Jörg Krause 0f23267bc2 package/libupnp: security bump to version 1.14.6 ...

The server part of pupnp (libupnp) appears to be vulnerable to DNS-rebinding
attacks because it does not check the value of the `Host` header.

Fixes CVE-2021-29462

https://github.com/pupnp/pupnp/security/advisories/GHSA-6hqq-w3jq-9fhg

Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>

2021-04-23 23:21:19 +02:00

..

Config.in

…

libupnp.hash

package/libupnp: security bump to version 1.14.6

2021-04-23 23:21:19 +02:00

libupnp.mk

package/libupnp: security bump to version 1.14.6

2021-04-23 23:21:19 +02:00