http://bugzilla.novell.com/show_bug.cgi?id=568228 http://bugzilla.novell.com/show_bug.cgi?id=568228#c1 Mingxi Wu changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO CC| |mxwu@novell.com Info Provider| |vuntz@novell.com --- Comment #1 from Mingxi Wu 2010-01-06 02:38:06 UTC --- Done in GNOME:Apps. Vincent, do we need a maintenance update for 11.2? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=568228 http://bugzilla.novell.com/show_bug.cgi?id=568228#c3 Ludwig Nussel changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|security-team@suse.de | Summary|Transmission should be |VUL-0: transmission |updated to version 1.77 |directory traversal --- Comment #3 from Ludwig Nussel 2010-01-07 11:22:25 CET --- CVE-2010-0012 The security implications are nicely described here: https://bugs.launchpad.net/ubuntu/+source/transmission/+bug/500625 So yes, I think we should fix this, preferably with a patch. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=568228 http://bugzilla.novell.com/show_bug.cgi?id=568228#c5 Vincent Untz changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |maintenance@opensuse.org --- Comment #5 from Vincent Untz 2010-01-11 14:57:36 UTC --- Update submitted to 11.2 (sr#29147). I have updates ready for 11.0 and 11.1 too, but it's unclear where they should get submitted (since there's no openSUSE:11.0:Update:Test project). This should probably be documented on http://en.opensuse.org/Maintenance too. Note that I based the 11.0 & 11.1 update on the Debian patch for transmission 1.22 (since the upstream commit didn't apply to those old versions). I quickly looked at the Debian patch, and I think it's safe. I also filled the patchinfo. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=568228 http://bugzilla.novell.com/show_bug.cgi?id=568228#c7 Ruediger Oertel changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |ro@novell.com --- Comment #7 from Ruediger Oertel 2010-01-11 16:17:51 UTC --- why do you think there is no "openSUSE:11.0:Update:Test" project ? the project exists and you can use it as target for submitreqs (same for 11.1) it's just that the sr is rerouted later on to the IBS since that is where the 11.0/11.1 updates are built, but you can of course submit for 11.0/11.1 the same way you do for 11.2 -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=568228 http://bugzilla.novell.com/show_bug.cgi?id=568228#c9 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard|maint:running:29940 |maint:running:29940 | |maint:released:11.0:29941 | |maint:released:11.1:29941 | |maint:released:11.2:29941 --- Comment #9 from Swamp Workflow Management 2010-01-21 08:13:10 UTC --- Update released for: transmission, transmission-common, transmission-common-lang, transmission-debuginfo, transmission-debugsource, transmission-gtk, transmission-gtk-debuginfo, transmission-lang, transmission-qt, transmission-qt-debuginfo Products: openSUSE 11.0 (debug, i386, ppc, x86_64) openSUSE 11.1 (debug, i586, ppc, x86_64) openSUSE 11.2 (debug, i586, x86_64) -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=568228 http://bugzilla.novell.com/show_bug.cgi?id=568228#c10 --- Comment #10 from Bernhard Wiedemann --- This is an autogenerated message for OBS integration: This bug (568228) was mentioned in https://build.opensuse.org/request/show/29147 11.2:Test / transmission https://build.opensuse.org/request/show/29165 11.1:Test / transmission https://build.opensuse.org/request/show/29166 11.0:Test / transmission -- You are receiving this mail because: You are on the CC list for the bug.