*** This bug is a security vulnerability ***

You have been subscribed to a public security bug:

In a default installation, the daap plugin is enabled, and listens to
port 3689 (daap).

tcp        0      0 *:daap                  *:*
LISTEN      guest-43a0me 72019       -

Ubuntu has a "no open ports by default" policy.[1][2]

[1] https://bugs.launchpad.net/ubuntu/+source/banshee/+bug/753986
[2] https://wiki.ubuntu.com/SecurityTeam/Policies#No_Open_Ports

Please resolve this e.g. by updating rhythmbox not to listen on a port
by default, or documenting rhythmbox as an exception to the security
policy.

---

Ubuntu 16.04.4 LTS
rhythmbox 3.3-1ubuntu7

** Affects: rhythmbox (Ubuntu)
     Importance: Undecided
         Status: New

-- 
 daap plugin opens port by default
https://bugs.launchpad.net/bugs/1771196
You received this bug notification because you are a member of Ubuntu Desktop 
Bugs, which is subscribed to rhythmbox in Ubuntu.

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

Reply via email to