----------------------------------------------------------------------

BETA test the new Secunia Personal Software Inspector!

The Secunia PSI detects installed software on your computer and
categorises it as either Insecure, End-of-Life, or Up-To-Date.
Effectively enabling you to focus your attention on software
installations where more secure versions are available from the
vendors.

Download the free PSI BETA from the Secunia website:
https://psi.secunia.com/

----------------------------------------------------------------------

TITLE:
Debian update for ktorrent

SECUNIA ADVISORY ID:
SA26773

VERIFY ADVISORY:
http://secunia.com/advisories/26773/

CRITICAL:
Moderately critical

IMPACT:
Manipulation of data

WHERE:
>From remote

OPERATING SYSTEM:
Debian GNU/Linux 4.0
http://secunia.com/product/13844/
Debian GNU/Linux unstable alias sid
http://secunia.com/product/530/

DESCRIPTION:
Debian has issued an update for ktorrent. This fixes a vulnerability,
which potentially can be exploited by malicious people to overwrite
arbitrary files on a user's system.

For more information:
SA24486

SOLUTION:
Apply updated packages.

-- Debian GNU/Linux 4.0 alias etch --

Source archives:

http://security.debian.org/pool/updates/main/k/ktorrent/ktorrent_2.0.3+dfsg1-2etch1.dsc
Size/MD5 checksum: 663 ec1366a6819ce30b5891b7c4e0e51986
http://security.debian.org/pool/updates/main/k/ktorrent/ktorrent_2.0.3+dfsg1.orig.tar.gz
Size/MD5 checksum: 2183095 3aef60283e457b7e13c1719387251612
http://security.debian.org/pool/updates/main/k/ktorrent/ktorrent_2.0.3+dfsg1-2etch1.diff.gz
Size/MD5 checksum: 12570 09ef4b627881d0aa29f682dbcf860ae7

alpha architecture (DEC Alpha)

http://security.debian.org/pool/updates/main/k/ktorrent/ktorrent_2.0.3+dfsg1-2etch1_alpha.deb
Size/MD5 checksum: 1678764 e9fec2e0c67431d8df32f97fd42dd408

amd64 architecture (AMD x86_64 (AMD64))

http://security.debian.org/pool/updates/main/k/ktorrent/ktorrent_2.0.3+dfsg1-2etch1_amd64.deb
Size/MD5 checksum: 1587096 dea2c2add2b28f51c37838104cbacab6

arm architecture (ARM)

http://security.debian.org/pool/updates/main/k/ktorrent/ktorrent_2.0.3+dfsg1-2etch1_arm.deb
Size/MD5 checksum: 1676742 4b3494cbabc09ae553459934d3544536

hppa architecture (HP PA RISC)

http://security.debian.org/pool/updates/main/k/ktorrent/ktorrent_2.0.3+dfsg1-2etch1_hppa.deb
Size/MD5 checksum: 1760846 6f4a58a69b7b61d71f8269c38351d96c

i386 architecture (Intel ia32)

http://security.debian.org/pool/updates/main/k/ktorrent/ktorrent_2.0.3+dfsg1-2etch1_i386.deb
Size/MD5 checksum: 1580584 0a98af7db2be8b6a01d4eeb4da3d20ef

ia64 architecture (Intel ia64)

http://security.debian.org/pool/updates/main/k/ktorrent/ktorrent_2.0.3+dfsg1-2etch1_ia64.deb
Size/MD5 checksum: 1801310 4c336b16545584e3047e5f4ba11a3994

mips architecture (MIPS (Big Endian))

http://security.debian.org/pool/updates/main/k/ktorrent/ktorrent_2.0.3+dfsg1-2etch1_mips.deb
Size/MD5 checksum: 1537750 36579943948e4d73039399978fbc138a

mipsel architecture (MIPS (Little Endian))

http://security.debian.org/pool/updates/main/k/ktorrent/ktorrent_2.0.3+dfsg1-2etch1_mipsel.deb
Size/MD5 checksum: 1518836 5d8c0b09e86c98680d083e903c4ca0cc

s390 architecture (IBM S/390)

http://security.debian.org/pool/updates/main/k/ktorrent/ktorrent_2.0.3+dfsg1-2etch1_s390.deb
Size/MD5 checksum: 1563558 b4d85977441bd37b7390af3efe924ad4

sparc architecture (Sun SPARC/UltraSPARC)

http://security.debian.org/pool/updates/main/k/ktorrent/ktorrent_2.0.3+dfsg1-2etch1_sparc.deb
Size/MD5 checksum: 1553024 cb40c3218f0c300590ea2ae91a577a36

-- Debain GNU/Linux unstable alias sid --

Fixed in version 2.2.1.dfsg.1-1.

ORIGINAL ADVISORY:
http://lists.debian.org/debian-security-announce/debian-security-announce-2007/msg00138.html

OTHER REFERENCES:
SA24486:
http://secunia.com/advisories/24486/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------