Accepted minidlna 1.2.1+dfsg-2+deb10u3 (source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 24 Mar 2022 22:03:02 +0100
Source: minidlna
Architecture: source
Version: 1.2.1+dfsg-2+deb10u3
Distribution: buster
Urgency: medium
Maintainer: Alexander GQ Gerasiov <gq@debian.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Closes: 1006798
Changes:
minidlna (1.2.1+dfsg-2+deb10u3) buster; urgency=medium
.
* Non-maintainer upload.
* CVE-2022-26505
Validate HTTP requests to protect against DNS rebinding, thus forbid
a remote web server to exfiltrate media files.
(Closes: #1006798)
Checksums-Sha1:
7dbdc1f19cfedda37198f0b3ee2ff96bfdcab600 2222 minidlna_1.2.1+dfsg-2+deb10u3.dsc
38a940863d4d5e45486efc28c0cd872d3e30f993 26832 minidlna_1.2.1+dfsg-2+deb10u3.debian.tar.xz
06d699b2ea9eda8d7f39d0bd06985627a71a41a1 9450 minidlna_1.2.1+dfsg-2+deb10u3_amd64.buildinfo
Checksums-Sha256:
f258b4dff58fffa2c5ee92bcdaad900034ea3c0bca7a5106c40ab8456c5745f7 2222 minidlna_1.2.1+dfsg-2+deb10u3.dsc
d141656a5b9f3b92b6a38293b01f6158ad37cb684e4928e942fedc6d46c538d9 26832 minidlna_1.2.1+dfsg-2+deb10u3.debian.tar.xz
95b4bee03bc4a6fede03b01796d761e9bdbec63af5f5cdbd6c23011330377553 9450 minidlna_1.2.1+dfsg-2+deb10u3_amd64.buildinfo
Files:
3563e95567231095e1ed2919182dcdf1 2222 net optional minidlna_1.2.1+dfsg-2+deb10u3.dsc
9de329cfaec4efcded4c529fc489b395 26832 net optional minidlna_1.2.1+dfsg-2+deb10u3.debian.tar.xz
a4d9c9f56f2c5b74b948d2be498b5377 9450 net optional minidlna_1.2.1+dfsg-2+deb10u3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=PVW8
-----END PGP SIGNATURE-----
Reply to: