The remote host is missing an update to rb_libtorrent announced via advisory FEDORA-2009-6619.

Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update rb_libtorrent' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. https://secure1.securityspace.com/smysecure/catid.html?in=FEDORA-2009-6619

Update Information: This release adds an upstream patch to fix a directory traversal vulnerability which would allow a remote attacker to create or overwrite arbitrary files via a .. (dot dot) and partial relative pathname in a specially-crafted torrent. In addition to this, asio-devel has been added to the dependencies for the rb_libtorrent-devel package - a fix already applied to the Fedora 10, 11, and Development (Rawhide) packages. ChangeLog: * Sun Jun 14 2009 Peter Gordon - 0.12.1-2 - Apply backported upstream patch to fix CVE-2009-1760 (arbitrary file overwrite vulnerability): + 0.12-CVE-2009-1760.diff - Fixes security bug #505523. - Add asio-devel as runtime dependency for the devel subpackage (#478589)

• https://bugzilla.redhat.com/show_bug.cgi?id=505523

---

Updated on 2015-03-25