Debian/janus: critical 9.8
An issue was discovered in Janus through 0.9.1. janus.c tries to use a string that doesn't actually exist during a "query_logger" Admin API request, because of a typo in the JSON validation.
Action: Upgrade janus to 0.9.1+20200313-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.1+20200313-1 | - |
Fixed versions
| 0.9.1+20200313-1 |
Sources
- osv: DEBIAN-CVE-2020-10574#Debian:14/janus
- https://security-tracker.debian.org/tracker/CVE-2020-10574
published · modified · JSON