Advisories » MGASA-2026-0223

Updated libupnp packages fix security vulnerability

Publication date: 18 Jun 2026
Modification date: 18 Jun 2026
Type: security
Affected Mageia releases : 9
CVE: CVE-2026-41682

Description

Port truncation via atoi() cast in parse_uri() allows SSRF port
confusion. (CVE-2026-41682)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=35462
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/RGEL3TKVF7UPJUO7JGIIJKNEXLRIV6PS/
• https://github.com/pupnp/pupnp/security/advisories/GHSA-q522-6w45-4j58
• https://www.cve.org/CVERecord?id=CVE-2026-41682

SRPMS

9/core

• libupnp-1.14.17-1.1.mga9