Dominik Mierzejewski

Same on Fedora rawhide. I tried fixing it quickly, but it's not trivial. Relevant FFmpeg commit: https://github.com/FFmpeg/FFmpeg/commit/5432d2aacad5fa7420fe2d9369ed061d521e92d6 .

Attaching a quick and dirty patch to fix. It doesn't crash with the two sample reproducers above anymore.

https://github.com/mselbrede/CVE-2024-51442

This might be a bug, but not a security vulnerability in my opinion. Modification of /etc/minidlna.conf requires root (file is owned and writable by root only). If you have root access, why would it matter that you can "compromise" minidlna with that access? You can do whatever you want then, anyway.

FYI, this was assigned CVE-2023-47430 .

setgroups() not called before setuid()

I've just noticed I'm getting the same crash on my home server running F33. Reported to RPM Fusion bugzilla and linked this ticket. Backtrace is similar: #0 0x000056529a9f3a9b in select_del (ev=0x56529c8ce210, flags=<optimized out>) at select.c:135 #1 0x000056529a9dd8e2 in CloseSocket_upnphttp (h=0x56529c8ce210) at upnphttp.c:126 #2 0x000056529a9e18ce in SendResp_dlnafile (object=0x7ffc82a7c30c "10573.mkv", h=0x56529c8ce210) at upnphttp.c:2082 #3 ProcessHttpQuery_upnphttp (h=0x56529c8ce210) at upnphttp.c:984...