{"id":"MGASA-2018-0230","summary":"Updated transmission packages fix a security vulnerability","details":"Updated transmission packages fix security vulnerability:\n\nTavis Ormandy discovered a vulnerability in the Transmission BitTorrent client;\ninsecure RPC handling between the Transmission daemon and the client\ninterface(s) may result in the execution of arbitrary code if a user visits a\nmalicious website while Transmission is running (CVE-2018-5702).\n","modified":"2026-04-16T06:23:09.064297768Z","published":"2018-05-12T06:28:12Z","upstream":["CVE-2018-5702"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2018-0230.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=22379"},{"type":"WEB","url":"https://www.debian.org/security/2018/dsa-4087"}],"affected":[{"package":{"name":"transmission","ecosystem":"Mageia:6","purl":"pkg:rpm/mageia/transmission?arch=source&distro=mageia-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-3.1.mga6"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2018-0230.json"}}],"schema_version":"1.7.5","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}