-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 29 Mar 2020 17:45:52 +0200 Source: qbittorrent Architecture: source Version: 3.3.7-3+deb9u1 Distribution: stretch-security Urgency: high Maintainer: Cristian Greco <cristian@debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 932539 Changes: qbittorrent (3.3.7-3+deb9u1) stretch-security; urgency=high . * Non-maintainer upload by the Security Team. * Prevent command injection via "Run external program" function (CVE-2019-13640) (Closes: #932539) Checksums-Sha1: def66fdc879c899f9826037bda9ec0e39d9a91e9 2363 qbittorrent_3.3.7-3+deb9u1.dsc 5256adf60b3189ab49f3b394043d54890c54b005 2884792 qbittorrent_3.3.7.orig.tar.xz 9b56f2fd95bc8f67187da22a445592e64b709eef 123516 qbittorrent_3.3.7-3+deb9u1.debian.tar.xz Checksums-Sha256: 71ac4790071d183f029e45aa65cc99ae8c6eb508629eb03d154e9993d1f0ebb0 2363 qbittorrent_3.3.7-3+deb9u1.dsc 72dc824a90fadc0825e6be6f1c215e38f976262c7f83b625061d542b2b664c40 2884792 qbittorrent_3.3.7.orig.tar.xz c388178630091de5f1ea2545206d8b3623bbd55266a86170b30a2f05e9485115 123516 qbittorrent_3.3.7-3+deb9u1.debian.tar.xz Files: 77f3618bb7dfc33eeb1b6e42e5235f8c 2363 net optional qbittorrent_3.3.7-3+deb9u1.dsc 646cc40b551700ec4988c36da8638183 2884792 net optional qbittorrent_3.3.7.orig.tar.xz b77889ab60f475295aacfefd20a15d2b 123516 net optional qbittorrent_3.3.7-3+deb9u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAl6AxVJfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EmPMP+wc1sbGz0N8XfiE2XqRD9gS+gpA9PJBf HpmentI2xPyHVzBCBnGm/UnVz5/8Y4LNx5SThxwGWllh7BSCDG7hw+0UpE3bkmdU SXuxA9fy2thgUTNan7UdLh2AobEBE1I4BajsKh1X8I/IuVxqq6L1u1oWm6DH6C/O hLPP/X/Q7Z0DYASP5yH1hohNT/3kevr2U3PdmeCysq274MAGO9DX6J13lX61xcO3 vJKmmkmD3LZkHLxuNjc/RnHpj14yMAYaFegbht0WieQD5pCXccb8fGIzvQdK6GTC U/SVGH1s1NW8lktFdy0XQ4PHD4BfTdhZ6iPr641j4pg0FIYKSzUKeoE41Li3WqS/ dKEnCzn/QTUaGBpDcF5kNh2ZOAehIhCEngcII5RuikzddzDL4eR5Bprh817FiuLW rL5KnSf0kzNjQcXP1Sobid+qkB9XrPPz/h+NS9EAMuiZQKJWHPuEgnwTFXwyxVHb HaIC3B+YvUzVJyb7SfLN+DPrgS5RBPtYwyFMVk9IAKKpPK7yRImTF8XmNh6RkNQz dzakNdEioLac260sAbz+QnnGZ0x+q4haMu6TV3gMWPDCSeAW+cH0hrK/3GnnK+Q7 SkNVTtFOaPvUE5UyLoqIEcYgfRTudFdP/6Nt/OJFzYijQna/SoExXDiffWB00mPX h+qyXmSGWUV7 =f2PB -----END PGP SIGNATURE-----