Package: transmission / 2.52-3+nmu2

Metadata

Package Version Patches format
transmission 2.52-3+nmu2 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
fix_xss_web_client.patch | (download)

web/javascript/common.js | 20 17 + 3 - 0 !
web/javascript/dialog.js | 14 7 + 7 - 0 !
web/javascript/file-row.js | 4 2 + 2 - 0 !
web/javascript/inspector.js | 44 22 + 22 - 0 !
web/javascript/torrent-row.js | 10 5 + 5 - 0 !
5 files changed, 53 insertions(+), 39 deletions(-)

 fix xss vulnerability in web client
fix_magnet_seed_status.patch | (download)

libtransmission/announcer-common.h | 2 1 + 1 - 0 !
libtransmission/announcer-http.c | 2 1 + 1 - 0 !
libtransmission/announcer-udp.c | 2 1 + 1 - 0 !
libtransmission/announcer.c | 4 3 + 1 - 0 !
libtransmission/completion.h | 6 0 + 6 - 0 !
5 files changed, 6 insertions(+), 10 deletions(-)

 when scraping magnet links, don't send a left=0 argument to the tracker.
CVE 2012 6129_libutp_crash.patch | (download)

third-party/libutp/utp.cpp | 17 12 + 5 - 0 !
1 file changed, 12 insertions(+), 5 deletions(-)

---
CVE 2014 4909.patch | (download)

libtransmission/bitfield.c | 23 15 + 8 - 0 !
libtransmission/peer-msgs.c | 10 10 + 0 - 0 !
2 files changed, 25 insertions(+), 8 deletions(-)

---