-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 24 Mar 2022 22:03:02 +0100 Source: minidlna Architecture: source Version: 1.2.1+dfsg-2+deb10u3 Distribution: buster Urgency: medium Maintainer: Alexander GQ Gerasiov <gq@debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Closes: 1006798 Changes: minidlna (1.2.1+dfsg-2+deb10u3) buster; urgency=medium . * Non-maintainer upload. * CVE-2022-26505 Validate HTTP requests to protect against DNS rebinding, thus forbid a remote web server to exfiltrate media files. (Closes: #1006798) Checksums-Sha1: 7dbdc1f19cfedda37198f0b3ee2ff96bfdcab600 2222 minidlna_1.2.1+dfsg-2+deb10u3.dsc 38a940863d4d5e45486efc28c0cd872d3e30f993 26832 minidlna_1.2.1+dfsg-2+deb10u3.debian.tar.xz 06d699b2ea9eda8d7f39d0bd06985627a71a41a1 9450 minidlna_1.2.1+dfsg-2+deb10u3_amd64.buildinfo Checksums-Sha256: f258b4dff58fffa2c5ee92bcdaad900034ea3c0bca7a5106c40ab8456c5745f7 2222 minidlna_1.2.1+dfsg-2+deb10u3.dsc d141656a5b9f3b92b6a38293b01f6158ad37cb684e4928e942fedc6d46c538d9 26832 minidlna_1.2.1+dfsg-2+deb10u3.debian.tar.xz 95b4bee03bc4a6fede03b01796d761e9bdbec63af5f5cdbd6c23011330377553 9450 minidlna_1.2.1+dfsg-2+deb10u3_amd64.buildinfo Files: 3563e95567231095e1ed2919182dcdf1 2222 net optional minidlna_1.2.1+dfsg-2+deb10u3.dsc 9de329cfaec4efcded4c529fc489b395 26832 net optional minidlna_1.2.1+dfsg-2+deb10u3.debian.tar.xz a4d9c9f56f2c5b74b948d2be498b5377 9450 net optional minidlna_1.2.1+dfsg-2+deb10u3_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmLtpXNfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR3+mEAC9mqTX8QplWsHlVjBYIp64bz9+1Qm9 N11XPFHMtzHJRF32TXefSYWx7t5oYqh3sG3rHhAg/rElHhWgQx4uhuMoW7rKVNgo DdbE0iL22Wp5NIpWOGUZUap4ndvkE+aZao5Pk6POvP3umVomA58L7ZmlW+L/+0vE tRzpCdugeXNDX7Vl8xAUGA52uhziemmfjPJJDy8DbhDDPbIxi6tYpZT8sPucjHb7 GS06kIoBmTlmXMw/h9rrdzvRrT8h3m1Qcv6Y6qQNbCZtw+qIrQGkl0RxAZKpbOOp gu2WJAklR57vD9aZSC3lwvywfBA2qVzV3useJCzHGsvOkPtzPh84vo4vnN4J2ZSU POdmmlcOfyOZ7BLR04tFeWfFZvqogYPqtVzPDabxMluO52ZwkKUpApDAflyDCo4Z 3vqkNr0nsrcFOmHwXznIcbdrhUQuiFj95aCtt463TFJ+ERoJf71XF+0u+74Up+fv 79sfrgbfXafGjzvtivbC4VeuoSj0FkcPE42b6gp6Q1M2Sm3wsu8Nfe8cbOTyHnFG doarCzneVJKzk5m0GkwLB9pTjszjVFQKTZm6yeYKc0U+q1pgp3qbL3kJiWjCd2K4 2sAQC7QEHGq92utJtxOHcH8sc7PmXDzmjYm5mKil33BnRcBXsFRmn/1vWHlwh3BS bQcSyTo3Jr+h4A== =PVW8 -----END PGP SIGNATURE-----