Hi,

The following vulnerability was published for miniupnpd.

CVE-2026-5720[0]:
| miniupnpd contains an integer underflow vulnerability in SOAPAction
| header parsing that allows remote attackers to cause a denial of
| service or information disclosure by sending a malformed SOAPAction
| header with a single quote. Attackers can trigger an out-of-bounds
| memory read by exploiting improper length validation in
| ParseHttpHeaders(), where the parsed length underflows to a large
| unsigned value when passed to memchr(), causing the process to scan
| memory far beyond the allocated HTTP request buffer.


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-5720
https://www.cve.org/CVERecord?id=CVE-2026-5720
[1] https://github.com/miniupnp/miniupnp/commit/a0ee71e9fa66b60052bb3d2cf84380b79db3f8c8

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore

We believe that the bug you reported is fixed in the latest version of
miniupnpd, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1134334@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Yangfl <mmyangfl@gmail.com> (supplier of updated miniupnpd package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Mon, 20 Apr 2026 01:32:40 +0800
Source: miniupnpd
Architecture: source
Version: 2.3.10-1
Distribution: unstable
Urgency: medium
Maintainer: Thomas Goirand <zigo@debian.org>
Changed-By: Yangfl <mmyangfl@gmail.com>
Closes: 1118005 1123640 1134334
Changes:
 miniupnpd (2.3.10-1) unstable; urgency=medium
 .
   * New upstream release.
     - Fix CVE-2026-5720 (Closes: #1134334).
   * Update Debconf translations, with thanks to:
     - French, Baptiste Jammet (Closes: #1118005).
     - Catalan, Carles Pina i Estany (Closes: #1123640).
   * Bump Standards-Version to 4.7.4.
Checksums-Sha1:
 f84adfd16e87578e38ab781566486c4602b1ecce 2428 miniupnpd_2.3.10-1.dsc
 1f367ea59d3cee6affab295f41ae158b8365ee1e 305458 miniupnpd_2.3.10.orig.tar.gz
 f1daa5e67261a75b5eb66af1878321033930afdc 858 miniupnpd_2.3.10.orig.tar.gz.asc
 aebea89ea4c799e1748da4e24e314a7df26dbbaa 30328 miniupnpd_2.3.10-1.debian.tar.xz
 ee13fc9c4f2fa5c3236e6da240ed702198a18116 7270 miniupnpd_2.3.10-1_amd64.buildinfo
Checksums-Sha256:
 879f659874ff958a922c5e04c6bd21ffe8c78ca1857499d48892d2e684a66f8a 2428 miniupnpd_2.3.10-1.dsc
 f9c34ed3632fb60cd248dd5897bd98479a103a75688b056ca2f069e68ab32987 305458 miniupnpd_2.3.10.orig.tar.gz
 090eb76dfb8f3818d751612666607eef512c8ff8144fc74636b84feb0ef9ec9e 858 miniupnpd_2.3.10.orig.tar.gz.asc
 093b42c80bb180d9e7097fdab7f69340cb2bf743ba036d78310a53de981e6748 30328 miniupnpd_2.3.10-1.debian.tar.xz
 036811a0daf3df1acece3f471a53648116b1af73611e40f8cbed3d0277e05d9e 7270 miniupnpd_2.3.10-1_amd64.buildinfo
Files:
 bbf2890871c4df580bbdf25d0ba2cd51 2428 net optional miniupnpd_2.3.10-1.dsc
 a31ce707e3759968147457f9932845d3 305458 net optional miniupnpd_2.3.10.orig.tar.gz
 a26cc0144ed32d5f98e05e6b0eb6dea8 858 net optional miniupnpd_2.3.10.orig.tar.gz.asc
 90ac1815e22b4e526ec9af305e68ff4f 30328 net optional miniupnpd_2.3.10-1.debian.tar.xz
 85270c31ee9e1ce9042558ed726e89f8 7270 net optional miniupnpd_2.3.10-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
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=FNRq
-----END PGP SIGNATURE-----