Summary: | <net-p2p/qbittorrent-4.6.1: default credentials allowed by default | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | John Helmert III <ajak> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | CONFIRMED --- | ||
Severity: | normal | CC: | cheembox573, eschwartz93, proxy-maint |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | https://github.com/qbittorrent/qBittorrent/issues/18731 | ||
See Also: | https://github.com/gentoo/gentoo/pull/33978 | ||
Whiteboard: | B2 [glsa?] | ||
Package list: | Runtime testing required: | --- | |
Bug Depends on: | 922875 | ||
Bug Blocks: |
Description
John Helmert III
2023-11-25 16:52:21 UTC
Backport landed in https://github.com/qbittorrent/qBittorrent/commit/267d504ec04580d8bd397804d8fe18597c99c89d $ git tag --contains 267d504ec04580d8bd397804d8fe18597c99c89d release-4.6.1 release-4.6.2 release-4.6.3 So we have had the backport packaged since November, but it is not stable yet. Awkward. In https://github.com/gentoo/gentoo/pull/34949 I removed 4.6.1, and 4.6.2 was only packaged on Jan 13. which feels a bit early to stabilize. The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d5a36ef1dac2a43f0f973f047997d226b1ea57ac commit d5a36ef1dac2a43f0f973f047997d226b1ea57ac Author: Eli Schwartz <eschwartz93@gmail.com> AuthorDate: 2024-02-26 04:44:00 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2024-02-26 22:26:54 +0000 net-p2p/qbittorrent: drop old 4.6.2-r1 has been stable for a month now already, and older versions have a security bug. Clean up the old ebuilds. Bug: https://bugs.gentoo.org/918533 Signed-off-by: Eli Schwartz <eschwartz93@gmail.com> Signed-off-by: Sam James <sam@gentoo.org> net-p2p/qbittorrent/Manifest | 5 - net-p2p/qbittorrent/qbittorrent-4.5.2-r1.ebuild | 104 ----------------- net-p2p/qbittorrent/qbittorrent-4.5.4.ebuild | 104 ----------------- net-p2p/qbittorrent/qbittorrent-4.5.5-r1.ebuild | 137 ---------------------- net-p2p/qbittorrent/qbittorrent-4.5.5-r2.ebuild | 149 ------------------------ 5 files changed, 499 deletions(-) |