==========================================================================
Ubuntu Security Notice USN-4177-1
November 06, 2019

rygel vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 19.10

Summary:

The system could be made to expose sensitive information.

Software Description:
- rygel: GNOME UPnP/DLNA services

Details:

It was discovered that the Rygel package automatically started the daemon
by default in user sessions. In certain environments, this resulted in
media being shared contrary to expectations.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.10:
  rygel                           0.38.1-2ubuntu3.3

After a standard system update you need to restart your session to make
all the necessary changes.

References:
  https://usn.ubuntu.com/4177-1
  https://launchpad.net/bugs/1848692

Package Information:
  https://launchpad.net/ubuntu/+source/rygel/0.38.1-2ubuntu3.3