A vulnerability in Transmission could allow a remote attacker to execute arbitrary RPC commands.
|Package||net-p2p/transmission on all architectures|
|Affected versions||< 2.93|
|Unaffected versions||>= 2.93|
Transmission is a cross-platform BitTorrent client.
A vulnerability was discovered in how Transmission handles access control through the X-Transmission-Session-Id.
A remote attacker could execute arbitrary RFC commands or consequently conduct a DNS rebinding attack.
There is no known workaround at this time.
All Transmission users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-p2p/transmission-"
June 20, 2018
June 20, 2018: 1