Login
Newsletter
Werbung

Sicherheit: Preisgabe von Informationen in Rygel
Aktuelle Meldungen Distributionen
Name: Preisgabe von Informationen in Rygel
ID: USN-4177-1
Distribution: Ubuntu
Plattformen: Ubuntu 19.10
Datum: Mi, 6. November 2019, 22:36
Referenzen: Keine Angabe
Applikationen: Rygel

Originalnachricht

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============5844234503466871618==
Content-Type: multipart/signed; micalg=pgp-sha512;
protocol="application/pgp-signature";
boundary="qFSUOB2nfjJwIonqIg8BxILfA4ilLlgVB"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--qFSUOB2nfjJwIonqIg8BxILfA4ilLlgVB
Content-Type: multipart/mixed;
boundary="zVC3FwPUV9wsMthi89rrHCk06towIAhAZ";
protected-headers="v1"
From: Marc Deslauriers <marc.deslauriers@canonical.com>
Reply-To: Ubuntu Security <security@ubuntu.com>
To: ubuntu-security-announce@lists.ubuntu.com
Message-ID: <f22d0613-69d4-c23f-565f-ac5176f7b67c@canonical.com>
Subject: [USN-4177-1] Rygel vulnerability

--zVC3FwPUV9wsMthi89rrHCk06towIAhAZ
Content-Type: text/plain; charset=utf-8
Content-Language: en-C
Content-Transfer-Encoding: quoted-printable

==========================================================================
Ubuntu Security Notice USN-4177-1
November 06, 2019

rygel vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 19.10

Summary:

The system could be made to expose sensitive information.

Software Description:
- rygel: GNOME UPnP/DLNA services

Details:

It was discovered that the Rygel package automatically started the daemon
by default in user sessions. In certain environments, this resulted in
media being shared contrary to expectations.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.10:
rygel 0.38.1-2ubuntu3.3

After a standard system update you need to restart your session to make
all the necessary changes.

References:
https://usn.ubuntu.com/4177-1
https://launchpad.net/bugs/1848692

Package Information:
https://launchpad.net/ubuntu/+source/rygel/0.38.1-2ubuntu3.3


--zVC3FwPUV9wsMthi89rrHCk06towIAhAZ--

--qFSUOB2nfjJwIonqIg8BxILfA4ilLlgVB
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=nfsc
-----END PGP SIGNATURE-----

--qFSUOB2nfjJwIonqIg8BxILfA4ilLlgVB--


--===============5844234503466871618==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

LS0gCnVidW50dS1zZWN1cml0eS1hbm5vdW5jZSBtYWlsaW5nIGxpc3QKdWJ1bnR1LXNlY3VyaXR5
LWFubm91bmNlQGxpc3RzLnVidW50dS5jb20KTW9kaWZ5IHNldHRpbmdzIG9yIHVuc3Vic2NyaWJl
IGF0OiBodHRwczovL2xpc3RzLnVidW50dS5jb20vbWFpbG1hbi9saXN0aW5mby91YnVudHUtc2Vj
dXJpdHktYW5ub3VuY2UK

--===============5844234503466871618==--
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung