Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 30: FEDORA-2019-3ab271405b Critical gnome-shell Privilege Escalation

fedora
Calendar Grey September 18, 2019
Dist Fedora Esm H88
The latest release of qbittorrent, version 4.1.7, includes crucial fixes for command injection vulnerabilities identified in Fedora 30.
Update to 4.1.7

Summary

A Bittorrent client using rb_libtorrent and a Qt4 Graphical User Interface.

It aims to be as fast as possible and to provide multi-OS, unicode support.

Update to 4.1.7

* Mon Aug 5 2019 Leigh Scott - 1:4.1.7-1

- Update to 4.1.7

- Drop unused patch

* Tue May 7 2019 Leigh Scott - 1:4.1.6-1

- Update to 4.1.6

[ 1 ] Bug #1706650 - qbittorrent-4.1.6 is available

https://bugzilla.redhat.com/show_bug.cgi?id=1706650

[ 2 ] Bug #1731075 - CVE-2019-13640 qbittorrent: command injection in function Application::runExternalProgram() in app/application.cpp [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1731075

su -c 'dnf upgrade --advisory FEDORA-2019-2cb551904b' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 30
Version: 4.1.7
Release: 1.fc30
Summary: A Bittorrent Client

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here