oss-security - Re: CVE Request: Transmission

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Wed, 6 Jan 2010 16:23:48 -0500 (EST)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com, Jamie Strandboge <jamie@...onical.com>
Cc: coley@...us.mitre.org
Subject: Re: CVE Request: Transmission


----- "Jamie Strandboge" <jamie@...onical.com> wrote:

> Transmission 1.77 was released to address a directory traversal
> vulnerability that allowed file overwrites when processing crafted
> torrent files. References:
> 
> http://trac.transmissionbt.com/wiki/Changes#version-1.77
> http://trac.transmissionbt.com/changeset/9829/
> https://launchpad.net/bugs/500625
> http://www.mail-archive.com/debian-devel-changes@...ts.debian.org/msg264483.html
> 

Please use CVE-2010-0012 for this.

Thanks.

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.