-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 09 Apr 2022 22:03:02 +0200 Source: minidlna Binary: minidlna Architecture: source amd64 Version: 1.1.6+dfsg-1+deb9u2 Distribution: stretch-security Urgency: high Maintainer: Alexander GQ Gerasiov <gq@debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Description: minidlna - lightweight DLNA/UPnP-AV server targeted at embedded systems Changes: minidlna (1.1.6+dfsg-1+deb9u2) stretch-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2022-26505 Validate HTTP requests to protect against DNS rebinding, thus forbid a remote web server to exfiltrate media files. Checksums-Sha1: 30dd91e6cbf5f78486c9125175a3a4ae06ebc5cb 2250 minidlna_1.1.6+dfsg-1+deb9u2.dsc 130c1c077a83c986544cf39086e28e566673c10e 152884 minidlna_1.1.6+dfsg.orig.tar.xz fe4752c27a132030187c85b4222bd8076f4d41e5 29124 minidlna_1.1.6+dfsg-1+deb9u2.debian.tar.xz cb35c277d5a83516d6ccdb71ac9815a54401713a 290190 minidlna-dbgsym_1.1.6+dfsg-1+deb9u2_amd64.deb d52c8afeab16b85cdbaeadb6740444ce19a8b496 9106 minidlna_1.1.6+dfsg-1+deb9u2_amd64.buildinfo da406b97fa746f6c9f89261c09663a23b7f7a8d6 147158 minidlna_1.1.6+dfsg-1+deb9u2_amd64.deb Checksums-Sha256: a62ca22e7e32455ccfd3cf1cac4625ea2047c431e396f4809fb20a8d85d9b952 2250 minidlna_1.1.6+dfsg-1+deb9u2.dsc 1cd9e96c357161ec1b622ff0e72810e45d8a886261941041240e16c401b85a15 152884 minidlna_1.1.6+dfsg.orig.tar.xz afee3e4fb39d8e50df41484839c0516289a6717b4daa8071ddc3ee75e132047e 29124 minidlna_1.1.6+dfsg-1+deb9u2.debian.tar.xz 56b3e496be83bce323b2fd2ac8c51e56127c0d05a8d89322438a448ddc68c049 290190 minidlna-dbgsym_1.1.6+dfsg-1+deb9u2_amd64.deb a905cdb40cb89337776237e4fcea70841e7218c2a8b47d12ae62012fbeaa3b93 9106 minidlna_1.1.6+dfsg-1+deb9u2_amd64.buildinfo 685d04f8b71848d2dd25339f89559c2a65242d068901886d38bb59881006e5f8 147158 minidlna_1.1.6+dfsg-1+deb9u2_amd64.deb Files: 157df0ecc0c78586264fcbc1c6584f22 2250 net optional minidlna_1.1.6+dfsg-1+deb9u2.dsc 9e8474a9f5319772df37d9bc2310aa4b 152884 net optional minidlna_1.1.6+dfsg.orig.tar.xz d35b2d974c1653455618bc93fa90a111 29124 net optional minidlna_1.1.6+dfsg-1+deb9u2.debian.tar.xz 08b14063a71dd5db4ff71d5c0eee9ee7 290190 debug extra minidlna-dbgsym_1.1.6+dfsg-1+deb9u2_amd64.deb b4ccef1eafdfef43f1a80d51e2768219 9106 net optional minidlna_1.1.6+dfsg-1+deb9u2_amd64.buildinfo a039963f92682d19ae69d1c2d6590a5c 147158 net optional minidlna_1.1.6+dfsg-1+deb9u2_amd64.deb -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmJSAuhfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR9ddD/4tf+nWmtRz+Nogi0Oz73JFi+h59eV2 rJOhNWdkUpAn/87+9jYBzB4q9XHTE5lWFao/gWnq9FzV13XXCr4r4qe1UP4GapoJ 7L0ZbTvNg1zxXY6NgdUpvPT0pBnUUlj87M///f2PwVFdmQsh5suU2IjRoQ+PU5Jn 6511UD8QO9KHgydLvpvKus7UQ8YpACZaaVVs4SrTZbCcjeOsZENw1uIVgerlMUvo 0BKuiYnEc3GYBf4gn0zANnCh96kndNTSxjgDyDpm8nKmTrfLdLEXKywWzi1nWKv1 RCxRl9UH/+8a+n2DuTP9vPokZ0xEA7LMAyLqlXX0QpL+DR7dcyDw1LBS09KA5vEN u2w5fz6tNWQAX4Q9o9gnkPuQitX7MaWbvrN8cV9+O3hP8AG8Am6au2atbhxDH6Bk 4iEyckZyFyjMyQ61zJxJ6pHlUuMP3hFjB8IvqV5qlYqWl3TI0pkpbkGG45c+5GLj VL7yL0smnLsL9kLbn4/LZnbszS3ae9ErYVZj1t046uD8fZiLPHVAIpgdCBuST0fl Lkc3Mau+idBeqmfGd+EMx5y4+rGl2ydJiISAu0ZiSivjvoF2t7g1/9Se4cxGPhuS r6S0y1lFsRL7SkGEd8/aztKeU73EJlfVMJUjk3GFRcef91BZbcXEZy92Q3B2P8il vStXDCX2KqZWaA== =H7Me -----END PGP SIGNATURE-----
