Debian Security Advisory

DLA-2962-2 pjproject -- LTS security update

Date Reported:
31 Mar 2022
Affected Packages:
Security database references:
In Mitre's CVE dictionary: CVE-2022-23608.
More information:

The security update announced as DLA 2962-1 have a regression due to mistake in backported CVE-2022-23608 patch. Updated packages of pjproject are now available.

For Debian 9 stretch, this problem has been fixed in version 2.5.5~dfsg-6+deb9u4.

We recommend that you upgrade your pjproject packages.

For the detailed security status of pjproject please refer to its security tracker page at:

Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: