diff options
| author | Ben Woods <woodsb02@FreeBSD.org> | 2018-01-14 23:29:04 +0000 |
|---|---|---|
| committer | Ben Woods <woodsb02@FreeBSD.org> | 2018-01-14 23:29:04 +0000 |
| commit | 20d10694c14f0735b9d591fabed7a2bd475bcf3c (patch) | |
| tree | 8e495fe84123ed1761280e4e36e6616dc0483919 /UPDATING | |
| parent | ac76b3f03c52c5f7ce926ee4706d295490b9194f (diff) | |
| download | ports-20d10694c14f0735b9d591fabed7a2bd475bcf3c.tar.gz ports-20d10694c14f0735b9d591fabed7a2bd475bcf3c.zip | |
Notes
Diffstat (limited to 'UPDATING')
| -rw-r--r-- | UPDATING | 17 |
1 files changed, 17 insertions, 0 deletions
@@ -5,6 +5,23 @@ they are unavoidable. You should get into the habit of checking this file for changes each time you update your ports collection, before attempting any port upgrades. +20180115 + AFFECTS: users of net-p2p/transmission-daemon + AUTHOR: woodsb02@FreeBSD.org + + The transmission-daemon port has been updated to 2.92_4 to incorporate + a patch which mitigates DNS rebinding attacks. This will prevent users + from being able to connect to the transmission daemon (via the CLI, + web or GUI interfaces) unless one of the following is done: + - Enable password authentication, then any hostname is allowed. + This can be achieved by add either editing settings.json to set + rpc-authentication-required, rpc-username and rpc-password or by + running transmission-daemon with the following arguments (can be + set with transmission_flags in /etc/rc.conf): + -t -u USERNAME -v PASSWORD + OR + - Add the allowed client hostnames to the rpc-host-whitelist setting + 20180111 AFFECTS: users of editors/vim-lite AUTHOR: adamw@FreeBSD.org |