Fedora 42: minidlna Important Stack-Buffer Overflow CVE-2023-47430
fedora
July 18, 2025
Avoid restarting minidlna.service when rotating logs if it's not running
Summary
MiniDLNA (aka ReadyDLNA) is server software with the aim of being fully
compliant with DLNA/UPnP-AV clients.
The minidlna daemon serves media files (music, pictures, and video) to clients
on your local network. Example clients include applications such as Totem and
XBMC, and devices such as portable media players, smartphones, and televisions.
Update Information:
Avoid restarting minidlna.service when rotating logs if it's not running. Fix CVE-2023-47430 .
Topics Covered
Change Log
* Mon Jul 7 2025 Dominik Mierzejewski <dominik@greysector.net> - 1.3.3-13 - use systemctl try-restart in postrotate script (resolves rhbz#2372859) - attempt to fix CVE-2023-47430 (resolves rhbz#2271621) * Tue May 27 2025 Jitka Plesnikova <jplesnik@redhat.com> - 1.3.3-12 - Rebuilt for flac 1.5.0 * Tue Feb 11 2025 Zbigniew J\u0119drzejewski-Szmek <zbyszek@in.waw.pl> - 1.3.3-11 - Drop call to %sysusers_create_compat
References
[ 1 ] Bug #2271621 - CVE-2023-47430 minidlna: Stack-buffer-overflow vulnerability in ReadyMedia [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2271621
[ 2 ] Bug #2372859 - Use `systemctl try-restart` in logrotate postrotate script
https://bugzilla.redhat.com/show_bug.cgi?id=2372859
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-9fb8ee63fb' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Name: minidlna
Product: Fedora 42
Version: 1.3.3
Release: 13.fc42
Summary: Lightweight DLNA/UPnP-AV server targeted at embedded systems
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!