Medium ELSA-2021-1789 1 CVE

Moderate: gssdp and gupnp security update (Oracle Linux 8)

Published May 25, 2021 · Updated May 25, 2021

Ecosystem: Oracle Linux

Summary

gssdp
[1.0.5-1]
+ gssdp-1.0.5-1
- Update to 1.0.5
- Fix SUBSCRIBE misbehaviour
- Resolves: #1861928

gupnp
[1.0.6-1]
+ gupnp-1.0.6-1
- Update to 1.0.6
- Fix SUBSCRIBE misbehaviour
- Resolves: #1846589

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 8	gssdp	0:1.0.5-1.el8
Oracle Linux · 8	gssdp-devel	0:1.0.5-1.el8
Oracle Linux · 8	gssdp-docs	0:1.0.5-1.el8
Oracle Linux · 8	gupnp	0:1.0.6-1.el8
Oracle Linux · 8	gupnp-devel	0:1.0.6-1.el8

Vulnerabilities 1

Unscored —

CVE-2020-12695 Public exploit EPSS 15%

The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription …

wpa wpa hostapd libupnp Debian Ubuntu Alpine

Jun 8, 2020