Limewire - MUST UPDATE? no reason given?

[mahogony]

>Security Update!!
>All LimeWire users of versions prior to 4.8 must upgrade.

The above is off LW's own site - any ideas what all the panic is about?

[John W. Lindh]

I have a hunch what the source of this security problem may be and I suppose the LimeWire people don't want to be more specific so nobody malicious can exploit this security problem.

It is very likely possible to use this bug to distribute trojans and virii over LimeWire, so I'd rather update if I were you.

[Unsueable Davey Brown]

Weird. I was going to download Limewire today, and try it out. Now I think I'll wait.

The one I hate is when they force a "security" update on you, then you notice your internet connection is slowing intermittedently throughout the day as it connects automatically now for more updates. The next thing you know - spyware.

[infringer]

Hehe I wouldnt worry there is probably security flaws in every P2P application...

But hell if they patched up one it was probably a publically known flaw and if patched correctly it would render the attack useless.

-infringer-

[hasturi]

"Summary: Recent versions of the LimeWire client contain vulnerabilities that allow a remote user access to many or all files on a users machine."

See http://www.securityfocus.com/archive/1/393146 for details.

[mahogony]

So, it's all been fixed with version 4.8.1. Thank the lord for open source code. Looks like you were close to the mark there John. W - I can understand why no info was released untill the need to update was spun round the globe.

[crackerjacker]

I have a hunch what the source of this security problem may be and I suppose the LimeWire people don't want to be more specific so nobody malicious can exploit this security problem.

It is very likely possible to use this bug to distribute trojans and virii over LimeWire, so I'd rather update if I were you.

I updated. btw have u tried the new add on tool to filter out spam via limewire?
its called limwire credence

[crackerjacker]

here john and others who are curious read it and if u wanna download it do it, i downloaded it scanned it for viruses installed it and is using it now.

http://www.cs.cornell.edu/People/egs/credence/

[Evil Intentions]

Does this not have something to do with my previous news post? http://www.zeropaid.com/bbs/showthread.php?t=27450

[riderx]

Does this not have something to do with my previous news post? http://www.zeropaid.com/bbs/showthread.php?t=27450
well um this thread was made before your thread look at the date, and besides at the time this was several days old too because another thread had told users to update the client.

when u posted about the security update then it made sense to post in the other thread.
so yeah it has relevance to that thread, but this thread was made first.

your thread gave a reason for others to upgrade the limewire client tho.
cheers

[Evil Intentions]

Oh ok, I see. My bad. :-)

[broadbit]

hope this helps http://www.slyck.com/forums/viewtopic.php?t=10020

4.8 Limewire Upgrade
http://www.download.com/LimeWire/3000-2166-10051892.html?part=dl-limewire&subj=dl&tag=button