package/libnpupnp: security bump to version 4.1.4
authorJörg Krause <joerg.krause@embedded.rocks>
Thu, 22 Apr 2021 07:50:16 +0000 (07:50 +0000)
committerThomas Petazzoni <thomas.petazzoni@bootlin.com>
Fri, 23 Apr 2021 21:20:56 +0000 (23:20 +0200)
commitadea5b316e27ae7d7e6ec09fa33a204754cc4de6
tree8cdb68ab1740a9df6aa8b7b4d71e03cc6d2f7538
parentbe4869f393561aa5c297b631efc62dfd5e1c3f3f
package/libnpupnp: security bump to version 4.1.4

Fix vulnerability to DNS-rebind attacks.

This security fix addresses the same vulnerability isue which was reported
for libupnp (which libnpupnp is derived from) in CVE-2021-29462.

Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
package/libnpupnp/libnpupnp.hash
package/libnpupnp/libnpupnp.mk