[SECURITY] Fedora 8 Update: rb_libtorrent-0.12-3.fc8
updates at fedoraproject.org
updates at fedoraproject.org
Sat Feb 2 01:18:12 UTC 2008
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-1198
2008-02-02 00:52:26
--------------------------------------------------------------------------------
Name : rb_libtorrent
Product : Fedora 8
Version : 0.12
Release : 3.fc8
URL : http://www.rasterbar.com/products/libtorrent/
Summary : A C++ BitTorrent library aiming to be the best alternative
Description :
rb_libtorrent is a C++ library that aims to be a good alternative to all
the other BitTorrent implementations around. It is a library and not a full
featured client, although it comes with a few working example clients.
Its main goals are to be very efficient (in terms of CPU and memory usage) as
well as being very easy to use both as a user and developer.
--------------------------------------------------------------------------------
Update Information:
A potential remote exploit was found in the bdecode_recursive routine that
could trigger a stack overflow when passed malformed message data. This
release adds a fix for this issue from the upstream subversion repository that
limits the maximum recursive depth of this function.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 28 2008 Peter Gordon <peter at thecodergeek.com> - 0.12-3
- Add upstream patch (changeset 1968) to fix potential security vulnerability:
malformed messages passed through the bdecode_recursive routine could cause
a potential stack overflow.
+ svn1968-bdecode_recursive-security-fix.patch
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update rb_libtorrent' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
More information about the package-announce
mailing list