-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 24 Mar 2022 22:03:02 +0100 Source: minidlna Architecture: source Version: 1.3.0+dfsg-2+deb11u1 Distribution: bullseye Urgency: medium Maintainer: Alexander GQ Gerasiov <gq@debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Closes: 1006798 Changes: minidlna (1.3.0+dfsg-2+deb11u1) bullseye; urgency=medium . * Non-maintainer upload. * CVE-2022-26505 Validate HTTP requests to protect against DNS rebinding, thus forbid a remote web server to exfiltrate media files. (Closes: #1006798) Checksums-Sha1: efebe3f0a6a581441b08b75e464540a01da6d651 2218 minidlna_1.3.0+dfsg-2+deb11u1.dsc a67f5d10d858485e56a940b8af4f664952caf18d 24224 minidlna_1.3.0+dfsg-2+deb11u1.debian.tar.xz 9027959be5de87eccfbf5f80fd40f0120980b71d 9712 minidlna_1.3.0+dfsg-2+deb11u1_amd64.buildinfo Checksums-Sha256: c98815493e7a3de5241c6dc78db1febf667914fdd2b0f27d8890fd139b1fe73f 2218 minidlna_1.3.0+dfsg-2+deb11u1.dsc d3bf17123306d906d68437b4998bf143d29f4a24673c4141b7f2caa7521bbdb8 24224 minidlna_1.3.0+dfsg-2+deb11u1.debian.tar.xz 5e36dd79788ae0a708574e0e9289efeef2b59cb5a46a73b6cdaedafb19007f25 9712 minidlna_1.3.0+dfsg-2+deb11u1_amd64.buildinfo Files: f4be57e75598e5a6c746c067e8f852da 2218 net optional minidlna_1.3.0+dfsg-2+deb11u1.dsc 8a76420ba3f75817cde63af1c058bde0 24224 net optional minidlna_1.3.0+dfsg-2+deb11u1.debian.tar.xz df9330bb2c9288e013376ed76fabb6d3 9712 net optional minidlna_1.3.0+dfsg-2+deb11u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmKVNsFfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR8GLD/9i4mV9A4pbOsDqf5tvUQDb3qVXnEhJ fMYYDuCT9FE6sh40W3wnKwV+5Fm3KygbzfkYTYA3Be7yOBScER4MuQrjzYMR8KsH 9p6IqtO3TFxMs+wI+5jpNIRZP1wn8VbybFSBjfVOBGNTsl80nTVhVkkLeQginRww o3P7lOFFx6ERV9SAW9M42HZr97qXVFISZFmdWNUzR3OaCuO/JVOzC+cPNz01q0lM eW5FZhgTXiHWAcXJjC4Fz+UdNh8e0zodB67jRh/4VcBik4zFbfNn4hjqzoIHARav xjVDTZj6EITWq7AVaJphEx77vPmOMR/5AlsotVoVnfz9nLGwsVFzcW5lLSiGxAww PuObSlNEjUMft/P9xXR2KtvHSLoLJ/SVusECg429d8curQlrsdZM5bYYg3hZNvtZ bl3glRJzGRobiam7l0kfU4bWhP3AnUXS9VpoRyoCvLdG/eGH9sLtQGGFkKuB8hDc CiPnetyq32a9sD9VWEuMRts4Iv9CGltxT6C1u++kd67KFKn8l3eW92j0gOf3AswV ZImGADK0gt5FK3k/t0twobDQniLm7FUXcBc2GE2BLT9hzAbm85JwqBC6SjNvA576 e2AHTs9TlyGgrviddCIdwZZ6q8+EYyeq34pl0KHWQ914ZYLQ26dBvsiJzlQ9+x0E xG5RFQF9xYXLxQ== =9FpY -----END PGP SIGNATURE-----