oss-security - CVE request: transmission <1.61 CSRF

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Thu, 21 May 2009 08:38:33 +0200
From: Marcus Meissner <meissner@...e.de>
To: OSS Security List <oss-security@...ts.openwall.com>
Subject: CVE request: transmission <1.61 CSRF

Hi,

spotted here:
http://www.transmissionbt.com/index.php

Transmission 1.61 Released!
A complete list of tickets closed can be seen here. 
Thanks to CacheFly for providing bandwidth. 

 All Platforms 
 Close potential CSRF security hole for Web Client users
 ...

Also fixed in previous series apparently:
Transmission 1.53 Released!
..
Close potential CSRF security hole for Web Client users
Fix locale error in the JSON parser
...

Ciao, Marcus

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.