oss-security - CVE request: transmission <1.61 CSRF

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20090521063833.GA6545@suse.de>
Date: Thu, 21 May 2009 08:38:33 +0200
From: Marcus Meissner <meissner@...e.de>
To: OSS Security List <oss-security@...ts.openwall.com>
Subject: CVE request: transmission <1.61 CSRF

Hi,

spotted here:
http://www.transmissionbt.com/index.php

Transmission 1.61 Released!
A complete list of tickets closed can be seen here. 
Thanks to CacheFly for providing bandwidth. 

 All Platforms 
 Close potential CSRF security hole for Web Client users
 ...

Also fixed in previous series apparently:
Transmission 1.53 Released!
..
Close potential CSRF security hole for Web Client users
Fix locale error in the JSON parser
...

Ciao, Marcus

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.