[SECURITY] [DLA 2489-1] minidlna security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian LTS Advisory DLA-2489-1 debian-lts@lists.debian.org
https://www.debian.org/lts/security/ Thorsten Alteholz
December 10, 2020 https://wiki.debian.org/LTS
- -------------------------------------------------------------------------
Package : minidlna
Version : 1.1.6+dfsg-1+deb9u1
CVE ID : CVE-2020-12695 CVE-2020-28926
It was discovered that missing input validation in minidlna, a lightweight
DLNA/UPnP-AV server could result in the execution of arbitrary code. In
addition minidlna was susceptible to the "CallStranger" UPnP
vulnerability.
For Debian 9 stretch, these problems have been fixed in version
1.1.6+dfsg-1+deb9u1.
We recommend that you upgrade your minidlna packages.
For the detailed security status of minidlna please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/minidlna
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
iQKSBAEBCgB9FiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAl/SkslfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy
MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcACgkQlvysDTh7
WEd0zw/1H0PlffGTV/1iAWtvHPFwyboSQ7eDem1StRs+cDYh4VuAezGAtoMfH/Ik
HjuOFJFAzJi4ItbUp2KfWgASJIFNCo5k0/h2bnCGWD7bf4VaGqt/9WAsojrTkh39
AnWGox+Z1Ss2AOgg/RU9aA2n+PrSvaEO8oNA+CuKER6Kiq4BBMkJnI2v6KW6vfAa
v7c1vw+EEPcoE3fphBooAbekxF/T6aLpbqjL1Hs5cTDOXDWwZxw3stANoXMVF+iY
skxWnL7Tv9o2tyInW+CbCtC1dW3nP42s+Clj4QxpVXSfgOYPTKbk2WMIKXno3WFh
FlnJWFhoyAYY+yaatFwouFTkiDrI+TH1nIoE8FZzeNK3olO8W8U94ywoGJ+tgiBn
aySedmpKG2Dtwp38uu+ANKMloHvElDQM4prbe227ccZoNex4L2kThA0DfJMtVkPW
tWEoFQ9exgXguur9J2FkqaLI0WRxVPKuZ+m/BkYvOUlhGyZVkq2vLg3xNfIg4YBr
gno0Mf4I0AYFDXJD0gf95RpDuFe7BIdyzqCtP1iXZD5sG4U+tBwOOlR0vbAVw3R6
7DOC7OZfeoUzpHotH2n99HKQNms7/yO5F+lk2SHqZgr7pNptWcHrvQfWD54wpj0I
o24f57+LwCYvN4NlWbaC6UJ/jUnRMYKEBJtKkE3urDR3gJ5qXA==
=Ra8O
-----END PGP SIGNATURE-----
Reply to: