UbuntuUpdates.org

Package "miniupnpc"

Name: miniupnpc

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • UPnP IGD client lightweight library development files
  • UPnP IGD client lightweight library
Latest version: 1.9.20140610-2ubuntu2.16.04.2
Release: xenial (16.04)
Level: security
Repository: main

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "miniupnpc" in Xenial

Repository Area Version
base main 1.9.20140610-2ubuntu2
base universe 1.9.20140610-2ubuntu2
security universe 1.9.20140610-2ubuntu2.16.04.2
updates main 1.9.20140610-2ubuntu2.16.04.2
updates universe 1.9.20140610-2ubuntu2.16.04.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.9.20140610-2ubuntu2.16.04.2 2018-02-07 20:06:37 UTC

  miniupnpc (1.9.20140610-2ubuntu2.16.04.2) xenial-security; urgency=medium

  * SECURITY UPDATE: multiple overflows
    - debian/patches/CVE-2017-1000494-1.patch: properly initialize data
      structure for SOAP parsing in upnpreplyparse.c.
    - debian/patches/CVE-2017-1000494-2.patch: fix heap buffer overflow in
      minixml.c.
    - CVE-2017-1000494

 -- Marc Deslauriers <email address hidden> Wed, 31 Jan 2018 13:46:02 -0500
Source diff to previous version

Version: 1.9.20140610-2ubuntu2.16.04.1 2017-05-24 14:06:47 UTC

  miniupnpc (1.9.20140610-2ubuntu2.16.04.1) xenial-security; urgency=medium

  * SECURITY UPDATE: integer signedness error
    - debian/patches/CVE-2017-8798_integer_signedness_error.patch: fix
      comparisons in miniwget.c.
    - CVE-2017-8798
  * SECURITY UPDATE: buffer overflow in simpleUPnPcommand2
    - debian/patches/More_accurate_checking_*.patch: perform better
      checking while writing buffer in miniupnpc.c.
    - No CVE number

 -- Marc Deslauriers <email address hidden> Fri, 19 May 2017 11:18:26 -0400
CVE-2017-8798 Integer signedness error in MiniUPnP MiniUPnPc v1.4.20101221 through v2.0 allows remote attackers to cause a denial of service or possibly have unspe


About   -   Send Feedback to @ubuntu_updates