Wednesday, November 6, 2019

[USN-4177-1] Rygel vulnerability

-----BEGIN PGP SIGNATURE-----
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=nfsc
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-4177-1
November 06, 2019

rygel vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 19.10

Summary:

The system could be made to expose sensitive information.

Software Description:
- rygel: GNOME UPnP/DLNA services

Details:

It was discovered that the Rygel package automatically started the daemon
by default in user sessions. In certain environments, this resulted in
media being shared contrary to expectations.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.10:
rygel 0.38.1-2ubuntu3.3

After a standard system update you need to restart your session to make
all the necessary changes.

References:
https://usn.ubuntu.com/4177-1
https://launchpad.net/bugs/1848692

Package Information:
https://launchpad.net/ubuntu/+source/rygel/0.38.1-2ubuntu3.3

No comments:

Post a Comment