-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 26 May 2019 22:47:10 +0100 Source: minissdpd Binary: minissdpd Architecture: source amd64 Version: 1.2.20130907-3+deb8u2 Distribution: jessie-security Urgency: high Maintainer: Thomas Goirand <zigo@debian.org> Changed-By: Chris Lamb <lamby@debian.org> Description: minissdpd - keep memory of all UPnP devices that announced themselves Closes: 929297 Changes: minissdpd (1.2.20130907-3+deb8u2) jessie-security; urgency=high . * CVE-2019-12106: Prevent a use-after-free vulnerability that would allow a remote attacker to crash the process. (Closes: #929297) Checksums-Sha1: 7de019a56dcb167fc8a9c9daa749eabe10a2257c 1944 minissdpd_1.2.20130907-3+deb8u2.dsc 9d548a55449e7eb2638631562cc35df9434b7a74 20237 minissdpd_1.2.20130907.orig.tar.gz 60ed2734e1d6fd8bd11eb136685c0d7b51ea023f 6696 minissdpd_1.2.20130907-3+deb8u2.debian.tar.xz 488d89f80e8875478545d7c27c7f17541f060315 19680 minissdpd_1.2.20130907-3+deb8u2_amd64.deb Checksums-Sha256: db81a04a729d77f7e77b78cb404af380f2341b527bdc6498d0e372fed6761237 1944 minissdpd_1.2.20130907-3+deb8u2.dsc 18bc5b9336947d63724c85402dbb8bb134eab2a2ba8ecae4446232f01683b468 20237 minissdpd_1.2.20130907.orig.tar.gz 7f9c7ec46031196e03ff1062c1a0c30712cb53e99b92d928b8f222a5fedc7299 6696 minissdpd_1.2.20130907-3+deb8u2.debian.tar.xz 0d5df96c5d0318bcd893fcd4582c66ae7c0691dabdafb17c6e6e9808286f2dbe 19680 minissdpd_1.2.20130907-3+deb8u2_amd64.deb Files: 28139f5b42f08c951106ed1bae68f0a4 1944 net optional minissdpd_1.2.20130907-3+deb8u2.dsc abe636faef155cd8f606bcb32cd257e9 20237 net optional minissdpd_1.2.20130907.orig.tar.gz 65c71ff3a5d1c9be87b3d5f54deb2714 6696 net optional minissdpd_1.2.20130907-3+deb8u2.debian.tar.xz d668dc44d9a7a4b983398830f83cdb4c 19680 net optional minissdpd_1.2.20130907-3+deb8u2_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAlzrCkQACgkQHpU+J9Qx HlgMzQ/+KuOoEopZHPgwaI3NbtKeLFpDtOUrJkvLKWV3eneADLI+M3/esXIigQET VaKP7H9mNr269L+6WsGodY7YsRlmtb1dEW18w/jBnp4EWQiYE2QTc4MF7TmE5ApY VUl4A+tpBTYh2im7Dzx1Qusd9R863BQENNS20/ugQlpn08oXch4X0+xtw6w8umxZ tcT8d0abrABhCuOwydW+VdLw+hdz/fMX0nVCjbuEvZABTJhu8TYBPAL5XUHvf5BU G7Q115IfjH2zWLFM6rkAGzuEbF6Ym3OjESZM3y1rijkMWrheDRDoG0Evp/6DxHO3 Ww7M+1ZkLAS+c33GXR1HHwkDPXuIbZYN56WPt81DPdOdLnm20qvJXhxmI0lvmokG OKfLom2gevWFEannlsvIZWkpSJYiftYxHJHM7LcbXFISXT7Al0N1Zo4U1ZKVS4Kr VgbLHYzZEsdH2LHvpNVOoo1Iy3VWrAQ5okKzM9naKmTf2B1so12soBeIVcR53/tu HlUIwp30Ve8806tedpBGD1s5VgpmLvIu9pPU8DuQGo8zOU8A2smpSESQ4gSDs5eq VR5Kck65/y31tbzjafpewcpkx72OgbrHivXeHkqjn1FhyFI4dfD06de/bW+iNfV5 PP8z8IiXGRjOfAyYEhS2TzByPvweJQAbkXRdGpo7MvCOEsyQyMo= =Hk7q -----END PGP SIGNATURE-----