oss-security - Re: CVE Request: Transmission

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <641308197.931421262813028797.JavaMail.root@zmail01.collab.prod.int.phx2.redhat.com>
Date: Wed, 6 Jan 2010 16:23:48 -0500 (EST)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com, Jamie Strandboge <jamie@...onical.com>
Cc: coley@...us.mitre.org
Subject: Re: CVE Request: Transmission


----- "Jamie Strandboge" <jamie@...onical.com> wrote:

> Transmission 1.77 was released to address a directory traversal
> vulnerability that allowed file overwrites when processing crafted
> torrent files. References:
> 
> http://trac.transmissionbt.com/wiki/Changes#version-1.77
> http://trac.transmissionbt.com/changeset/9829/
> https://launchpad.net/bugs/500625
> http://www.mail-archive.com/debian-devel-changes@lists.debian.org/msg264483.html
> 

Please use CVE-2010-0012 for this.

Thanks.

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.