Package: rygel
Version: 0.14.3-2
Severity: important

Dear Maintainer,


The current version of rygel which is part of Debian Wheezy contains a
possibly security issue:

When starting rygel preferences a second time (without having changed the
preferences) the sharing option is activated.

Therefore everyone starting rygel preferences for once, activates the uPnP
sharing function of all default folders (Music, Videos, Pictures)
unintentionally.

Considering the latest events with general uPnP security issues, this
might be a very serious security issue with might lead to compromising the
system.


I replicated the bug using Debian release candidate as well as even more
current versions. The gnome 3 fallback mode was used.

greetings


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to