Package: ktorrent Version: 2.0.3+dfsg1-2.2 Severity: grave Tags: security Justification: user security hole
Apparently, the fix for directory traversal is incomplete... see: http://bugs.kde.org/show_bug.cgi?id=143637 -- System Information: Debian Release: lenny/sid APT prefers unstable APT policy: (990, 'unstable') Architecture: i386 (i686) Kernel: Linux 2.6.18 Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages ktorrent depends on: ii kdelibs4c2a 4:3.5.7.dfsg.1-1 core libraries and binaries for al ii libacl1 2.2.42-1 Access control list shared library ii libart-2.0-2 2.3.19-3 Library of functions for 2D graphi ii libattr1 1:2.4.32-1.1 Extended attribute shared library ii libaudio2 1.9-2 The Network Audio System (NAS). (s ii libc6 2.5-9 GNU C Library: Shared libraries ii libfontconfig1 2.4.2-1.2 generic font configuration library ii libfreetype6 2.2.1-6 FreeType 2 font engine, shared lib ii libgamin0 [libfam0] 0.1.8-2 Client library for the gamin file ii libgcc1 1:4.2-20070516-1 GCC support library ii libgmp3c2 2:4.2.1+dfsg-4 Multiprecision arithmetic library ii libice6 1:1.0.3-2 X11 Inter-Client Exchange library ii libidn11 0.6.5-1 GNU libidn library, implementation ii libjpeg62 6b-13 The Independent JPEG Group's JPEG ii libpcre3 6.7-1 Perl 5 Compatible Regular Expressi ii libpng12-0 1.2.15~beta5-2 PNG library - runtime ii libqt3-mt 3:3.3.7-4+b1 Qt GUI Library (Threaded runtime v ii libsm6 2:1.0.3-1 X11 Session Management library ii libstdc++6 4.2-20070516-1 The GNU Standard C++ Library v3 ii libx11-6 2:1.0.3-7 X11 client-side library ii libxcursor1 1:1.1.8-2 X cursor management library ii libxext6 1:1.0.3-2 X11 miscellaneous extension librar ii libxft2 2.1.12-2 FreeType-based font drawing librar ii libxi6 1:1.0.1-4 X11 Input extension library ii libxinerama1 1:1.0.2-1 X11 Xinerama extension library ii libxrandr2 2:1.2.1-1 X11 RandR extension library ii libxrender1 1:0.9.2-1 X Rendering Extension client libra ii libxt6 1:1.0.5-3 X11 toolkit intrinsics library ii zlib1g 1:1.2.3-15 compression library - runtime ktorrent recommends no packages. -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
