CVE-2020-28926

ReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code execution. Sending a malicious UPnP HTTP request to the miniDLNA service using HTTP chunked encoding can lead to a signedness bug resulting in a buffer overflow in calls to memcpy/memmove.

ReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code execution. Sending a malicious UPnP HTTP request to the miniDLNA service using HTTP chunked encoding can lead to a signedness bug resulting in a buffer overflow in calls to memcpy/memmove.

It was discovered that minidlna does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue (CVE-2020-12695).

Minidlna before versions 1.3.0 allows remote code execution. Sending a malicious UPnP HTTP request to the miniDLNA service using HTTP chunked encoding can lead to a signedness bug resulting in a buffer overflow in calls to memcpy/memmove (CVE-2020-28926).

This update for minidlna fixes the following issues:

minidlna was updated to version 1.3.0 (boo#1179447)

• Fixed some build warnings when building with musl.
• Use $USER instead of $LOGNAME for the default friendly name.
• Fixed build with GCC 10
• Fixed some warnings from newer compilers
• Disallow negative HTTP chunk lengths. [CVE-2020-28926]
• Validate SUBSCRIBE callback URL. [CVE-2020-12695]
• Fixed spurious warnings with ogg coverart
• Fixed an issue with VLC where browse results would be truncated.
• Fixed bookmarks on Samsung Q series
• Added DSD file support.
• Fixed potential stack smash vulnerability in getsyshwaddr on macOS.
• Will now reload the log file on SIGHUP.
• Worked around bad SearchCriteria from the Control4 Android app.
• Increased max supported network addresses to 8.
• Added forced alphasort capability.
• Added episode season and number metadata support.
• Enabled subtitles by default for unknown DLNA clients, and add enable_subtitles config option.
• Fixed discovery when connected to certain WiFi routers.
• Added FreeBSD kqueue support.
• Added the ability to set the group to run as.

This update for minidlna fixes the following issues:

minidlna was updated to version 1.3.0 (boo#1179447)

• Fixed some build warnings when building with musl.
• Use $USER instead of $LOGNAME for the default friendly name.
• Fixed build with GCC 10
• Fixed some warnings from newer compilers
• Disallow negative HTTP chunk lengths. [CVE-2020-28926]
• Validate SUBSCRIBE callback URL. [CVE-2020-12695]
• Fixed spurious warnings with ogg coverart
• Fixed an issue with VLC where browse results would be truncated.
• Fixed bookmarks on Samsung Q series
• Added DSD file support.
• Fixed potential stack smash vulnerability in getsyshwaddr on macOS.
• Will now reload the log file on SIGHUP.
• Worked around bad SearchCriteria from the Control4 Android app.
• Increased max supported network addresses to 8.
• Added forced alphasort capability.
• Added episode season and number metadata support.
• Enabled subtitles by default for unknown DLNA clients, and add enable_subtitles config option.
• Fixed discovery when connected to certain WiFi routers.
• Added FreeBSD kqueue support.
• Added the ability to set the group to run as.

This update for minidlna fixes the following issues:

minidlna was updated to version 1.3.0 (boo#1179447)

• Fixed some build warnings when building with musl.
• Use $USER instead of $LOGNAME for the default friendly name.
• Fixed build with GCC 10
• Fixed some warnings from newer compilers
• Disallow negative HTTP chunk lengths. [CVE-2020-28926]
• Validate SUBSCRIBE callback URL. [CVE-2020-12695]
• Fixed spurious warnings with ogg coverart
• Fixed an issue with VLC where browse results would be truncated.
• Fixed bookmarks on Samsung Q series
• Added DSD file support.
• Fixed potential stack smash vulnerability in getsyshwaddr on macOS.
• Will now reload the log file on SIGHUP.
• Worked around bad SearchCriteria from the Control4 Android app.
• Increased max supported network addresses to 8.
• Added forced alphasort capability.
• Added episode season and number metadata support.
• Enabled subtitles by default for unknown DLNA clients, and add enable_subtitles config option.
• Fixed discovery when connected to certain WiFi routers.
• Added FreeBSD kqueue support.
• Added the ability to set the group to run as.

This update was imported from the openSUSE:Leap:15.2:Update update project.

This update for minidlna fixes the following issues:

minidlna was updated to version 1.3.0 (boo#1179447)

• Fixed some build warnings when building with musl.
• Use $USER instead of $LOGNAME for the default friendly name.
• Fixed build with GCC 10
• Fixed some warnings from newer compilers
• Disallow negative HTTP chunk lengths. [CVE-2020-28926]
• Validate SUBSCRIBE callback URL. [CVE-2020-12695]
• Fixed spurious warnings with ogg coverart
• Fixed an issue with VLC where browse results would be truncated.
• Fixed bookmarks on Samsung Q series
• Added DSD file support.
• Fixed potential stack smash vulnerability in getsyshwaddr on macOS.
• Will now reload the log file on SIGHUP.
• Worked around bad SearchCriteria from the Control4 Android app.
• Increased max supported network addresses to 8.
• Added forced alphasort capability.
• Added episode season and number metadata support.
• Enabled subtitles by default for unknown DLNA clients, and add enable_subtitles config option.
• Fixed discovery when connected to certain WiFi routers.
• Added FreeBSD kqueue support.
• Added the ability to set the group to run as.

This update was imported from the openSUSE:Leap:15.1:Update update project.

These are all security issues fixed in the minidlna-1.3.0-2.7 package on the GA media of openSUSE Tumbleweed.

It was discovered that ReadyMedia (MiniDLNA) allowed subscription requests with a delivery URL on a different network segment than the fully qualified event- subscription URL. An attacker could use this to hijack smart devices and cause denial of service attacks. (CVE-2020-12695)

It was discovered that ReadyMedia (MiniDLNA) allowed remote code execution. A remote attacker could send a malicious UPnP HTTP request to the service using HTTP chunked encoding and cause a denial of service. (CVE-2020-28926)