[ubuntu/focal-security] minidlna 1.2.1+dfsg-1ubuntu0.20.04.2 (Accepted)

Allen Huang allen.huang at canonical.com
Wed Sep 27 09:24:25 UTC 2023


minidlna (1.2.1+dfsg-1ubuntu0.20.04.2) focal-security; urgency=medium

  * SECURITY UPDATE: DNS rebinding attack
    - debian/patches/CVE-2022-26505.patch: validate HTTP requests to
      protect against DNS rebinding.
    - CVE-2022-26505
  * SECURITY UPDATE: buffer overflow
    - debian/patches/CVE-2023-33476.patch: fix chunk length parsing.
    - CVE-2023-33476

Date: 2023-09-26 09:08:15.806278+00:00
Changed-By: Allen Huang <allen.huang at canonical.com>
https://launchpad.net/ubuntu/+source/minidlna/1.2.1+dfsg-1ubuntu0.20.04.2
-------------- next part --------------
Sorry, changesfile not available.


More information about the Focal-changes mailing list