LWN.net Logo

Fedora alert FEDORA-2009-2108 (mldonkey)

From:  updates@fedoraproject.org
To:  fedora-package-announce@redhat.com
Subject:  [SECURITY] Fedora 9 Update: mldonkey-2.9.7-3.fc9
Date:  Thu, 26 Feb 2009 15:33:11 +0000
Message-ID:  <20090226153312.E1F6A208480@bastion.fedora.phx.redhat.com>
Archive-link:  Article, Thread

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-2108 2009-02-26 15:02:21 -------------------------------------------------------------------------------- Name : mldonkey Product : Fedora 9 Version : 2.9.7 Release : 3.fc9 URL : http://mldonkey.sourceforge.net Summary : Client for several P2P networks Description : MLDonkey is a door to the 'donkey' network, a decentralized network used to exchange big files on the Internet. It is written in a wonderful language, called Objective-Caml, and present most features of the basic Windows donkey client, plus some more: - It should work on most UNIX-compatible platforms. - You can remotely command your client, either by telnet (port 4000), by a WEB browser (http://localhost:4080), or with a classical client interface (see http://www.nongnu.org/mldonkey) - You can connect to several servers, and each search will query all the connected servers. - You can select mp3s by bitrates in queries (useful ?). - You can select the name of a downloaded file before moving it to your incoming directory. - You can have several queries in the graphical user interface at the same time. - You can remember your old queries results in the command-line interface. - You can search in the history of all files you have seen on the network. It can also access other peer-to-peer networks: - BitTorrent - Fasttrack - FileTP (wget-clone) - DC++ -------------------------------------------------------------------------------- Update Information: Fix remote arbitrary file disclosure via a GET request with more than one leading / (slash) character in the filename. -------------------------------------------------------------------------------- References: [ 1 ] Bug #487132 - MLDonkey: remote arbitrary file disclosure via a GET request with more than one leading / (slash) character in the filename. https://bugzilla.redhat.com/show_bug.cgi?id=487132 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update mldonkey' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-ann...


(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds