libupnp: Multiple vulnerabilities Multiple vulnerabilities have been found in libupnp, the worst of which could lead to the execution of arbitrary code. libupnp 2017-01-23 2017-01-23 589136 598202 remote 1.6.21 1.6.21

libupnp is a portable, open source, UPnP development kit.

Multiple vulnerabilities have been discovered in libupnp. Please review the CVE identifiers referenced below for details.

A remote attack could arbitrarily write files to a users file system, cause a Denial of Service condition, or execute arbitrary code.

There is no known workaround at this time.

All libupnp users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/libupnp-1.6.21" CVE-2016-6255 CVE-2016-8863 b-man b-man