Hosting Provided By

Re: [Pkg-kde-extras] Bug#432007: CVE-2007-1799: vulnerability in torrent.cpp

From: Mark Purcell <msp(at)debian.org>
Date: Fri Jul 06 2007 - 12:40:56 EDT

Version: 2.1.4.dfsg.1-1

On Fri, 6 Jul 2007, Steffen Joeris wrote:
> Your package is vulnerable in testing and unstable.
>
> The CVE says:
>
> Directory traversal vulnerability in torrent.cpp in KTorrent
> before 2.1.3 only

Steffen,

Thanks for the bug report, but testing has version 2.1.4 and unstable has version 2.2.0 and are thus not vulnerable.

stable does however have version 2.0.3+dfsg1-2.2 and I suspect a release should be coordinated with the security team.

Mark

stable (kde): BitTorrent client for KDE 2.0.3+dfsg1-2.2: alpha amd64 arm hppa i386 ia64 mips mipsel powerpc s390 sparc testing (kde): BitTorrent client for KDE 2.1.4.dfsg.1-3+b1: alpha amd64 hppa i386 ia64 mips powerpc s390

2.1.4.dfsg.1-3: arm mipsel sparc 
unstable (kde): BitTorrent client for KDE 
2.2.0.dfsg.1-1: alpha amd64 armel hppa i386 ia64 kfreebsd-amd64 kfreebsd-i386

m68k mips mipsel powerpc s390
2.1.4.dfsg.1-3: arm sparc

-- 
To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org


application/pgp-signature attachment: This is a digitally signed message part.

Received on Fri Jul 6 12:41:45 2007

Do you need help?

This message: [ Message body ]
Next message: Russell Coker: "Re: Encrypting drive"
Previous message: Florian Ernst: "Re: security.d.o packages for etch built on sarge"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : Fri Jul 06 2007 - 21:25:28 EDT