This version of miniupnpc fixes a buffer overflow in the XML (ugh) parser during initial network discovery. http://talosintel.com/reports/TALOS-2015-0035/ The commit fixing the vulnerability is: 79cca974a4 Reported by timothy on IRC.
79cca974a4
This is the forward-port of a9c6eef915ee264ccf4169d5e8769a6be1fa101a
See the README's in depends for documentation