Source: libupnp Version: 1:1.6.19+git20141001-1 Severity: grave Tags: security upstream
Hi, the following vulnerability was published for libupnp. The issue is reproducible easily if libupnp compiled with ASAN and following the reproducing steps in the upstream bugreport. CVE-2016-8863[0]: Buffer overflow in create_url_list If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2016-8863 [1] https://sourceforge.net/p/pupnp/bugs/133/ Regards, Salvatore