[SECURITY] Fedora 8 Update: rb_libtorrent-0.12-3.fc8

updates at fedoraproject.org updates at fedoraproject.org
Sat Feb 2 09:00:51 UTC 2008


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-1198
2008-02-02 00:52:26
--------------------------------------------------------------------------------

Name        : rb_libtorrent
Product     : Fedora 8
Version     : 0.12
Release     : 3.fc8
URL         : http://www.rasterbar.com/products/libtorrent/
Summary     : A C++ BitTorrent library aiming to be the best alternative
Description :
rb_libtorrent is a C++ library that aims to be a good alternative to all
the other BitTorrent implementations around. It is a library and not a full
featured client, although it comes with a few working example clients.

Its main goals are to be very efficient (in terms of CPU and memory usage) as
well as being very easy to use both as a user and developer.

--------------------------------------------------------------------------------
Update Information:

A potential remote exploit was found in the  bdecode_recursive routine that
could trigger a stack  overflow when passed malformed message data.     This
release adds a fix for this issue from the upstream  subversion repository that
limits the maximum recursive  depth of this function.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Jan 28 2008 Peter Gordon <peter at thecodergeek.com> - 0.12-3
- Add upstream patch (changeset 1968) to fix potential security vulnerability:
  malformed messages passed through the bdecode_recursive routine could cause
  a potential stack overflow.
  + svn1968-bdecode_recursive-security-fix.patch
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update rb_libtorrent' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------




More information about the Fedora-package-announce mailing list