Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

openSUSE: 2022:0079-1 Moderate: Minidlna DNS Rebinding Fix

opensuse
Calendar Grey March 10, 2022
Dist Opensuse Esm H88
A crucial security patch for minidlna in openSUSE rectifies a severe flaw related to provided installation guidelines.
An update that solves one vulnerability and has one errata is now available

Description

This update for minidlna fixes the following issues:

minidlna was updated to version 1.3.1 (boo#1196814)

- Fixed a potential crash in SSDP request parsing.

- Fixed a configure script failure on some platforms.

- Protect against DNS rebinding attacks. (CVE-2022-26505)

- Fix an socket leakage issue on some platforms.

- Minor bug fixes.

- add "su minidlna minidlna" to the logrotate config

- Added hardening to systemd service(s) (boo#1181400).

- Use sysusers macros to create minidlna user

- Don't hardrequire logrotate, we don't write log files anymore

Topics%20covered

Topics Covered

security advisory moderate software patch openSUSE minidlna DNS protection

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Backports SLE-15-SP3:

zypper in -t patch openSUSE-2022-79=1

Package List

- openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64):

minidlna-1.3.1-bp153.2.3.1

References

https://www.suse.com/security/cve/CVE-2022-26505.html

https://bugzilla.suse.com/1181400

https://bugzilla.suse.com/1196814

Announcement ID: openSUSE-SU-2022:0079-1
Rating: moderate
Affected Products: openSUSE Backports SLE-15-SP3 ble.

Topics%20covered

Topics Covered

security advisory moderate software patch openSUSE minidlna DNS protection

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here