-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-1198 2008-02-02 00:52:26 --------------------------------------------------------------------------------

Name : rb_libtorrent Product : Fedora 8 Version : 0.12 Release : 3.fc8 URL : http://www.rasterbar.com/products/libtorrent/ Summary : A C++ BitTorrent library aiming to be the best alternative Description : rb_libtorrent is a C++ library that aims to be a good alternative to all the other BitTorrent implementations around. It is a library and not a full featured client, although it comes with a few working example clients.

Its main goals are to be very efficient (in terms of CPU and memory usage) as well as being very easy to use both as a user and developer.

-------------------------------------------------------------------------------- Update Information:

A potential remote exploit was found in the bdecode_recursive routine that could trigger a stack overflow when passed malformed message data. This release adds a fix for this issue from the upstream subversion repository that limits the maximum recursive depth of this function. -------------------------------------------------------------------------------- ChangeLog:

* Mon Jan 28 2008 Peter Gordon peter@thecodergeek.com - 0.12-3 - Add upstream patch (changeset 1968) to fix potential security vulnerability: malformed messages passed through the bdecode_recursive routine could cause a potential stack overflow. + svn1968-bdecode_recursive-security-fix.patch --------------------------------------------------------------------------------

This update can be installed with the "yum" update program. Use su -c 'yum update rb_libtorrent' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys --------------------------------------------------------------------------------