minidlna (1.1.5+dfsg-2ubuntu0.1) xenial-security; urgency=medium
* SECURITY UPDATE: Insufficient input sanitization vulnerability
- debian/patches/CVE-2020-12695.patch: upnphttp: Validate SUBSCRIBE
callback URL.
- debian/patches/CVE-2020-28926.patch: upnphttp: Disallow negative HTTP
chunk lengths.
- CVE-2020-12695
- CVE-2020-28926
* Other fixes:
- debian/patches/15-use-newer-ip_multicast_if-api.patch: Use newer
API for IP_MULTICAST_IF which allows one to specify interface by
index, not by address.
Date: 2021-02-02 20:06:09.223295+00:00
Changed-By: Paulo Flabiano Smorigo <pfsmor...@canonical.com>
Signed-By: Ubuntu Archive Robot
<cjwatson+ubuntu-archive-ro...@chiark.greenend.org.uk>
https://launchpad.net/ubuntu/+source/minidlna/1.1.5+dfsg-2ubuntu0.1
Sorry, changesfile not available.
--
Xenial-changes mailing list
Xenial-changes@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/xenial-changes
