[Git][security-tracker-team/security-tracker][master] new qbittorrent issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e70cb806 by Moritz Muehlenhoff at 2023-10-13T14:35:57+02:00
new qbittorrent issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -22219,7 +22219,12 @@ CVE-2023-30803 (The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is
 CVE-2023-30802 (The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulner ...)
 	NOT-FOR-US: Sangfor Next-Gen Application Firewall
 CVE-2023-30801 (All versions of the qBittorrent client through 4.5.5 use default crede ...)
-	TODO: check
+	- qbittorrent <unfixed> (unimportant)
+	NOTE: https://github.com/qbittorrent/qBittorrent/issues/18731
+	NOTE: https://github.com/qbittorrent/qBittorrent/pull/18735
+	NOTE: README.Debian documents that quite clearly for the headless -nox version
+	NOTE: When merged, the patches could still be backported as hardening, but
+	NOTE: there's no need to treat this as a vulnerability by itself
 CVE-2023-30800 (The web server used by MikroTik RouterOS version 6 is affected by a he ...)
 	NOT-FOR-US: MikroTik
 CVE-2023-30799 (MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 ar ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e70cb806d7870f7bb4d8e4fa3369714d5d4109eb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e70cb806d7870f7bb4d8e4fa3369714d5d4109eb
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231013/fe4f2a93/attachment.htm>