Mageia alert MGASA-2014-0364 (libtorrent-rasterbar)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2014-0364: Updated libtorrent-rasterbar packages fixes uPnP forwarding all ports 
Date:
    	     
 
Fri, 5 Sep 2014 11:07:55 +0200
Message-ID:
    	     
 
<20140905090755.F0E485C88A@valstar.mageia.org>
MGASA-2014-0364 - Updated libtorrent-rasterbar packages fixes uPnP forwarding all ports

Publication date: 05 Sep 2014
URL: http://advisories.mageia.org/MGASA-2014-0364.html

Type: security
Affected Mageia releases: 3, 4

Description:
Updated libtorrent-rasterbar packages fix security vulnerability:

The libtorrent-rasterbar library was opening UPNP port 0, causing all ports
to be forwarded from the router to the client machine.

References:
- https://bugs.mageia.org/show_bug.cgi?id=13582

- https://github.com/qbittorrent/qBittorrent/issues/1758

- https://lists.fedoraproject.org/pipermail/package-announc...

SRPMS:
- 4/core/libtorrent-rasterbar-0.16.17-1.mga4
- 3/core/libtorrent-rasterbar-0.16.6-2.1.mga3