Bug 574527 (CVE-2010-0748, CVE-2010-0749)
Summary: | CVE-2010-0748 CVE-2010-0749 Transmission: Two security fixes in upstream v1.92 version | ||
---|---|---|---|
Product: | [Other] Security Response | Reporter: | Jan Lieskovsky <jlieskov> |
Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> |
Status: | CLOSED ERRATA | QA Contact: | |
Severity: | low | Docs Contact: | |
Priority: | low | ||
Version: | unspecified | CC: | bressers, denis, metherid, sundaram |
Target Milestone: | --- | Keywords: | Security |
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | http://trac.transmissionbt.com/wiki/Changes | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2010-03-22 19:27:08 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Jan Lieskovsky
2010-03-17 18:09:10 UTC
These issues does NOT affect the current versions of the transmission package, as shipped with Fedora release of 11 and 12 (both issues has been already addressed within transmission-1.92-1.fc12 and transmission-1.92-1.fc11 version). Issue A, does NOT affect the version of the transmission package, as shipped within EPEL5 repository (transmission-1.34 does NOT provide magnet links functionality / support yet). Issue B, affects the version of the transmission package, as shipped within EPEL5 repository (transmission-1.34-1.el5). Though not complete sure this is a security issue (see [10] for further details), filed this BZ just not to omit potential security flaw. Please fix. I don't maintain the EPEL branches. I am not sure anybody is. Fedora branches have already been updated. Should I close this? I'm closing this, the EPEL branch doesn't seem to be well maintained, we don't plan on chasing it. The CVE identifier of CVE-2010-0748 has been assigned for: [1] http://trac.transmissionbt.com/ticket/2965 Transmission issue. The CVE identifier of CVE-2010-0749 has been assigned for: [2] http://trac.transmissionbt.com/ticket/1242 [3] http://trac.transmissionbt.com/ticket/1242#comment:1 Transmission issue. |