0f23267bc2
The server part of pupnp (libupnp) appears to be vulnerable to DNS-rebinding attacks because it does not check the value of the `Host` header. Fixes CVE-2021-29462 https://github.com/pupnp/pupnp/security/advisories/GHSA-6hqq-w3jq-9fhg Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> |
||
|---|---|---|
| .. | ||
| Config.in | ||
| libupnp.hash | ||
| libupnp.mk | ||