Stay Secure with the Latest Linux Advisories

security advisorycriticalFedora

Fedora 9: 2008-9167 Critical: Ktorrent Webinterface Security Problems

Another bugfix release for the 3.1 series is out. This fixes several bugs : * A crash caused by a SIGBUS, when diskspace preallocation is disabled * High CPU usage when DNS lookups fail in the UDP tracker code * Several security issues in the webinterface plugin. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2008-9167 2008-10-24 22:46:35 --------------------------------------------------------------------------------Name : ktorrent Product : Fedora 9 Version : 3.1.4 Release : 1.fc9 URL : Summary : A BitTorrent program for KDE Description : KTorrent is a BitTorrent program for KDE. Its main features are native KDE integration, download of torrent files, upload speed capping, internet searching using various search engines, UDP Trackers and UPnP support. --------------------------------------------------------------------------------Update Information: Another bugfix release for the 3.1 series is out. This fixes several bugs : * A crash caused by a SIGBUS, when diskspace preallocation is disabled * High CPU usage when DNS lookups fail in the UDP tracker code * Several security issues in the webinterface plugin --------------------------------------------------------------------------------ChangeLog: * Thu Oct 23 2008 Rex Dieter - 3.1.4-1 - ktorrent-3.1.4 * Tue Oct 14 2008 Rex Dieter - 3.1.3-4 - KDEDInit could not launch .../ktorrent (#451559, kde#157853) * Mon Oct 13 2008 Roland Wolters - 3.1.3-3 - Update to upstream version 3.1.3 * Fri Aug 8 2008 Rex Dieter - 3.1.2-1 - ktorrent-3.1.2 * Sun Jul 13 2008 Roland Wolters - 3.1-5 - Update to version 3.1 * Wed May 14 2008 Roland Wolters - 3.0.2-3 - bugfix update to version 3.0.2 - some spec file fixes due to an update error * Mon Apr 28 2008 Rex Dieter - 3.0.1-4 - %postun: remove extraneous scriplets - -devel: own %{_kde4_includedir}/libbtcore/ (and subdirs) - -devel: Requires: kdelibs4-devel - drop:Requires: oxygen-icon-theme (kde4 runtime already does) - Requires(post,postun): xdg-utils --------------------------------------------------------------------------------References: [ 1 ] Bug #451559 - KDEInit could not launch /usr/bin/ktorrent https://bugzilla.redhat.com/show_bug.cgi?id=451559 [ 2 ] Bug #468233 - ktorrent not up to date https://bugzilla.redhat.com/show_bug.cgi?id=468233 --------------------------------------------------------------------------------This update can be installed with the "yum" update program. Use su -c 'yum update ktorrent' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ Fedora-package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . The latest ktorrent update in Fedora 9 addresses stability problems, excessive CPU usage, and vulnerabilities within the web interface.. ktorrent security,Fedora update,web interface security. . Severity: Critical. LinuxSecurity.com Team

Oct 24, 2008 •Critical Fedora