhy5g9AdKkXZApC2G1wLHb5tUfvdEjHaAuxTpersGq 95qhdMsr6+mn8NssbN4JFFf7rvDRwTdBXNj4+btjxXQdKijMo4Zvhl91l1fT6fGm AYgRklWokImhLJlToJGV8kU+yl9EpGCbjmCpYewW8N6FyH7QvPpNVHSZwGagEloU mR5tpfigYgvkVB+4RnzYSSVGcpHHjlNJ9S+rxm8CkNOxZYSZ9gdHbem0Ua4oFvqE kCnI6SYRIKgrWFHuiCeAIPIEKNKQZpqJY55gsFcmWYEeX99zNz6EELLnPMmm5n8Z NHE4UscE3ZJcrYc6OMB+RqTg5MdahexgPsJUNwGuukJJspphrd9LG+y4Q5A/vcDF 2SVYTgznVL8dhei8nNcrb8lP+YVlB0tpGYk+Brr0gqW4iwxw+IUu4yPWWX3uELg/ +Wx+ewMmpFFUHDnqGK6AY36CdOLKxD+PG9aweny5rXFtcEU5UuGd3SaVwGf2jBnP aGXk8Xy9kFrKDzAmwEmZ7vRQZeoTyf2CgWJJ3ebyBhMGEpUZKFJg7lS9FYfpVrFL oGynLjE1BtrlYh2yYaGWC/7CAxwTDL/6g2v/32VbmFhoJHm+eeY= =hZmO -----END PGP SIGNATURE-----
