FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

bitmessage -- remote code execution vulnerability

Affected packages
bitmessage <= 0.6.2

Details

VuXML ID 1a75c84a-11c8-11e8-83e7-485b3931c969
Discovery 2018-02-13
Entry 2018-02-14

Bitmessage developers report:

A remote code execution vulnerability has been spotted in use against some users running PyBitmessage v0.6.2. The cause was identified and a fix has been added and released as 0.6.3.2. (Will be updated if/when CVE will be available.)

References

URL https://bitmessage.org/wiki/Main_Page
URL https://github.com/Bitmessage/PyBitmessage/releases/tag/v0.6.3