Information on source package minidlna

Available versions

ReleaseVersion
jessie1.1.2+dfsg-1.1+deb8u1
stretch1.1.6+dfsg-1+deb9u2
buster1.2.1+dfsg-2+deb10u4
bullseye1.3.0+dfsg-2+deb11u2
bookworm1.3.0+dfsg-2.2+deb12u1
trixie1.3.3+dfsg-1.1
sid1.3.3+dfsg-1.1

Open issues

BugjessiestretchbusterbullseyebookwormtrixiesidDescription
CVE-2023-47430vulnerablevulnerablevulnerablevulnerablevulnerablevulnerablevulnerableStack-buffer-overflow vulnerability in ReadyMedia (MiniDLNA) v1.3.3 al ...
CVE-2023-33476vulnerablevulnerablefixedfixedfixedfixedfixedReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable t ...
CVE-2022-26505vulnerablefixedfixedfixedfixedfixedfixedA DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1.3.1 a ...
CVE-2020-28926vulnerablefixedfixedfixedfixedfixedfixedReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code exe ...
CVE-2020-12695vulnerablefixedfixedfixedfixedfixedfixedThe Open Connectivity Foundation UPnP specification before 2020-04-17 ...

Resolved issues

BugDescription
CVE-2013-2745An SQL Injection vulnerability exists in MiniDLNA prior to 1.1.0
CVE-2013-2739MiniDLNA has heap-based buffer overflow
CVE-2013-2738minidlna has SQL Injection that may allow retrieval of arbitrary files

Security announcements

DSA / DLADescription
DSA-5434-1minidlna - security update
DLA-3465-1minidlna - security update
DLA-2973-1minidlna - security update
ELA-591-1minidlna - security update
DSA-4806-2minidlna - regression update
DLA-2489-1minidlna - security update
DSA-4806-1minidlna - security update
Search for package or bug name: Reporting problems