Bug 301039

Summary:	net-p2p/transmission: security update request
Product:	Gentoo Security	Reporter:	Pavel Labushev <pavel.labushev>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	normal	CC:	charles
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://secunia.com/advisories/cve_reference/CVE-2010-0012/
Whiteboard:
Package list:		Runtime testing required:	---

Description Pavel Labushev 2010-01-14 22:55:51 UTC

Directory traversal vulnerability in libtransmission/metainfo.c in Transmission 1.22, 1.34, 1.75, and 1.76 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a pathname within a .torrent file.

1.77 is a bugfix release, so the ebuild for 1.76 should work for 1.77.

Comment 1 Charles Kerr 2010-01-19 07:00:27 UTC

*** Bug 299684 has been marked as a duplicate of this bug. ***

Comment 2 Stefan Behte (RETIRED) gentoo-dev

2010-02-06 15:56:31 UTC


*** This bug has been marked as a duplicate of bug 301773 ***