[Bug 225150] net-p2p/transmission-daemon: mitigate dns rebinding attacks against daemon

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Sun Jan 14 01:55:00 UTC 2018


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=225150

            Bug ID: 225150
           Summary: net-p2p/transmission-daemon: mitigate dns rebinding
                    attacks against daemon
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: crees at FreeBSD.org
          Reporter: woodsb02 at freebsd.org
             Flags: maintainer-feedback?(crees at FreeBSD.org)
          Assignee: crees at FreeBSD.org

A vulnerability has been discovered in net-p2p/transmission-daemon.
https://github.com/transmission/transmission/pull/468

There are a few activities required for this:
1. Get initial VuXML vulnerability added to alert users
2. Get patch into ports tree that fixes this issue
3. Update VuXML vulnerability with further details once discovered (e.g. once
CVE is assigned and new version of transmission is released encompassing the
fix).

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-ports-bugs mailing list