Package Details: transmission-rss 0.1.25-1

Git Clone URL: https://aur.archlinux.org/transmission-rss.git (read-only)
Package Base: transmission-rss
Description: Adds torrents from rss feeds to transmission web frontend.
Upstream URL: http://rubygems.org/gems/transmission-rss
Licenses: GPL
Submitter: phects
Maintainer: phects
Last Packager: phects
Votes: 14
Popularity: 0.660407
First Submitted: 2010-08-23 13:26
Last Updated: 2015-10-25 09:24

Latest Comments

phects commented on 2017-05-06 10:57

kdb424:

I do not see any connection to transmission-rss from the pasted log. SSH brute force is quite a common attack on globally accessible machines. You can mitigate this for example by only using public key authentication, rate limit access to port 22/tcp, and dropping traffic from collectively blacklisted IP addresses (e.g. using denyhosts).

Do you still have the files `transmission-rss-0.1.25.gem` or `transmission-rss-0.1.25-1-any.pkg.tar.xz` you installed transmission-rss from? Would you please upload them for further investigation?

A tar ball of `/usr/lib/ruby/gems/2.4.0/gems/transmission-rss-0.1.25` would also be interesting.

Let us further discuss this on https://github.com/nning/transmission-rss/issues/48, please.

kdb424 commented on 2017-05-06 08:49

I have noticed a ssd connection attempt trying to come into my system when using this package when starting it. Seems to be a chinese IP, and should be seriously considered before using this. Here is a journalctl -xe

May 06 08:37:35 transmission systemd[1]: transmission-rss.service: Unit entered failed state.
May 06 08:37:35 transmission systemd[1]: transmission-rss.service: Failed with result 'exit-code'.
May 06 08:37:35 transmission sshd[26755]: Failed password for root from 116.31.116.50 port 48529 ssh2
May 06 08:37:35 transmission sshd[26755]: Received disconnect from 116.31.116.50 port 48529:11: [preauth]
May 06 08:37:35 transmission sshd[26755]: Disconnected from authenticating user root 116.31.116.50 port 48529 [preauth]
May 06 08:37:35 transmission sshd[26755]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.31.116.50 user=root
May 06 08:37:42 transmission sudo[26781]: kdb424 : TTY=pts/0 ; PWD=/home/kdb424 ; USER=root ; COMMAND=/usr/bin/systemctl status transmission-rss.service
May 06 08:37:42 transmission sudo[26781]: pam_unix(sudo:session): session opened for user root by kdb424(uid=0)
May 06 08:37:46 transmission sudo[26781]: pam_unix(sudo:session): session closed for user root
May 06 08:38:00 transmission systemd[1]: Time has been changed
-- Subject: Time change
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel

phects commented on 2014-06-19 10:16

ArchHK:
Thanks for the reminder! I updated the PKGBUILD. A more recent version of ruby-open_uri_redirections than 0.1.1 (as in AUR) can be found on arsch.orgizm.net or generated with gem2arch or pacgem.

ArchHK commented on 2014-06-18 22:01

This package now depends on https://aur.archlinux.org/packages/ruby-open_uri_redirections >=0.1.4

ArchHK commented on 2014-06-18 21:56

This package now depends on [https://aur.archlinux.org/pkgbase/ruby-open_uri_redirections/ ruby-open_uri_redirections]>=0.1.4

ArchHK commented on 2014-06-18 21:55

This package now depends on https://aur.archlinux.org/pkgbase/ruby-open_uri_redirections/ >=0.1.4

ArchHK commented on 2014-06-18 21:36

This package now depends on ruby-open_uri_redirections>=0.1.4

ArchHK commented on 2014-06-18 21:34

This package now depends on <a href="https://aur.archlinux.org/packages/ruby-open_uri_redirections/"</a>

ArchHK commented on 2014-06-18 21:33

This package now depends on <a href="https://aur.archlinux.org/packages/ruby-open_uri_redirections/">ruby-open_uri_redirections</a>

ArchHK commented on 2014-06-18 21:28

This package now depends on <a href="https://aur.archlinux.org/packages/ruby-open_uri_redirections/">ruby-open_uri_redirections</a>>=0.1.4'

All comments